Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GODGAME/0/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.mft
File:                     D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.mft (raw, json)
Hash identifier:          YNy+MEw1iKAg5KoN8+a5MMmMPvDLm4M46PTmYvoWaGA=
Subject key identifier:   67:1A:EF:59:ED:D7:D8:9E:68:70:D1:B5:47:38:A2:1E:41:EB:21:49
Authority key identifier: D0:8D:E0:CF:42:74:6B:1C:30:6B:D2:5A:DE:9B:2B:D0:FC:98:87:A3
Certificate issuer:       /CN=D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3
Certificate serial:       18DF9651341C9BCBC787B0B3E88E3FFF12233338
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GODGAME/0/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.mft
Manifest number:          03
Signing time:             Wed 13 May 2026 02:16:25 +0000
Manifest this update:     Wed 13 May 2026 02:11:25 +0000
Manifest next update:     Thu 14 May 2026 05:48:25 +0000
Files and hashes:         1: D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.crl (hash: 8hxZPWbvKs1J7ez1CE8afofRDHHeWScim0CByvG9GUQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GODGAME/0/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.crl
                          rsync://rpkica.twnic.tw/rpki/GODGAME/0/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:df:96:51:34:1c:9b:cb:c7:87:b0:b3:e8:8e:3f:ff:12:23:33:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3
        Validity
            Not Before: May 13 02:11:25 2026 GMT
            Not After : May 14 05:48:25 2026 GMT
        Subject: CN=671AEF59EDD7D89E6870D1B54738A21E41EB2149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f4:61:b6:8d:f3:99:da:77:05:1d:8c:0b:7b:
                    b9:75:1a:a2:dc:13:2b:ed:9e:0a:33:de:a9:b3:df:
                    d9:41:d8:e1:c8:9a:0b:4d:1f:a4:58:03:f6:ae:5e:
                    13:d7:a2:d0:fe:84:62:52:68:92:87:bc:43:57:54:
                    27:d4:a7:21:84:94:46:8f:4c:55:0a:8c:b9:ba:9b:
                    0c:89:a1:11:8a:c1:46:2f:a2:2f:e3:a6:69:a9:19:
                    ac:0c:b6:03:93:d1:1d:b5:45:9b:52:a4:0a:2c:b2:
                    d9:5c:41:26:93:4a:b4:25:3c:3f:99:82:a8:e4:b3:
                    29:27:7d:bb:72:30:5f:9d:f1:0d:3c:04:4f:8a:fe:
                    5e:da:3e:0b:9b:57:b6:11:c0:b5:50:6f:7f:f6:7e:
                    59:2e:30:38:c0:e9:fa:a1:b7:b1:e0:46:e0:d4:6d:
                    7d:c2:19:ff:3a:d0:e3:82:33:f3:11:8b:3d:7c:40:
                    0d:ad:ad:d9:f0:e3:53:27:03:37:2a:60:3c:f4:78:
                    fa:d9:c5:c9:3c:98:b7:6a:8c:5e:51:0f:80:c8:cc:
                    7e:8f:6b:a5:a7:80:98:c1:94:c9:ac:ea:7c:3e:2a:
                    58:24:4e:16:f5:97:11:8e:e9:ac:90:cc:7a:19:3a:
                    9c:e4:87:a5:a8:f7:a8:df:e1:e1:73:ed:57:49:b6:
                    76:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1A:EF:59:ED:D7:D8:9E:68:70:D1:B5:47:38:A2:1E:41:EB:21:49
            X509v3 Authority Key Identifier:
                keyid:D0:8D:E0:CF:42:74:6B:1C:30:6B:D2:5A:DE:9B:2B:D0:FC:98:87:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GODGAME/0/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GODGAME/0/D08DE0CF42746B1C306BD25ADE9B2BD0FC9887A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f4:57:d2:1d:91:07:82:e0:ea:cd:6e:39:d9:da:75:ca:c8:
         8a:47:c2:19:47:5d:4c:67:aa:7c:91:56:5d:cf:26:44:06:0e:
         8d:31:e1:48:75:1c:56:91:92:30:c3:bb:b4:47:a2:a3:d8:a7:
         d8:1c:0e:67:4e:36:58:27:b2:5f:d2:c5:aa:c9:2f:e5:7b:de:
         0a:84:c0:9d:df:62:ea:4d:77:f6:a2:03:de:48:09:40:6c:0f:
         66:a2:4b:ba:33:43:db:88:5c:56:71:86:e4:b9:b0:5c:de:05:
         00:f3:f4:4d:14:13:fe:7f:54:ca:98:8a:7d:a4:cd:ca:93:d4:
         0b:d3:a8:73:08:80:0c:b8:1b:7a:cb:be:ff:ca:e0:59:63:df:
         6d:f7:5d:8a:fc:3c:c1:73:77:de:c7:6c:19:6d:8f:3d:0e:4d:
         0d:db:79:db:30:f7:a8:09:b4:ba:b6:fd:07:f3:41:48:f5:72:
         66:b4:1f:2e:8f:25:91:42:51:8b:b2:c6:97:b4:ae:83:a2:a1:
         c8:17:af:5b:6e:b8:3a:d1:a9:cb:f6:be:b5:e9:37:48:e6:c5:
         71:af:76:0a:84:7e:72:32:74:1a:12:47:d6:f6:59:14:cf:e9:
         47:81:d0:cd:5d:6a:fb:e7:09:e9:02:39:de:81:13:2b:39:a3:
         bb:0e:31:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:34:20 2026 by rpki-client