Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft
File:                     BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft (raw, json)
Hash identifier:          4eslio4R2lPJ1AJQjjOR80DCoSJLFKeARr9bumNAgzw=
Subject key identifier:   FD:27:D9:63:D8:4F:A4:87:2A:D8:85:71:77:B9:10:EE:FF:41:B1:60
Authority key identifier: BC:EA:07:93:00:86:A1:3D:C5:25:04:5B:C7:E4:A9:80:2E:9D:12:E1
Certificate issuer:       /CN=BCEA07930086A13DC525045BC7E4A9802E9D12E1
Certificate serial:       7C7D22D00CE14910FFE8E1791F94EF1E790AEB99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft
Manifest number:          68
Signing time:             Tue 28 Jul 2026 03:37:24 +0000
Manifest this update:     Tue 28 Jul 2026 03:32:24 +0000
Manifest next update:     Wed 29 Jul 2026 04:48:24 +0000
Files and hashes:         1: BCEA07930086A13DC525045BC7E4A9802E9D12E1.crl (hash: dH8+LNDti22Vr3BdfwOnk3D0EEampSdmJzYaX+etlOA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.crl
                          rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 04:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7d:22:d0:0c:e1:49:10:ff:e8:e1:79:1f:94:ef:1e:79:0a:eb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCEA07930086A13DC525045BC7E4A9802E9D12E1
        Validity
            Not Before: Jul 28 03:32:24 2026 GMT
            Not After : Jul 29 04:48:24 2026 GMT
        Subject: CN=FD27D963D84FA4872AD8857177B910EEFF41B160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:30:a6:b4:47:2f:4c:4b:5b:9a:4b:7e:6a:93:
                    71:25:20:dc:e6:6d:ba:0b:e4:01:fd:d5:75:be:92:
                    4e:78:c2:9b:30:cd:6d:a8:a7:23:4a:92:65:9f:98:
                    37:66:f4:3d:a5:e4:f3:40:60:f6:53:de:13:93:dd:
                    81:63:1f:11:9e:8d:d0:8b:16:1b:c8:61:e5:63:41:
                    99:b3:5f:5d:20:7b:1b:b4:8e:61:0a:16:b8:ee:39:
                    e6:8b:55:a9:b7:5c:0e:05:a0:f3:b4:d5:b9:01:16:
                    b0:48:0f:da:b8:5f:6a:f7:db:4c:38:9a:b6:1d:86:
                    8d:d6:bd:2c:5c:73:8c:bf:41:fd:a7:77:f3:06:31:
                    3d:dd:f9:b4:2d:c8:46:79:04:fc:a7:89:f4:1f:fb:
                    fb:3a:d1:eb:19:95:bd:65:e7:e7:48:10:db:79:94:
                    f3:c0:c2:2a:fc:d5:d7:d3:d5:dc:e5:fc:d0:0d:7d:
                    87:e9:e8:b3:7a:25:ef:27:4d:a7:e8:d9:de:a5:b9:
                    2c:cb:b9:8c:55:8b:fb:a2:85:c2:da:01:15:bd:96:
                    0f:4e:f7:52:17:72:63:eb:59:e8:fd:6a:aa:53:28:
                    1c:63:fc:85:e8:1e:a0:0d:8e:62:c5:28:ab:00:b4:
                    d3:ec:65:67:3d:b6:67:71:98:09:7e:01:be:06:ca:
                    97:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:27:D9:63:D8:4F:A4:87:2A:D8:85:71:77:B9:10:EE:FF:41:B1:60
            X509v3 Authority Key Identifier:
                keyid:BC:EA:07:93:00:86:A1:3D:C5:25:04:5B:C7:E4:A9:80:2E:9D:12:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCEA07930086A13DC525045BC7E4A9802E9D12E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GLOBALPLUS/0/BCEA07930086A13DC525045BC7E4A9802E9D12E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:26:cb:21:28:af:57:a7:c1:09:a7:31:47:65:69:db:e5:1d:
         47:9b:82:84:6d:bc:c3:63:4d:2a:f5:d9:f3:f9:8c:0e:7e:b8:
         e1:9d:88:6c:38:e0:30:1a:49:6b:af:04:95:5d:a2:8b:a2:b4:
         cf:09:a5:96:d4:77:99:5d:a3:25:33:50:c0:f7:1c:01:cb:78:
         54:9b:ed:16:dc:71:c0:d0:31:72:f2:2a:67:30:c2:0a:f7:2d:
         7a:8b:fd:cb:68:63:94:dc:19:3a:f8:f7:8d:54:76:d9:76:05:
         c6:ef:4d:b2:a8:c1:19:21:1a:69:6b:5f:9e:5c:45:25:88:56:
         6b:25:79:32:db:06:eb:93:97:d4:35:d9:12:a9:53:81:13:1a:
         e1:bb:85:f9:43:fe:ad:18:4e:77:25:b2:f3:ed:19:2b:06:0e:
         81:f5:eb:3e:29:95:cd:b1:6f:ee:a3:24:12:db:8a:bc:e3:aa:
         35:c6:c8:0c:1f:e8:3c:6a:22:9c:b9:ce:93:1f:42:e0:cd:78:
         7f:6f:04:38:fb:1c:c2:80:52:b0:31:fe:5a:7a:ff:98:bc:6e:
         e5:9e:42:37:3b:ad:94:be:13:a5:c5:81:3d:8e:a7:76:2c:db:
         ca:69:0d:95:d3:44:07:cc:3f:a1:94:7f:90:2f:8e:17:66:96:
         cf:54:82:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:17 2026 by rpki-client