Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft
File:                     D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft (raw, json)
Hash identifier:          05njHlJ+a/GokdFySCOc7p3eI+j3vyDTFldHPYVukPo=
Subject key identifier:   22:99:98:59:DA:5D:C3:06:B3:A5:B5:52:59:6F:B1:AC:F5:7C:44:F9
Authority key identifier: D7:4E:5E:C5:E6:22:5B:99:9D:92:3B:D3:44:97:A3:06:0E:DA:0B:3B
Certificate issuer:       /CN=D74E5EC5E6225B999D923BD34497A3060EDA0B3B
Certificate serial:       39CAA4B430F2204A41B96BA8600F4817CBE7F5B9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft
Manifest number:          64
Signing time:             Thu 23 Jul 2026 17:11:14 +0000
Manifest this update:     Thu 23 Jul 2026 17:06:14 +0000
Manifest next update:     Fri 24 Jul 2026 19:22:14 +0000
Files and hashes:         1: D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl (hash: +8mqYW4g9qLXTMt0nWQWv0uilAL+Lr7fJoL9sLTxo8c=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl
                          rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ca:a4:b4:30:f2:20:4a:41:b9:6b:a8:60:0f:48:17:cb:e7:f5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74E5EC5E6225B999D923BD34497A3060EDA0B3B
        Validity
            Not Before: Jul 23 17:06:14 2026 GMT
            Not After : Jul 24 19:22:14 2026 GMT
        Subject: CN=22999859DA5DC306B3A5B552596FB1ACF57C44F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:91:d2:49:ef:10:85:68:00:27:37:b3:95:
                    a7:5b:10:b1:24:a4:b6:b0:40:b2:41:8d:d8:21:62:
                    ca:e5:b4:8a:ff:b5:c8:94:88:b7:e2:bd:8c:07:9c:
                    2e:72:1e:ee:ed:58:d1:8e:0b:ed:08:1b:4e:2e:7a:
                    83:8e:d9:c1:78:c6:4c:d4:22:05:52:5d:34:8e:0a:
                    4d:76:c0:74:ff:54:a5:f9:05:d4:d4:22:25:3a:88:
                    52:8a:16:f0:c5:f5:67:f0:19:90:c6:e0:c9:67:90:
                    4c:98:b9:ea:b1:1a:ec:1e:b5:8a:5f:c0:cc:29:3e:
                    be:0c:8d:d6:60:8d:41:cd:9a:1c:78:08:0c:8f:b8:
                    b6:68:7e:9b:df:e3:d5:e6:16:d6:a6:98:69:b6:6a:
                    a0:be:e6:b0:1f:15:44:b0:4d:e4:f6:74:1f:a0:67:
                    86:f8:e1:23:d6:4b:4c:02:fd:34:40:3a:20:d3:97:
                    f0:c0:6a:93:0e:fd:92:55:e7:0c:02:5a:92:d3:9d:
                    3d:00:a5:9f:de:3c:5e:ac:fc:9f:7c:e6:e9:b7:9a:
                    c1:fb:bb:f8:74:9e:3a:79:5a:32:cb:3e:a5:d6:23:
                    6c:9d:e8:c6:30:db:a1:0d:f7:0f:20:27:de:be:3f:
                    34:99:1e:37:44:94:b9:19:d6:c8:59:de:c1:af:f5:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:99:98:59:DA:5D:C3:06:B3:A5:B5:52:59:6F:B1:AC:F5:7C:44:F9
            X509v3 Authority Key Identifier:
