Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
File:                     295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft (raw, json)
Hash identifier:          gm0FtsuOySTQrqmCA48qP995NlILpuj0BzJeOFrU4S8=
Subject key identifier:   DA:BB:F8:45:8B:8D:B8:0D:DE:EC:DE:4A:7C:E6:48:AE:11:ED:BF:3D
Authority key identifier: 29:5F:AD:27:AF:ED:01:34:76:4C:B0:F6:CA:70:2A:F9:30:C0:AC:18
Certificate issuer:       /CN=295FAD27AFED0134764CB0F6CA702AF930C0AC18
Certificate serial:       0E5D739E20F388726B20169DB688915DF0DFC4C2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
Manifest number:          F3
Signing time:             Tue 10 Nov 2026 00:56:59 +0000
Manifest this update:     Tue 10 Nov 2026 00:51:59 +0000
Manifest next update:     Wed 11 Nov 2026 02:55:59 +0000
Files and hashes:         1: 295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl (hash: +Nk9uyvoFzRWXNteMN6f/qq4B6wAYkvTY99R3Mz+iz0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl
                          rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 02:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5d:73:9e:20:f3:88:72:6b:20:16:9d:b6:88:91:5d:f0:df:c4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295FAD27AFED0134764CB0F6CA702AF930C0AC18
        Validity
            Not Before: Nov 10 00:51:59 2026 GMT
            Not After : Nov 11 02:55:59 2026 GMT
        Subject: CN=DABBF8458B8DB80DDEECDE4A7CE648AE11EDBF3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:e8:2d:61:17:41:73:03:78:6a:9e:ba:2c:
                    50:ef:63:99:9e:87:0f:7e:88:9d:b7:53:43:6b:5b:
                    53:c9:b5:01:db:e0:cd:46:22:92:a5:2b:00:5e:5d:
                    ca:e3:86:a8:84:77:5b:82:a4:1d:1d:35:51:33:b1:
                    d3:6f:2c:76:9e:07:3b:2b:7e:bc:51:7b:4f:19:2f:
                    4c:18:ee:4e:1a:60:03:d6:d5:44:b9:f1:4d:75:9e:
                    7a:ab:6a:6f:b4:86:84:3b:df:02:ec:b4:d9:0a:8f:
                    93:b3:3f:fa:ca:0b:1d:8b:e1:9f:75:46:7d:dd:99:
                    d7:a1:2c:ca:62:9d:c6:f1:8c:90:fc:da:d3:05:fd:
                    6f:5c:d0:7b:2e:2d:3b:02:5d:c7:a5:23:5d:7e:c5:
                    34:4b:59:41:ee:b8:c7:42:11:79:7d:a3:2f:eb:b6:
                    b1:0c:aa:19:54:61:c6:d6:df:38:e6:1d:c6:e2:13:
                    42:3c:62:dc:a9:56:4a:72:a8:36:b7:68:82:d6:ca:
                    ca:c2:66:e1:cf:de:bf:f4:ef:fd:2d:ea:2a:fe:3a:
                    6f:bc:52:ab:c3:97:3c:2e:72:e1:f6:6c:99:02:d4:
                    ef:12:30:90:e1:33:24:c0:77:f8:9d:84:99:07:2c:
                    84:d7:c0:01:46:40:2b:5e:d4:a6:80:95:b6:95:66:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BB:F8:45:8B:8D:B8:0D:DE:EC:DE:4A:7C:E6:48:AE:11:ED:BF:3D
            X509v3 Authority Key Identifier:
                keyid:29:5F:AD:27:AF:ED:01:34:76:4C:B0:F6:CA:70:2A:F9:30:C0:AC:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/295FAD27AFED0134764CB0F6CA702AF930C0AC18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUANGLI/0/295FAD27AFED0134764CB0F6CA702AF930C0AC18.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ea:d6:e3:2f:d3:ff:e4:1b:b6:f5:73:61:d3:9d:83:eb:5f:
         0f:d2:26:e8:09:a7:f4:46:2c:3a:51:bd:bf:21:d7:5c:69:78:
         88:8d:5f:b4:de:ec:9a:2a:b7:27:94:82:58:bf:c6:50:df:58:
         f3:9e:7a:cf:7b:08:f8:7e:e1:6c:21:1d:c5:7b:a6:be:e6:62:
         f2:f2:5c:ef:8b:3e:d3:02:c8:79:b6:10:7e:28:ad:be:c9:28:
         1b:60:b4:bd:3c:d6:77:c9:19:8f:a4:be:65:94:31:61:1a:40:
         1d:06:23:d8:db:2e:42:fd:26:1d:d8:9b:a1:8a:d3:3a:80:1c:
         60:b6:19:4c:41:3f:9f:8c:af:cf:22:ee:c0:96:67:16:81:54:
         63:59:3d:76:3d:8a:81:07:36:fa:ac:81:9e:ad:e5:c9:3b:de:
         ad:73:4f:b8:01:e0:9d:29:2e:63:48:fd:33:ac:54:d5:03:c5:
         2b:68:2f:02:a6:da:9e:fe:8e:7b:a4:98:eb:8d:43:f7:92:aa:
         14:29:90:f5:3d:f5:46:1e:c0:da:d4:8c:51:5a:35:da:f7:0d:
         58:2b:85:a7:35:13:5d:aa:b9:5a:a8:b7:b1:df:d3:9a:a8:00:
         6c:f4:6d:61:b8:e3:87:1d:85:27:68:9f:95:4f:78:be:74:93:
         19:35:54:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 07:12:05 2026 by rpki-client