Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
File:                     DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft (raw, json)
Hash identifier:          QRVi7v2I92I1H9btNnWL2FJW/xr3Vn9MiLUljfTkNTg=
Subject key identifier:   62:02:EF:5D:33:FD:B6:73:DA:07:F6:68:B8:CB:EB:ED:BF:47:9B:A4
Authority key identifier: DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13
Certificate issuer:       /CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
Certificate serial:       0A5427C002461F888A963BDE499C2629D80C1973
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
Manifest number:          2D
Signing time:             Sat 13 Jun 2026 00:28:31 +0000
Manifest this update:     Sat 13 Jun 2026 00:23:31 +0000
Manifest next update:     Sun 14 Jun 2026 02:08:31 +0000
Files and hashes:         1: 3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa (hash: H0K1ntuYrqGyMmjMc0VSqf2iYE6epJACiPRZPRlBzDo=)
                          2: DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl (hash: 41iBcmm6/nCSPfJf82sSPVq78H9DAMSXTY3uyYAXSmc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 22:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:54:27:c0:02:46:1f:88:8a:96:3b:de:49:9c:26:29:d8:0c:19:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
        Validity
            Not Before: Jun 13 00:23:31 2026 GMT
            Not After : Jun 14 02:08:31 2026 GMT
        Subject: CN=6202EF5D33FDB673DA07F668B8CBEBEDBF479BA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e0:ef:c8:b7:ed:3b:09:2c:f8:27:97:b2:e8:
                    fc:1c:b3:28:60:74:a8:ad:9d:51:bf:c7:4a:8e:85:
                    e1:41:8e:1b:48:42:ce:80:77:09:e5:fe:25:6f:8f:
                    ec:02:4f:b8:11:15:05:42:76:cb:c0:c7:e5:18:8a:
                    83:fd:9d:da:5c:6d:17:6a:6e:5f:18:81:7c:f2:29:
                    5f:72:c8:3e:bd:e7:e3:53:5c:72:82:b3:42:a6:d3:
                    22:0a:20:b0:36:6f:1c:32:da:af:a4:f6:4c:b7:a5:
                    45:82:23:01:79:f3:2c:71:58:83:fc:62:9a:12:a3:
                    87:87:19:ba:cc:b7:15:a9:d9:82:29:fd:e7:68:ef:
                    2b:ea:ed:c1:cd:ec:02:42:bf:a4:96:ab:37:34:12:
                    08:98:9f:55:27:76:2e:b7:f8:64:bc:b0:4e:b1:d2:
                    61:3a:86:e1:6f:b1:fe:24:90:d3:a8:19:75:75:c3:
                    8f:47:27:18:f1:21:ab:eb:d5:2b:2f:bb:5b:b5:c2:
                    bd:27:fb:59:f2:cd:76:50:45:78:6b:11:4f:13:b4:
                    5c:df:0f:76:d6:b6:59:d9:2d:5d:1e:9c:7d:d9:e0:
                    71:7e:ae:05:72:95:b4:2b:e0:2e:8d:ae:5c:cc:92:
                    92:f1:d2:5b:85:9d:30:a8:cf:32:ba:2f:76:57:de:
                    ea:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:02:EF:5D:33:FD:B6:73:DA:07:F6:68:B8:CB:EB:ED:BF:47:9B:A4
