Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
File:                     DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft (raw, json)
Hash identifier:          HA0PgNlGcTuiwtEc9q+Wej6sazwxl+KRmmo0ELHyKWE=
Subject key identifier:   4B:6D:9D:DC:59:3D:27:61:6F:53:64:4D:CA:B6:7F:E0:5E:3D:88:BD
Authority key identifier: DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13
Certificate issuer:       /CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
Certificate serial:       744DAFE79F0D5FCCF647DE6B835A0416C3340FCD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
Manifest number:          FC
Signing time:             Sat 14 Nov 2026 07:30:49 +0000
Manifest this update:     Sat 14 Nov 2026 07:25:49 +0000
Manifest next update:     Sun 15 Nov 2026 09:56:49 +0000
Files and hashes:         1: DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl (hash: EPCHHHyi9Rt/fUizTgHCPKbQIydvr9yYl8ZsCzWXRbE=)
                          2: 3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa (hash: H0K1ntuYrqGyMmjMc0VSqf2iYE6epJACiPRZPRlBzDo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 09:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4d:af:e7:9f:0d:5f:cc:f6:47:de:6b:83:5a:04:16:c3:34:0f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
        Validity
            Not Before: Nov 14 07:25:49 2026 GMT
            Not After : Nov 15 09:56:49 2026 GMT
        Subject: CN=4B6D9DDC593D27616F53644DCAB67FE05E3D88BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f2:60:be:3c:0b:c0:33:ff:00:41:4f:3e:ab:
                    da:b0:0f:f5:9b:1c:1a:23:18:a7:01:72:f2:e7:f1:
                    72:98:49:b0:00:dd:85:eb:d2:33:2a:86:c1:9d:42:
                    76:d1:47:d5:93:98:e1:89:89:1c:d9:79:34:61:9b:
                    82:d8:fc:92:0d:ec:e7:e0:a4:0d:20:88:84:6a:ec:
                    16:d8:0e:18:67:11:9d:2e:ec:02:68:d4:56:34:d1:
                    20:0d:ca:d3:ac:63:4d:d7:da:dc:d5:c7:ea:94:87:
                    06:67:cf:aa:88:6d:e1:97:44:69:56:b0:1e:41:5d:
                    e4:e4:05:62:85:e9:72:1d:9f:37:1b:38:05:c4:01:
                    9c:51:2a:0e:42:59:d6:9d:ac:61:1f:04:7e:d6:ee:
                    26:d2:c1:e6:83:14:cf:8c:b6:e6:fe:38:a0:e6:2d:
                    ab:e7:22:fb:dc:14:de:bf:09:60:cd:04:28:99:a3:
                    2c:eb:31:05:ef:d7:46:4b:85:63:85:50:7b:71:87:
                    76:a8:08:3f:af:1b:af:aa:17:e7:9e:44:fb:39:86:
                    84:78:79:2e:c8:1b:72:fd:e1:21:da:64:e4:83:ec:
                    bd:fc:52:b0:6d:02:0e:2e:d5:8d:fc:c1:82:fa:78:
                    68:08:5b:91:ff:bd:1b:b4:46:48:7d:dd:ea:75:d8:
                    57:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6D:9D:DC:59:3D:27:61:6F:53:64:4D:CA:B6:7F:E0:5E:3D:88:BD
            X509v3 Authority Key Identifier:
                keyid:DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:34:87:ea:70:f9:73:22:65:b9:86:a9:94:30:c2:2a:eb:98:
         2f:f0:46:38:72:5a:14:49:4b:98:1e:ee:74:ea:db:5f:0c:72:
         c5:6b:98:f9:c2:64:e8:54:ea:11:b4:ee:ca:58:9a:c0:e1:47:
         ec:0e:cf:a2:26:bd:50:dc:10:23:78:b6:0d:9c:c2:ac:cf:dd:
         3e:8a:f0:8a:d0:60:e9:57:4d:4f:96:42:9f:30:f4:66:b1:00:
         bb:67:81:6c:7e:72:33:dc:ed:c2:66:12:18:b5:ca:64:36:7b:
         55:26:92:d2:87:d9:31:ea:62:60:ab:eb:9f:27:b8:3e:d2:e2:
         73:9f:2f:90:ff:30:81:57:9d:af:6c:74:6c:c7:bb:03:d9:99:
         8a:a5:7b:20:94:24:7d:87:86:63:2d:53:a9:34:57:4f:d9:5a:
         6e:c7:d6:7b:0e:4b:a7:67:86:7a:30:4b:f2:02:94:61:d9:8a:
         a5:1a:42:44:8e:32:cf:5d:ba:a5:d9:09:c6:00:35:2c:fc:89:
         e4:79:d3:28:29:ac:63:e2:1a:c5:70:41:13:69:55:a4:66:bb:
         1e:3f:27:d9:99:6d:73:12:03:cd:a0:96:21:ef:c8:25:93:1e:
         48:0e:18:30:5f:be:e3:dc:ad:0d:2e:ec:44:72:f2:2f:07:56:
         4f:9a:24:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:52:34 2026 by rpki-client