Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/YUANCHENG/1/5F225958DB67E3418BFBE293BFD25E6F6A9346B9.mft
File:                     5F225958DB67E3418BFBE293BFD25E6F6A9346B9.mft (raw, json)
Hash identifier:          YT2aCpDiiZT2KFaetRlOIfFwtEfLIKAJ/CRpSsyHkFM=
Subject key identifier:   CA:F6:DD:E3:48:3C:B6:96:15:D4:00:06:59:B3:C2:4C:E7:17:77:C9
Authority key identifier: 5F:22:59:58:DB:67:E3:41:8B:FB:E2:93:BF:D2:5E:6F:6A:93:46:B9
Certificate issuer:       /CN=5F225958DB67E3418BFBE293BFD25E6F6A9346B9
Certificate serial:       402B221F8437831A6A1424234FD64B0B6BFD8022
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUANCHENG/1/5F225958DB67E3418BFBE293BFD25E6F6A9346B9.mft
Manifest number:          8F
Signing time:             Wed 26 Aug 2026 12:48:26 +0000
Manifest this update:     Wed 26 Aug 2026 12:43:26 +0000
Manifest next update:     Thu 27 Aug 2026 14:03:26 +0000
Files and hashes:         1: 5F225958DB67E3418BFBE293BFD25E6F6A9346B9.crl (hash: JTn0GBeFMKKAkmEUKnPmvePz3D+pnPIs78nQmbcXigE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUANCHENG/1/5F225958DB67E3418BFBE293BFD25E6F6A9346B9.crl
                          rsync://rpkica.twnic.tw/rpki/YUANCHENG/1/5F225958DB67E3418BFBE293BFD25E6F6A9346B9.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 14:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:2b:22:1f:84:37:83:1a:6a:14:24:23:4f:d6:4b:0b:6b:fd:80:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F225958DB67E3418BFBE293BFD25E6F6A9346B9
        Validity
            Not Before: Aug 26 12:43:26 2026 GMT
            Not After : Aug 27 14:03:26 2026 GMT
        Subject: CN=CAF6DDE3483CB69615D4000659B3C24CE71777C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:14:6d:ae:5b:18:87:36:da:2b:3f:e8:2a:17:
                    28:63:04:95:d6:b5:7e:f2:2b:cb:4c:b9:e0:7b:0f:
                    45:2c:a4:24:9e:8e:35:3e:4b:65:4c:ce:06:17:6b:
                    9f:f9:1f:e4:96:59:bf:b1:d7:9b:d7:ad:3d:4d:39:
                    ab:85:ab:3d:ce:98:33:b1:00:79:37:7b:e8:a5:d1:
                    9e:a6:01:1c:d5:51:e1:6b:53:d7:eb:68:d8:7e:3c:
                    6a:cb:61:82:ab:9e:f1:41:32:80:d0:06:fd:de:c6:
                    1d:25:54:6e:f2:71:9c:d0:bb:a7:04:1b:26:d8:24:
                    39:c5:38:3d:92:c7:fb:97:ef:5c:44:99:18:45:c1:
                    a1:0f:ac:e1:2a:11:a8:dd:bb:a8:6e:51:38:3c:94:
                    00:ed:e9:4e:19:49:bc:4c:e6:52:1a:64:fb:f5:51:
                    d6:03:f2:7f:36:ed:f8:47:85:f3:e1:eb:bc:c7:93:
                    7b:e4:d1:2c:8d:15:00:12:88:8e:1b:12:14:e6:61:
                    62:24:a9:81:a8:d3:dd:a9:06:a1:0a:56:5f:f5:de:
                    74:a3:2e:6b:7e:16:f3:b8:e1:04:7e:ef:69:b2:92:
                    87:b6:93:97:6b:a0:f4:9d:a9:3d:74:84:3d:d1:45:
                    cf:97:5d:65:8c:a6:47:88:04:28:fd:e2:7f:eb:85:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F6:DD:E3:48:3C:B6:96:15:D4:00:06:59:B3:C2:4C:E7:17:77:C9
            X509v3 Authority Key Identifier:
                keyid:5F:22:59:58:DB:67:E3:41:8B:FB:E2:93:BF:D2:5E:6F:6A:93:46:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUANCHENG/1/5F225958DB67E3418BFBE293BFD25E6F6A9346B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/5F225958DB67E3418BFBE293BFD25E6F6A9346B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUANCHENG/1/5F225958DB67E3418BFBE293BFD25E6F6A9346B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c9:09:9d:49:22:e4:06:f3:4e:29:01:d2:d3:16:6b:ba:5f:
         39:80:52:82:c0:ae:b0:5e:3e:fa:c0:3d:95:cd:d1:cf:a2:9d:
         c4:c3:c5:b2:d9:45:af:90:b6:64:9a:71:75:24:13:27:38:06:
         97:b2:13:4f:9a:85:07:8c:50:32:cf:dd:7b:46:4f:06:f9:cb:
         76:a0:34:e5:d1:ee:ae:4e:4b:a0:00:5e:28:44:7d:e8:9f:cd:
         39:c0:3e:60:87:36:3e:df:ab:16:99:7d:75:2f:73:a5:9a:f0:
         13:9f:c0:e5:3b:e6:68:9f:48:d4:ae:cc:a4:a0:b5:d7:e4:2c:
         39:8a:15:c7:ad:fb:9d:c3:34:d5:ef:d9:e8:6f:f3:07:f0:b9:
         56:40:57:7b:2d:c2:df:2c:eb:45:cb:74:a5:4a:85:43:e1:4f:
         ba:02:d1:9a:b9:36:00:65:7e:b6:af:4f:59:ee:f1:7d:4e:09:
         65:30:e1:23:bb:b2:14:c4:fc:35:7d:6a:6a:9e:b6:9c:4f:21:
         ca:80:c9:f0:a7:52:b4:b7:f8:38:17:f3:03:10:c4:7f:85:d4:
         f1:09:78:68:3c:ce:32:99:eb:ee:b2:29:2e:31:56:7e:0e:ea:
         16:53:f6:97:8b:01:52:aa:5c:17:4e:63:f5:0e:58:ba:27:db:
         78:5a:c0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:03:49 2026 by rpki-client