Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
File:                     BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft (raw, json)
Hash identifier:          f2BUMIkyoNYzxJ1dmpozLEYfDh+vn837Tj3sKJHkBUY=
Subject key identifier:   16:CC:BA:5B:EC:75:4E:D6:BB:97:11:C3:BB:F0:EF:FC:E2:E3:0F:8A
Authority key identifier: BB:DA:B4:FF:02:5C:8E:48:6A:D2:FF:B6:9F:33:09:CD:E5:48:8C:33
Certificate issuer:       /CN=BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33
Certificate serial:       78C9CC54BD96272C606A10850D2AEE4AA7CD3E3E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
Manifest number:          7F
Signing time:             Fri 14 Aug 2026 12:26:47 +0000
Manifest this update:     Fri 14 Aug 2026 12:21:47 +0000
Manifest next update:     Sat 15 Aug 2026 14:13:47 +0000
Files and hashes:         1: BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl (hash: NMccL6sT7yFlTPqyjjsU3txr9w4uSNyGfmCHlaQraH0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl
                          rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 14:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c9:cc:54:bd:96:27:2c:60:6a:10:85:0d:2a:ee:4a:a7:cd:3e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33
        Validity
            Not Before: Aug 14 12:21:47 2026 GMT
            Not After : Aug 15 14:13:47 2026 GMT
        Subject: CN=16CCBA5BEC754ED6BB9711C3BBF0EFFCE2E30F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:b2:85:93:50:89:41:79:e0:6d:e6:f4:d0:
                    68:4e:5a:31:e8:5d:ac:b1:c4:16:ad:0b:b0:5c:69:
                    48:e6:f3:df:b4:a0:30:45:cc:c8:7f:9a:f0:ad:81:
                    52:1a:10:98:7b:7d:0f:d8:ac:b7:e5:90:7b:88:7d:
                    ab:a8:ca:81:49:ce:49:12:6b:f6:e6:fc:8f:d4:77:
                    85:a0:47:9f:1e:ea:eb:11:45:c7:27:ff:80:19:01:
                    53:f8:23:92:8b:bf:10:16:36:09:b6:57:b1:e5:c3:
                    53:b2:49:53:bd:41:0f:97:c6:c1:d3:3a:d5:0c:68:
                    d9:13:60:10:af:33:bd:fe:68:b8:8a:3a:87:35:75:
                    cb:a2:2d:cb:6f:e3:fb:53:b8:8e:41:33:0b:53:98:
                    6c:e1:a6:8f:09:f9:41:52:32:4a:56:e6:65:95:37:
                    d9:47:51:cb:48:86:e7:77:46:e9:50:fd:5e:22:aa:
                    2e:87:bc:12:2f:bc:2c:0d:32:d5:48:ea:d1:55:5b:
                    9d:b2:2c:6f:84:3e:e0:e0:88:7a:e1:3f:58:1a:c0:
                    18:85:89:82:8e:80:c7:6a:1c:d3:81:22:d9:89:d9:
                    a0:32:bf:86:0a:b9:c8:b7:85:ce:ae:64:ae:a3:e3:
                    61:a3:52:a8:f0:8f:83:e4:af:36:ff:be:2f:af:7d:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CC:BA:5B:EC:75:4E:D6:BB:97:11:C3:BB:F0:EF:FC:E2:E3:0F:8A
            X509v3 Authority Key Identifier:
                keyid:BB:DA:B4:FF:02:5C:8E:48:6A:D2:FF:B6:9F:33:09:CD:E5:48:8C:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:24:89:3c:b5:14:09:8b:18:1c:1d:cc:9c:d7:17:ea:a7:f1:
         6a:ef:28:34:e1:57:8e:6a:a7:ce:d1:6f:6b:1b:55:ea:49:e1:
         64:2d:d2:3c:6a:af:25:5a:e8:d8:25:7b:f7:eb:72:17:9f:5f:
         b6:d1:3c:62:fb:de:b6:a1:fa:56:f7:3a:87:59:b9:62:01:2a:
         b9:b9:4a:4e:7b:7d:4c:af:7f:8f:f8:cb:39:3f:4c:9e:41:67:
         ab:b9:ca:fd:a0:ce:80:c5:11:f8:32:ae:62:84:5f:07:cd:52:
         b0:78:cb:cd:36:d8:21:e4:fd:ba:f3:af:fa:07:cc:08:88:b7:
         44:86:16:7d:b9:78:f7:b3:51:4d:f0:1c:02:a4:74:e8:f3:a6:
         dd:7f:2f:e9:2e:e1:4b:7b:a8:20:0e:df:7e:2d:50:ad:2d:78:
         cf:7e:f1:35:24:84:f7:b7:c4:ae:b3:e1:23:87:f7:91:cb:13:
         2f:05:7f:00:65:fa:1f:2d:99:d2:52:1a:42:cf:01:94:83:f0:
         4d:e0:82:80:9b:c8:d5:59:23:46:49:40:ba:20:ac:a9:8d:0c:
         5b:59:40:94:8d:a7:1c:3d:5c:4d:30:4c:d2:39:dc:bc:b6:15:
         37:33:c8:6f:47:22:b4:e8:16:2f:ab:77:c5:cf:c6:60:0a:bd:
         45:78:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:20:47 2026 by rpki-client