Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
File:                     DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft (raw, json)
Hash identifier:          Trwgca/rBRZ/i5bP1wRKMSoS8xveNIpdZ738+j8uL70=
Subject key identifier:   2E:E7:7B:9E:13:A9:09:E2:D8:AD:0D:2A:DD:91:7A:D3:AE:8C:12:92
Authority key identifier: DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66
Certificate issuer:       /CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166
Certificate serial:       0EE270ED5499D7267D115386CD51AE60E3F62B8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
Manifest number:          C1
Signing time:             Sat 03 Oct 2026 06:38:17 +0000
Manifest this update:     Sat 03 Oct 2026 06:33:17 +0000
Manifest next update:     Sun 04 Oct 2026 09:22:17 +0000
Files and hashes:         1: DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl (hash: GMbLs3wn5wr5U/vbiHt6AM8gDVRvp4OAPq2BMMevGzA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl
                          rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e2:70:ed:54:99:d7:26:7d:11:53:86:cd:51:ae:60:e3:f6:2b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166
        Validity
            Not Before: Oct  3 06:33:17 2026 GMT
            Not After : Oct  4 09:22:17 2026 GMT
        Subject: CN=2EE77B9E13A909E2D8AD0D2ADD917AD3AE8C1292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:9f:13:c6:de:5b:95:80:51:28:98:d7:0f:
                    0c:1c:26:16:00:e2:b0:e6:07:ee:3d:33:d9:ae:07:
                    c2:bc:52:b7:90:bc:06:6e:1c:4e:63:73:ee:64:b7:
                    3c:6b:5f:70:9d:f3:ec:07:91:0f:1c:37:56:6d:d7:
                    66:88:f7:97:12:95:34:82:a6:53:0a:2b:c6:5b:0e:
                    1b:65:b2:2d:37:8d:08:fc:fa:7b:dd:1f:67:7d:2f:
                    48:f1:52:66:be:58:6b:03:5b:18:19:61:06:e3:5f:
                    82:2e:98:83:b0:2d:8b:bf:01:7d:ab:e3:ab:48:27:
                    2f:bc:c0:ac:7b:0d:f1:4c:6b:ae:65:e4:b2:a2:17:
                    a7:65:e4:d5:ad:70:68:41:40:d9:2d:54:68:7a:a8:
                    0f:30:a7:07:16:f8:32:fe:20:6b:27:d0:4c:d5:64:
                    a1:99:67:39:9a:33:67:84:20:bd:13:fc:e4:f9:48:
                    a2:50:63:f6:13:69:82:7d:52:d7:b9:4c:51:56:5c:
                    bd:67:e5:fb:f3:7d:60:54:ed:e7:cd:5e:b1:eb:2b:
                    ad:88:d3:22:8a:40:2d:2b:e9:63:89:63:bb:af:c0:
                    ca:19:df:27:8a:96:fb:8b:bf:83:16:69:e0:9c:0e:
                    a3:b1:c6:24:55:94:6e:a4:00:63:a7:f4:51:98:16:
                    22:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E7:7B:9E:13:A9:09:E2:D8:AD:0D:2A:DD:91:7A:D3:AE:8C:12:92
            X509v3 Authority Key Identifier:
