Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft
File:                     DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft (raw, json)
Hash identifier:          Lkivcd+/BskV02kh6NwnpoxZfiTv6dQ24AcH6hHDxIA=
Subject key identifier:   5A:80:C5:31:2C:28:99:9C:AF:5F:88:1B:F8:EF:B6:76:D5:BD:C4:CA
Authority key identifier: DA:4F:E4:BD:E3:C7:97:EA:64:49:CE:50:67:41:58:68:66:75:A9:F4
Certificate issuer:       /CN=DA4FE4BDE3C797EA6449CE50674158686675A9F4
Certificate serial:       25256DE16D2302C907ACB7342173B7FA958B6199
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA4FE4BDE3C797EA6449CE50674158686675A9F4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft
Manifest number:          65
Signing time:             Thu 23 Jul 2026 23:21:58 +0000
Manifest this update:     Thu 23 Jul 2026 23:16:58 +0000
Manifest next update:     Sat 25 Jul 2026 01:26:58 +0000
Files and hashes:         1: DA4FE4BDE3C797EA6449CE50674158686675A9F4.crl (hash: g1kozzt0nrkUqzp5CMjlEfmKMiKn5ChuX5cV0gDG9MM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.crl
                          rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA4FE4BDE3C797EA6449CE50674158686675A9F4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:25:6d:e1:6d:23:02:c9:07:ac:b7:34:21:73:b7:fa:95:8b:61:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA4FE4BDE3C797EA6449CE50674158686675A9F4
        Validity
            Not Before: Jul 23 23:16:58 2026 GMT
            Not After : Jul 25 01:26:58 2026 GMT
        Subject: CN=5A80C5312C28999CAF5F881BF8EFB676D5BDC4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:71:8f:ec:98:64:ad:1c:ae:3a:a9:bb:62:
                    de:55:e2:7b:1d:b5:96:f7:62:b6:f2:1a:88:4e:8d:
                    0f:20:c7:36:84:31:f7:22:5f:db:3e:65:9b:15:05:
                    98:ff:56:fc:41:a7:de:91:86:01:d3:13:83:0f:1b:
                    80:34:cf:74:c2:d9:15:7c:be:70:fb:53:7a:3b:71:
                    e7:84:4c:21:2a:c4:82:0d:5c:31:0b:68:2e:19:c9:
                    ee:70:07:90:97:5d:e7:57:d1:81:65:38:15:11:98:
                    eb:03:a6:b4:58:c9:23:b0:e7:b9:19:63:b0:f1:e4:
                    0f:53:cb:28:b7:4a:a1:0a:3e:59:4b:1e:a1:64:20:
                    68:b9:13:ca:36:d1:a7:30:e7:d5:45:a1:c7:7e:5f:
                    cf:a8:32:aa:ec:0a:d2:65:67:bb:ef:05:36:82:49:
                    82:ed:19:ad:a8:a5:42:8e:03:aa:77:60:53:68:03:
                    8d:3b:a8:40:6b:50:59:bf:81:65:7a:06:b4:47:2e:
                    97:29:f7:39:3a:0b:9f:f6:31:8f:90:1f:2c:93:41:
                    91:04:89:03:ff:75:89:e4:4e:0d:7d:c9:3e:44:00:
                    3a:fc:7c:10:77:52:7d:92:7a:03:0a:85:78:1f:ff:
                    2c:ac:ee:c2:38:3f:7c:fe:29:d3:ab:89:e1:9b:71:
                    71:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:80:C5:31:2C:28:99:9C:AF:5F:88:1B:F8:EF:B6:76:D5:BD:C4:CA
