Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
File:                     DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft (raw, json)
Hash identifier:          xEhlOvUB5SZz4R5PGQpBHtSZF1yXW3HbqoK35BwxyUQ=
Subject key identifier:   7F:54:58:43:87:95:D7:13:0B:01:66:D9:2B:AE:4D:B2:F6:03:23:9C
Authority key identifier: DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13
Certificate issuer:       /CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
Certificate serial:       6DBDCDE5BDAE01172E7E327BE900151B311E7A46
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
Manifest number:          B8
Signing time:             Thu 24 Sep 2026 16:35:38 +0000
Manifest this update:     Thu 24 Sep 2026 16:30:38 +0000
Manifest next update:     Fri 25 Sep 2026 19:32:38 +0000
Files and hashes:         1: 3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa (hash: H0K1ntuYrqGyMmjMc0VSqf2iYE6epJACiPRZPRlBzDo=)
                          2: DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl (hash: KybnSSsseq4u0hsmDYZqForstLwCpAkSDhJ4rHptI/g=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 19:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:bd:cd:e5:bd:ae:01:17:2e:7e:32:7b:e9:00:15:1b:31:1e:7a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
        Validity
            Not Before: Sep 24 16:30:38 2026 GMT
            Not After : Sep 25 19:32:38 2026 GMT
        Subject: CN=7F5458438795D7130B0166D92BAE4DB2F603239C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:ae:3f:a3:e0:6e:0d:3d:4e:db:13:39:83:
                    87:88:45:58:1b:bd:1f:0a:6d:23:4d:65:9f:3e:cc:
                    e2:cb:89:30:b2:36:51:e5:f3:d2:32:fa:99:22:d4:
                    99:8a:f6:04:eb:ea:75:ee:93:66:62:36:c2:de:75:
                    5b:15:43:81:79:80:96:66:9e:91:42:d4:93:f4:1d:
                    86:8e:19:c7:02:dd:4a:27:d7:ac:6e:8b:6f:a3:6b:
                    dd:84:53:cd:15:a2:1d:57:04:11:3f:fb:c8:54:91:
                    19:7e:a8:0a:16:2d:9a:2f:a4:4d:85:69:16:7a:68:
                    e7:83:9c:0a:e5:41:2a:b4:22:85:e5:12:d8:bf:fb:
                    fa:a4:c5:1c:9d:23:db:d9:a5:4b:5d:c4:4d:fc:32:
                    0b:14:08:5b:d9:d1:f4:1e:80:71:89:66:ce:09:3b:
                    fe:ad:e2:37:6c:e2:6b:28:96:d7:8b:26:78:1f:4d:
                    5a:f3:b3:d1:65:30:6f:e2:97:9e:b8:0c:52:a9:8e:
                    0e:76:87:3a:a0:c0:98:b6:9f:c1:22:ff:d9:08:30:
                    5b:9f:d0:91:9e:52:b3:20:c6:9c:e7:8a:30:8f:08:
                    2b:d0:7a:ce:46:e0:be:a2:9f:dd:7b:91:86:58:0a:
                    76:ff:b2:72:8a:ec:3b:0d:25:9a:00:af:90:3b:db:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:54:58:43:87:95:D7:13:0B:01:66:D9:2B:AE:4D:B2:F6:03:23:9C
            X509v3 Authority Key Identifier:
                keyid:DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:23:09:54:24:3a:f5:19:7f:f7:e9:ee:65:71:c9:a3:8f:3e:
         71:1a:8d:a5:6f:30:e7:15:b9:14:7c:2e:5b:ea:8b:ce:05:b0:
         95:ff:79:78:d8:b3:ca:5e:67:47:85:e8:66:b8:b1:4d:11:6d:
         a3:88:16:e1:78:99:d0:da:bc:1b:05:50:68:54:aa:be:12:61:
         e4:71:a8:31:c2:a5:a4:d8:3f:2f:6d:62:d7:c4:1a:29:7b:96:
         98:98:75:fe:42:00:9d:0f:1f:da:b2:f4:57:fc:b5:a1:4a:8c:
         71:01:14:84:47:76:f2:02:5b:8b:e6:05:58:08:20:16:62:77:
         fd:58:24:fa:bf:0e:10:8a:99:a6:df:d2:0d:00:3d:cc:af:23:
         26:c2:bc:ef:38:96:b1:21:6c:39:f4:56:75:de:44:45:4e:4e:
         b9:77:e4:3b:b2:79:f8:41:d4:9d:ea:c9:38:37:a3:d9:fc:c8:
         75:23:0f:5e:1d:f0:ea:c9:bf:87:97:3f:98:e5:96:40:f2:7a:
         80:fb:94:5c:ad:30:33:0d:42:70:48:ce:ff:6b:be:c0:c6:62:
         76:85:e1:9e:c6:3c:d3:5e:25:70:e1:39:b1:6e:92:4f:98:75:
         8f:2c:42:13:4d:61:b5:2a:49:e4:b8:ba:b3:bf:ef:ac:3a:fb:
         71:51:16:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:54:07 2026 by rpki-client