Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft
File:                     DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft (raw, json)
Hash identifier:          lW0WF6IUl/5Fe6QtBiKtTsf+I2iekbNbZitDLt1g92M=
Subject key identifier:   DD:C3:04:1B:F1:A9:A1:7B:68:47:C9:D5:53:94:04:0B:50:9C:FB:31
Authority key identifier: DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A
Certificate issuer:       /CN=DB30CE9B7F8573BFA8C811B88BC979C9B537831A
Certificate serial:       5760A17292B4C4869F05A64FB95E6247F3923D7D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft
Manifest number:          62
Signing time:             Fri 24 Jul 2026 01:52:16 +0000
Manifest this update:     Fri 24 Jul 2026 01:47:16 +0000
Manifest next update:     Sat 25 Jul 2026 05:12:16 +0000
Files and hashes:         1: DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl (hash: 9qEM60W3OkUUo3PAunw9wcHS2UN/rNL5Cy55d1Oj3pc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl
                          rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:60:a1:72:92:b4:c4:86:9f:05:a6:4f:b9:5e:62:47:f3:92:3d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB30CE9B7F8573BFA8C811B88BC979C9B537831A
        Validity
            Not Before: Jul 24 01:47:16 2026 GMT
            Not After : Jul 25 05:12:16 2026 GMT
        Subject: CN=DDC3041BF1A9A17B6847C9D55394040B509CFB31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:43:c7:0c:76:ae:cd:bf:08:e4:59:94:3d:
                    8b:41:17:6a:a2:52:cc:6b:62:2e:dd:3d:90:9d:a6:
                    eb:ce:70:9e:1a:f0:02:4b:86:51:96:0b:3d:59:6d:
                    a3:52:c5:84:d8:f5:9e:93:43:dd:f4:71:a8:c4:ec:
                    7e:7e:86:4c:34:1b:22:cd:ad:4a:65:e5:31:80:50:
                    3b:6b:93:82:1e:05:6c:ab:50:20:f1:cc:5f:87:8a:
                    7b:73:e6:d4:83:a7:06:16:77:97:79:44:54:39:16:
                    2b:67:93:ad:66:31:67:46:05:e9:d0:20:b7:54:8d:
                    af:6f:3c:d0:30:3a:a5:ff:f2:81:be:56:95:54:74:
                    6f:08:cd:fc:fa:fb:17:8e:9a:71:e7:a8:0e:f5:3a:
                    73:c3:dd:a5:db:52:2d:43:65:82:58:a7:9f:c1:c7:
                    c1:7b:36:df:c5:81:1a:13:62:dc:4d:ef:f9:18:a1:
                    e6:e0:6b:95:07:64:f7:b8:f6:76:8c:d6:23:0e:98:
                    a0:c2:b8:86:42:9c:44:33:6c:be:11:2a:13:bc:6d:
                    6b:86:27:8e:17:55:99:54:3d:f8:98:1f:05:90:76:
                    05:43:e4:46:41:3e:bc:d9:17:57:28:cc:8f:0b:be:
                    82:93:e6:b5:66:c1:d3:f1:16:4d:74:29:10:f7:c3:
                    1c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C3:04:1B:F1:A9:A1:7B:68:47:C9:D5:53:94:04:0B:50:9C:FB:31
            X509v3 Authority Key Identifier:
                keyid:DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2d:dd:eb:ad:ac:20:02:89:bc:c1:61:ed:67:c8:6f:79:ef:
         2d:b5:4d:83:af:16:ce:d5:1b:2d:b2:48:95:16:ed:0a:05:c7:
         8c:9b:71:eb:5a:85:34:80:03:d0:6f:ca:c7:a2:9b:9b:e1:5e:
         d2:c1:54:d2:b3:b4:bb:93:9e:fd:b1:4c:72:81:6c:0d:2f:e4:
         56:14:fd:d2:a9:59:88:e5:a8:f1:a6:1b:11:49:63:3a:e9:4c:
         3c:e5:47:ac:2e:cf:f7:7e:5c:0c:ac:ff:03:ca:ad:d5:89:ec:
         ac:da:50:81:f5:dc:e9:b1:9e:7c:18:57:bb:37:42:b0:af:6c:
         f7:c9:e7:d5:49:11:5e:2f:51:3b:5c:8b:f6:8c:f8:35:27:08:
         e6:1d:d5:86:88:8b:b2:48:16:70:e4:1a:33:93:cb:a1:0d:ff:
         c6:d0:6a:11:7f:21:8e:9c:c4:76:bc:d0:34:63:7d:9d:94:3f:
         b0:6b:af:38:d6:ae:78:fe:c3:e9:6a:6c:c4:97:eb:a9:1d:ee:
         56:4f:86:79:73:ec:5d:5a:0a:8c:6f:e3:0a:89:39:11:1c:7c:
         b3:7d:4e:f0:3f:60:cd:36:32:01:25:04:76:73:02:64:04:58:
         77:69:23:cd:9e:a6:4f:c7:ff:f9:0d:48:b3:17:f1:66:70:f2:
         7f:2c:2c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:06:07 2026 by rpki-client