Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
File:                     BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft (raw, json)
Hash identifier:          NkyY+uibtQUrUdhsKtak8dDIZjAPuSAEpzTA4U1pk10=
Subject key identifier:   41:7B:34:9B:6C:E8:D9:8B:4C:D1:3F:18:6A:7A:FA:C8:BE:E7:A3:AC
Authority key identifier: BB:DA:B4:FF:02:5C:8E:48:6A:D2:FF:B6:9F:33:09:CD:E5:48:8C:33
Certificate issuer:       /CN=BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33
Certificate serial:       7C2994BBB52914AA7A39745FA2191C21349574CF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
Manifest number:          43
Signing time:             Tue 30 Jun 2026 07:13:18 +0000
Manifest this update:     Tue 30 Jun 2026 07:08:18 +0000
Manifest next update:     Wed 01 Jul 2026 09:28:18 +0000
Files and hashes:         1: BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl (hash: eSDYLSln030MZ37pIlu0tvDirUNOVALgaxxW+dTIBzA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl
                          rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 09:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:29:94:bb:b5:29:14:aa:7a:39:74:5f:a2:19:1c:21:34:95:74:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33
        Validity
            Not Before: Jun 30 07:08:18 2026 GMT
            Not After : Jul  1 09:28:18 2026 GMT
        Subject: CN=417B349B6CE8D98B4CD13F186A7AFAC8BEE7A3AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:eb:63:1b:3f:25:f3:83:53:36:c5:fc:51:
                    84:78:ef:d0:2c:0a:7d:e8:91:72:b9:3e:de:31:b4:
                    de:1b:89:0c:c0:31:7b:74:26:70:be:1e:73:b6:ec:
                    d5:32:98:1d:fb:4d:f8:27:58:10:15:e2:5e:0a:64:
                    cf:36:61:b0:7d:2b:a9:ce:e1:a2:12:65:48:d1:94:
                    b1:47:20:3f:a5:66:58:50:86:a5:cc:cb:12:71:ef:
                    26:ca:27:1d:fb:e6:ff:94:51:ee:98:18:8e:48:64:
                    d3:22:20:63:da:d6:96:1e:48:36:ab:81:9b:81:a5:
                    c4:d3:50:f7:7e:aa:e0:7c:b6:ab:1f:08:93:88:a1:
                    ae:c2:38:78:ac:6e:dc:e1:f2:25:f9:1a:00:c0:e3:
                    02:eb:4e:97:32:c2:9c:a9:af:e2:6e:7b:b7:3b:41:
                    da:fa:f3:c0:d3:e9:13:dc:01:de:7e:ae:d5:8c:02:
                    cf:3a:bd:5f:1b:8f:b8:13:be:d5:95:30:27:90:0e:
                    ac:ed:0a:01:b5:ca:27:9b:e2:49:84:b5:b3:e2:b2:
                    d3:95:96:e4:83:81:7d:a3:32:da:10:8b:f7:e0:a7:
                    9c:27:4b:47:05:c0:db:f8:d2:cd:85:66:f7:52:75:
                    13:11:85:e6:00:e7:08:ef:cb:fc:2a:ef:bc:3f:74:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7B:34:9B:6C:E8:D9:8B:4C:D1:3F:18:6A:7A:FA:C8:BE:E7:A3:AC
            X509v3 Authority Key Identifier:
                keyid:BB:DA:B4:FF:02:5C:8E:48:6A:D2:FF:B6:9F:33:09:CD:E5:48:8C:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2b:23:d8:22:f5:02:96:ac:00:ce:13:c8:99:d0:34:b6:44:
         c0:af:3f:0f:3d:7f:5a:e1:87:fa:ce:70:f6:c8:a1:59:e7:50:
         74:1d:fa:d6:ca:76:5a:60:ab:3e:d0:02:35:95:dc:80:e5:c5:
         4d:bd:b4:5a:f8:00:8d:7c:3f:24:ea:e4:4d:59:87:4e:34:83:
         9a:96:58:a9:99:12:d5:1a:3c:0d:16:7c:4f:94:f1:4a:57:1e:
         16:fa:ab:97:14:ab:56:af:aa:fb:99:42:cf:35:bb:0c:fd:42:
         2a:6c:50:ab:72:22:4b:6f:03:f4:a4:ae:ec:06:b2:06:ff:4a:
         ba:31:38:8c:97:87:da:a0:c5:19:32:78:22:c9:89:ff:02:62:
         d9:31:39:59:c8:18:db:b0:f1:75:1f:86:3a:5c:03:da:30:08:
         39:af:c2:17:db:0b:29:24:00:1b:10:f4:54:22:48:e3:29:2e:
         96:68:01:d0:05:12:23:14:62:93:96:6e:0c:e5:37:b2:cc:b1:
         01:9c:69:0b:7e:0a:bf:7e:19:89:25:68:54:af:f6:69:c7:ee:
         b5:59:10:19:5f:d9:44:ac:39:f7:d9:e6:54:18:50:c7:29:76:
         1f:df:b5:6a:0c:3f:8e:73:5d:a9:1f:66:ff:ba:fa:ef:8b:a6:
         0f:f1:f6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:27 2026 by rpki-client