Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/WELLSERVE/0/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.mft
File:                     8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.mft (raw, json)
Hash identifier:          khB1ZFoRUeq19d8YsanC4oE9OsgT2rwmnVihM1zgN/4=
Subject key identifier:   04:C9:83:EC:63:C0:03:94:C3:8E:9A:F8:0E:00:72:B5:9A:E1:F9:52
Authority key identifier: 8A:19:BD:36:D6:C7:12:FC:09:A4:6A:1C:0C:F5:18:16:13:5A:FE:F4
Certificate issuer:       /CN=8A19BD36D6C712FC09A46A1C0CF51816135AFEF4
Certificate serial:       5B5F6A31BEB5ACE1071F7641B8C365A028F8C723
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WELLSERVE/0/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.mft
Manifest number:          C0
Signing time:             Thu 01 Oct 2026 18:40:53 +0000
Manifest this update:     Thu 01 Oct 2026 18:35:53 +0000
Manifest next update:     Fri 02 Oct 2026 22:38:53 +0000
Files and hashes:         1: 8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.crl (hash: uULxZwEmcV3UpfRggImaFbruNed2bUZwrD60fK9EeGM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WELLSERVE/0/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.crl
                          rsync://rpkica.twnic.tw/rpki/WELLSERVE/0/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 22:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5f:6a:31:be:b5:ac:e1:07:1f:76:41:b8:c3:65:a0:28:f8:c7:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A19BD36D6C712FC09A46A1C0CF51816135AFEF4
        Validity
            Not Before: Oct  1 18:35:53 2026 GMT
            Not After : Oct  2 22:38:53 2026 GMT
        Subject: CN=04C983EC63C00394C38E9AF80E0072B59AE1F952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bf:d8:21:7c:a9:32:f3:d0:1f:b0:e6:ab:0a:
                    56:ab:a7:26:72:2c:0a:4c:ca:17:c5:31:e0:2a:19:
                    db:4c:4b:84:af:c6:d6:6f:e3:ce:5e:b8:ab:63:cc:
                    d3:27:3a:45:dd:ab:89:ef:2c:0b:4f:b6:79:cd:5a:
                    db:cc:68:1f:9b:f1:f1:ec:4d:2f:7d:75:5b:ee:24:
                    60:ed:62:2c:98:b9:8a:f8:c4:1b:5d:2f:50:21:b7:
                    73:46:d2:c1:6b:53:80:01:3a:85:9b:0a:9c:86:45:
                    e0:48:63:00:0f:6c:7e:de:18:7e:4e:e2:97:11:1e:
                    68:10:21:f1:b6:43:56:64:fb:36:ba:d3:f9:65:d3:
                    8f:60:b6:9b:2f:1d:a7:00:14:de:20:13:03:a8:12:
                    c4:1c:a0:22:2b:0e:78:bc:84:4e:85:55:2d:af:ac:
                    ad:23:2f:cb:68:63:52:5e:f3:53:4b:5f:57:06:3d:
                    2b:b3:97:e7:90:da:ad:49:29:ac:86:17:dd:fc:5b:
                    b4:1d:86:ab:4e:53:e8:04:50:35:25:15:78:01:14:
                    77:c6:34:7c:a6:3f:41:2c:24:a3:bc:6c:5e:4b:f9:
                    61:c4:1f:64:cb:73:cd:9f:d4:fb:9f:c7:8f:5e:96:
                    68:a8:ee:83:3c:32:47:96:84:88:4d:11:00:dc:3e:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C9:83:EC:63:C0:03:94:C3:8E:9A:F8:0E:00:72:B5:9A:E1:F9:52
            X509v3 Authority Key Identifier:
                keyid:8A:19:BD:36:D6:C7:12:FC:09:A4:6A:1C:0C:F5:18:16:13:5A:FE:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WELLSERVE/0/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WELLSERVE/0/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e6:a7:9a:7c:07:7a:c4:10:83:23:08:75:aa:a3:95:12:48:
         9e:5b:9a:c6:0b:74:41:db:48:1b:ea:cb:92:1b:1e:fe:90:7a:
         b3:aa:00:23:9b:ed:af:99:42:fd:6c:43:ea:3a:aa:c8:5b:5c:
         7b:ba:3c:d8:cf:ed:50:af:5c:35:a5:3d:8c:3c:7d:fc:d4:1e:
         6c:be:55:de:a3:28:d2:fa:d9:45:35:1d:a8:52:83:36:0f:7f:
         c4:8d:ed:77:ae:51:9d:6c:79:17:d3:1a:64:7a:94:ef:f9:29:
         c1:7e:2a:de:47:bb:e3:ad:22:47:49:85:5d:d9:f4:ac:dd:52:
         53:f8:5d:45:08:6c:70:b5:0a:50:6d:9d:17:ac:8a:2f:e4:d6:
         8b:90:8d:f1:dd:c2:6b:11:42:bc:0c:91:c1:b7:4a:ab:a2:0f:
         0f:10:02:5d:bb:99:23:23:b0:3b:de:f3:75:e5:1a:9f:86:52:
         16:a8:ce:03:1a:af:0c:b9:71:b3:29:c8:9a:6a:9b:bf:13:2e:
         06:a9:6a:94:30:c3:f7:11:33:0e:06:7d:1c:cb:2a:99:e3:93:
         95:55:6e:52:90:30:8d:f2:74:33:49:f8:0b:02:3d:1b:0c:5e:
         9f:cc:71:2e:0c:af:42:f7:51:81:ec:4d:7d:e4:23:66:60:e3:
         46:1a:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:50:59 2026 by rpki-client