Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
File:                     BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft (raw, json)
Hash identifier:          uxw+CoDy34PA+OzFyHIc8Av5dZogncctzwRWk2+UQbc=
Subject key identifier:   C8:AA:07:FF:E2:27:89:63:A1:84:75:4A:F2:C4:DC:76:DA:10:A8:60
Authority key identifier: BB:DA:B4:FF:02:5C:8E:48:6A:D2:FF:B6:9F:33:09:CD:E5:48:8C:33
Certificate issuer:       /CN=BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33
Certificate serial:       650143095A14D48C507A02A6AD86F4618B2513D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
Manifest number:          03
Signing time:             Wed 13 May 2026 05:12:02 +0000
Manifest this update:     Wed 13 May 2026 05:07:02 +0000
Manifest next update:     Thu 14 May 2026 05:23:02 +0000
Files and hashes:         1: BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl (hash: 5cwgJWRXSUViu+c/3EmWYDE6nljshBIbMuyrbFs04SQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl
                          rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 05:23:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:01:43:09:5a:14:d4:8c:50:7a:02:a6:ad:86:f4:61:8b:25:13:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33
        Validity
            Not Before: May 13 05:07:02 2026 GMT
            Not After : May 14 05:23:02 2026 GMT
        Subject: CN=C8AA07FFE2278963A184754AF2C4DC76DA10A860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:98:3b:2d:5b:09:1a:91:0a:f4:63:14:f6:ce:
                    3d:0d:5f:8b:3f:94:84:31:f5:a8:c3:b4:e7:0b:d2:
                    92:56:df:aa:d4:f7:da:04:60:99:78:21:0b:f1:96:
                    e7:04:44:7b:76:73:ff:c8:2a:b3:df:67:07:5b:a4:
                    0c:99:f1:84:c8:49:9a:7c:cd:2a:1b:cb:a8:95:58:
                    4f:78:40:72:82:43:a6:99:77:25:c1:07:96:68:88:
                    3c:2b:51:f5:47:23:db:ea:94:64:a1:64:c5:87:d6:
                    1d:95:1c:55:18:58:9f:37:ab:4e:60:80:09:64:0d:
                    40:58:ce:81:18:81:9d:ae:f5:e0:b3:b9:84:ac:60:
                    9a:6d:3c:e3:08:f2:96:7c:e6:26:2b:b9:9a:61:87:
                    f6:59:60:4a:61:e0:8b:9e:b7:c4:da:43:46:83:4d:
                    d9:7b:08:8c:fd:5e:1d:c1:7a:af:65:9a:c3:53:28:
                    b7:39:a2:a1:ee:66:0c:fd:98:61:45:9d:b5:3a:f7:
                    36:a3:91:f9:6a:4f:7a:18:68:3d:32:c7:3d:51:78:
                    f7:19:12:40:25:bb:78:9f:0e:c3:f0:ff:fd:5b:ed:
                    86:93:b2:34:26:b3:c0:8a:34:22:83:1b:06:b4:0e:
                    41:4f:1e:33:04:e3:de:56:9b:1a:76:34:32:11:5b:
                    7c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AA:07:FF:E2:27:89:63:A1:84:75:4A:F2:C4:DC:76:DA:10:A8:60
            X509v3 Authority Key Identifier:
