Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
File:                     D1EE894ECDA357FF3B846E2660D95F0535127E79.mft (raw, json)
Hash identifier:          rvvP3psh9QjucP7ALJJmCiD3LpWakGcS7QCjO75HS4g=
Subject key identifier:   B7:68:52:5E:5C:CE:56:B1:2A:6A:D6:CF:52:A6:AC:25:25:46:CB:2B
Authority key identifier: D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79
Certificate issuer:       /CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
Certificate serial:       45601DE73C08B9C1D4CDB88A8996362907859634
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
Manifest number:          03
Signing time:             Wed 13 May 2026 05:42:10 +0000
Manifest this update:     Wed 13 May 2026 05:37:10 +0000
Manifest next update:     Thu 14 May 2026 09:10:10 +0000
Files and hashes:         1: D1EE894ECDA357FF3B846E2660D95F0535127E79.crl (hash: GwrIC3WEGwHFBp8Hhu49+DxYkgcfRD1AmMRu2AY9XtM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl
                          rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:60:1d:e7:3c:08:b9:c1:d4:cd:b8:8a:89:96:36:29:07:85:96:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
        Validity
            Not Before: May 13 05:37:10 2026 GMT
            Not After : May 14 09:10:10 2026 GMT
        Subject: CN=B768525E5CCE56B12A6AD6CF52A6AC252546CB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:49:e9:ba:e8:0c:7c:e5:b7:8d:8d:f4:55:
                    45:01:0f:32:1d:8b:10:7c:b1:8d:ff:af:bc:f6:68:
                    2b:3b:9f:0b:32:51:2b:00:6b:be:a4:8d:7a:59:df:
                    c5:4f:5e:a0:01:ab:5c:85:65:fa:88:e6:03:18:04:
                    8b:29:e2:17:e7:2b:bb:84:be:8e:09:55:29:85:58:
                    c6:05:18:25:74:b5:56:17:ce:ba:a2:b1:27:eb:2d:
                    48:c5:2b:db:a0:4b:47:2b:4e:06:4a:c4:54:fe:12:
                    be:0e:12:f0:54:62:b0:0b:a2:d6:1d:1c:c7:06:3d:
                    88:02:5d:77:0d:52:26:1b:ab:ac:48:05:2b:0d:8f:
                    bd:f1:f5:b5:ab:60:7f:87:da:38:50:86:46:7d:1d:
                    ac:91:c0:e6:fa:e9:9f:b4:50:72:d2:56:31:fa:5e:
                    2a:28:46:83:99:9a:16:92:c9:31:1f:b9:ab:ad:60:
                    ab:9a:bf:1d:77:bf:c0:10:7f:9f:db:75:f3:e5:7e:
                    a8:78:a3:f0:65:5d:16:31:b4:14:7a:ad:bc:01:86:
                    0d:6d:48:62:6e:ff:02:80:4f:f3:9e:ad:e3:97:13:
                    0c:e7:6b:40:29:83:d3:15:52:3d:b8:98:45:e5:c2:
                    ce:78:f9:e6:23:de:bc:7f:27:a2:e0:68:50:60:47:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:68:52:5E:5C:CE:56:B1:2A:6A:D6:CF:52:A6:AC:25:25:46:CB:2B
            X509v3 Authority Key Identifier:
                keyid:D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a7:6f:14:27:6f:1f:2a:15:07:7e:41:52:a3:bb:14:3b:58:
         fa:5c:9a:85:02:06:5e:33:33:46:2f:a2:de:5d:5f:40:41:4b:
         d2:69:9f:25:94:03:05:9e:17:0d:12:ea:f0:b3:f5:71:46:fa:
         b8:ec:86:8d:66:f6:29:31:3b:4c:f2:9c:94:9e:ae:38:a9:42:
         c5:1d:9a:76:c2:27:8e:97:8f:0f:49:de:71:ad:94:85:ec:1c:
         50:f5:93:4d:bc:2e:b6:16:f5:ae:1e:59:e1:9f:42:f4:25:d4:
         32:0d:25:0d:bc:91:34:67:ac:f2:02:56:84:03:1c:ca:f3:67:
         5a:c5:ea:30:0b:75:f3:86:f5:97:47:45:ba:f2:09:1f:8c:8a:
         a8:4e:b7:0b:22:23:d3:f8:a5:6f:0f:d8:3e:5b:52:06:03:56:
         b4:e9:61:c0:94:a2:90:24:94:08:eb:3d:b2:13:9b:75:f2:e1:
         da:8e:30:4f:ce:af:8b:e1:81:ec:36:05:e3:fc:9b:da:c0:0c:
         13:f2:46:d0:f9:02:91:c8:8e:75:fe:e5:e7:71:16:fe:fd:fb:
         1e:35:5b:5e:8e:d7:ba:df:48:35:36:3d:63:bc:44:b4:64:48:
         e1:2b:c7:e5:08:36:6b:c0:e4:29:c9:f0:15:e7:d1:0b:b0:d7:
         fb:62:91:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:37 2026 by rpki-client