Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
File:                     1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft (raw, json)
Hash identifier:          gTDecqPKW3UlePQbD5hllv1PvvHBetThPcaP1i9+0yU=
Subject key identifier:   83:52:70:C3:A5:3B:2F:BF:52:A6:8B:53:F7:7F:17:E4:83:1C:2E:3E
Authority key identifier: 16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
Certificate issuer:       /CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
Certificate serial:       73273BD052B72498EC08F2C8A601F9D342D2AE06
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
Manifest number:          B9
Signing time:             Thu 24 Sep 2026 18:08:33 +0000
Manifest this update:     Thu 24 Sep 2026 18:03:33 +0000
Manifest next update:     Fri 25 Sep 2026 18:12:33 +0000
Files and hashes:         1: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl (hash: 2/2B3iO2YyzF/k+/qhx3cbsknTGxmmhYiveq5enky08=)
                          2: 3135312e3135382e38382e302f32332d3234203d3e20313331363332.roa (hash: c6jDK+d+OW0nq16fGHUI84OiS+BXXy5ZOIm0keyUDog=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 18:12:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:27:3b:d0:52:b7:24:98:ec:08:f2:c8:a6:01:f9:d3:42:d2:ae:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
        Validity
            Not Before: Sep 24 18:03:33 2026 GMT
            Not After : Sep 25 18:12:33 2026 GMT
        Subject: CN=835270C3A53B2FBF52A68B53F77F17E4831C2E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:80:2d:1f:80:6a:1f:fc:15:78:dc:1a:1d:6d:
                    c7:ef:a4:18:31:52:fd:8b:94:ec:d2:4d:7f:1e:e5:
                    6f:84:7f:eb:30:52:5b:73:14:b7:b7:cc:ca:0a:6d:
                    06:d3:68:66:33:8b:f0:fe:72:e1:71:1a:2f:e4:f7:
                    c9:3b:09:32:ba:84:5f:6d:b5:5c:8e:dc:85:f5:cc:
                    65:4a:9b:7d:d3:1b:36:0a:0b:5a:be:4b:72:cd:c9:
                    e0:7b:6d:1e:be:f7:3f:4d:c5:a3:5d:fa:5f:a3:3d:
                    b6:1b:a6:67:b5:27:40:fe:9a:97:c0:29:60:22:a2:
                    e6:d7:dc:a9:5f:85:ab:3f:de:c7:14:27:bc:87:17:
                    26:ce:57:99:53:ae:e7:2f:ea:62:c7:47:3f:f6:91:
                    1f:34:2a:c3:ac:38:24:b3:bf:75:99:ca:f0:ea:fd:
                    c0:7a:87:56:1c:c1:c4:a7:98:bb:55:43:64:48:41:
                    62:67:71:be:a3:a3:3c:fd:cd:5e:26:7b:5f:89:49:
                    e0:f1:ad:6a:0a:ed:06:45:c8:8e:d2:6f:97:0f:dd:
                    67:05:8c:39:d3:e7:f4:85:63:9d:dd:f6:b0:f8:1a:
                    c4:0d:83:84:00:9a:05:9c:bc:72:ec:1e:f2:f7:8d:
                    93:52:a5:1d:a8:b8:8f:0b:a7:9f:b2:b2:e5:f4:35:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:52:70:C3:A5:3B:2F:BF:52:A6:8B:53:F7:7F:17:E4:83:1C:2E:3E
