Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
File:                     8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft (raw, json)
Hash identifier:          QV5PTAsWaY4902foIzwO770yVcH9Bx5gu9gRBDHD15Q=
Subject key identifier:   22:B7:62:A5:31:00:26:06:9F:A2:DD:91:E5:F1:2A:B0:EA:AE:89:A9
Authority key identifier: 8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF
Certificate issuer:       /CN=8E72F95D12197A83EB3E4E8DDB385B148EAA04FF
Certificate serial:       5CEFA97A61E63304BB18418D09BC9453269F990E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
Manifest number:          03
Signing time:             Wed 13 May 2026 04:16:43 +0000
Manifest this update:     Wed 13 May 2026 04:11:43 +0000
Manifest next update:     Thu 14 May 2026 05:36:43 +0000
Files and hashes:         1: 8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl (hash: 9r8w/fflB4x8q1WIqAcAamsaA93P8YGFS1r6JeSI3FM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl
                          rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ef:a9:7a:61:e6:33:04:bb:18:41:8d:09:bc:94:53:26:9f:99:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E72F95D12197A83EB3E4E8DDB385B148EAA04FF
        Validity
            Not Before: May 13 04:11:43 2026 GMT
            Not After : May 14 05:36:43 2026 GMT
        Subject: CN=22B762A5310026069FA2DD91E5F12AB0EAAE89A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:eb:ec:00:6f:e3:28:eb:80:49:ba:73:a0:4e:
                    74:16:a6:d0:a7:aa:76:55:ea:d1:84:d3:d9:6e:59:
                    7f:90:9d:f1:cb:e3:98:01:d2:14:f5:ad:d9:43:c2:
                    04:a7:0b:67:ae:fb:dd:bb:e9:1e:ff:8f:1f:3f:8e:
                    a9:8f:51:c8:15:ed:5c:d4:9e:35:24:9e:92:74:ef:
                    63:28:70:5d:7e:af:f4:5c:29:67:66:58:9e:f3:c7:
                    5d:ad:47:d9:82:bb:25:d6:48:2c:fd:a2:b0:ac:5e:
                    b4:cb:0c:16:60:00:d5:9b:c1:38:ee:fb:60:d7:b1:
                    30:cf:c6:47:d2:7d:33:cd:ee:31:2e:7a:6f:ec:49:
                    fa:2b:93:37:7e:aa:9c:a9:91:f5:cf:cc:4c:3b:a2:
                    e5:d7:eb:48:32:13:d8:47:b1:6a:28:78:6a:89:5f:
                    c9:c3:a8:db:29:f2:ba:b2:db:01:7a:c1:9f:6a:cb:
                    5d:54:be:e3:ac:73:85:46:ff:72:24:51:d4:5c:cc:
                    69:fe:e3:38:b7:2c:bd:9a:a4:fb:f2:a2:a8:51:8a:
                    c1:4f:39:31:07:8b:3f:c5:5b:95:dc:46:cb:6a:c7:
                    29:ae:6d:75:f7:37:02:e9:bb:a7:83:57:0d:df:ae:
                    3d:bc:7b:ee:72:04:b6:50:7c:95:47:6a:16:9c:9a:
                    6a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B7:62:A5:31:00:26:06:9F:A2:DD:91:E5:F1:2A:B0:EA:AE:89:A9
