Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft
File:                     DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft (raw, json)
Hash identifier:          xADUUo9hVksFSHpy4Z0SyfJfMQPHbPTfrgPCGcaXcU0=
Subject key identifier:   94:20:52:CA:73:B2:83:52:A8:EC:FE:6A:77:7E:49:42:76:1C:DD:0E
Authority key identifier: DA:4F:E4:BD:E3:C7:97:EA:64:49:CE:50:67:41:58:68:66:75:A9:F4
Certificate issuer:       /CN=DA4FE4BDE3C797EA6449CE50674158686675A9F4
Certificate serial:       57DA5210501B6E6FB98D38807B80941345A269D0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA4FE4BDE3C797EA6449CE50674158686675A9F4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft
Manifest number:          B8
Signing time:             Thu 24 Sep 2026 15:45:30 +0000
Manifest this update:     Thu 24 Sep 2026 15:40:30 +0000
Manifest next update:     Fri 25 Sep 2026 17:07:30 +0000
Files and hashes:         1: DA4FE4BDE3C797EA6449CE50674158686675A9F4.crl (hash: 45tdo/GzX75a18083e9ar++iYyZx22dv3NozDkuIRXs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.crl
                          rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA4FE4BDE3C797EA6449CE50674158686675A9F4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 17:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:da:52:10:50:1b:6e:6f:b9:8d:38:80:7b:80:94:13:45:a2:69:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA4FE4BDE3C797EA6449CE50674158686675A9F4
        Validity
            Not Before: Sep 24 15:40:30 2026 GMT
            Not After : Sep 25 17:07:30 2026 GMT
        Subject: CN=942052CA73B28352A8ECFE6A777E4942761CDD0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:70:8a:28:99:7b:12:eb:3d:d6:f8:c0:3a:
                    54:c2:ee:6b:88:27:73:1e:25:5e:ea:21:e7:90:15:
                    a0:65:68:8f:9d:0c:3e:fd:26:33:38:7c:29:2e:b4:
                    1c:f0:11:91:dd:6c:6f:14:4d:0e:0b:07:e3:5a:0e:
                    7c:d5:7e:13:d2:d4:9d:78:55:2f:64:bd:4f:c6:9b:
                    f3:94:a5:3c:81:80:38:cd:05:aa:c1:33:25:73:17:
                    d7:bd:7e:ef:66:5e:4b:77:45:7b:7b:d5:62:a1:a5:
                    17:34:6f:f8:6f:87:3a:d4:3b:9f:5c:ca:7e:f3:ec:
                    7c:0c:d6:f5:1b:77:72:85:51:f0:24:37:94:7b:7a:
                    ed:50:e2:10:f8:34:76:93:55:7d:44:86:ff:f3:58:
                    b1:76:a9:b0:0b:50:39:77:4b:8b:9f:54:66:05:2e:
                    b6:c7:99:91:8c:02:84:9a:1d:91:f1:0e:e4:79:cc:
                    8d:22:98:84:94:c1:55:aa:6d:08:70:ae:83:0f:a2:
                    87:cd:e2:c0:86:cc:ac:2b:9f:7d:e2:52:73:ee:ea:
                    fd:d4:2e:08:f6:ad:a3:8b:1d:4f:ad:ab:65:61:c2:
                    8f:52:d5:f5:5c:0c:69:93:da:fd:11:28:b4:f4:69:
                    bf:4b:c8:8d:b2:6d:12:ed:02:0b:8e:44:96:08:28:
                    8c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:20:52:CA:73:B2:83:52:A8:EC:FE:6A:77:7E:49:42:76:1C:DD:0E
            X509v3 Authority Key Identifier:
                keyid:DA:4F:E4:BD:E3:C7:97:EA:64:49:CE:50:67:41:58:68:66:75:A9:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA4FE4BDE3C797EA6449CE50674158686675A9F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:0b:b2:c3:7b:40:68:10:96:c6:f8:a5:29:b9:b7:90:3b:
         4e:e8:19:26:c0:ef:7a:b9:b1:09:64:18:a2:b2:15:1c:64:c3:
         93:00:83:56:e8:99:2d:f6:d4:89:bb:38:07:b3:bd:16:a5:0f:
         46:73:5d:3e:83:eb:90:ee:62:e4:40:1a:88:5d:3e:f6:b5:5b:
         6f:e2:12:e1:b6:d7:fb:fd:a2:5f:6a:73:8e:12:22:0a:6f:eb:
         a9:d2:a3:d3:89:f4:2e:7d:c2:cd:0d:1c:ca:62:14:c4:21:16:
         43:03:6c:ca:ce:65:d0:dc:85:82:41:78:b8:4e:17:ae:f8:eb:
         85:07:60:fa:bb:f1:37:72:f7:46:6d:e0:6c:c2:1f:a6:7f:a3:
         2d:52:9e:57:84:88:d6:9a:69:16:22:21:5c:36:61:f7:6c:f1:
         13:fa:dc:88:7f:bd:18:32:28:89:f5:28:75:ee:93:e0:a5:06:
         ba:fc:4a:82:b3:4e:9e:81:69:7d:aa:ba:53:80:dd:7f:a4:4e:
         89:5d:1b:c5:b7:2d:c9:54:a8:9f:16:39:f1:20:20:bf:40:2e:
         54:db:0d:03:68:7c:09:36:f1:9d:18:08:a5:91:bd:9c:9b:5e:
         56:ea:5c:21:c7:c6:9c:3c:b0:af:78:93:60:8f:7e:00:d7:4e:
         9a:4c:87:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:21:37 2026 by rpki-client