Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHIRUE/0/E0FEB164B6853991E67682AD08989FDEC117BBB7.mft
File:                     E0FEB164B6853991E67682AD08989FDEC117BBB7.mft (raw, json)
Hash identifier:          5bD/1QyMYOEii29Io/X4MUi6QFDzfqYlTyf2Ht1zmXY=
Subject key identifier:   EC:35:23:18:CD:E2:B4:03:96:41:2C:51:B7:2E:F0:1F:4B:F3:80:0A
Authority key identifier: E0:FE:B1:64:B6:85:39:91:E6:76:82:AD:08:98:9F:DE:C1:17:BB:B7
Certificate issuer:       /CN=E0FEB164B6853991E67682AD08989FDEC117BBB7
Certificate serial:       5A297D7877A79FA1B3025B2824789AD322E7B800
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E0FEB164B6853991E67682AD08989FDEC117BBB7.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHIRUE/0/E0FEB164B6853991E67682AD08989FDEC117BBB7.mft
Manifest number:          02
Signing time:             Tue 12 May 2026 10:10:02 +0000
Manifest this update:     Tue 12 May 2026 10:05:02 +0000
Manifest next update:     Wed 13 May 2026 12:44:02 +0000
Files and hashes:         1: E0FEB164B6853991E67682AD08989FDEC117BBB7.crl (hash: g/VMRW+y7nMiveV8Fme7OR5RgCivBhwino6/m/LRQ1s=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHIRUE/0/E0FEB164B6853991E67682AD08989FDEC117BBB7.crl
                          rsync://rpkica.twnic.tw/rpki/CHIRUE/0/E0FEB164B6853991E67682AD08989FDEC117BBB7.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E0FEB164B6853991E67682AD08989FDEC117BBB7.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 12:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:29:7d:78:77:a7:9f:a1:b3:02:5b:28:24:78:9a:d3:22:e7:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0FEB164B6853991E67682AD08989FDEC117BBB7
        Validity
            Not Before: May 12 10:05:02 2026 GMT
            Not After : May 13 12:44:02 2026 GMT
        Subject: CN=EC352318CDE2B40396412C51B72EF01F4BF3800A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:da:d8:e6:1a:a3:66:8c:b4:af:52:cf:72:41:
                    12:a1:9e:90:de:e1:7c:62:77:b8:f3:74:f0:3a:e5:
                    e3:dc:f2:64:a1:a0:a3:ba:08:4d:0a:1c:df:aa:44:
                    74:96:7b:4f:80:2c:03:ba:cf:1e:38:a5:f6:dd:97:
                    e3:09:99:ec:8a:2e:f4:48:0d:9e:13:5c:44:c4:00:
                    46:f7:10:f4:ae:fc:d0:d2:0e:02:72:70:b5:de:2e:
                    b7:e2:4c:20:aa:98:60:49:7e:2b:62:d4:26:2c:37:
                    43:7c:e5:19:64:c1:5f:20:c9:8e:db:cf:05:86:31:
                    5e:fd:5b:23:6f:5f:5f:6f:27:57:f3:a7:da:ce:fd:
                    24:1b:5a:fe:92:e6:38:9a:82:e7:94:f4:83:8e:32:
                    3f:41:4f:c9:b1:3f:e9:29:48:fb:48:2a:38:f5:24:
                    d6:66:1e:60:0f:ea:3e:8a:ef:c5:77:35:de:9c:af:
                    61:44:5f:1c:35:2f:b3:d5:62:de:3d:2d:ad:b9:20:
                    2f:68:ee:0d:7d:53:24:d4:be:f7:a6:64:4f:51:ca:
                    00:4d:3e:77:c5:74:73:92:a4:d0:02:4b:81:77:f3:
                    98:68:36:65:09:c6:7c:d4:e3:d7:64:5e:c7:e5:47:
                    46:66:30:20:1f:5c:0b:52:7c:95:e5:cf:ac:2d:2d:
                    c8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:35:23:18:CD:E2:B4:03:96:41:2C:51:B7:2E:F0:1F:4B:F3:80:0A
            X509v3 Authority Key Identifier:
                keyid:E0:FE:B1:64:B6:85:39:91:E6:76:82:AD:08:98:9F:DE:C1:17:BB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHIRUE/0/E0FEB164B6853991E67682AD08989FDEC117BBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E0FEB164B6853991E67682AD08989FDEC117BBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHIRUE/0/E0FEB164B6853991E67682AD08989FDEC117BBB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e9:cc:c2:2a:fb:54:3e:53:ac:50:3e:a8:75:95:a6:d4:2b:
         9b:33:29:1d:89:6b:02:1b:78:76:25:e0:4a:d4:88:88:15:a7:
         29:e2:95:5a:37:9b:fc:b9:f7:f0:27:f4:36:3b:38:b4:34:e5:
         be:87:35:3e:07:ee:3a:68:63:a8:92:70:83:b9:c8:d1:9d:b6:
         11:a3:91:c5:13:ac:96:08:03:e3:ba:5d:05:6e:0a:a9:a3:7f:
         b0:70:98:bd:b4:70:9a:d9:49:98:16:19:96:0e:8f:08:cc:63:
         12:f4:e3:bc:ca:59:89:00:d5:d9:b2:a4:2b:11:d1:f3:20:06:
         bf:ac:ee:c5:4f:42:5d:09:25:12:db:0c:74:b9:51:97:02:65:
         f8:e0:df:f4:f3:2f:4a:85:0c:5f:58:ab:af:8c:ba:a4:5a:2d:
         85:a8:01:59:3f:b5:1e:df:8f:14:0e:2e:72:eb:e6:c4:e3:d2:
         29:bb:6a:f3:4f:a8:ad:0c:94:ba:89:b1:23:8d:a3:3c:6d:31:
         8b:ac:fe:90:33:c4:cd:e6:dd:de:ef:2f:76:ff:07:2c:d4:93:
         02:da:9c:ce:25:d1:ba:14:1a:0d:75:5e:78:d7:b0:77:d5:4a:
         91:cc:49:96:8f:c8:36:74:07:54:0a:88:de:a5:55:f4:1c:82:
         7a:dc:ef:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:23 2026 by rpki-client