Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft
File:                     BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft (raw, json)
Hash identifier:          VMXMsZxOI+I7MFdbRMEW4gsgjqJIHq8H7MMxsE4bTLw=
Subject key identifier:   5B:43:79:12:C7:A0:9A:ED:09:40:9A:48:80:5B:63:C9:05:E6:FA:E3
Authority key identifier: BD:22:62:C0:D2:64:05:1F:4D:27:D9:E9:28:07:D2:B8:0A:8C:E1:36
Certificate issuer:       /CN=BD2262C0D264051F4D27D9E92807D2B80A8CE136
Certificate serial:       65183663937BF3DB0581F3D5C62631585974B1D1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD2262C0D264051F4D27D9E92807D2B80A8CE136.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft
Manifest number:          18
Signing time:             Fri 25 Sep 2026 14:58:26 +0000
Manifest this update:     Fri 25 Sep 2026 14:53:26 +0000
Manifest next update:     Sat 26 Sep 2026 17:39:26 +0000
Files and hashes:         1: BD2262C0D264051F4D27D9E92807D2B80A8CE136.crl (hash: l9/LfM6fiSwuUYcDrCUBrGdZrkJez0YbnluBibX3xOc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.crl
                          rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD2262C0D264051F4D27D9E92807D2B80A8CE136.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:18:36:63:93:7b:f3:db:05:81:f3:d5:c6:26:31:58:59:74:b1:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD2262C0D264051F4D27D9E92807D2B80A8CE136
        Validity
            Not Before: Sep 25 14:53:26 2026 GMT
            Not After : Sep 26 17:39:26 2026 GMT
        Subject: CN=5B437912C7A09AED09409A48805B63C905E6FAE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1f:ea:b0:be:67:e9:94:4a:de:37:66:8d:d1:
                    9a:b0:e0:b8:04:43:fd:79:ca:8b:28:c1:09:b3:ed:
                    c9:96:19:8c:9b:6f:ed:84:ff:26:7c:e7:c8:9c:3a:
                    d7:a2:1f:30:b4:5d:94:cb:15:04:4b:0e:ec:f5:be:
                    3c:43:5d:41:dc:2d:05:c0:94:76:87:ea:ed:59:71:
                    fe:e3:81:25:d6:86:e8:67:e1:bf:a0:8f:31:8c:35:
                    f3:6d:96:1a:fe:81:1d:e9:96:98:bf:94:76:f7:e2:
                    29:17:cb:9a:1c:aa:97:a4:29:02:01:60:39:ec:31:
                    4f:7f:2f:6a:36:f4:fb:5d:1c:34:28:68:25:9f:60:
                    32:cb:01:26:6b:d1:ed:f2:20:9b:3a:d9:76:06:81:
                    e7:0b:ce:ad:64:4c:c5:fe:73:98:84:53:c5:45:9d:
                    33:84:0d:ab:8c:b0:11:35:af:0e:c5:4e:1d:3e:5b:
                    51:84:db:c5:56:b5:fe:96:c3:fc:24:5c:d7:97:50:
                    f6:1b:7e:e3:57:78:68:2e:04:18:fa:e4:a1:6a:cc:
                    32:dd:ad:71:c3:be:4f:4e:e4:e6:17:64:17:c1:f4:
                    b0:cd:de:55:8b:96:aa:76:3a:00:00:9a:6b:1c:9f:
                    6a:75:53:ff:6b:99:41:06:5d:3f:d3:84:88:81:5a:
                    8c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:43:79:12:C7:A0:9A:ED:09:40:9A:48:80:5B:63:C9:05:E6:FA:E3
            X509v3 Authority Key Identifier:
                keyid:BD:22:62:C0:D2:64:05:1F:4D:27:D9:E9:28:07:D2:B8:0A:8C:E1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BD2262C0D264051F4D27D9E92807D2B80A8CE136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CXT/0/BD2262C0D264051F4D27D9E92807D2B80A8CE136.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f6:8c:8c:90:be:ba:e8:a4:87:81:87:a1:38:e9:9e:4c:f3:
         4c:7e:aa:18:f2:f2:b4:4c:13:c5:c8:ed:bb:66:b5:03:d4:c3:
         2a:ad:65:41:66:1c:80:08:bd:aa:05:e3:f8:3b:bb:ef:f5:90:
         c3:eb:4a:cf:50:29:53:a5:2e:78:af:ba:ad:1a:7b:54:4d:2d:
         e6:ef:0e:92:c2:bc:34:12:76:24:44:34:ff:ee:f1:ff:bf:c7:
         39:79:7b:f8:8b:e8:e6:ce:e6:49:a4:56:ee:c3:81:96:bc:35:
         8f:ec:24:33:ce:43:4a:4b:e8:84:b6:d8:7a:30:4f:82:46:e3:
         49:a9:dd:bb:60:86:a1:0c:50:ea:25:70:42:48:0c:17:33:e8:
         33:3f:6d:3c:ac:a8:a0:af:fc:3f:d1:d2:a0:a2:2b:ed:ec:e0:
         99:74:7d:7e:00:de:9e:0c:06:61:89:13:27:b7:80:cb:3b:db:
         45:38:13:0c:bf:5e:42:16:ad:19:f7:87:ab:c1:95:51:d4:ff:
         81:da:53:54:38:72:a5:e9:bc:9c:19:b4:de:2c:82:25:13:aa:
         4e:19:85:73:d4:d0:f9:02:23:de:68:74:d1:59:a7:ec:be:a4:
         73:77:d4:f9:37:c2:c7:a6:ed:9c:6d:d7:91:9b:65:10:66:56:
         24:39:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:24:58 2026 by rpki-client