Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft
File:                     D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft (raw, json)
Hash identifier:          EFYxqtmxhNxtCa1hlggwo+30OxGL1MPVseXWIhm0plY=
Subject key identifier:   85:93:C0:E3:2E:7D:CA:3B:C9:03:A4:73:75:B8:AE:B7:DE:DA:5A:8D
Authority key identifier: D7:4E:5E:C5:E6:22:5B:99:9D:92:3B:D3:44:97:A3:06:0E:DA:0B:3B
Certificate issuer:       /CN=D74E5EC5E6225B999D923BD34497A3060EDA0B3B
Certificate serial:       43FF58506E8D42A82D2516E81073A274365C33C8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft
Manifest number:          B5
Signing time:             Tue 22 Sep 2026 02:53:31 +0000
Manifest this update:     Tue 22 Sep 2026 02:48:31 +0000
Manifest next update:     Wed 23 Sep 2026 04:35:31 +0000
Files and hashes:         1: D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl (hash: NoP4nfpEkfNJ+DyyQi2WOFRmtimZv+lqk7KPFdwy114=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl
                          rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 22:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ff:58:50:6e:8d:42:a8:2d:25:16:e8:10:73:a2:74:36:5c:33:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D74E5EC5E6225B999D923BD34497A3060EDA0B3B
        Validity
            Not Before: Sep 22 02:48:31 2026 GMT
            Not After : Sep 23 04:35:31 2026 GMT
        Subject: CN=8593C0E32E7DCA3BC903A47375B8AEB7DEDA5A8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bb:66:b2:c9:fe:9e:5c:4c:03:e7:7a:36:9a:
                    36:0b:8e:a4:fa:62:a3:a7:c9:f5:0f:61:06:26:52:
                    65:41:2c:3b:78:8c:82:f4:7c:65:7d:f9:c9:3f:64:
                    40:c7:5a:b4:42:28:79:d2:b9:43:6e:d7:70:cc:84:
                    6a:e0:ae:45:de:7d:c1:2b:db:60:70:31:22:9b:43:
                    f3:f3:ea:77:e9:0e:f2:54:41:77:cf:eb:01:9e:18:
                    36:91:cb:a4:d3:57:52:c0:d4:25:a7:e7:f3:46:bf:
                    35:4c:41:1c:9a:a1:00:a0:81:2c:ff:f6:ee:c9:51:
                    33:33:69:01:f1:d0:c6:f1:11:94:b6:43:19:f8:86:
                    95:ae:d1:f6:27:7d:bd:5f:a5:e5:40:a0:16:99:a0:
                    f1:77:6a:66:35:46:7b:d4:7a:c2:f4:cf:6e:92:35:
                    f9:2c:da:85:94:22:c0:81:f9:e9:2f:c0:0a:ee:99:
                    c5:a2:3a:9d:ce:b7:4f:3f:3b:57:ae:1e:f6:c4:46:
                    ba:71:d4:ac:45:96:f5:5c:1c:f5:35:19:6a:27:ac:
                    e1:c7:ae:7c:95:09:3a:ad:26:2b:2b:de:90:a3:bc:
                    53:04:49:0b:eb:a9:7d:6a:ed:fe:2a:1a:43:5d:c3:
                    cc:e5:2f:bc:27:9a:d0:db:64:9d:9d:9b:68:77:d0:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:93:C0:E3:2E:7D:CA:3B:C9:03:A4:73:75:B8:AE:B7:DE:DA:5A:8D
            X509v3 Authority Key Identifier:
                keyid:D7:4E:5E:C5:E6:22:5B:99:9D:92:3B:D3:44:97:A3:06:0E:DA:0B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DBSBANKTW/0/D74E5EC5E6225B999D923BD34497A3060EDA0B3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5e:66:0a:0b:f1:e5:6d:81:89:bb:35:0f:5a:fc:97:61:c3:
         4f:2a:3d:45:c4:42:d4:0f:31:79:e4:e2:0b:cd:bb:6a:fe:dc:
         0a:25:10:02:52:05:d0:e5:55:41:62:12:1a:15:c8:89:51:b3:
         ff:fe:97:7f:11:f2:0d:61:f7:8d:98:d5:14:9f:de:2c:b7:ba:
         f3:ba:0e:88:bd:89:4b:f7:6a:55:25:81:dd:3d:38:4a:f7:02:
         fe:ac:79:44:60:af:58:2e:7f:87:81:54:d1:d2:d1:57:d0:75:
         ad:d2:be:be:1e:21:b4:a3:c8:91:fd:fb:9f:03:5b:aa:96:6f:
         cb:61:46:fd:ac:72:4b:49:6d:a8:bc:da:b2:d2:23:ae:ce:dd:
         89:67:24:ed:1c:b9:e0:98:8b:ff:15:bc:18:f2:1d:ad:a5:e2:
         6e:f6:65:83:22:ee:bf:97:f6:1d:0a:40:cc:d4:14:f5:2b:f7:
         4c:72:9b:bb:85:f6:5e:0a:09:55:eb:43:ad:64:c4:ef:7c:94:
         c6:be:85:e1:e0:3e:45:b5:49:be:1f:77:66:f6:5e:40:c1:7f:
         e1:36:16:b2:f7:95:2b:82:6f:95:74:ce:0d:a6:7f:b5:be:fa:
         87:49:fc:b8:78:5b:59:18:f6:b3:8f:73:72:43:72:2d:3b:21:
         78:56:7f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:17:15 2026 by rpki-client