Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft
File:                     F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft (raw, json)
Hash identifier:          1V0ShqVbicMqspj2frWGz4z1xwi9WnrpymeTS5VoQBQ=
Subject key identifier:   4A:88:C2:CA:51:82:2C:A3:C9:CE:B8:3E:28:82:08:A5:72:FB:06:7F
Authority key identifier: F9:6D:5B:B5:C5:DA:63:B4:56:BF:63:87:D2:90:3A:75:7B:3F:48:B4
Certificate issuer:       /CN=F96D5BB5C5DA63B456BF6387D2903A757B3F48B4
Certificate serial:       160828D317B166A9BDA98485B992CB6E69F4C028
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft
Manifest number:          03
Signing time:             Wed 13 May 2026 05:37:08 +0000
Manifest this update:     Wed 13 May 2026 05:32:08 +0000
Manifest next update:     Thu 14 May 2026 06:32:08 +0000
Files and hashes:         1: F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.crl (hash: YRuyKGVdILJpSjMBhwyCjSaAhE2NtYKYaEtd/lB+Ero=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.crl
                          rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:08:28:d3:17:b1:66:a9:bd:a9:84:85:b9:92:cb:6e:69:f4:c0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F96D5BB5C5DA63B456BF6387D2903A757B3F48B4
        Validity
            Not Before: May 13 05:32:08 2026 GMT
            Not After : May 14 06:32:08 2026 GMT
        Subject: CN=4A88C2CA51822CA3C9CEB83E288208A572FB067F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:b9:b2:99:2a:e6:d6:69:55:4c:16:0a:75:
                    42:55:cb:39:4d:df:f5:fd:1e:66:24:80:5c:04:e8:
                    ee:8d:1e:1b:89:08:28:45:12:d6:62:3d:e7:58:5e:
                    3a:92:6f:1e:56:80:05:49:f2:5d:ef:fc:53:a3:e6:
                    eb:b9:70:c0:00:dc:a6:1d:39:82:3f:3b:02:8a:cf:
                    65:35:06:7a:d5:a1:1d:13:3a:b1:a3:10:e7:cd:25:
                    55:b9:da:8f:42:c3:9a:39:a4:16:3f:60:16:8a:65:
                    82:75:64:78:50:7f:d6:69:94:a8:15:cc:c7:24:cf:
                    94:12:ae:99:d6:0d:f6:b4:31:56:04:18:bc:30:9f:
                    bb:58:a9:a3:7d:e5:6d:14:2f:6a:0b:ab:4a:e6:71:
                    8b:bb:2a:96:54:dd:2d:09:3f:00:ed:29:a5:e6:5f:
                    4d:0a:9e:2f:ac:f9:89:19:3e:9f:eb:97:43:d2:1d:
                    32:8a:07:21:35:af:48:7f:df:11:41:b8:6e:1c:bb:
                    8b:5d:9d:11:df:2c:4c:3a:32:a1:57:e2:36:e4:b1:
                    02:6a:e7:89:8a:2a:c9:5e:c1:64:8c:69:3b:10:8c:
                    5c:a4:47:b4:df:dc:ad:0d:27:ba:e7:10:12:e1:9c:
                    82:74:b7:9f:55:b7:9a:40:58:92:b0:fc:79:05:a9:
                    bd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:88:C2:CA:51:82:2C:A3:C9:CE:B8:3E:28:82:08:A5:72:FB:06:7F
            X509v3 Authority Key Identifier:
