Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft
File:                     aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft (raw, json)
Hash identifier:          Uzg6vhMfdmP5IXHzCZ2DfDbKzInMw803U3ZVm+E9edU=
Subject key identifier:   8D:21:A4:B3:97:4B:0B:F7:AA:F6:C9:D1:3A:27:BC:B2:94:95:C0:67
Authority key identifier: 68:33:02:DF:6A:59:20:E2:F8:3A:C4:EF:76:65:6D:DC:E8:40:F5:93
Certificate issuer:       /CN=683302DF6A5920E2F83AC4EF76656DDCE840F593
Certificate serial:       012C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/aDMC32pZIOL4OsTvdmVt3OhA9ZM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft
Manifest number:          012C
Signing time:             Thu 26 Mar 2026 17:58:18 +0000
Manifest this update:     Thu 26 Mar 2026 17:58:18 +0000
Manifest next update:     Thu 26 Mar 2026 23:58:18 +0000
Files and hashes:         1: aDMC32pZIOL4OsTvdmVt3OhA9ZM.crl (hash: ULEH6p7qj2gtUwY9c4Kbe4XVPnVnZ2zFDEakHrWnJz4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/aDMC32pZIOL4OsTvdmVt3OhA9ZM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 23:58:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=683302DF6A5920E2F83AC4EF76656DDCE840F593
        Validity
            Not Before: Mar 26 17:58:18 2026 GMT
            Not After : Jan 27 15:30:18 2027 GMT
        Subject: CN=8D21A4B3974B0BF7AAF6C9D13A27BCB29495C067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dc:64:98:41:09:03:a8:00:65:a2:f4:14:34:
                    a5:84:77:90:52:53:7a:0f:11:9d:79:01:da:67:f3:
                    d7:9e:45:8b:00:cf:1a:b5:38:11:e9:11:2d:c2:6e:
                    32:18:ee:b1:76:06:b1:50:e2:86:bd:fc:69:f9:b5:
                    46:42:e2:1e:0b:cb:1e:6a:97:96:1a:75:ff:80:99:
                    cd:f4:13:c4:b4:f9:d1:a6:2d:26:89:c9:76:f2:25:
                    e8:a7:2c:04:a7:32:cf:51:0e:c7:30:5b:98:8d:ce:
                    06:c9:c8:35:58:32:cb:25:49:47:47:33:32:96:c7:
                    88:67:71:17:dd:c6:93:51:2a:ef:a0:38:f6:06:65:
                    8d:60:aa:1b:e8:00:aa:a3:5b:03:49:70:f7:84:80:
                    53:9b:13:f5:70:86:b3:60:53:b5:6d:1e:c6:cc:b2:
                    bc:d9:b7:d7:a4:08:67:1f:79:35:d0:f2:6f:fb:83:
                    8e:2e:ba:6b:e8:60:69:2a:31:8e:19:fd:97:f0:4d:
                    02:3f:76:da:db:73:b0:f2:f4:e1:11:5d:96:3f:c8:
                    c2:03:be:d4:1f:3b:ae:a6:84:76:f7:d6:bb:fc:1b:
                    ae:81:44:24:28:6b:90:11:d5:b5:d3:df:8e:46:f4:
                    72:d7:2f:cb:b3:74:4e:0b:7a:3e:b2:5a:69:83:7f:
                    50:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:21:A4:B3:97:4B:0B:F7:AA:F6:C9:D1:3A:27:BC:B2:94:95:C0:67
            X509v3 Authority Key Identifier:
                keyid:68:33:02:DF:6A:59:20:E2:F8:3A:C4:EF:76:65:6D:DC:E8:40:F5:93

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aDMC32pZIOL4OsTvdmVt3OhA9ZM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:00:a0:d3:28:ad:97:80:a2:96:40:7b:78:f3:49:a8:ec:28:
         a3:76:56:bd:09:bd:42:e0:73:df:28:81:43:c4:7c:df:0f:1f:
         ba:f9:b2:7d:47:be:42:f4:3e:8f:74:64:0d:ee:ac:33:3a:ba:
         0b:55:a1:23:39:87:1c:1c:ec:b4:b2:41:de:f9:b5:95:12:d9:
         f5:8a:1f:29:d7:88:5f:e4:0c:dc:b0:d0:1f:2b:24:59:0b:ab:
         3f:f2:df:8f:4c:9f:84:87:7e:1a:ea:3e:a7:5d:c9:4f:b1:45:
         42:0f:2f:66:c1:fe:9d:b7:4f:9a:ad:7f:5d:8e:7f:16:ba:a7:
         3a:c7:be:cb:fe:a1:4f:82:85:b4:30:4e:1e:db:6c:70:61:c0:
         a6:bf:f3:d4:18:54:c3:42:da:1a:3c:31:22:85:76:63:3e:af:
         87:d4:58:52:2b:1c:d4:fb:91:83:51:d8:19:90:e1:1b:7f:7f:
         87:6a:68:84:76:e2:bb:52:d9:b3:82:be:f4:94:f3:d7:60:91:
         9c:e6:eb:fe:b7:fd:20:f0:7f:dd:c2:69:c6:f4:8d:b4:5a:9f:
         cb:ef:20:66:f4:e7:ab:80:d7:a0:45:4f:a8:08:76:e0:fe:06:
         08:78:79:0a:ce:f0:7d:d6:7b:67:58:15:7e:ed:14:63:2f:1c:
         60:e8:31:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:14:24 2026 by rpki-client