                keyid:D7:4E:5E:C5:E6:22:5B:99:9D:92:3B:D3:44:97:A3:06:0E:DA:0B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3b:e7:43:8b:f8:ef:31:16:d4:59:c3:26:b0:13:22:50:0a:
         6c:35:e2:19:91:dc:c4:0e:f3:36:ec:9f:a8:30:62:99:aa:a6:
         6b:45:3a:f5:6a:4c:61:b8:3f:c5:15:ad:28:9a:8e:85:06:32:
         09:00:33:41:04:bd:69:20:60:ab:45:02:9e:e7:e7:ac:54:65:
         20:d4:e0:5b:8c:19:42:a7:40:fc:85:5d:94:f8:2a:cb:1b:f2:
         19:b6:b6:39:a9:e6:0c:c9:44:95:30:f4:71:8f:39:eb:0c:5b:
         be:b3:bb:17:a0:ad:85:81:21:45:f2:d8:d9:0a:be:d3:12:e4:
         ad:3d:f9:cc:f7:6f:16:ca:e8:07:3a:0f:77:8e:c7:01:c7:b7:
         c9:a5:84:6d:5e:3c:31:c8:2b:50:6e:d7:f0:db:d8:9c:29:4d:
         82:a0:0c:d7:82:48:08:91:64:9e:56:d6:d4:05:17:04:41:2f:
         e9:38:16:7b:9f:d5:fe:4f:39:78:dc:b3:e3:b6:2d:5c:e1:6e:
         34:14:5e:49:e7:74:6d:65:58:e9:74:1f:82:33:20:f8:a9:77:
         f6:dd:ea:24:54:de:0c:86:8c:97:90:96:68:66:b1:88:ec:3a:
         04:3d:1b:94:9b:12:60:69:5a:d1:76:41:8a:d5:fd:9f:d5:9c:
         24:5a:be:04
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUOcqktDDyIEpBuWuoYA9IF8vn9bkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc0RTVFQzVFNjIyNUI5OTlEOTIzQkQzNDQ5N0EzMDYw
RURBMEIzQjAeFw0yNjA3MjMxNzA2MTRaFw0yNjA3MjQxOTIyMTRaMDMxMTAvBgNV
BAMTKDIyOTk5ODU5REE1REMzMDZCM0E1QjU1MjU5NkZCMUFDRjU3QzQ0RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSb5HSSe8QhWgAJzezladbELEk
pLawQLJBjdghYsrltIr/tciUiLfivYwHnC5yHu7tWNGOC+0IG04ueoOO2cF4xkzU
IgVSXTSOCk12wHT/VKX5BdTUIiU6iFKKFvDF9WfwGZDG4MlnkEyYueqxGuwetYpf
wMwpPr4MjdZgjUHNmhx4CAyPuLZofpvf49XmFtammGm2aqC+5rAfFUSwTeT2dB+g
Z4b44SPWS0wC/TRAOiDTl/DAapMO/ZJV5wwCWpLTnT0ApZ/ePF6s/J985um3msH7
u/h0njp5WjLLPqXWI2yd6MYw26EN9w8gJ96+PzSZHjdElLkZ1shZ3sGv9SdxAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUIpmYWdpdwwazpbVSWW+xrPV8RPkwHwYDVR0j
BBgwFoAU105exeYiW5mdkjvTRJejBg7aCzswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFO
S1RXLzAvRDc0RTVFQzVFNjIyNUI5OTlEOTIzQkQzNDQ5N0EzMDYwRURBMEIzQi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS9ENzRFNUVDNUU2MjI1Qjk5OUQ5MjNCRDM0
NDk3QTMwNjBFREEwQjNCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG
VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvREJTQkFOS1RXLzAvRDc0RTVF
QzVFNjIyNUI5OTlEOTIzQkQzNDQ5N0EzMDYwRURBMEIzQi5tZnQwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGo7
50OL+O8xFtRZwyawEyJQCmw14hmR3MQO8zbsn6gwYpmqpmtFOvVqTGG4P8UVrSia
joUGMgkAM0EEvWkgYKtFAp7n56xUZSDU4FuMGUKnQPyFXZT4Kssb8hm2tjmp5gzJ
RJUw9HGPOesMW76zuxegrYWBIUXy2NkKvtMS5K09+cz3bxbK6Ac6D3eOxwHHt8ml
hG1ePDHIK1Bu1/Db2JwpTYKgDNeCSAiRZJ5W1tQFFwRBL+k4Fnuf1f5POXjcs+O2
LVzhbjQUXknndG1lWOl0H4IzIPipd/bd6iRU3gyGjJeQlmhmsYjsOgQ9G5SbEmBp
WtF2QYrV/Z/VnCRavgQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:47:16 2026 by rpki-client