Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DRCLOUD/0/2465066A4404957965BC1D7E1BFE582611E69618.mft
File:                     2465066A4404957965BC1D7E1BFE582611E69618.mft (raw, json)
Hash identifier:          gpgNKGB2y0PxHMPJlbOSZHBjI/ab222A8Az+UlcO7pk=
Subject key identifier:   DF:30:79:8D:48:84:3C:B9:C6:99:91:0E:4C:0A:4D:D7:66:41:E6:70
Authority key identifier: 24:65:06:6A:44:04:95:79:65:BC:1D:7E:1B:FE:58:26:11:E6:96:18
Certificate issuer:       /CN=2465066A4404957965BC1D7E1BFE582611E69618
Certificate serial:       28B2A5CBFF76B34318D4800F4710A4E22BDEC13C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2465066A4404957965BC1D7E1BFE582611E69618.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DRCLOUD/0/2465066A4404957965BC1D7E1BFE582611E69618.mft
Manifest number:          62
Signing time:             Thu 23 Jul 2026 18:21:28 +0000
Manifest this update:     Thu 23 Jul 2026 18:16:28 +0000
Manifest next update:     Fri 24 Jul 2026 21:59:28 +0000
Files and hashes:         1: 2465066A4404957965BC1D7E1BFE582611E69618.crl (hash: kLd8eMH8bPvPYWZyPHoDNHG2/cIa+qxThCqOQhVXPB8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DRCLOUD/0/2465066A4404957965BC1D7E1BFE582611E69618.crl
                          rsync://rpkica.twnic.tw/rpki/DRCLOUD/0/2465066A4404957965BC1D7E1BFE582611E69618.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2465066A4404957965BC1D7E1BFE582611E69618.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b2:a5:cb:ff:76:b3:43:18:d4:80:0f:47:10:a4:e2:2b:de:c1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2465066A4404957965BC1D7E1BFE582611E69618
        Validity
            Not Before: Jul 23 18:16:28 2026 GMT
            Not After : Jul 24 21:59:28 2026 GMT
        Subject: CN=DF30798D48843CB9C699910E4C0A4DD76641E670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9e:3e:16:7c:73:22:75:9a:ac:25:36:89:b3:
                    61:a5:62:14:66:4d:56:26:d8:55:3f:3e:7b:ba:9c:
                    26:8e:a4:d6:41:0a:60:b7:7b:dc:36:58:cc:4d:0b:
                    50:15:69:4c:85:58:20:3f:f2:e8:fc:e8:b4:e9:54:
                    6f:32:8c:80:b2:ae:9b:4b:5c:b4:65:b9:b1:fe:e3:
                    99:be:30:bd:79:a6:42:4e:a3:15:59:81:88:5c:ac:
                    0a:4c:89:0d:07:6d:15:c2:ad:1f:49:67:89:14:1c:
                    37:3a:fd:af:ea:98:2c:3b:cc:3b:62:42:3b:53:1c:
                    a5:78:75:a0:7c:63:6c:5c:21:3b:41:76:27:ed:f5:
                    71:97:f5:da:fc:e1:21:8f:1e:1f:0d:89:42:58:83:
                    21:68:75:24:7c:e7:fa:4f:67:b6:d6:5a:d7:7b:32:
                    ae:86:2d:23:63:64:8d:b4:a4:c8:0c:57:8f:c0:e7:
                    ae:3a:7e:64:b2:19:f2:29:5d:9a:62:37:16:15:95:
                    b0:a4:a5:6d:0c:07:45:b7:49:47:1e:dc:51:9f:f7:
                    d2:99:73:29:3e:2b:eb:c4:4e:9f:23:8a:4b:f7:3a:
                    5c:f6:6d:ef:c1:30:e4:d4:f5:9d:31:8f:14:cd:6b:
                    ca:e0:25:d5:71:33:17:6f:a3:80:f5:5d:2f:a7:03:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:30:79:8D:48:84:3C:B9:C6:99:91:0E:4C:0A:4D:D7:66:41:E6:70
            X509v3 Authority Key Identifier:
                keyid:24:65:06:6A:44:04:95:79:65:BC:1D:7E:1B:FE:58:26:11:E6:96:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DRCLOUD/0/2465066A4404957965BC1D7E1BFE582611E69618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2465066A4404957965BC1D7E1BFE582611E69618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DRCLOUD/0/2465066A4404957965BC1D7E1BFE582611E69618.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ae:0a:4b:66:cc:a0:9e:14:e7:b1:4e:92:97:70:43:70:ca:
         e8:c4:0e:79:d9:3f:10:67:3a:ca:66:23:67:86:e1:5c:0e:91:
         af:0e:26:c8:d8:f0:19:96:02:9a:c5:ab:4b:a2:d7:c9:f6:98:
         fc:ce:1f:fa:ca:f4:3c:be:3f:7b:54:e2:e1:85:ae:fd:d2:e1:
         6b:05:ea:e2:92:64:9f:d1:bf:f7:1f:20:ba:90:f2:83:c4:06:
         20:43:69:72:2a:b6:e6:14:50:a5:52:e5:52:ff:2d:41:a3:43:
         37:2c:36:b4:1d:7e:a7:22:01:4d:58:c8:38:1b:7e:bc:23:d2:
         23:52:5b:a6:33:a5:3b:bb:6b:86:2b:9b:f4:d0:ac:74:8e:e4:
         10:28:3a:83:be:0f:16:79:02:e8:68:57:15:25:23:c1:3a:51:
         8a:17:1b:74:af:8f:bb:59:b0:4f:76:87:2b:29:1c:20:45:22:
         72:d5:4e:77:6e:cd:a2:d9:d0:ff:c7:e7:7d:aa:70:7f:38:5f:
         df:e3:d9:50:3a:5f:6a:9b:51:5f:44:ff:dc:71:4d:7d:46:ec:
         71:18:ba:1e:30:06:c9:4a:7f:dd:20:41:25:32:71:6a:a8:4b:
         4c:ec:61:54:7d:1c:92:a7:8c:e1:1f:32:b2:44:07:07:d8:a5:
         63:01:be:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:01 2026 by rpki-client