Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft
File:                     FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft (raw, json)
Hash identifier:          OdsxfzB8X9jZ4UnOYvjdQEvM9MyCNAXCUWWyPuoJd3E=
Subject key identifier:   69:DD:A2:B8:65:5B:AE:3D:BF:BB:7B:BF:6A:C6:2A:58:C0:9C:08:98
Authority key identifier: FD:F1:33:A9:8D:C5:9C:CC:12:3E:02:6C:4F:29:A5:E9:01:26:7E:C2
Certificate issuer:       /CN=FDF133A98DC59CCC123E026C4F29A5E901267EC2
Certificate serial:       49E25D445358BA428719B1E75503DC30EAD67211
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FDF133A98DC59CCC123E026C4F29A5E901267EC2.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft
Manifest number:          68
Signing time:             Tue 28 Jul 2026 06:22:42 +0000
Manifest this update:     Tue 28 Jul 2026 06:17:42 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:42 +0000
Files and hashes:         1: FDF133A98DC59CCC123E026C4F29A5E901267EC2.crl (hash: U0cTtrdc4iICJ1mLfkEKojuTWODrCM43CaBkEqz+q5s=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FDF133A98DC59CCC123E026C4F29A5E901267EC2.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e2:5d:44:53:58:ba:42:87:19:b1:e7:55:03:dc:30:ea:d6:72:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF133A98DC59CCC123E026C4F29A5E901267EC2
        Validity
            Not Before: Jul 28 06:17:42 2026 GMT
            Not After : Jul 29 10:01:42 2026 GMT
        Subject: CN=69DDA2B8655BAE3DBFBB7BBF6AC62A58C09C0898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e2:c8:bb:4d:95:ac:09:40:16:17:3a:85:e1:
                    07:ba:20:72:d0:3a:74:b0:85:44:c1:68:4d:4b:46:
                    d8:10:72:2c:b2:2f:42:69:5c:b9:3a:d3:f4:27:79:
                    a0:45:df:47:e1:a9:21:a1:1b:82:0b:07:da:9d:c5:
                    a5:0e:0a:7d:21:8e:64:cd:ab:7c:65:61:9f:bc:7c:
                    4e:8f:07:82:1e:5e:b4:70:da:12:ee:a6:c2:92:c4:
                    d0:4a:33:a4:94:cf:03:59:90:97:ca:df:5b:2d:d8:
                    ba:46:f8:78:7d:97:18:5f:c3:d3:e3:13:7b:41:cd:
                    e5:1d:bd:50:e0:f2:95:49:c3:ba:8c:ca:e3:ef:34:
                    66:09:8b:4d:b7:3c:bd:4d:ce:14:25:8e:42:82:cc:
                    00:74:5e:39:9b:16:83:c7:1a:06:89:bf:15:de:3b:
                    e0:9c:d3:87:89:b9:bf:d4:c0:4f:3b:85:89:ef:9b:
                    4e:94:4a:d4:3e:56:86:53:41:bc:22:b0:1b:52:ed:
                    b2:8a:ef:8e:60:0c:c6:1b:48:f3:fa:4e:ab:eb:42:
                    ab:37:b1:77:c8:eb:99:8e:37:84:b1:2b:fb:58:ab:
                    e8:9b:1c:35:b5:b2:0d:7f:ed:2e:60:3d:6b:87:eb:
                    08:0e:92:96:42:0f:03:4b:f1:20:37:a9:f7:b3:21:
                    dc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DD:A2:B8:65:5B:AE:3D:BF:BB:7B:BF:6A:C6:2A:58:C0:9C:08:98
            X509v3 Authority Key Identifier:
                keyid:FD:F1:33:A9:8D:C5:9C:CC:12:3E:02:6C:4F:29:A5:E9:01:26:7E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FDF133A98DC59CCC123E026C4F29A5E901267EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:5c:b0:2b:b1:aa:1b:82:43:d1:5f:98:d7:e1:47:7b:53:
         31:df:f3:f7:b8:5c:ee:ca:84:76:65:17:c6:2d:b9:91:b5:13:
         c7:92:26:8c:2c:c4:96:14:15:6b:9a:db:24:71:f3:a7:f0:1d:
         27:87:29:ba:df:6b:82:9a:dd:b0:bb:a8:81:b8:7d:bd:f3:cf:
         40:b6:56:f4:a4:5c:e2:ce:d0:e8:22:62:c4:60:a6:16:20:70:
         2a:fd:8e:01:79:b1:39:08:84:51:8d:ff:2c:d0:dc:15:d1:4f:
         0f:26:a4:51:d2:da:15:76:a6:ea:e1:7f:06:5a:ca:e9:89:2e:
         42:92:b0:be:70:a7:0a:ce:a5:2a:ff:ac:93:97:2d:dc:49:f1:
         07:00:8a:42:68:62:60:e5:30:3e:4e:14:04:1a:a5:af:b7:1c:
         f4:89:3f:76:80:a5:c2:5a:fc:42:c5:87:10:20:71:c7:f7:ac:
         ec:ac:62:03:f9:48:8e:fc:f4:e5:d9:73:d6:8c:9a:f8:f3:fe:
         95:5d:e2:7d:a6:e7:a6:e8:44:95:65:86:ff:95:82:2e:03:7a:
         bf:5e:0d:9c:6a:df:a1:f0:e5:88:c9:32:c1:65:69:36:25:95:
         99:13:36:d9:ac:1d:87:dd:37:87:91:9f:d0:d1:96:0b:74:45:
         82:00:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:22:52 2026 by rpki-client