Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
File:                     BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft (raw, json)
Hash identifier:          XK+33Fv6JfY8f5+MErk75OedTRWnYg2+c9dFPSL0qrg=
Subject key identifier:   BF:BD:34:6F:BC:8F:9B:E4:6C:35:18:75:38:1B:77:A6:9A:79:F9:F2
Authority key identifier: BB:DA:B4:FF:02:5C:8E:48:6A:D2:FF:B6:9F:33:09:CD:E5:48:8C:33
Certificate issuer:       /CN=BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33
Certificate serial:       100AB2DEA52BF9344CB6E10E2EB568ECF5D9A683
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
Manifest number:          BF
Signing time:             Fri 02 Oct 2026 04:35:06 +0000
Manifest this update:     Fri 02 Oct 2026 04:30:06 +0000
Manifest next update:     Sat 03 Oct 2026 05:28:06 +0000
Files and hashes:         1: BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl (hash: AsKCmQibOivHBBQ7kdJKsEIvOXPr6fNSnhO1tGn6gRQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl
                          rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 05:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0a:b2:de:a5:2b:f9:34:4c:b6:e1:0e:2e:b5:68:ec:f5:d9:a6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33
        Validity
            Not Before: Oct  2 04:30:06 2026 GMT
            Not After : Oct  3 05:28:06 2026 GMT
        Subject: CN=BFBD346FBC8F9BE46C351875381B77A69A79F9F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:f4:b0:39:1b:2e:26:04:8c:ec:f9:9d:06:
                    84:56:df:21:28:cd:ed:97:cb:b6:15:2c:a1:76:3a:
                    bb:29:d1:ef:15:0a:20:e8:0c:d8:39:dd:d0:60:10:
                    74:9e:fd:f3:d0:91:7a:fc:62:fc:9a:e2:f0:7a:b5:
                    4c:4f:cb:90:1a:52:ef:d7:d9:21:84:95:14:8d:9b:
                    93:17:e3:d6:4a:76:aa:47:a3:49:7d:f0:55:11:05:
                    61:66:2e:2b:a6:0a:4a:eb:3a:f4:5a:bd:77:ab:05:
                    a2:47:8b:81:b3:32:c0:ae:06:bb:b7:b0:a2:58:14:
                    a7:0a:c7:cd:70:8a:83:0a:6a:cd:56:2d:23:dc:ff:
                    cd:d7:94:9b:f1:cd:0e:9c:48:03:58:38:d7:99:ef:
                    6c:d3:e9:1e:d2:b7:54:6e:6b:e5:63:60:11:43:94:
                    73:e5:88:48:6f:01:91:24:27:74:5b:65:f0:6d:a0:
                    a6:e1:ba:06:ed:f5:23:95:46:b1:3b:19:05:57:69:
                    92:65:a3:f1:26:21:1a:72:34:e2:98:0f:62:92:c8:
                    7f:04:b5:40:f0:71:c0:ad:71:8f:7f:19:b4:b2:33:
                    09:67:4a:35:c6:ec:4d:29:0a:81:70:57:c4:e2:00:
                    c8:90:0d:dc:c7:d5:26:df:a1:9c:38:8c:af:21:af:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BD:34:6F:BC:8F:9B:E4:6C:35:18:75:38:1B:77:A6:9A:79:F9:F2
            X509v3 Authority Key Identifier:
                keyid:BB:DA:B4:FF:02:5C:8E:48:6A:D2:FF:B6:9F:33:09:CD:E5:48:8C:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:7e:7e:68:48:c5:25:27:de:31:db:28:2a:43:a6:ae:dc:
         67:68:72:fb:9f:9e:3b:f9:87:92:20:8a:a8:48:d4:76:a8:b2:
         25:fe:4e:e3:a1:0b:13:89:9e:94:49:29:8f:13:10:b0:d5:01:
         e7:ed:23:6e:9c:ac:a6:cf:06:82:e8:ab:9a:9a:b4:44:eb:50:
         96:32:b8:b8:db:b0:43:49:82:d2:4e:fb:de:80:27:c7:2b:f5:
         7b:bb:56:1a:14:b5:cf:ee:b3:d2:01:35:7b:8a:55:05:5f:ea:
         fe:bb:f5:c6:3a:d4:cd:e8:57:ad:66:25:f1:cb:b5:ef:4b:39:
         2d:12:5d:eb:09:49:1e:5b:3b:60:47:8c:f0:ce:96:2b:54:bc:
         c1:38:d1:bd:81:fd:bc:f7:0a:88:1d:06:73:03:53:8e:32:2f:
         d7:8c:69:73:15:78:1f:f1:b7:f7:39:d1:e9:23:c1:ed:f6:0a:
         3e:fc:64:0e:2c:9f:8b:54:be:e8:a4:e5:f0:23:b3:29:73:58:
         8e:a4:d3:bd:78:ed:d8:ff:e6:2c:68:cd:e9:47:de:c1:3a:08:
         4a:63:02:82:31:87:7b:09:14:0a:82:c6:13:dd:7e:bf:90:0b:
         fd:64:7f:c9:17:9d:56:84:8a:79:79:43:61:6c:c2:dd:25:d4:
         8d:68:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:48:04 2026 by rpki-client