Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
File:                     1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft (raw, json)
Hash identifier:          T+vOtrh7kjjp542WEI10Dy8vIux/+ac0QprH0JsmSCI=
Subject key identifier:   66:72:91:7E:32:BA:6D:9F:D3:F7:72:18:D8:12:63:F1:DF:0F:68:61
Authority key identifier: 16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
Certificate issuer:       /CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
Certificate serial:       268C31E0FB65974BD2227ACE5412F50A78B87B4F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
Manifest number:          65
Signing time:             Fri 24 Jul 2026 05:42:39 +0000
Manifest this update:     Fri 24 Jul 2026 05:37:39 +0000
Manifest next update:     Sat 25 Jul 2026 06:45:39 +0000
Files and hashes:         1: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl (hash: 13eUo/e+eMwiagUgZm3V2HWl0aKXuA0tW8mfppMeGjE=)
                          2: 3135312e3135382e38382e302f32332d3234203d3e20313331363332.roa (hash: c6jDK+d+OW0nq16fGHUI84OiS+BXXy5ZOIm0keyUDog=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8c:31:e0:fb:65:97:4b:d2:22:7a:ce:54:12:f5:0a:78:b8:7b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
        Validity
            Not Before: Jul 24 05:37:39 2026 GMT
            Not After : Jul 25 06:45:39 2026 GMT
        Subject: CN=6672917E32BA6D9FD3F77218D81263F1DF0F6861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ff:dd:ac:c5:74:99:3b:ba:85:4b:af:9a:50:
                    cd:d0:37:34:d0:78:ba:08:50:b5:68:b9:b9:d0:7f:
                    c3:f9:fb:90:0f:43:a7:4a:00:85:92:b1:77:c4:86:
                    fb:14:f9:b8:7b:f6:7b:b5:ce:fb:2c:c3:0f:0c:85:
                    5b:7c:74:9f:85:db:78:93:47:a3:e0:c2:2d:a1:2d:
                    8d:a7:d7:0b:14:a5:f7:88:38:cb:22:0d:8e:a0:99:
                    c8:ba:f2:13:b4:b4:66:50:a1:78:16:45:9c:1c:d6:
                    5d:77:56:97:9f:ad:50:bd:33:eb:41:88:2a:37:9e:
                    a6:4b:71:24:94:0c:6a:0e:7b:93:5c:36:82:46:80:
                    15:c8:dd:97:03:fb:3e:40:33:ef:32:1e:7c:7a:c9:
                    5e:06:69:cb:b1:4c:74:34:ee:06:f1:e6:fe:55:88:
                    a4:af:22:f4:c9:e4:41:18:d3:4f:c2:46:e7:2f:7f:
                    f8:56:68:c9:32:d3:32:3b:35:3c:23:fa:7d:f1:cd:
                    ed:8b:d4:2c:33:3e:a9:58:33:73:f1:9f:3e:ec:d5:
                    c9:c0:38:24:2b:49:7c:ec:7a:a9:c9:28:76:cf:b2:
                    d9:5b:bf:de:07:4d:ee:2a:13:02:9b:c3:2e:24:10:
                    f1:8b:c6:cb:7c:1d:ae:d2:58:69:ae:b7:cd:6a:c1:
                    9a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:72:91:7E:32:BA:6D:9F:D3:F7:72:18:D8:12:63:F1:DF:0F:68:61
            X509v3 Authority Key Identifier:
                keyid:16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:62:97:3e:ac:b9:4f:eb:c7:a3:b8:95:93:6b:07:66:97:8c:
         5a:4c:3a:f6:db:8b:f9:27:8f:52:bc:32:ef:54:c4:2a:99:ff:
         f9:ba:b1:cf:d5:8f:54:14:e6:1a:48:aa:af:39:65:ab:26:6f:
         ce:65:cc:93:ac:bd:bf:a9:ad:f5:a9:1d:56:78:6c:c1:5a:77:
         24:4a:4b:2e:4e:b1:40:66:7b:9f:8b:2a:63:5d:e0:fb:19:e1:
         3d:d7:5e:1c:d6:ed:6f:ba:10:13:1c:6b:43:ee:94:3a:3b:af:
         09:6b:8f:3b:a3:da:7e:cd:5c:50:57:d2:6f:0b:55:8a:3d:c7:
         97:a3:78:d9:a9:7b:1f:1b:b9:49:ee:90:d5:d1:dd:03:e4:fb:
         31:40:3b:d4:37:6b:38:54:3e:3f:16:3a:e4:b1:db:27:ac:13:
         95:cc:c5:d6:06:d4:2e:1c:4f:1b:3f:78:e0:f3:61:4b:b2:75:
         67:89:6a:cb:5f:d9:d8:5a:a3:1d:1c:64:05:3e:eb:11:13:d2:
         41:96:6b:95:57:60:8d:51:55:5d:7a:2f:5b:bc:48:47:ca:42:
         7f:cd:c6:75:ff:a6:9b:b5:e4:0b:d6:c3:8c:1e:7f:e4:bb:1d:
         ba:1c:f9:1f:ca:9a:7a:66:96:d3:49:16:2c:61:ca:ab:cd:03:
         8f:56:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:09 2026 by rpki-client