Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
File:                     AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft (raw, json)
Hash identifier:          UTjseDnot5QFzGJg3hLKWZOjCc/z3PIU+2HzROnFTBE=
Subject key identifier:   37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0EEC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
Manifest number:          0E50
Signing time:             Wed 15 Apr 2026 00:32:13 +0000
Manifest this update:     Wed 15 Apr 2026 00:32:13 +0000
Manifest next update:     Fri 17 Apr 2026 00:32:13 +0000
Files and hashes:         1: AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl (hash: qsvO5llxPVyIU89YCGdoskkazS5cU03p7LNYNZlbfXc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 18:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3820 (0xeec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Apr 15 00:32:13 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=372D66D089BD7DDFC0D3FACB220981EDE0C5968D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:a5:83:b4:12:b1:26:3f:09:69:85:93:4f:
                    e3:76:ec:36:6c:ae:7c:2c:a9:40:28:2a:07:a7:c4:
                    8b:01:38:42:c8:0d:ea:c9:84:83:a7:a8:4a:6d:46:
                    c5:19:31:8e:b9:ec:19:d7:af:89:81:99:81:b0:14:
                    2b:9e:14:e4:78:97:c7:40:fc:84:95:21:28:83:6f:
                    bb:bc:b5:ad:37:75:5c:a2:84:c1:b2:00:a2:58:2f:
                    66:1e:18:3e:13:6d:c3:c6:81:30:5c:bf:0c:bf:a0:
                    fd:05:1d:34:f7:cc:c2:ad:6e:34:64:00:98:40:37:
                    01:4f:f1:a5:55:4b:85:5e:44:5a:e5:bd:a8:7c:ec:
                    03:97:f6:68:46:d1:a5:6b:25:a7:26:29:07:69:df:
                    7f:59:4f:d0:0a:a6:16:09:e0:4b:f6:a6:59:51:79:
                    ba:0c:fc:cb:20:b5:55:40:43:b6:12:2c:62:c6:3e:
                    2c:9a:11:6d:b7:da:7f:3d:7f:fb:2c:08:43:4e:37:
                    f9:c8:55:c0:2d:5a:09:8a:08:e4:a6:44:e6:cb:73:
                    6b:f9:95:01:88:4b:7b:92:72:8b:22:7b:3a:b9:b4:
                    67:ff:8c:56:f0:4e:21:07:2c:76:02:7b:2e:d1:0b:
                    ed:8a:d4:36:9f:3f:95:21:5c:bd:36:ba:34:fe:36:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ed:ad:bc:ba:fa:5a:cf:de:20:a8:9f:0f:ae:4a:ce:8c:94:
         e9:61:41:03:83:b7:5b:c5:93:8a:81:be:38:d4:42:40:ab:5c:
         73:56:68:e7:4d:d6:e9:c5:ef:3d:84:9a:27:39:95:41:99:e7:
         cd:47:c3:22:17:be:3d:d0:03:99:72:34:cd:7e:3d:70:a3:a1:
         0c:b8:1c:52:c6:86:b4:92:46:1c:ad:6a:ba:29:61:3a:8b:ee:
         1c:8e:34:fa:a1:90:0b:5a:96:ce:cf:ba:b2:ab:df:30:fe:44:
         79:a3:05:b9:05:b8:6c:03:08:8b:93:68:0d:d9:1c:d2:f0:b4:
         6e:d9:16:2e:cd:2e:65:b3:19:a9:29:99:00:86:6a:5c:fb:f4:
         53:85:87:b8:ab:28:1b:9b:4c:5e:13:ed:f3:ec:cb:45:87:33:
         8f:d0:6f:a3:61:35:03:68:53:ce:93:be:e2:b9:e7:19:7e:d3:
         71:1b:77:24:2c:ab:7e:2e:e7:23:2b:5d:83:b5:7c:20:47:29:
         e2:6c:a0:37:b2:a7:f4:d7:a3:c0:70:4e:13:89:9c:a0:a2:83:
         5a:b3:78:e5:1e:be:c7:41:a5:61:43:b4:5a:26:5d:97:8a:97:
         57:f8:d6:b9:ce:da:5c:78:05:89:fe:74:79:2e:42:5e:ef:f0:
         42:b1:f7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 17:50:20 2026 by rpki-client