                keyid:F9:6D:5B:B5:C5:DA:63:B4:56:BF:63:87:D2:90:3A:75:7B:3F:48:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f2:98:e8:88:e3:b9:83:8f:6f:63:3e:ad:d2:72:7b:a2:1c:
         7c:8d:af:21:e5:ee:d3:68:8e:a2:33:c9:41:2b:1a:22:b4:e3:
         7d:0f:dd:3a:99:cb:05:6d:b3:4a:d0:71:8b:16:c8:66:1e:31:
         bf:47:d9:1e:92:8e:8d:42:ed:7a:f3:21:5a:c9:45:7c:56:b9:
         d9:a6:be:bf:49:21:36:26:7b:03:53:80:35:d5:5b:71:0f:56:
         b7:5e:c8:b6:84:fa:0b:fb:09:75:da:8b:8c:04:69:77:3a:60:
         6a:ba:65:67:f8:59:2e:58:0f:c4:ec:4e:57:70:95:9e:01:a5:
         66:84:91:10:80:41:18:f8:94:14:2d:06:4a:f5:4d:06:6c:00:
         13:5f:79:0b:de:13:dd:08:41:4e:77:c8:c9:2f:fd:f1:11:5f:
         77:a4:c2:38:71:63:97:65:0a:3d:fd:5a:62:29:45:3e:c6:54:
         34:c3:23:08:dd:7f:1a:41:42:1f:d3:16:ec:5d:ec:da:17:f5:
         1c:be:13:1c:0d:5e:3e:85:67:8c:6b:73:21:82:6f:77:be:90:
         6d:b3:3e:7b:e9:ca:82:98:c7:ca:f1:f3:78:d3:31:27:54:51:
         8c:47:d7:c9:32:a5:82:e0:d7:19:95:4c:57:30:92:f2:7d:3b:
         24:82:f6:d1
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUFggo0xexZqm9qYSFuZLLbmn0wCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk2RDVCQjVDNURBNjNCNDU2QkY2Mzg3RDI5MDNBNzU3
QjNGNDhCNDAeFw0yNjA1MTMwNTMyMDhaFw0yNjA1MTQwNjMyMDhaMDMxMTAvBgNV
BAMTKDRBODhDMkNBNTE4MjJDQTNDOUNFQjgzRTI4ODIwOEE1NzJGQjA2N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgA7mymSrm1mlVTBYKdUJVyzlN
3/X9HmYkgFwE6O6NHhuJCChFEtZiPedYXjqSbx5WgAVJ8l3v/FOj5uu5cMAA3KYd
OYI/OwKKz2U1BnrVoR0TOrGjEOfNJVW52o9Cw5o5pBY/YBaKZYJ1ZHhQf9ZplKgV
zMckz5QSrpnWDfa0MVYEGLwwn7tYqaN95W0UL2oLq0rmcYu7KpZU3S0JPwDtKaXm
X00Kni+s+YkZPp/rl0PSHTKKByE1r0h/3xFBuG4cu4tdnRHfLEw6MqFX4jbksQJq
54mKKslewWSMaTsQjFykR7Tf3K0NJ7rnEBLhnIJ0t59Vt5pAWJKw/HkFqb29AgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUSojCylGCLKPJzrg+KIIIpXL7Bn8wHwYDVR0j
BBgwFoAU+W1btcXaY7RWv2OH0pA6dXs/SLQwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSVFSQVRP
Ui8wL0Y5NkQ1QkI1QzVEQTYzQjQ1NkJGNjM4N0QyOTAzQTc1N0IzRjQ4QjQuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvRjk2RDVCQjVDNURBNjNCNDU2QkY2Mzg3RDI5
MDNBNzU3QjNGNDhCNC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0lRUkFUT1IvMC9GOTZENUJCNUM1
REE2M0I0NTZCRjYzODdEMjkwM0E3NTdCM0Y0OEI0Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPKY6Ijj
uYOPb2M+rdJye6IcfI2vIeXu02iOojPJQSsaIrTjfQ/dOpnLBW2zStBxixbIZh4x
v0fZHpKOjULtevMhWslFfFa52aa+v0khNiZ7A1OANdVbcQ9Wt17ItoT6C/sJddqL
jARpdzpgarplZ/hZLlgPxOxOV3CVngGlZoSREIBBGPiUFC0GSvVNBmwAE195C94T
3QhBTnfIyS/98RFfd6TCOHFjl2UKPf1aYilFPsZUNMMjCN1/GkFCH9MW7F3s2hf1
HL4THA1ePoVnjGtzIYJvd76QbbM+e+nKgpjHyvHzeNMxJ1RRjEfXyTKlguDXGZVM
VzCS8n07JIL20Q==
-----END CERTIFICATE-----
Generated at Wed May 13 20:33:45 2026 by rpki-client