Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
File:                     DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft (raw, json)
Hash identifier:          w1TmQo8H25ZG7AYN0is70/0Uh8FPJni/EvKsTrRGgAc=
Subject key identifier:   D1:0F:E0:E3:E8:05:AA:EF:46:CD:2B:93:1D:FE:C8:41:42:00:5D:F0
Authority key identifier: DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13
Certificate issuer:       /CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
Certificate serial:       73CB950236F6B9CBF3C412B0DA90ED4ECCFDB9D9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 14:58:02 +0000
Manifest this update:     Thu 23 Jul 2026 14:53:02 +0000
Manifest next update:     Fri 24 Jul 2026 16:54:02 +0000
Files and hashes:         1: 3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa (hash: H0K1ntuYrqGyMmjMc0VSqf2iYE6epJACiPRZPRlBzDo=)
                          2: DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl (hash: s2XXLRfLCSVfkNjbvU6mW+XWJ5eyKM/g+rClSz9eEaQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 16:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cb:95:02:36:f6:b9:cb:f3:c4:12:b0:da:90:ed:4e:cc:fd:b9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
        Validity
            Not Before: Jul 23 14:53:02 2026 GMT
            Not After : Jul 24 16:54:02 2026 GMT
        Subject: CN=D10FE0E3E805AAEF46CD2B931DFEC84142005DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:37:95:67:a3:d0:b3:80:a8:9c:7d:d4:9b:
                    20:1b:c4:ec:94:d1:f3:86:07:77:a3:00:a2:53:d4:
                    18:10:a2:84:1e:bf:37:a8:50:d4:62:92:88:0d:d0:
                    67:a7:42:bf:b1:14:68:a7:8f:1b:e3:e2:01:2c:1e:
                    37:58:0c:c6:1a:ba:fe:d6:ec:ee:6a:8a:f2:9a:0b:
                    ff:23:d6:3f:27:d2:24:8e:ee:80:fb:90:ea:9c:55:
                    5a:69:33:4c:4e:5a:c2:d3:cb:85:29:be:15:b1:8e:
                    0f:72:8c:39:51:e3:4a:a4:5b:17:70:99:55:fc:73:
                    2b:dc:0f:92:cb:39:13:8d:61:52:df:08:4e:26:6f:
                    c2:07:ff:6d:6f:9d:67:58:1b:51:85:29:88:d7:d1:
                    a1:79:ca:8c:c8:d8:36:48:8c:20:71:3d:41:04:60:
                    b6:2f:0f:9e:50:70:a0:51:26:26:8b:1a:0a:bf:72:
                    62:e2:73:f5:36:cd:98:f2:93:fe:7e:86:83:a1:a2:
                    17:50:c7:b3:ab:48:4d:cc:96:00:4f:8e:07:73:c6:
                    e6:ec:b0:2f:4a:56:dd:c0:25:52:0c:ee:17:90:ce:
                    a5:88:22:f3:22:89:ef:f3:5f:1f:4c:27:c3:44:12:
                    d0:05:3a:41:cc:9c:07:ab:32:bb:de:a9:f9:c2:d4:
                    21:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0F:E0:E3:E8:05:AA:EF:46:CD:2B:93:1D:FE:C8:41:42:00:5D:F0
            X509v3 Authority Key Identifier:
                keyid:DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:cf:e2:cf:6c:23:64:21:ef:5f:66:50:12:37:3b:7b:0f:18:
         05:19:02:8e:c6:83:fd:b5:ba:e1:d1:4e:1c:8a:75:1f:58:db:
         26:f4:83:61:db:d2:e2:b8:98:df:96:23:da:6a:e7:d7:30:16:
         39:9e:a7:d2:1b:4e:09:d9:49:04:47:2f:c8:04:43:4c:83:70:
         de:d6:c3:f6:27:9b:d6:14:f8:cf:1f:ad:a8:8a:64:f1:8f:3a:
         2c:cc:9b:22:dd:e0:d9:3c:7d:1f:80:bf:7e:b9:ac:ee:93:df:
         ef:95:bd:08:9c:5d:6b:55:f5:6b:0e:29:e4:86:6d:1b:5b:47:
         9a:9c:5e:5f:10:f1:26:1a:34:71:95:74:cb:7c:68:2d:2b:64:
         6f:1e:61:07:08:6e:67:b6:1c:ad:db:9d:27:5e:c0:ae:13:25:
         4d:e4:78:57:68:fa:33:9c:b8:dd:0d:58:a4:a9:2c:dc:c8:a6:
         71:d8:3b:c7:b7:da:cf:8b:13:97:5f:ac:80:d4:33:b0:17:be:
         b9:b2:bd:68:15:cd:bf:ac:ad:61:d7:aa:ec:0a:23:22:05:cd:
         65:bd:e0:c6:8e:2d:0d:d3:af:6d:bb:ca:89:80:6b:96:6e:48:
         5c:aa:d1:8f:13:ef:41:89:f3:75:91:c9:a0:50:43:94:c2:9d:
         69:e5:4f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:57 2026 by rpki-client