Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft
File:                     FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft (raw, json)
Hash identifier:          t1nOP0gZhf0DJ7hMT60sOIuLr/h2Ru7gG4MNARc/Pzc=
Subject key identifier:   D0:F8:61:38:D2:C1:06:F3:EB:43:7D:23:AF:B1:64:AE:27:59:D4:18
Authority key identifier: FD:F1:33:A9:8D:C5:9C:CC:12:3E:02:6C:4F:29:A5:E9:01:26:7E:C2
Certificate issuer:       /CN=FDF133A98DC59CCC123E026C4F29A5E901267EC2
Certificate serial:       53627F2D3AE17D10A2541D800F7F4B47221AFC3D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FDF133A98DC59CCC123E026C4F29A5E901267EC2.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft
Manifest number:          F2
Signing time:             Tue 10 Nov 2026 03:42:19 +0000
Manifest this update:     Tue 10 Nov 2026 03:37:19 +0000
Manifest next update:     Wed 11 Nov 2026 05:08:19 +0000
Files and hashes:         1: FDF133A98DC59CCC123E026C4F29A5E901267EC2.crl (hash: fW4PhyVtCn+sp30fRYgOQ7+BRk1kDZZtHYZNDH6RN8o=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FDF133A98DC59CCC123E026C4F29A5E901267EC2.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 02:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:62:7f:2d:3a:e1:7d:10:a2:54:1d:80:0f:7f:4b:47:22:1a:fc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF133A98DC59CCC123E026C4F29A5E901267EC2
        Validity
            Not Before: Nov 10 03:37:19 2026 GMT
            Not After : Nov 11 05:08:19 2026 GMT
        Subject: CN=D0F86138D2C106F3EB437D23AFB164AE2759D418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fd:15:85:be:8b:cb:41:61:04:39:e0:f7:bd:
                    73:c0:fa:31:bb:ed:3a:8e:16:45:c5:ea:f9:64:36:
                    47:ce:f9:c6:52:76:87:41:5d:4d:4f:f8:a9:1f:da:
                    1f:62:c2:cc:43:b9:da:f7:5e:11:63:a2:0a:88:c0:
                    52:6b:61:a3:9f:f5:51:3e:e9:c7:e9:73:69:ab:8d:
                    f1:90:13:6a:e6:9a:96:c7:da:95:8d:fd:10:ec:6d:
                    f1:d4:29:71:6f:d1:8c:4e:2d:50:d7:1d:31:27:50:
                    53:0f:7f:05:0d:cd:81:42:46:de:11:55:6c:6e:42:
                    c0:84:33:62:ef:34:b0:a6:70:ba:a7:e7:46:f0:39:
                    dd:2b:40:5b:5a:b6:5f:9d:a3:a9:84:92:6c:e0:41:
                    05:a9:5d:db:b3:06:9e:7e:13:11:20:ae:70:f4:d9:
                    c7:3f:82:06:e6:50:9f:38:59:31:3f:02:5b:d1:49:
                    f7:70:5b:a1:6d:bf:e9:60:68:18:b6:6c:0b:aa:fb:
                    3a:21:ef:82:59:47:fc:cd:49:cb:7b:58:43:0b:3d:
                    5c:9a:79:8e:a4:b0:cc:90:2b:44:10:80:46:ba:06:
                    9f:3c:1b:9f:e7:65:f8:44:28:42:d4:09:5e:69:b0:
                    73:eb:0e:c9:4b:e6:99:5d:4f:71:0a:d8:d4:4c:e6:
                    35:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F8:61:38:D2:C1:06:F3:EB:43:7D:23:AF:B1:64:AE:27:59:D4:18
            X509v3 Authority Key Identifier:
                keyid:FD:F1:33:A9:8D:C5:9C:CC:12:3E:02:6C:4F:29:A5:E9:01:26:7E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FDF133A98DC59CCC123E026C4F29A5E901267EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:13:04:ae:0c:b8:1b:cd:cc:c9:db:7c:82:ab:8e:81:01:61:
         45:29:37:fe:fb:ec:49:61:42:8e:b2:a5:6c:22:e9:66:11:93:
         93:42:aa:55:ad:84:85:83:f4:57:06:bc:91:13:09:95:6d:6a:
         f5:90:8b:a7:00:42:82:66:36:1f:e9:3b:59:47:bb:ff:16:47:
         ae:56:3c:14:86:86:24:cc:7b:fc:3b:06:d7:b4:33:da:f8:da:
         fe:d7:62:9c:fb:7a:9d:bb:31:3b:5b:31:69:a0:e9:68:08:c5:
         84:69:bf:68:4f:55:31:02:fb:6d:da:03:93:3e:c9:d0:86:dc:
         66:29:1d:f3:96:01:0e:92:e0:67:3a:cd:9f:0c:72:f1:8a:2e:
         94:e7:f6:dd:73:4e:50:15:7e:c1:0f:67:6e:71:79:70:ea:43:
         a2:e2:e8:53:89:a9:21:9a:e4:a9:b3:c9:2b:2a:5c:82:a4:03:
         cd:67:2b:cf:58:dd:44:29:41:27:2d:d6:cb:64:1f:4c:ed:7a:
         63:d6:f7:37:de:23:23:be:66:f6:47:82:d7:b7:d3:87:ce:b9:
         a9:ff:59:30:1a:72:89:28:4c:72:b7:19:e7:29:99:8f:d3:e8:
         ec:d8:da:3a:0c:74:3d:c1:69:e9:fb:61:fd:e6:74:0a:3c:62:
         67:a4:c3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:23:33 2026 by rpki-client