            X509v3 Authority Key Identifier:
                keyid:16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:fb:dd:f6:94:a3:5b:66:51:87:07:54:87:56:a0:87:bd:
         1d:63:e8:8a:e9:3a:5e:9a:16:7f:33:11:ab:15:6f:4a:3b:f1:
         1e:86:04:32:3f:a1:45:6b:6f:cf:da:6c:17:a2:f2:c3:00:c0:
         af:b2:7d:21:7e:d3:1c:92:95:ae:2f:be:c5:3c:5d:fd:aa:4e:
         f3:9d:77:9d:f5:be:51:a5:a2:90:5b:bf:4f:27:23:f6:b7:69:
         29:32:47:4f:a4:89:fd:d2:aa:fa:4b:ab:4b:d3:c8:d2:8b:ed:
         6a:2d:c6:53:e9:1e:28:01:99:2d:ad:10:2b:8d:eb:87:00:8c:
         35:ea:35:82:60:8e:ca:c1:b2:70:a7:5c:1a:22:e2:ab:47:93:
         b8:68:17:cd:a5:e6:c9:fd:61:4d:96:79:03:85:3f:33:8c:64:
         70:6a:33:a8:db:b0:67:03:01:4d:69:51:aa:6f:f0:61:19:6e:
         ae:f0:7a:1d:76:f5:20:e0:31:dc:15:17:c1:16:a6:5a:2a:07:
         c8:ab:f5:8b:e9:fd:01:72:3a:ca:37:a0:86:b4:31:dc:25:9e:
         f8:dd:0d:72:c4:bc:89:39:45:09:30:2a:24:43:08:3f:ca:3e:
         e3:4d:87:f7:69:27:b3:26:56:09:82:33:ed:55:c3:05:7d:ca:
         e1:be:09:bd
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUcyc70FK3JJjsCPLIpgH500LSrgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYyOUFBNjRGQzkyMTc4MDNGQTJGQ0EzQzVBOEU1QTM1
OEI5MDg5QjAeFw0yNjA5MjQxODAzMzNaFw0yNjA5MjUxODEyMzNaMDMxMTAvBgNV
BAMTKDgzNTI3MEMzQTUzQjJGQkY1MkE2OEI1M0Y3N0YxN0U0ODMxQzJFM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgC0fgGof/BV43BodbcfvpBgx
Uv2LlOzSTX8e5W+Ef+swUltzFLe3zMoKbQbTaGYzi/D+cuFxGi/k98k7CTK6hF9t
tVyO3IX1zGVKm33TGzYKC1q+S3LNyeB7bR6+9z9NxaNd+l+jPbYbpme1J0D+mpfA
KWAioubX3Klfhas/3scUJ7yHFybOV5lTrucv6mLHRz/2kR80KsOsOCSzv3WZyvDq
/cB6h1YcwcSnmLtVQ2RIQWJncb6jozz9zV4me1+JSeDxrWoK7QZFyI7Sb5cP3WcF
jDnT5/SFY53d9rD4GsQNg4QAmgWcvHLsHvL3jZNSpR2ouI8Lp5+ysuX0NfZRAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUg1Jww6U7L79SpotT938X5IMcLj4wHwYDVR0j
BBgwFoAUFimqZPySF4A/ovyjxajlo1i5CJswDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR01JQ0xP
VURfUC8xLzE2MjlBQTY0RkM5MjE3ODAzRkEyRkNBM0M1QThFNUEzNThCOTA4OUIu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzMvMTYyOUFBNjRGQzkyMTc4MDNGQTJGQ0Ez
QzVBOEU1QTM1OEI5MDg5Qi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dNSUNMT1VEX1AvMS8xNjI5
QUE2NEZDOTIxNzgwM0ZBMkZDQTNDNUE4RTVBMzU4QjkwODlCLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
MvT73faUo1tmUYcHVIdWoIe9HWPoiuk6XpoWfzMRqxVvSjvxHoYEMj+hRWtvz9ps
F6LywwDAr7J9IX7THJKVri++xTxd/apO8513nfW+UaWikFu/Tycj9rdpKTJHT6SJ
/dKq+kurS9PI0ovtai3GU+keKAGZLa0QK43rhwCMNeo1gmCOysGycKdcGiLiq0eT
uGgXzaXmyf1hTZZ5A4U/M4xkcGozqNuwZwMBTWlRqm/wYRlurvB6HXb1IOAx3BUX
wRamWioHyKv1i+n9AXI6yjeghrQx3CWe+N0NcsS8iTlFCTAqJEMIP8o+402H92kn
syZWCYIz7VXDBX3K4b4JvQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:46:40 2026 by rpki-client