Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
File:                     jCH-vEkP9giqCpuTTqr2g05UUms.mft (raw, json)
Hash identifier:          gtFJWZoNyHlJ5jEi3zMq/U2UIO3y0UPuU85l01Qg3/A=
Subject key identifier:   6C:40:07:38:AD:52:C4:5C:95:3F:10:B8:25:79:EC:42:E9:74:F5:3B
Authority key identifier: 8C:21:FE:BC:49:0F:F6:08:AA:0A:9B:93:4E:AA:F6:83:4E:54:52:6B
Certificate issuer:       /CN=8C21FEBC490FF608AA0A9B934EAAF6834E54526B
Certificate serial:       01AF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
Manifest number:          01AF
Signing time:             Thu 26 Mar 2026 22:58:47 +0000
Manifest this update:     Thu 26 Mar 2026 22:58:47 +0000
Manifest next update:     Fri 27 Mar 2026 04:58:47 +0000
Files and hashes:         1: jCH-vEkP9giqCpuTTqr2g05UUms.crl (hash: lzOu3MNDozn0gvF6dKF7M1ydCuRkanYH9Ais7G3vAAs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 03:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C21FEBC490FF608AA0A9B934EAAF6834E54526B
        Validity
            Not Before: Mar 26 22:58:47 2026 GMT
            Not After : Nov 12 15:30:20 2026 GMT
        Subject: CN=6C400738AD52C45C953F10B82579EC42E974F53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:72:df:cc:fb:5b:90:95:4d:0e:e0:34:a0:
                    7b:8a:90:fc:fd:92:56:6f:13:85:b6:ce:9f:ef:ee:
                    9d:77:7a:45:15:c6:5f:9f:8d:5c:40:93:20:20:0a:
                    75:ad:b1:f0:f3:45:6e:a2:60:c5:12:31:2c:15:49:
                    5c:4e:23:f1:51:71:a0:6c:b1:46:e6:ba:c4:e1:b5:
                    cc:7d:7d:36:e6:9f:1f:bf:93:72:94:80:db:de:8c:
                    72:81:c7:a5:7d:64:32:20:f8:61:87:2d:27:b8:1f:
                    3e:e4:10:6a:bc:37:0c:87:cb:20:0c:10:84:e1:fa:
                    cd:8c:dc:6e:97:6d:d5:cf:ae:42:21:7d:b2:03:ee:
                    00:07:b8:bb:f2:a2:27:95:a1:2b:be:44:f4:b9:93:
                    7a:ec:52:84:a6:ee:f9:75:cf:2f:0d:ff:d7:84:55:
                    70:80:29:69:49:2e:bd:09:2c:11:d1:b4:2e:55:1a:
                    fc:db:07:5d:49:a2:42:61:b8:2d:27:59:78:e5:3c:
                    51:57:98:12:7d:5e:af:e3:33:03:fe:c5:9b:3c:b0:
                    2c:1b:98:3d:75:a2:52:f7:b7:62:75:ec:09:39:78:
                    52:13:47:bc:1e:18:cd:c3:71:86:69:0d:bf:68:f4:
                    1c:c4:b9:86:0b:a1:0c:96:1d:fa:b7:eb:99:a6:a4:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:40:07:38:AD:52:C4:5C:95:3F:10:B8:25:79:EC:42:E9:74:F5:3B
            X509v3 Authority Key Identifier:
                keyid:8C:21:FE:BC:49:0F:F6:08:AA:0A:9B:93:4E:AA:F6:83:4E:54:52:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:61:c7:5f:0b:f7:5a:9c:b2:8d:7e:46:d9:09:fe:4b:94:36:
         40:b9:2c:45:a3:65:49:6f:ca:95:d1:75:a9:d5:ed:27:58:ab:
         69:8b:68:b4:ca:75:1b:d2:a9:b3:66:5b:29:16:18:4d:dc:bb:
         8e:db:03:69:6a:5f:7e:6c:21:03:28:6a:c9:c9:d6:dd:5d:32:
         02:8d:b0:24:32:28:92:94:da:f5:4f:9e:c8:58:a7:26:5b:1f:
         3c:91:70:50:9c:a0:72:91:66:8e:4c:83:91:c4:df:a9:06:e5:
         f3:f8:46:53:88:51:7a:de:72:51:4f:a7:c7:ae:22:a1:90:e4:
         81:5c:e5:b5:96:ca:a3:06:52:88:71:7f:f6:00:58:73:78:7b:
         95:52:17:ac:16:2b:61:3f:47:26:bc:80:13:08:86:d1:0e:b6:
         c2:6e:4e:f8:5e:e8:54:25:5a:23:71:77:35:17:96:4a:c8:2c:
         67:ec:f0:4a:b5:40:f1:10:f3:9d:fd:7e:9a:eb:16:0c:db:15:
         ea:7a:47:fb:98:b7:b9:6a:a9:0a:36:86:1d:0b:9d:19:c4:d3:
         91:51:6a:98:28:ec:83:34:25:aa:b8:e0:fb:9a:66:38:4d:5f:
         28:06:68:86:44:31:ec:da:4f:21:37:2c:e5:30:16:28:34:ad:
         13:43:9a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:53:48 2026 by rpki-client