Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIMEI/0/7377EEB3564841D43C5989E50AA17EE67A6F0299.mft
File:                     7377EEB3564841D43C5989E50AA17EE67A6F0299.mft (raw, json)
Hash identifier:          fUoPQsJV/CRtEKbH3zLOtT+A/faN5Zn8tr/riQ0ix6E=
Subject key identifier:   89:52:79:CE:24:09:3A:B4:18:5D:0F:D0:87:53:1C:A4:9B:87:FB:7B
Authority key identifier: 73:77:EE:B3:56:48:41:D4:3C:59:89:E5:0A:A1:7E:E6:7A:6F:02:99
Certificate issuer:       /CN=7377EEB3564841D43C5989E50AA17EE67A6F0299
Certificate serial:       5029DABF3DF131B7E3D1FB68FE709AA77E8FB254
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7377EEB3564841D43C5989E50AA17EE67A6F0299.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHIMEI/0/7377EEB3564841D43C5989E50AA17EE67A6F0299.mft
Manifest number:          63
Signing time:             Fri 24 Jul 2026 10:23:13 +0000
Manifest this update:     Fri 24 Jul 2026 10:18:13 +0000
Manifest next update:     Sat 25 Jul 2026 14:18:13 +0000
Files and hashes:         1: 7377EEB3564841D43C5989E50AA17EE67A6F0299.crl (hash: 8JTETr5j7UpnbzeSAU4G+oW1khvxh+lVQVQs595HqTM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHIMEI/0/7377EEB3564841D43C5989E50AA17EE67A6F0299.crl
                          rsync://rpkica.twnic.tw/rpki/CHIMEI/0/7377EEB3564841D43C5989E50AA17EE67A6F0299.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7377EEB3564841D43C5989E50AA17EE67A6F0299.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:29:da:bf:3d:f1:31:b7:e3:d1:fb:68:fe:70:9a:a7:7e:8f:b2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7377EEB3564841D43C5989E50AA17EE67A6F0299
        Validity
            Not Before: Jul 24 10:18:13 2026 GMT
            Not After : Jul 25 14:18:13 2026 GMT
        Subject: CN=895279CE24093AB4185D0FD087531CA49B87FB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:06:c2:5d:e9:0f:cc:b5:2b:4a:2f:67:db:
                    88:1b:e2:e2:b6:dc:c6:9f:a9:3a:6d:58:c0:a9:49:
                    cc:06:cd:d4:e1:09:54:bc:e0:9d:09:bf:c2:36:f0:
                    dd:bf:05:29:6f:77:c2:6c:38:98:33:8e:35:32:8c:
                    94:59:0c:ad:d6:56:7f:99:07:f8:3e:96:46:4e:6a:
                    8a:04:02:ae:fc:32:4a:75:02:64:46:b1:82:6a:ec:
                    06:8a:8a:59:0b:82:94:29:1e:7d:85:b3:75:36:85:
                    64:a6:3e:5b:98:34:a9:8b:e3:f2:8a:a0:f4:8b:0b:
                    08:17:38:64:2f:09:21:84:61:8f:aa:a7:5e:3f:e3:
                    31:05:24:58:29:12:d9:ac:cb:09:fa:29:12:5f:c6:
                    3e:62:fb:1d:91:30:b5:ee:4a:ab:4b:12:01:1b:0a:
                    29:d0:03:bb:f0:9c:0a:d1:d9:2b:89:8f:bb:37:ba:
                    89:29:68:76:e4:35:b0:40:53:8f:74:1a:cc:1c:36:
                    a5:a4:c1:cc:da:fc:55:6a:6f:9e:1b:56:f2:0f:02:
                    d2:40:dc:bc:14:a3:b2:78:75:37:b7:6f:a1:7f:40:
                    d5:09:1c:2d:fd:a6:28:10:8b:7e:2e:5c:a2:96:46:
                    0f:70:71:84:41:b3:61:d8:87:ff:26:e8:7b:da:3b:
                    46:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:52:79:CE:24:09:3A:B4:18:5D:0F:D0:87:53:1C:A4:9B:87:FB:7B
            X509v3 Authority Key Identifier:
                keyid:73:77:EE:B3:56:48:41:D4:3C:59:89:E5:0A:A1:7E:E6:7A:6F:02:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHIMEI/0/7377EEB3564841D43C5989E50AA17EE67A6F0299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7377EEB3564841D43C5989E50AA17EE67A6F0299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIMEI/0/7377EEB3564841D43C5989E50AA17EE67A6F0299.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cd:d0:6f:c1:d5:d2:0c:bc:8f:b3:1e:1d:f0:cc:39:55:26:
         52:83:2d:db:e9:38:22:76:3c:11:28:57:0b:0b:54:67:da:05:
         92:d1:de:14:6e:e4:74:89:b6:fb:86:c8:9d:5e:b2:bb:a4:7b:
         91:04:65:a4:26:ea:18:aa:b0:86:f2:3b:c6:2f:cb:e9:05:29:
         2f:2c:22:77:41:3c:8b:59:cc:e1:0a:2d:93:82:8a:b3:e6:f1:
         4d:06:68:b8:32:f8:9d:3a:fe:48:ee:67:7a:57:e7:1d:fe:d0:
         fa:0a:7b:dd:a3:ef:99:d8:25:03:46:2b:4c:6e:16:3a:26:b6:
         f4:46:aa:ab:ec:3c:9a:26:90:b1:f9:59:a5:24:d2:2f:2c:c5:
         9d:d2:3f:e5:ec:dd:36:3f:70:d3:42:f8:16:18:ab:f4:64:bf:
         d4:4f:2d:76:a7:7e:da:27:93:d2:51:42:18:95:d5:59:c7:53:
         db:fb:09:16:c5:1b:ba:9b:94:95:05:9d:a0:be:d6:ce:f0:e9:
         82:81:cb:3b:d3:3c:f0:1f:07:44:76:20:9a:d5:98:c2:c5:b5:
         0d:d8:87:11:fc:23:95:fa:04:4d:13:7b:b5:3b:06:d9:2a:a6:
         bc:b8:b3:b4:f4:5b:11:0d:e1:b0:32:79:70:66:b7:96:c7:23:
         9d:81:47:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:20 2026 by rpki-client