Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.mft
File:                     2ACE8EBB5D802619255E989E55D535E4E07C90CB.mft (raw, json)
Hash identifier:          D3prxaHTTgAztp4BMcDo8yUxvMEuluT6DZ9MJr0QTJ8=
Subject key identifier:   88:78:01:A3:CE:54:BB:3C:C3:05:D9:52:22:0D:40:F5:CC:A3:15:90
Authority key identifier: 2A:CE:8E:BB:5D:80:26:19:25:5E:98:9E:55:D5:35:E4:E0:7C:90:CB
Certificate issuer:       /CN=2ACE8EBB5D802619255E989E55D535E4E07C90CB
Certificate serial:       068BA56A402D77111FDD8EB5FF82D640068A7C80
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2ACE8EBB5D802619255E989E55D535E4E07C90CB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.mft
Manifest number:          66
Signing time:             Fri 24 Jul 2026 10:38:13 +0000
Manifest this update:     Fri 24 Jul 2026 10:33:13 +0000
Manifest next update:     Sat 25 Jul 2026 12:38:13 +0000
Files and hashes:         1: 2ACE8EBB5D802619255E989E55D535E4E07C90CB.crl (hash: Rfxqbe62DGC9OXRYG5kemdF8Dfy1mUwidjNoE9RkKTA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.crl
                          rsync://rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2ACE8EBB5D802619255E989E55D535E4E07C90CB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8b:a5:6a:40:2d:77:11:1f:dd:8e:b5:ff:82:d6:40:06:8a:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACE8EBB5D802619255E989E55D535E4E07C90CB
        Validity
            Not Before: Jul 24 10:33:13 2026 GMT
            Not After : Jul 25 12:38:13 2026 GMT
        Subject: CN=887801A3CE54BB3CC305D952220D40F5CCA31590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:03:34:67:d0:93:92:03:1c:55:4a:e1:47:ba:
                    2a:7e:4d:d7:c8:1a:e5:8f:3b:71:19:56:40:99:a5:
                    71:02:ae:b2:44:04:95:3c:76:4a:2e:1a:33:b1:77:
                    a5:34:22:1c:86:6b:4b:cd:5d:b8:81:46:63:44:9f:
                    82:19:bb:b5:df:4a:04:00:36:ad:b4:cc:7b:33:d1:
                    ce:43:cb:8c:20:90:69:bb:ee:36:f3:f2:37:aa:80:
                    2c:e4:ef:03:46:17:61:6e:3f:cd:fb:83:b9:f7:d1:
                    cb:51:88:b8:f9:29:36:61:ae:58:77:ba:3a:f9:2a:
                    92:73:45:2e:ec:9f:c1:c9:be:a6:eb:6a:10:f9:75:
                    67:e4:90:5e:3a:a6:3a:4d:9a:df:08:1d:dc:f7:f2:
                    fd:ad:d9:bf:27:ec:35:bc:5c:c4:78:9b:09:78:dd:
                    92:c3:06:3a:e1:a0:c2:c9:84:aa:b3:94:31:8c:be:
                    3d:63:a1:30:59:98:d7:03:2d:e9:8e:65:8f:e5:12:
                    c0:9a:d0:2a:08:a3:16:3e:76:fb:a1:da:e5:25:f8:
                    20:5d:d6:c9:23:3e:62:63:06:85:c4:31:e5:10:08:
                    4a:46:71:42:25:9d:22:92:7e:61:65:db:bc:02:84:
                    1b:be:21:da:7a:0f:7f:a7:1b:93:a9:45:7f:91:15:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:78:01:A3:CE:54:BB:3C:C3:05:D9:52:22:0D:40:F5:CC:A3:15:90
            X509v3 Authority Key Identifier:
                keyid:2A:CE:8E:BB:5D:80:26:19:25:5E:98:9E:55:D5:35:E4:E0:7C:90:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2ACE8EBB5D802619255E989E55D535E4E07C90CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5b:c9:a3:d2:33:3c:5e:16:4a:fd:e2:0c:12:dc:67:52:14:
         37:74:cd:4c:60:02:9e:44:25:7a:d4:ec:6f:a9:51:4f:d6:b8:
         37:e4:e4:eb:d8:7e:0e:c4:72:54:d8:93:f5:01:84:e2:90:74:
         91:e9:f5:6e:a6:5d:97:58:9f:93:7b:e6:ad:5c:c1:78:99:d2:
         79:82:c5:dd:a5:18:05:b7:66:88:d2:c7:2d:dd:88:a6:60:db:
         33:86:56:d3:2e:49:6a:16:5e:a5:e5:1b:88:2b:9a:0f:ff:ad:
         c8:44:11:5f:bb:72:7c:02:9c:51:0f:1c:d8:0a:f6:3f:07:77:
         6b:aa:ab:a1:ed:9c:1f:71:b4:30:ea:c7:c4:6f:69:81:55:db:
         63:e3:4e:5e:22:9d:d9:93:04:d3:f1:e5:1f:08:43:cf:fc:b5:
         d9:86:b8:31:7b:1d:32:33:47:60:2a:36:07:09:5b:8b:20:06:
         1e:37:aa:5c:57:27:b2:e0:6b:b1:f7:0d:45:90:11:23:cf:de:
         96:d3:73:2e:1b:53:f8:bd:62:6c:c5:75:26:27:d1:1e:81:06:
         a3:a7:52:92:5a:e4:3c:c0:85:39:92:bb:fa:70:c9:33:e2:85:
         f3:74:9c:91:3d:cc:92:73:17:33:d6:c4:0a:55:0e:06:48:55:
         4a:cc:62:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:58:41 2026 by rpki-client