            X509v3 Authority Key Identifier:
                keyid:DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c4:c9:f5:8d:e0:f3:ef:5c:70:a8:f7:18:3c:2b:ec:b6:f5:
         2a:28:90:c5:20:b3:8e:e4:c1:35:6b:5b:14:b2:2b:18:ed:41:
         a7:09:a2:cd:0a:d1:a8:3f:dd:e2:2e:19:ef:dc:be:3f:c2:35:
         6e:43:94:f8:bc:e2:36:ac:0a:ed:e7:44:32:2c:a4:1d:c2:4c:
         d4:9b:32:04:07:6d:9d:29:bb:ff:3b:f8:e2:77:f5:0d:21:9f:
         0b:c6:c7:74:bd:75:3c:64:d7:17:12:e8:1c:24:f3:9f:93:a6:
         a2:24:a6:bc:99:68:17:a3:a7:4b:c2:2d:09:70:0a:2d:e4:42:
         c4:14:9b:57:ef:e9:44:07:86:69:91:dd:1e:fa:7c:7b:cd:fa:
         9c:c5:4d:10:90:6c:96:c7:19:56:79:25:52:e6:26:b7:ba:cf:
         b3:3f:a5:71:82:26:8d:82:57:df:47:7f:f9:48:d1:33:20:fb:
         4f:20:1c:9c:79:ac:29:70:4b:d7:ab:01:8e:55:e3:5d:cf:f7:
         db:6f:7e:d1:f0:85:bf:ef:f5:78:84:47:b7:c3:d3:97:da:40:
         5c:02:02:d4:78:54:e8:45:04:03:b8:8b:6b:98:0a:8d:a8:5c:
         96:01:5c:b8:d3:53:04:25:26:d6:3a:b4:51:67:29:52:6a:71:
         0f:9d:f9:69
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUClQnwAJGH4iKljveSZwmKdgMGXMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVFM0FCNEFEMjdBQTRFRUQwOUM4RTQ3NDBFOTAwRjJC
MTVBOEYxMzAeFw0yNjA2MTMwMDIzMzFaFw0yNjA2MTQwMjA4MzFaMDMxMTAvBgNV
BAMTKDYyMDJFRjVEMzNGREI2NzNEQTA3RjY2OEI4Q0JFQkVEQkY0NzlCQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt4O/It+07CSz4J5ey6Pwcsyhg
dKitnVG/x0qOheFBjhtIQs6Adwnl/iVvj+wCT7gRFQVCdsvAx+UYioP9ndpcbRdq
bl8YgXzyKV9yyD695+NTXHKCs0Km0yIKILA2bxwy2q+k9ky3pUWCIwF58yxxWIP8
YpoSo4eHGbrMtxWp2YIp/edo7yvq7cHN7AJCv6SWqzc0EgiYn1Undi63+GS8sE6x
0mE6huFvsf4kkNOoGXV1w49HJxjxIavr1Ssvu1u1wr0n+1nyzXZQRXhrEU8TtFzf
D3bWtlnZLV0enH3Z4HF+rgVylbQr4C6NrlzMkpLx0luFnTCozzK6L3ZX3up3AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUYgLvXTP9tnPaB/ZouMvr7b9Hm6QwHwYDVR0j
BBgwFoAU3uOrStJ6pO7QnI5HQOkA8rFajxMwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR01JQ0xP
VUQvMS9ERUUzQUI0QUQyN0FBNEVFRDA5QzhFNDc0MEU5MDBGMkIxNUE4RjEzLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0RFRTNBQjRBRDI3QUE0RUVEMDlDOEU0NzQw
RTkwMEYyQjE1QThGMTMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HTUlDTE9VRC8xL0RFRTNBQjRB
RDI3QUE0RUVEMDlDOEU0NzQwRTkwMEYyQjE1QThGMTMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQxMn1
jeDz71xwqPcYPCvstvUqKJDFILOO5ME1a1sUsisY7UGnCaLNCtGoP93iLhnv3L4/
wjVuQ5T4vOI2rArt50QyLKQdwkzUmzIEB22dKbv/O/jid/UNIZ8Lxsd0vXU8ZNcX
EugcJPOfk6aiJKa8mWgXo6dLwi0JcAot5ELEFJtX7+lEB4Zpkd0e+nx7zfqcxU0Q
kGyWxxlWeSVS5ia3us+zP6VxgiaNglffR3/5SNEzIPtPIByceawpcEvXqwGOVeNd
z/fbb37R8IW/7/V4hEe3w9OX2kBcAgLUeFToRQQDuItrmAqNqFyWAVy401MEJSbW
OrRRZylSanEPnflp
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:05 2026 by rpki-client