Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
File:                     DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft (raw, json)
Hash identifier:          nRteJWPwoI2PxpljgCVgG2PRJ3A5g3+4w2BlA7JTU6w=
Subject key identifier:   D1:81:65:B9:84:06:9C:15:66:71:9E:F1:D2:02:93:42:45:F4:EE:CE
Authority key identifier: DB:24:67:FD:0A:91:4F:9A:79:D3:36:63:7A:AB:8F:1A:EF:AD:AA:BD
Certificate issuer:       /CN=DB2467FD0A914F9A79D336637AAB8F1AEFADAABD
Certificate serial:       7BAEE4733E0FF54F6EE6692C149F5066F4AAA4A0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
Manifest number:          C2
Signing time:             Sat 03 Oct 2026 19:47:02 +0000
Manifest this update:     Sat 03 Oct 2026 19:42:02 +0000
Manifest next update:     Sun 04 Oct 2026 21:09:02 +0000
Files and hashes:         1: DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl (hash: J1J5dNf9xUu9iYHVrv7LlpE4YmSNkjRIs/nDHehOgl8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl
                          rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 21:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ae:e4:73:3e:0f:f5:4f:6e:e6:69:2c:14:9f:50:66:f4:aa:a4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB2467FD0A914F9A79D336637AAB8F1AEFADAABD
        Validity
            Not Before: Oct  3 19:42:02 2026 GMT
            Not After : Oct  4 21:09:02 2026 GMT
        Subject: CN=D18165B984069C1566719EF1D202934245F4EECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:28:66:81:d7:9a:c5:fb:fd:a2:74:3d:16:
                    56:69:7e:f4:b9:3e:a5:3a:ab:3c:06:f5:94:14:b5:
                    50:15:9b:20:84:62:01:87:cf:e3:8f:0b:ce:b7:a7:
                    66:9d:c7:b6:a0:45:73:a5:c5:65:ad:ab:43:47:5f:
                    b9:4e:55:52:c3:ed:07:de:5e:a4:ce:b7:81:47:46:
                    5c:ed:e1:ee:b7:cb:12:5c:6d:5a:29:fd:86:93:e3:
                    2b:02:21:90:8a:95:63:1f:62:47:17:6c:43:21:5c:
                    ab:13:df:7a:ce:30:0b:82:46:fe:b0:87:e1:b7:89:
                    7c:cb:e7:a7:cb:34:96:74:a8:9e:5c:ad:00:78:18:
                    34:a6:88:51:49:02:78:58:cb:00:24:a8:d6:af:94:
                    7c:ca:bd:0d:0f:cd:3b:eb:59:ca:46:a9:df:07:3c:
                    fe:d9:14:2d:95:de:5a:19:1a:88:76:16:a4:f3:cd:
                    ab:4d:c2:6e:24:2b:4c:40:ea:93:91:01:d9:9b:5c:
                    7c:16:25:f4:e1:46:9f:90:18:97:01:6e:db:a0:51:
                    50:9b:1b:28:af:01:46:76:6e:ad:8d:72:01:23:08:
                    06:fb:73:8c:d8:79:3e:a1:3b:74:f5:ec:c7:0d:71:
                    13:eb:28:15:da:8e:b4:04:6c:4d:eb:de:86:1f:13:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:81:65:B9:84:06:9C:15:66:71:9E:F1:D2:02:93:42:45:F4:EE:CE
            X509v3 Authority Key Identifier:
                keyid:DB:24:67:FD:0A:91:4F:9A:79:D3:36:63:7A:AB:8F:1A:EF:AD:AA:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:4d:38:5b:20:c4:d6:24:69:1c:7b:3d:50:ba:99:59:09:f7:
         e9:0e:ef:8b:35:05:31:fb:1a:cf:b6:c7:0d:5c:e8:9e:a8:ba:
         e4:3e:0c:71:39:3a:37:de:4d:0d:d4:6c:65:c3:e2:47:e8:e3:
         83:91:02:3d:6f:5d:05:aa:97:46:6e:93:b8:f5:d4:a7:5f:99:
         c9:6a:98:22:7f:44:3f:57:6b:32:25:a5:53:94:46:53:cf:a7:
         d0:48:28:34:53:2b:8a:60:a9:d9:69:c4:01:47:bf:59:d3:bc:
         f6:98:d5:95:8c:d5:ef:fb:95:b6:29:98:2b:04:86:af:b1:06:
         35:8b:50:a9:00:bc:7e:4b:c9:e3:d4:36:50:32:84:7b:62:ed:
         17:42:5f:38:5f:71:a0:b3:8e:2c:26:8d:3b:1d:63:80:1a:75:
         18:fc:37:e9:a1:28:f5:a0:e3:e5:73:b2:ec:30:73:c1:d8:f8:
         e2:48:ae:f4:65:f5:8f:7d:6a:3f:ee:50:78:aa:30:98:64:32:
         90:b1:c1:e2:69:6f:47:94:d6:77:5a:11:df:8e:dd:f0:a8:f2:
         4b:58:8c:01:1d:39:4d:fe:a0:d8:31:71:2b:cc:5e:76:76:16:
         09:3e:4b:b7:98:0b:41:9c:a2:02:e2:48:65:1e:69:69:4e:56:
         1e:7c:c8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 09:03:28 2026 by rpki-client