Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
File:                     295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft (raw, json)
Hash identifier:          zsgd6DAaeeLZgvbVe3U46W0ticOfv7iqqrd50QHkEpU=
Subject key identifier:   5F:3B:C5:4E:11:56:5C:B1:C9:46:92:4C:2D:C5:13:89:C9:6F:07:25
Authority key identifier: 29:5F:AD:27:AF:ED:01:34:76:4C:B0:F6:CA:70:2A:F9:30:C0:AC:18
Certificate issuer:       /CN=295FAD27AFED0134764CB0F6CA702AF930C0AC18
Certificate serial:       62BCEE9AD2817E029424A7E48D5ABCF0481D9C43
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
Manifest number:          68
Signing time:             Tue 28 Jul 2026 06:17:41 +0000
Manifest this update:     Tue 28 Jul 2026 06:12:41 +0000
Manifest next update:     Wed 29 Jul 2026 09:48:41 +0000
Files and hashes:         1: 295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl (hash: 7bZuUzbfPpffbZ1aliCOVLs4h0tdGGjTaStEOJdrePs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl
                          rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bc:ee:9a:d2:81:7e:02:94:24:a7:e4:8d:5a:bc:f0:48:1d:9c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295FAD27AFED0134764CB0F6CA702AF930C0AC18
        Validity
            Not Before: Jul 28 06:12:41 2026 GMT
            Not After : Jul 29 09:48:41 2026 GMT
        Subject: CN=5F3BC54E11565CB1C946924C2DC51389C96F0725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b5:d2:c1:10:06:fd:d0:c1:44:09:38:60:e0:
                    3d:cb:d6:0b:ed:88:7e:c4:81:33:75:5c:68:25:bb:
                    9e:2c:55:9a:df:af:53:59:d0:4b:dd:5c:bf:fb:c9:
                    cf:93:79:01:c0:50:72:f5:7b:4c:33:98:8f:95:c7:
                    51:58:ca:f0:16:11:4f:c6:2d:46:fe:2d:73:87:7f:
                    32:62:86:03:23:c4:27:59:3a:0f:12:56:c0:db:d8:
                    6f:ff:18:0a:45:44:ef:ec:ca:dd:2a:37:54:77:2a:
                    19:e7:56:bd:b2:a3:81:3f:0a:37:c6:56:52:21:5d:
                    ef:c0:01:0c:b6:c7:33:7f:d5:df:9c:7e:78:94:ba:
                    67:1e:45:ac:a4:9d:d9:e1:cf:c9:60:94:75:79:0c:
                    a3:96:f8:21:db:52:2a:6e:3e:57:bc:26:a4:24:43:
                    aa:99:b1:6f:3f:4c:9c:f2:0a:0b:1d:89:1f:13:a6:
                    71:57:76:9b:a7:e8:37:bc:dc:28:a8:e8:0d:bd:eb:
                    55:46:99:8d:ac:95:3a:f8:ea:65:99:1f:e5:8a:e7:
                    3b:da:64:e8:92:4f:07:e0:43:84:84:c5:02:b7:8b:
                    b1:33:77:82:15:af:bb:ad:63:9e:52:02:76:4b:8e:
                    ac:af:04:a0:b7:e9:2c:de:c9:74:f4:f4:c1:39:53:
                    bb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3B:C5:4E:11:56:5C:B1:C9:46:92:4C:2D:C5:13:89:C9:6F:07:25
            X509v3 Authority Key Identifier:
