Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
File:                     D1EE894ECDA357FF3B846E2660D95F0535127E79.mft (raw, json)
Hash identifier:          miGFQu2oSWYS3qxiNW/p1EHtzfT0BBzMnwmkJRhVJO0=
Subject key identifier:   92:F7:E9:F7:2E:CA:D4:33:17:1D:12:EE:BA:2B:72:45:4C:E8:33:31
Authority key identifier: D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79
Certificate issuer:       /CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
Certificate serial:       25CBABB7A6CB322D0931678DA39BA8038C99F6C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
Manifest number:          B8
Signing time:             Fri 25 Sep 2026 14:48:25 +0000
Manifest this update:     Fri 25 Sep 2026 14:43:25 +0000
Manifest next update:     Sat 26 Sep 2026 18:21:25 +0000
Files and hashes:         1: D1EE894ECDA357FF3B846E2660D95F0535127E79.crl (hash: 316pCbS1iqA8EO8rBewc6gggLakIK4ldoFMFY1Vs4Kk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl
                          rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cb:ab:b7:a6:cb:32:2d:09:31:67:8d:a3:9b:a8:03:8c:99:f6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
        Validity
            Not Before: Sep 25 14:43:25 2026 GMT
            Not After : Sep 26 18:21:25 2026 GMT
        Subject: CN=92F7E9F72ECAD433171D12EEBA2B72454CE83331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:e4:60:03:5a:47:cc:cd:8b:95:fe:94:51:
                    8e:e5:ac:67:db:45:ee:ee:1b:06:be:d6:6e:c2:51:
                    f7:d9:1c:28:99:7c:f5:6a:f5:3c:30:1e:aa:56:1c:
                    90:75:73:cd:8d:a6:e7:6b:ce:f8:ee:c9:2c:16:f7:
                    91:ef:c0:43:e1:e9:c3:e1:65:7f:80:df:55:fd:07:
                    5e:47:b9:10:2b:c8:24:b4:44:ba:1c:81:b3:2d:d7:
                    2e:a6:b3:49:80:53:b3:05:3f:d9:70:e8:9c:36:a8:
                    37:52:ef:ad:bd:2b:bb:79:68:49:04:74:b9:f3:24:
                    67:77:34:c8:40:87:f1:ba:3d:12:03:06:ca:bc:53:
                    fb:ce:c8:cd:7e:85:30:b6:15:91:91:1a:cd:2e:e8:
                    ed:60:f0:7a:fe:f7:a2:80:a0:83:8b:ee:18:7f:57:
                    2d:bd:7d:ad:bc:cc:d3:da:de:bf:86:fa:e0:07:e5:
                    c0:be:e0:af:84:ac:27:5e:c3:2d:b7:14:27:f0:18:
                    7e:be:19:f4:67:37:a9:f0:6a:a0:4b:2b:2c:c0:f8:
                    d4:a5:61:bd:51:81:c1:0e:a7:97:58:8b:79:7a:fe:
                    61:0d:f6:e8:f4:6e:6d:ae:57:6f:9a:de:a6:1b:2e:
                    ad:f8:34:b5:e5:89:a0:92:c6:d2:59:b4:db:1d:76:
                    37:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F7:E9:F7:2E:CA:D4:33:17:1D:12:EE:BA:2B:72:45:4C:E8:33:31
            X509v3 Authority Key Identifier:
                keyid:D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:77:4f:a5:d5:8d:30:af:1c:d7:12:a8:d0:15:39:8b:62:71:
         a5:54:ce:88:66:f0:d9:27:f1:60:ce:42:b5:96:c2:da:fe:c2:
         c3:c3:d2:5a:12:d1:84:b8:3c:41:e8:ba:ca:62:3f:f2:ca:49:
         6a:75:b8:5d:fd:cf:a7:32:c7:1c:ec:49:3b:a7:34:f4:a2:1b:
         11:f6:c2:64:58:79:5d:0e:ad:37:45:c7:da:f3:3b:62:fb:1b:
         da:62:7c:b4:16:09:70:ca:5b:b1:78:cf:84:f1:07:8f:47:44:
         62:01:6c:da:a7:de:60:cb:b2:1d:2a:d3:bb:ba:d3:34:b9:c5:
         eb:5f:4b:28:64:e2:ae:88:be:9d:ee:ac:1e:c2:98:ca:96:41:
         34:ff:86:8d:dc:ec:59:9b:c9:86:bc:9f:b9:93:de:89:77:49:
         9a:ef:d7:20:b9:71:f8:0c:d9:f7:af:8a:6d:a7:fc:39:48:ed:
         6a:a2:49:08:cb:08:10:58:fd:35:d5:c4:09:96:34:34:45:70:
         a4:2b:4a:de:56:ae:76:b1:53:ef:2d:ea:52:2f:0c:fa:a2:56:
         2b:ec:fa:6b:88:aa:d6:b4:26:e7:27:0c:c1:cd:2f:a7:b1:0d:
         ce:95:91:4f:45:72:4f:ef:fa:bf:7a:19:0d:c7:b3:36:20:71:
         46:4a:fe:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:47 2026 by rpki-client