                keyid:DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:26:64:2c:8d:a6:b6:7c:73:82:49:d2:a1:b5:74:d6:86:f3:
         0c:c1:61:31:2f:77:05:bb:22:3c:f1:67:45:11:3a:be:cd:14:
         33:10:4b:8c:2a:25:bf:21:8c:b0:f4:a1:d3:bb:4f:3b:f8:9e:
         42:9e:a1:46:10:55:9c:e4:a8:26:1e:86:94:fc:f5:08:9f:b5:
         6d:08:55:38:8b:71:86:12:97:1c:4e:e8:b1:bf:4b:b5:a4:29:
         c9:b7:39:61:35:a7:ef:72:21:78:ba:c1:a5:9c:cc:4b:93:3a:
         e7:b1:87:ff:c7:96:ac:f2:dc:15:20:08:b5:54:ca:40:f2:24:
         81:ea:52:81:47:51:1a:0a:26:33:15:d8:c7:57:22:75:f0:a3:
         e6:64:2e:32:12:99:37:61:26:34:45:50:9b:e0:7d:a2:2e:c0:
         c3:b6:af:2d:3a:28:9a:48:a4:1b:a6:a9:a7:1b:ad:32:d7:5e:
         b7:0d:aa:e2:44:ac:17:67:c5:da:7f:d9:7a:4d:68:50:d0:45:
         a8:9b:6f:c8:bb:c3:e9:73:6f:14:01:69:19:dc:cc:b5:f2:a4:
         6c:66:72:79:69:73:51:a4:47:68:df:52:3b:0b:a3:93:2e:a9:
         d8:32:d9:09:bf:df:9d:10:35:79:41:5c:a2:cd:3c:49:41:dd:
         cb:00:9a:8f
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUDuJw7VSZ1yZ9EVOGzVGuYOP2K44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREYxN0E5RDdEMUYwQkE0OUMwOThENTc0ODdCOTc4MkIx
QkM2NTE2NjAeFw0yNjEwMDMwNjMzMTdaFw0yNjEwMDQwOTIyMTdaMDMxMTAvBgNV
BAMTKDJFRTc3QjlFMTNBOTA5RTJEOEFEMEQyQUREOTE3QUQzQUU4QzEyOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClqp8Txt5blYBRKJjXDwwcJhYA
4rDmB+49M9muB8K8UreQvAZuHE5jc+5ktzxrX3Cd8+wHkQ8cN1Zt12aI95cSlTSC
plMKK8ZbDhtlsi03jQj8+nvdH2d9L0jxUma+WGsDWxgZYQbjX4IumIOwLYu/AX2r
46tIJy+8wKx7DfFMa65l5LKiF6dl5NWtcGhBQNktVGh6qA8wpwcW+DL+IGsn0EzV
ZKGZZzmaM2eEIL0T/OT5SKJQY/YTaYJ9Ute5TFFWXL1n5fvzfWBU7efNXrHrK62I
0yKKQC0r6WOJY7uvwMoZ3yeKlvuLv4MWaeCcDqOxxiRVlG6kAGOn9FGYFiKTAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQULud7nhOpCeLYrQ0q3ZF6066MEpIwHwYDVR0j
BBgwFoAU3xep19HwuknAmNV0h7l4KxvGUWYwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWVVGRU5H
LzAvREYxN0E5RDdEMUYwQkE0OUMwOThENTc0ODdCOTc4MkIxQkM2NTE2Ni5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS9ERjE3QTlEN0QxRjBCQTQ5QzA5OEQ1NzQ4N0I5
NzgyQjFCQzY1MTY2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvWVVGRU5HLzAvREYxN0E5RDdEMUYw
QkE0OUMwOThENTc0ODdCOTc4MkIxQkM2NTE2Ni5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIMmZCyNprZ8
c4JJ0qG1dNaG8wzBYTEvdwW7IjzxZ0UROr7NFDMQS4wqJb8hjLD0odO7Tzv4nkKe
oUYQVZzkqCYehpT89QiftW0IVTiLcYYSlxxO6LG/S7WkKcm3OWE1p+9yIXi6waWc
zEuTOuexh//Hlqzy3BUgCLVUykDyJIHqUoFHURoKJjMV2MdXInXwo+ZkLjISmTdh
JjRFUJvgfaIuwMO2ry06KJpIpBumqacbrTLXXrcNquJErBdnxdp/2XpNaFDQRaib
b8i7w+lzbxQBaRnczLXypGxmcnlpc1GkR2jfUjsLo5Muqdgy2Qm/350QNXlBXKLN
PElB3csAmo8=
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:07 2026 by rpki-client