                keyid:29:5F:AD:27:AF:ED:01:34:76:4C:B0:F6:CA:70:2A:F9:30:C0:AC:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f8:cb:13:bc:b4:3c:ac:3e:68:91:c3:c7:68:0f:32:17:16:
         64:f7:5c:f8:15:7d:40:3e:e3:8c:0c:64:2f:c8:32:3a:34:d1:
         fd:ac:2e:f7:c5:3e:aa:97:e2:9a:b4:91:c6:60:6c:7c:6f:f6:
         23:03:87:fc:bd:85:a0:a7:f0:62:50:cb:9c:40:c5:5c:1a:bb:
         ec:35:98:18:78:f6:18:37:a9:f5:cc:99:02:e8:eb:da:7b:60:
         28:6f:7b:65:c2:1a:91:bf:d0:e8:a0:59:05:17:d9:4d:bd:51:
         08:7c:32:d3:4f:ab:59:75:5d:15:3f:59:9c:08:ec:7b:c6:79:
         7c:e8:6c:dc:70:de:97:f4:d2:3a:1b:10:f3:51:0b:03:b9:7f:
         40:4f:17:19:85:d0:b9:1f:6f:4d:45:af:d1:72:2a:25:f2:57:
         3d:7e:ca:79:5c:0d:c0:e9:5c:6a:57:3f:9f:a9:c6:2c:e3:48:
         9f:ac:b6:11:5e:7d:b8:67:a1:cc:52:79:27:02:fb:f4:0b:a6:
         ac:cf:77:36:a7:7e:f9:20:dd:0f:b8:c0:bf:fe:44:a7:aa:ff:
         ad:16:54:c6:eb:d3:72:51:0d:1e:4c:32:b4:61:1d:d7:c3:1d:
         da:3a:56:0d:a8:0a:e6:94:6b:2d:d7:ea:5e:0a:b0:2a:eb:cb:
         86:79:ca:81
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUYrzumtKBfgKUJKfkjVq88EgdnEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk1RkFEMjdBRkVEMDEzNDc2NENCMEY2Q0E3MDJBRjkz
MEMwQUMxODAeFw0yNjA3MjgwNjEyNDFaFw0yNjA3MjkwOTQ4NDFaMDMxMTAvBgNV
BAMTKDVGM0JDNTRFMTE1NjVDQjFDOTQ2OTI0QzJEQzUxMzg5Qzk2RjA3MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUtdLBEAb90MFECThg4D3L1gvt
iH7EgTN1XGglu54sVZrfr1NZ0EvdXL/7yc+TeQHAUHL1e0wzmI+Vx1FYyvAWEU/G
LUb+LXOHfzJihgMjxCdZOg8SVsDb2G//GApFRO/syt0qN1R3KhnnVr2yo4E/CjfG
VlIhXe/AAQy2xzN/1d+cfniUumceRaykndnhz8lglHV5DKOW+CHbUipuPle8JqQk
Q6qZsW8/TJzyCgsdiR8TpnFXdpun6De83Cio6A2961VGmY2slTr46mWZH+WK5zva
ZOiSTwfgQ4SExQK3i7Ezd4IVr7utY55SAnZLjqyvBKC36SzeyXT09ME5U7uRAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUXzvFThFWXLHJRpJMLcUTiclvByUwHwYDVR0j
BBgwFoAUKV+tJ6/tATR2TLD2ynAq+TDArBgwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hVQU5H
TEkvMC8yOTVGQUQyN0FGRUQwMTM0NzY0Q0IwRjZDQTcwMkFGOTMwQzBBQzE4LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xLzI5NUZBRDI3QUZFRDAxMzQ3NjRDQjBGNkNB
NzAyQUY5MzBDMEFDMTguY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSFVBTkdMSS8wLzI5NUZBRDI3
QUZFRDAxMzQ3NjRDQjBGNkNBNzAyQUY5MzBDMEFDMTgubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9+MsT
vLQ8rD5okcPHaA8yFxZk91z4FX1APuOMDGQvyDI6NNH9rC73xT6ql+KatJHGYGx8
b/YjA4f8vYWgp/BiUMucQMVcGrvsNZgYePYYN6n1zJkC6Ovae2Aob3tlwhqRv9Do
oFkFF9lNvVEIfDLTT6tZdV0VP1mcCOx7xnl86GzccN6X9NI6GxDzUQsDuX9ATxcZ
hdC5H29NRa/Rciol8lc9fsp5XA3A6VxqVz+fqcYs40ifrLYRXn24Z6HMUnknAvv0
C6asz3c2p375IN0PuMC//kSnqv+tFlTG69NyUQ0eTDK0YR3Xwx3aOlYNqArmlGst
1+peCrAq68uGecqB
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:23:00 2026 by rpki-client