Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
File:                     DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft (raw, json)
Hash identifier:          TNgDlIyWWPX1JAF/P7XZPm+uBrOP7yYGcy3mjPyeyjw=
Subject key identifier:   46:75:71:01:DA:FF:17:76:E7:28:A9:1E:1D:3A:33:D7:9D:63:2E:E8
Authority key identifier: DB:24:67:FD:0A:91:4F:9A:79:D3:36:63:7A:AB:8F:1A:EF:AD:AA:BD
Certificate issuer:       /CN=DB2467FD0A914F9A79D336637AAB8F1AEFADAABD
Certificate serial:       328F2218CF8D457898760CBFDEABEA8A6AC0848B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
Manifest number:          64
Signing time:             Fri 24 Jul 2026 05:12:37 +0000
Manifest this update:     Fri 24 Jul 2026 05:07:37 +0000
Manifest next update:     Sat 25 Jul 2026 07:09:37 +0000
Files and hashes:         1: DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl (hash: HalM5XE6VyADoq/WM7v/4H3TR5xQWnJtpBmAF26lpCs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl
                          rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8f:22:18:cf:8d:45:78:98:76:0c:bf:de:ab:ea:8a:6a:c0:84:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB2467FD0A914F9A79D336637AAB8F1AEFADAABD
        Validity
            Not Before: Jul 24 05:07:37 2026 GMT
            Not After : Jul 25 07:09:37 2026 GMT
        Subject: CN=46757101DAFF1776E728A91E1D3A33D79D632EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:35:c2:df:97:27:60:a6:1b:50:e4:5c:f5:4f:
                    81:bb:4a:a5:f3:8b:6d:b8:6c:25:3c:e8:b1:60:2d:
                    88:02:c2:69:89:73:9a:b7:5a:9e:a4:95:91:8e:ed:
                    6f:e6:64:8e:6d:00:1f:2f:f4:9a:7b:c3:d9:f9:7f:
                    79:9c:d3:38:5c:df:c2:cf:3d:80:71:15:95:de:2f:
                    1f:91:e3:47:39:6f:7c:f5:16:81:7b:95:b5:92:07:
                    cb:b6:1d:42:f0:95:f5:b4:95:51:b9:70:3a:dd:5c:
                    7a:8b:06:99:0c:80:bc:c2:80:ea:26:95:89:bf:ef:
                    83:34:27:81:f7:ff:1a:18:d5:fb:28:26:a9:bb:b8:
                    20:16:21:fd:33:a8:ba:3e:52:0d:2f:11:e6:6b:9d:
                    cd:b7:34:e5:ee:54:28:4f:88:1b:db:f1:7f:15:06:
                    50:e4:55:05:0d:fd:99:76:ec:74:ff:ba:c4:0c:0d:
                    07:92:17:dc:c4:50:76:1d:03:c1:24:fc:23:72:43:
                    6b:ff:a1:66:98:e9:aa:66:03:fd:36:2f:99:80:e5:
                    8d:76:dc:c2:30:8c:12:38:60:ef:70:d5:0a:c0:dc:
                    df:4d:80:99:21:00:9f:24:1d:0f:29:29:99:e1:a5:
                    fb:af:a6:12:da:9a:f8:99:cf:aa:70:bf:ac:05:5b:
                    93:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:75:71:01:DA:FF:17:76:E7:28:A9:1E:1D:3A:33:D7:9D:63:2E:E8
            X509v3 Authority Key Identifier:
                keyid:DB:24:67:FD:0A:91:4F:9A:79:D3:36:63:7A:AB:8F:1A:EF:AD:AA:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:cf:56:69:2e:c5:a2:bf:52:bd:1a:a5:d1:d4:23:3a:d6:b2:
         10:b7:12:cc:78:65:b5:8c:b3:11:48:9c:09:d7:a5:88:67:b2:
         78:ab:24:a5:7e:30:95:b6:92:75:93:79:fb:e0:5d:d4:f5:c1:
         68:2d:8d:14:c5:82:c0:19:e6:22:ce:40:e0:6f:d7:6e:3b:7b:
         96:4f:ee:98:e4:d4:e9:56:f9:c1:84:9d:d4:00:56:39:04:92:
         71:c6:16:6d:1e:93:cb:22:79:4b:55:c1:9d:96:9c:f2:58:3c:
         0f:2a:0c:e0:00:d6:64:8e:17:9d:fc:d8:6d:91:43:4a:aa:2e:
         0c:8c:ce:3d:4b:c8:21:24:21:85:b5:02:f5:8d:f7:ce:6e:b9:
         8e:3e:a0:1d:de:c2:43:3d:3d:c3:62:53:83:ab:5b:0f:fb:52:
         eb:81:3e:0a:3a:e1:56:56:49:72:48:47:b1:70:54:c2:9e:31:
         97:f0:e2:b7:9b:a3:f9:03:0d:7c:99:4b:48:10:6f:d6:b2:bb:
         b4:a1:3f:28:67:a5:e8:0f:2d:39:b4:d8:ee:03:c4:75:31:aa:
         62:2e:68:90:33:77:86:a0:20:aa:4d:37:8d:8e:94:ad:83:95:
         cc:cd:8a:3e:71:f6:c0:5e:c0:fe:f0:f9:28:ce:7d:7d:72:04:
         f2:2a:53:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:23:21 2026 by rpki-client