                keyid:BB:DA:B4:FF:02:5C:8E:48:6A:D2:FF:B6:9F:33:09:CD:E5:48:8C:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:55:2a:c7:f3:88:ae:10:5b:07:fe:c0:91:d5:03:68:38:30:
         bd:10:8a:52:dc:e7:17:17:24:e9:b1:40:3e:7f:47:69:d6:9f:
         73:db:e5:a6:2c:f5:bf:1c:c4:6f:57:d7:6d:bc:73:fb:d3:ed:
         a2:54:b2:1c:14:8a:9c:4c:7a:e0:6e:16:49:a9:29:70:93:a0:
         1f:0d:ff:80:f0:38:e3:4d:85:22:be:9c:9b:aa:5f:62:72:9b:
         ca:46:f1:5f:bc:da:90:75:dc:1d:4c:c1:81:c8:53:ce:32:1e:
         76:1a:3e:73:26:1f:b5:74:ae:ee:fa:92:1a:b5:cf:6f:1c:d1:
         aa:ea:b5:3d:dc:5d:fc:b8:fd:bf:97:dc:d6:05:e2:a6:af:f1:
         0e:ed:99:e1:b9:c4:73:e5:84:b0:ca:65:3f:ed:45:ab:71:e2:
         93:65:76:d9:f3:52:36:67:2a:e5:13:90:65:97:0c:ae:f9:a2:
         a7:07:7a:d0:d1:5a:61:f7:4f:9d:61:7b:7b:20:a0:43:49:94:
         fa:43:ab:53:2c:f2:51:71:e7:ea:58:d9:f1:fe:18:bd:fc:7a:
         8d:f0:b3:3a:26:d1:6f:81:37:37:d3:cd:cd:4d:95:42:94:04:
         b9:78:c0:ac:c3:2a:5e:a9:1a:29:7e:dc:0b:d9:d2:4a:fc:b2:
         cc:da:c9:a2
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUZQFDCVoU1IxQegKmrYb0YYslE9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJEQUI0RkYwMjVDOEU0ODZBRDJGRkI2OUYzMzA5Q0RF
NTQ4OEMzMzAeFw0yNjA1MTMwNTA3MDJaFw0yNjA1MTQwNTIzMDJaMDMxMTAvBgNV
BAMTKEM4QUEwN0ZGRTIyNzg5NjNBMTg0NzU0QUYyQzREQzc2REExMEE4NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDmDstWwkakQr0YxT2zj0NX4s/
lIQx9ajDtOcL0pJW36rU99oEYJl4IQvxlucERHt2c//IKrPfZwdbpAyZ8YTISZp8
zSoby6iVWE94QHKCQ6aZdyXBB5ZoiDwrUfVHI9vqlGShZMWH1h2VHFUYWJ83q05g
gAlkDUBYzoEYgZ2u9eCzuYSsYJptPOMI8pZ85iYruZphh/ZZYEph4Iuet8TaQ0aD
Tdl7CIz9Xh3Beq9lmsNTKLc5oqHuZgz9mGFFnbU69zajkflqT3oYaD0yxz1RePcZ
EkAlu3ifDsPw//1b7YaTsjQms8CKNCKDGwa0DkFPHjME495Wmxp2NDIRW3xFAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUyKoH/+IniWOhhHVK8sTcdtoQqGAwHwYDVR0j
BBgwFoAUu9q0/wJcjkhq0v+2nzMJzeVIjDMwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVExHQ0FQ
SVRBTC8wL0JCREFCNEZGMDI1QzhFNDg2QUQyRkZCNjlGMzMwOUNERTU0ODhDMzMu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQkJEQUI0RkYwMjVDOEU0ODZBRDJGRkI2
OUYzMzA5Q0RFNTQ4OEMzMy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RMR0NBUElUQUwvMC9CQkRB
QjRGRjAyNUM4RTQ4NkFEMkZGQjY5RjMzMDlDREU1NDg4QzMzLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
B1Uqx/OIrhBbB/7AkdUDaDgwvRCKUtznFxck6bFAPn9Hadafc9vlpiz1vxzEb1fX
bbxz+9PtolSyHBSKnEx64G4WSakpcJOgHw3/gPA4402FIr6cm6pfYnKbykbxX7za
kHXcHUzBgchTzjIedho+cyYftXSu7vqSGrXPbxzRquq1Pdxd/Lj9v5fc1gXipq/x
Du2Z4bnEc+WEsMplP+1Fq3Hik2V22fNSNmcq5ROQZZcMrvmipwd60NFaYfdPnWF7
eyCgQ0mU+kOrUyzyUXHn6ljZ8f4Yvfx6jfCzOibRb4E3N9PNzU2VQpQEuXjArMMq
XqkaKX7cC9nSSvyyzNrJog==
-----END CERTIFICATE-----
Generated at Wed May 13 20:36:00 2026 by rpki-client