            X509v3 Authority Key Identifier:
                keyid:DA:4F:E4:BD:E3:C7:97:EA:64:49:CE:50:67:41:58:68:66:75:A9:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA4FE4BDE3C797EA6449CE50674158686675A9F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:48:e7:f6:a1:2b:99:62:80:7a:db:13:87:a1:39:45:cf:74:
         5c:cb:47:4d:cd:4e:92:aa:fe:f1:24:7f:c6:d0:cd:ab:1e:c3:
         34:94:de:e3:d3:2b:0f:b3:b4:91:5f:2e:82:08:5c:d1:45:43:
         df:35:ad:6a:97:22:4d:52:f8:fa:a8:f0:d7:83:30:6c:1c:30:
         f6:cd:c1:51:f4:bf:d2:56:cb:3c:5a:8f:fc:26:64:72:01:73:
         b2:9e:49:22:88:52:82:74:62:1a:1d:b4:34:bc:78:5d:4c:8c:
         5c:33:77:4e:20:e9:18:45:c1:89:52:0b:1c:1a:e8:0e:45:a0:
         df:f7:96:7c:4f:a0:e5:b2:9c:7a:0a:2a:94:dd:df:6e:a4:9a:
         be:f6:5d:e8:f8:9b:26:de:0c:0d:c3:0b:96:c2:3b:ce:01:6b:
         10:a9:2e:30:6d:ed:1f:4c:89:ee:f7:b6:ff:01:b1:12:1d:a3:
         75:22:52:cc:2e:0f:33:40:93:5e:60:08:13:32:9a:35:37:7e:
         0f:f8:43:9e:53:31:01:15:af:04:ae:bf:ff:48:6f:6a:70:8c:
         dc:e5:09:97:02:76:dd:3c:35:dc:ba:d7:02:40:95:19:dd:cc:
         ca:8b:55:d9:7f:d8:54:90:90:d4:38:8f:a8:7e:cc:e2:18:f9:
         ec:c7:96:fe
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUJSVt4W0jAskHrLc0IXO3+pWLYZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE0RkU0QkRFM0M3OTdFQTY0NDlDRTUwNjc0MTU4Njg2
Njc1QTlGNDAeFw0yNjA3MjMyMzE2NThaFw0yNjA3MjUwMTI2NThaMDMxMTAvBgNV
BAMTKDVBODBDNTMxMkMyODk5OUNBRjVGODgxQkY4RUZCNjc2RDVCREM0Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/PHGP7JhkrRyuOqm7Yt5V4nsd
tZb3YrbyGohOjQ8gxzaEMfciX9s+ZZsVBZj/VvxBp96RhgHTE4MPG4A0z3TC2RV8
vnD7U3o7ceeETCEqxIINXDELaC4Zye5wB5CXXedX0YFlOBURmOsDprRYySOw57kZ
Y7Dx5A9Tyyi3SqEKPllLHqFkIGi5E8o20acw59VFocd+X8+oMqrsCtJlZ7vvBTaC
SYLtGa2opUKOA6p3YFNoA407qEBrUFm/gWV6BrRHLpcp9zk6C5/2MY+QHyyTQZEE
iQP/dYnkTg19yT5EADr8fBB3Un2SegMKhXgf/yys7sI4P3z+KdOrieGbcXHfAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUWoDFMSwomZyvX4gb+O+2dtW9xMowHwYDVR0j
BBgwFoAU2k/kvePHl+pkSc5QZ0FYaGZ1qfQwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0pNRS8w
L0RBNEZFNEJERTNDNzk3RUE2NDQ5Q0U1MDY3NDE1ODY4NjY3NUE5RjQuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvREE0RkU0QkRFM0M3OTdFQTY0NDlDRTUwNjc0MTU4
Njg2Njc1QTlGNC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NKTUUvMC9EQTRGRTRCREUzQzc5N0VB
NjQ0OUNFNTA2NzQxNTg2ODY2NzVBOUY0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEjn9qErmWKAetsT
h6E5Rc90XMtHTc1Okqr+8SR/xtDNqx7DNJTe49MrD7O0kV8ugghc0UVD3zWtapci
TVL4+qjw14MwbBww9s3BUfS/0lbLPFqP/CZkcgFzsp5JIohSgnRiGh20NLx4XUyM
XDN3TiDpGEXBiVILHBroDkWg3/eWfE+g5bKcegoqlN3fbqSavvZd6PibJt4MDcML
lsI7zgFrEKkuMG3tH0yJ7ve2/wGxEh2jdSJSzC4PM0CTXmAIEzKaNTd+D/hDnlMx
ARWvBK6//0hvanCM3OUJlwJ23Tw13LrXAkCVGd3MyotV2X/YVJCQ1DiPqH7M4hj5
7MeW/g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:53 2026 by rpki-client