            X509v3 Authority Key Identifier:
                keyid:8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9e:d6:0e:57:08:72:5b:a0:86:42:cb:d6:f5:c7:42:57:88:
         c9:7f:3e:34:0b:64:f7:72:ee:80:2d:f7:c1:9c:e3:0e:4f:a6:
         f0:d0:c6:db:e3:e6:77:69:69:24:32:1d:33:8b:86:47:6e:10:
         5c:5e:5a:0b:2f:bc:a2:bb:ff:9e:e9:17:67:5f:19:92:22:c1:
         26:e4:c7:ce:62:0d:53:26:61:59:b1:db:6e:55:f7:01:dd:c3:
         3f:c0:14:4f:fd:1d:a6:21:50:4d:13:69:25:f8:6a:ec:0a:b2:
         6e:f1:b6:0d:09:51:ca:cf:6f:e8:d2:80:ff:ea:bc:c3:25:2c:
         a8:b4:6e:cf:5c:4a:6c:93:82:ee:b1:a8:28:ef:0e:f5:e5:0b:
         cd:41:55:b1:db:34:ef:2a:06:76:ee:ea:1b:68:25:f5:6c:6e:
         0a:56:23:d0:de:e1:c6:b4:14:1e:0f:5f:92:54:b2:39:d6:68:
         53:e4:f6:dd:58:32:1b:32:6d:28:59:5d:15:df:10:d3:6c:cc:
         2f:d0:07:54:60:83:1f:49:3d:34:ed:83:20:dc:df:d8:2f:3d:
         87:c4:ca:5b:45:46:a1:f7:7d:db:67:af:c2:b0:b9:ea:26:70:
         ae:c8:b3:3b:78:ca:ad:d2:2c:87:a5:60:fd:e7:a3:5b:bd:9e:
         7a:5a:8f:5f
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUXO+pemHmMwS7GEGNCbyUUyafmQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU3MkY5NUQxMjE5N0E4M0VCM0U0RThEREIzODVCMTQ4
RUFBMDRGRjAeFw0yNjA1MTMwNDExNDNaFw0yNjA1MTQwNTM2NDNaMDMxMTAvBgNV
BAMTKDIyQjc2MkE1MzEwMDI2MDY5RkEyREQ5MUU1RjEyQUIwRUFBRTg5QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6+wAb+Mo64BJunOgTnQWptCn
qnZV6tGE09luWX+QnfHL45gB0hT1rdlDwgSnC2eu+9276R7/jx8/jqmPUcgV7VzU
njUknpJ072MocF1+r/RcKWdmWJ7zx12tR9mCuyXWSCz9orCsXrTLDBZgANWbwTju
+2DXsTDPxkfSfTPN7jEuem/sSforkzd+qpypkfXPzEw7ouXX60gyE9hHsWooeGqJ
X8nDqNsp8rqy2wF6wZ9qy11UvuOsc4VG/3IkUdRczGn+4zi3LL2apPvyoqhRisFP
OTEHiz/FW5XcRstqxymubXX3NwLpu6eDVw3frj28e+5yBLZQfJVHahacmmo3AgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUIrdipTEAJgafot2R5fEqsOquiakwHwYDVR0j
BBgwFoAUjnL5XRIZeoPrPk6N2zhbFI6qBP8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUkFJRC8w
LzhFNzJGOTVEMTIxOTdBODNFQjNFNEU4RERCMzg1QjE0OEVBQTA0RkYuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvOEU3MkY5NUQxMjE5N0E4M0VCM0U0RThEREIzODVC
MTQ4RUFBMDRGRi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1JBSUQvMC84RTcyRjk1RDEyMTk3QTgz
RUIzRTRFOEREQjM4NUIxNDhFQUEwNEZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJ7WDlcIclughkLL
1vXHQleIyX8+NAtk93LugC33wZzjDk+m8NDG2+Pmd2lpJDIdM4uGR24QXF5aCy+8
orv/nukXZ18ZkiLBJuTHzmINUyZhWbHbblX3Ad3DP8AUT/0dpiFQTRNpJfhq7Aqy
bvG2DQlRys9v6NKA/+q8wyUsqLRuz1xKbJOC7rGoKO8O9eULzUFVsds07yoGdu7q
G2gl9WxuClYj0N7hxrQUHg9fklSyOdZoU+T23VgyGzJtKFldFd8Q02zML9AHVGCD
H0k9NO2DINzf2C89h8TKW0VGofd922evwrC56iZwrsizO3jKrdIsh6Vg/eejW72e
elqPXw==
-----END CERTIFICATE-----
Generated at Wed May 13 20:35:57 2026 by rpki-client