Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/WELLSERVE/0/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.mft
File:                     8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.mft (raw, json)
Hash identifier:          2+EhWJ+FiaGOXIIxVKRA61HJbPXz0NAX0rEz/k+V5sk=
Subject key identifier:   B5:87:49:5C:DF:06:AF:AB:17:53:DF:72:F9:6A:1A:94:A5:D3:12:B1
Authority key identifier: 8A:19:BD:36:D6:C7:12:FC:09:A4:6A:1C:0C:F5:18:16:13:5A:FE:F4
Certificate issuer:       /CN=8A19BD36D6C712FC09A46A1C0CF51816135AFEF4
Certificate serial:       4069FC23068659978E5FC3A7B57A6D4886E77687
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/WELLSERVE/0/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.mft
Manifest number:          43
Signing time:             Tue 30 Jun 2026 08:53:27 +0000
Manifest this update:     Tue 30 Jun 2026 08:48:27 +0000
Manifest next update:     Wed 01 Jul 2026 12:45:27 +0000
Files and hashes:         1: 8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.crl (hash: ODWHxBQYFrGQ9g6JzMPoPfH2dG5vK5xI4fK/EeL9kWg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/WELLSERVE/0/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.crl
                          rsync://rpkica.twnic.tw/rpki/WELLSERVE/0/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 12:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:69:fc:23:06:86:59:97:8e:5f:c3:a7:b5:7a:6d:48:86:e7:76:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A19BD36D6C712FC09A46A1C0CF51816135AFEF4
        Validity
            Not Before: Jun 30 08:48:27 2026 GMT
            Not After : Jul  1 12:45:27 2026 GMT
        Subject: CN=B587495CDF06AFAB1753DF72F96A1A94A5D312B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:a4:ed:18:2c:f0:02:ad:b3:1f:7e:98:50:
                    37:c9:18:ef:6c:94:81:11:e1:b8:9a:70:73:3c:42:
                    61:0c:32:fc:3e:8e:0c:3b:41:3b:a0:ed:45:59:57:
                    06:e7:88:2a:45:90:a8:8c:7b:41:9e:ae:b8:bd:f3:
                    0c:92:42:56:bd:90:64:16:32:d1:40:82:b9:47:34:
                    61:01:d9:86:58:2b:2c:7a:2c:e9:37:7b:47:bc:56:
                    1a:b3:bd:14:9d:b2:03:9a:6b:a4:28:ed:a2:6d:c6:
                    01:88:31:8f:87:0f:46:98:05:17:0a:f0:55:d9:68:
                    32:e0:45:43:61:0e:14:dc:a9:71:08:2f:ea:0c:16:
                    d7:15:ef:bb:d4:86:a5:97:ca:1d:63:2a:08:df:5b:
                    27:99:30:e4:15:4a:d9:3b:9c:93:09:f6:4d:bf:54:
                    b5:80:c5:d0:4d:e7:85:e2:1a:06:0f:fa:04:8c:ad:
                    97:53:83:ed:d7:13:7e:5d:5a:62:45:17:a3:1d:40:
                    9d:98:65:f6:d2:54:c4:58:23:b6:86:01:01:a2:11:
                    5c:c5:b6:b3:a2:97:31:0f:2b:4c:aa:c4:94:e2:b3:
                    b0:aa:7c:45:b1:2b:77:fe:7c:90:7b:80:5a:d0:47:
                    dd:3c:ce:e4:f3:7b:1b:23:7f:86:c5:e5:d0:9d:e6:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:87:49:5C:DF:06:AF:AB:17:53:DF:72:F9:6A:1A:94:A5:D3:12:B1
