Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft
File:                     BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft (raw, json)
Hash identifier:          wjca0X/J9ul6W100sRqtCZWQRv+ExA4dVdFlLc6fqD0=
Subject key identifier:   C3:2D:B4:17:61:E5:F5:37:4F:F6:D2:D5:87:72:58:E7:E8:87:4A:6A
Authority key identifier: BC:EA:07:93:00:86:A1:3D:C5:25:04:5B:C7:E4:A9:80:2E:9D:12:E1
Certificate issuer:       /CN=BCEA07930086A13DC525045BC7E4A9802E9D12E1
Certificate serial:       7DB6667BE9D468AB6B4BFD334B71D710AC886B34
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft
Manifest number:          62
Signing time:             Thu 23 Jul 2026 16:03:12 +0000
Manifest this update:     Thu 23 Jul 2026 15:58:12 +0000
Manifest next update:     Fri 24 Jul 2026 17:19:12 +0000
Files and hashes:         1: BCEA07930086A13DC525045BC7E4A9802E9D12E1.crl (hash: HYSTadR05Phn9+ciAAnNgwB3Tzh1sRIp8ii2Bxy+UEM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.crl
                          rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 17:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b6:66:7b:e9:d4:68:ab:6b:4b:fd:33:4b:71:d7:10:ac:88:6b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCEA07930086A13DC525045BC7E4A9802E9D12E1
        Validity
            Not Before: Jul 23 15:58:12 2026 GMT
            Not After : Jul 24 17:19:12 2026 GMT
        Subject: CN=C32DB41761E5F5374FF6D2D5877258E7E8874A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:16:d4:20:7b:74:f2:48:25:79:45:46:70:
                    cf:82:1f:49:6b:f5:17:a7:90:11:91:ff:1e:5c:9d:
                    1b:94:a1:4d:1c:87:e7:24:d7:b5:0a:f1:2d:fb:60:
                    41:92:91:36:1a:24:87:4b:4a:f8:c4:34:e9:b4:4b:
                    21:58:31:ff:9b:0d:26:16:78:ac:62:68:33:68:67:
                    ab:b2:b6:40:00:db:ee:6c:21:2f:aa:10:c5:de:12:
                    61:50:7f:3d:bc:97:42:cd:87:ae:3e:fd:e9:4c:4c:
                    79:77:c2:7c:be:5d:cd:d8:f2:b0:63:be:ab:e7:a4:
                    52:1f:32:48:07:cc:08:80:a4:47:48:38:63:dd:ff:
                    50:d6:d7:d5:20:a5:46:ed:5d:6e:d0:1b:b2:b2:88:
                    a3:89:f0:8f:52:b3:e0:ba:4d:09:c6:12:fc:d1:52:
                    f8:a9:95:83:11:ff:5f:2f:e3:e5:a5:10:26:07:62:
                    60:86:47:78:e5:39:90:72:7c:6d:1a:b0:e3:53:ac:
                    74:c8:f4:46:8a:16:99:57:ae:22:89:b9:fd:c9:42:
                    4e:d5:48:a0:f3:5d:4a:e5:77:70:77:d5:ac:c9:75:
                    8d:53:b4:ea:5a:54:5e:8b:73:45:06:39:db:9b:6b:
                    ae:24:70:fa:b4:98:5c:26:9f:dc:70:67:27:f9:11:
                    54:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2D:B4:17:61:E5:F5:37:4F:F6:D2:D5:87:72:58:E7:E8:87:4A:6A
            X509v3 Authority Key Identifier:
                keyid:BC:EA:07:93:00:86:A1:3D:C5:25:04:5B:C7:E4:A9:80:2E:9D:12:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9a:93:dc:4b:5e:c7:15:c4:5d:86:3b:a4:fd:81:d5:33:74:
         93:6c:02:86:cb:70:56:05:8c:25:19:90:3d:16:ce:a8:ba:5f:
         f6:05:aa:db:44:48:dd:b7:a4:5a:f5:1a:86:51:90:c6:43:ab:
         cc:23:9c:8b:19:55:9d:b1:37:dc:09:2e:3d:ea:b6:22:60:1e:
         65:13:fd:c1:d8:5b:17:c2:a0:aa:75:a7:4f:b9:15:c5:6c:4b:
         8b:f7:14:d5:7e:ca:c3:8e:86:d4:d2:85:d3:7a:8b:0b:d8:73:
         48:c9:dd:2f:01:6e:5b:71:e3:7b:13:f2:38:ae:3b:d1:89:44:
         98:44:49:4f:88:1d:f3:37:c9:2e:7f:ef:0a:4b:ea:b1:a9:0b:
         00:36:f8:6f:09:73:81:da:d2:05:9c:0c:c7:c8:26:bf:c7:28:
         2e:28:f0:a6:e4:9f:b0:e8:60:02:a0:25:79:a6:58:2e:d5:86:
         80:6c:ba:57:1b:5d:96:ac:f3:3c:30:75:c0:82:f5:5d:10:da:
         f9:72:ed:b5:c0:33:5f:fc:96:29:4e:40:4a:cb:cc:fc:04:ea:
         3d:ae:77:21:b2:17:22:dd:ef:b0:b6:94:5e:91:06:67:0a:db:
         f3:27:2b:b7:df:b9:b6:84:df:98:19:7a:53:53:6b:53:92:f2:
         9f:5d:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:29:51 2026 by rpki-client