Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft
File:                     66D96CED70B44D758AE1282092DC175FEFC03195.mft (raw, json)
Hash identifier:          Ug1dMZ+t7vJS3+FSVt5LFee0pi9tQfwac9raUrmkwiU=
Subject key identifier:   00:50:DD:40:FD:02:D7:63:92:A8:72:BD:EF:26:AC:A2:C8:D0:6F:CC
Authority key identifier: 66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95
Certificate issuer:       /CN=66D96CED70B44D758AE1282092DC175FEFC03195
Certificate serial:       6173FB642634DCD2ED3E83746C78B5CB307D75EC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft
Manifest number:          37
Signing time:             Sat 03 Oct 2026 15:50:52 +0000
Manifest this update:     Sat 03 Oct 2026 15:45:52 +0000
Manifest next update:     Sun 04 Oct 2026 18:27:52 +0000
Files and hashes:         1: 66D96CED70B44D758AE1282092DC175FEFC03195.crl (hash: T+EHsH2EnZm/DRrtzbQjT18QDEO5SCx1G783o00YErI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.crl
                          rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 18:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:73:fb:64:26:34:dc:d2:ed:3e:83:74:6c:78:b5:cb:30:7d:75:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D96CED70B44D758AE1282092DC175FEFC03195
        Validity
            Not Before: Oct  3 15:45:52 2026 GMT
            Not After : Oct  4 18:27:52 2026 GMT
        Subject: CN=0050DD40FD02D76392A872BDEF26ACA2C8D06FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3d:e6:2f:3e:bb:ce:1a:d2:33:21:d5:47:80:
                    c6:b1:bb:d6:56:ea:e0:2d:4b:40:ff:86:cf:6f:df:
                    93:47:2c:de:88:59:77:6d:ff:8b:92:3f:5c:e5:7b:
                    81:51:a4:50:d6:7b:1f:7a:a0:14:74:34:62:ce:90:
                    d2:fc:d1:1c:df:07:d1:eb:97:59:68:02:15:8e:a9:
                    8b:6f:6e:17:be:0a:73:b5:3b:ce:88:34:54:15:d1:
                    2b:23:b4:a4:8a:32:0d:ff:3c:60:d5:ff:4d:49:78:
                    35:f1:31:12:8b:4a:1b:a9:b2:0e:1b:eb:0f:f1:f6:
                    37:7d:43:06:e7:80:9e:2a:82:20:03:04:aa:0a:71:
                    c7:fb:d2:2a:a0:e8:ba:9d:3e:29:cb:72:a2:8a:c1:
                    17:2f:6a:b8:29:2b:bd:fd:d9:7e:3e:8c:5a:c7:c2:
                    60:3e:9e:33:01:6c:5b:35:35:1d:98:f7:20:95:81:
                    09:b4:1e:c0:43:bf:24:3e:11:7e:be:07:a8:6d:4f:
                    28:3b:0b:f8:0b:c1:f4:af:c1:d7:63:2a:42:6e:5e:
                    aa:38:29:5b:36:0d:32:f8:64:9a:95:79:fe:ef:bc:
                    15:81:db:75:9f:e8:d3:24:b3:7c:30:7e:2b:e9:6b:
                    e4:7e:87:72:17:c5:dd:31:e5:95:08:70:ce:05:77:
                    3a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:50:DD:40:FD:02:D7:63:92:A8:72:BD:EF:26:AC:A2:C8:D0:6F:CC
            X509v3 Authority Key Identifier:
                keyid:66:D9:6C:ED:70:B4:4D:75:8A:E1:28:20:92:DC:17:5F:EF:C0:31:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/66D96CED70B44D758AE1282092DC175FEFC03195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEYUN2/0/66D96CED70B44D758AE1282092DC175FEFC03195.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:b0:70:64:a3:bb:de:07:33:01:f4:2d:3d:4b:9a:b7:f8:05:
         34:a7:80:2a:ab:37:1a:6c:2e:bd:6b:4a:71:03:a8:00:ee:dd:
         7c:e6:b3:5e:72:02:25:c7:5e:38:a6:e2:89:b7:56:8a:81:94:
         e6:02:99:54:db:cb:66:ac:52:31:ed:a6:c3:dd:d9:3b:19:9d:
         e6:85:5a:c7:79:9e:37:6f:46:73:7f:94:13:73:62:5e:d1:42:
         dc:2f:6f:db:56:8c:04:09:ed:79:4b:fb:b6:e3:7c:4a:7b:bc:
         8d:bd:3c:18:33:7f:3e:9d:ea:4d:0a:79:e3:89:18:2a:d9:0a:
         9f:d0:9c:f7:60:e1:0f:3c:ff:b9:a4:a2:c8:29:f6:ea:0e:22:
         a1:13:45:74:98:95:ee:14:7d:c2:9d:b0:fa:2a:10:ba:4b:3b:
         b1:2b:a3:63:86:b7:f8:24:bc:e7:bf:00:43:49:d4:38:10:0e:
         d8:6c:fb:5e:54:71:8c:74:f0:62:e1:c5:7e:23:7a:87:64:fa:
         e6:19:e7:62:fe:ba:c9:34:ba:b6:5d:ae:10:d1:13:e9:0c:4b:
         45:d3:11:08:b3:fe:f4:0d:6a:dd:f3:a7:65:bb:0b:7c:7a:54:
         f6:99:5f:4a:4e:35:47:41:57:88:71:43:36:75:18:d0:ee:dc:
         b1:06:bb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:40:54 2026 by rpki-client