            X509v3 Authority Key Identifier:
                keyid:8A:19:BD:36:D6:C7:12:FC:09:A4:6A:1C:0C:F5:18:16:13:5A:FE:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/WELLSERVE/0/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/WELLSERVE/0/8A19BD36D6C712FC09A46A1C0CF51816135AFEF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f5:a2:21:26:88:cc:af:1e:7e:4f:94:dd:27:55:83:08:4d:
         9e:ae:33:d8:b8:f1:c2:40:74:65:b7:2f:ae:2e:b6:54:ca:a0:
         f3:ce:a3:aa:3d:27:cd:71:b8:a4:d7:98:f2:0c:b9:96:81:db:
         88:bc:b9:91:b6:88:6b:f8:ba:bd:70:f4:ac:4f:5c:be:f0:83:
         d2:15:51:e2:3c:ee:d6:7b:35:43:ce:62:6e:1a:c3:27:f9:ac:
         67:eb:eb:75:c2:d8:aa:be:5c:fa:0f:01:20:8d:29:d9:88:61:
         df:fc:3f:4f:a6:1e:dc:d7:25:18:db:02:ec:35:c1:c6:06:93:
         58:3d:53:bb:f3:e4:69:7b:ea:fb:b6:b2:79:6f:c9:e9:b9:83:
         51:ca:92:e0:6c:78:93:d8:a9:e8:00:76:83:fc:da:a0:5b:c1:
         c8:b5:a3:fc:b9:51:c8:d0:eb:80:be:72:e5:8f:4c:b9:79:99:
         84:aa:5c:5b:d1:43:46:c5:b0:b9:94:1d:0d:ff:2e:b3:ea:e4:
         89:4c:5a:1c:2a:fc:a4:d7:91:c4:2c:1b:bd:9a:53:c7:fc:c7:
         ac:07:7c:25:14:55:26:5a:64:dd:64:4e:2c:63:51:8c:26:0e:
         ea:41:71:01:71:0e:96:18:f9:b3:5e:ab:09:f8:85:07:60:6e:
         9f:80:68:53
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUQGn8IwaGWZeOX8OntXptSIbndocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEExOUJEMzZENkM3MTJGQzA5QTQ2QTFDMENGNTE4MTYx
MzVBRkVGNDAeFw0yNjA2MzAwODQ4MjdaFw0yNjA3MDExMjQ1MjdaMDMxMTAvBgNV
BAMTKEI1ODc0OTVDREYwNkFGQUIxNzUzREY3MkY5NkExQTk0QTVEMzEyQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCos6TtGCzwAq2zH36YUDfJGO9s
lIER4biacHM8QmEMMvw+jgw7QTug7UVZVwbniCpFkKiMe0Gerri98wySQla9kGQW
MtFAgrlHNGEB2YZYKyx6LOk3e0e8VhqzvRSdsgOaa6Qo7aJtxgGIMY+HD0aYBRcK
8FXZaDLgRUNhDhTcqXEIL+oMFtcV77vUhqWXyh1jKgjfWyeZMOQVStk7nJMJ9k2/
VLWAxdBN54XiGgYP+gSMrZdTg+3XE35dWmJFF6MdQJ2YZfbSVMRYI7aGAQGiEVzF
trOilzEPK0yqxJTis7CqfEWxK3f+fJB7gFrQR908zuTzexsjf4bF5dCd5gVxAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUtYdJXN8Gr6sXU99y+WoalKXTErEwHwYDVR0j
BBgwFoAUihm9NtbHEvwJpGocDPUYFhNa/vQwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0VMTFNF
UlZFLzAvOEExOUJEMzZENkM3MTJGQzA5QTQ2QTFDMENGNTE4MTYxMzVBRkVGNC5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS84QTE5QkQzNkQ2QzcxMkZDMDlBNDZBMUMw
Q0Y1MTgxNjEzNUFGRUY0LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG
VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvV0VMTFNFUlZFLzAvOEExOUJE
MzZENkM3MTJGQzA5QTQ2QTFDMENGNTE4MTYxMzVBRkVGNC5tZnQwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGj1
oiEmiMyvHn5PlN0nVYMITZ6uM9i48cJAdGW3L64utlTKoPPOo6o9J81xuKTXmPIM
uZaB24i8uZG2iGv4ur1w9KxPXL7wg9IVUeI87tZ7NUPOYm4awyf5rGfr63XC2Kq+
XPoPASCNKdmIYd/8P0+mHtzXJRjbAuw1wcYGk1g9U7vz5Gl76vu2snlvyem5g1HK
kuBseJPYqegAdoP82qBbwci1o/y5UcjQ64C+cuWPTLl5mYSqXFvRQ0bFsLmUHQ3/
LrPq5IlMWhwq/KTXkcQsG72aU8f8x6wHfCUUVSZaZN1kTixjUYwmDupBcQFxDpYY
+bNeqwn4hQdgbp+AaFM=
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:52 2026 by rpki-client