Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft
File:                     FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft (raw, json)
Hash identifier:          zmAIiwH4Xri2oPOsbpZWe2AajZQNzxVXPI70f2OsoI8=
Subject key identifier:   9E:56:FE:29:F9:70:8D:0A:9F:BD:A8:5D:61:2D:79:16:18:75:2C:7C
Authority key identifier: FD:F1:33:A9:8D:C5:9C:CC:12:3E:02:6C:4F:29:A5:E9:01:26:7E:C2
Certificate issuer:       /CN=FDF133A98DC59CCC123E026C4F29A5E901267EC2
Certificate serial:       1177C63542B33ED4363442E1EF26E264C1E69AB7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FDF133A98DC59CCC123E026C4F29A5E901267EC2.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft
Manifest number:          2C
Signing time:             Fri 12 Jun 2026 22:43:19 +0000
Manifest this update:     Fri 12 Jun 2026 22:38:19 +0000
Manifest next update:     Sun 14 Jun 2026 02:33:19 +0000
Files and hashes:         1: FDF133A98DC59CCC123E026C4F29A5E901267EC2.crl (hash: JKS4FFIUYdjpU+X5rB9U3pviaB7QRqp16KLv4mmbT+U=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FDF133A98DC59CCC123E026C4F29A5E901267EC2.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:77:c6:35:42:b3:3e:d4:36:34:42:e1:ef:26:e2:64:c1:e6:9a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF133A98DC59CCC123E026C4F29A5E901267EC2
        Validity
            Not Before: Jun 12 22:38:19 2026 GMT
            Not After : Jun 14 02:33:19 2026 GMT
        Subject: CN=9E56FE29F9708D0A9FBDA85D612D791618752C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:96:62:f3:6d:ab:e3:de:3c:57:2a:4a:1a:
                    3f:b8:f6:c6:27:b5:91:50:3a:88:6c:f1:c5:01:de:
                    5f:45:ab:5f:c1:f8:41:b8:a3:04:4d:ac:e9:a7:dd:
                    b9:05:16:d2:e4:a3:72:8a:e6:43:06:27:eb:7a:35:
                    85:66:4a:d1:56:ca:3c:7f:a8:ba:ea:92:fe:d6:33:
                    59:76:d4:35:f2:a6:7c:6e:6a:1d:26:c0:b9:91:70:
                    2d:fb:bd:c7:a4:99:48:03:a8:03:38:3f:84:89:0d:
                    ac:24:e7:cc:1b:d7:9f:7e:c0:7d:49:e2:46:77:3f:
                    bf:5b:2e:f0:01:8b:ac:9f:12:ab:5b:f2:a1:29:de:
                    30:34:01:89:f3:46:39:92:9b:32:89:5d:17:af:60:
                    1f:b8:c7:a8:7e:f8:a6:06:4f:c7:6d:d1:8d:b1:12:
                    fc:78:1b:de:18:c2:73:16:00:dc:ba:0e:66:1d:ff:
                    69:c9:23:00:e9:71:01:ca:f9:8b:80:f2:07:e1:9b:
                    ba:3b:5d:89:d0:85:f5:a9:9a:07:67:50:38:e0:d7:
                    4d:a0:ba:ae:90:f5:e0:3c:f9:72:a8:69:3f:e8:cd:
                    ec:12:fc:22:8c:69:1d:65:10:f3:e1:38:9b:10:06:
                    63:ec:d2:ba:5a:48:4b:fb:c5:03:6d:b9:fa:4f:cb:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:56:FE:29:F9:70:8D:0A:9F:BD:A8:5D:61:2D:79:16:18:75:2C:7C
            X509v3 Authority Key Identifier:
                keyid:FD:F1:33:A9:8D:C5:9C:CC:12:3E:02:6C:4F:29:A5:E9:01:26:7E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FDF133A98DC59CCC123E026C4F29A5E901267EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/0/FDF133A98DC59CCC123E026C4F29A5E901267EC2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:60:dc:0b:5d:d4:dc:dc:86:89:5d:5f:c6:d5:b5:72:55:01:
         39:f7:04:d8:ef:ec:ce:c5:82:7a:7a:83:4f:48:d8:64:a6:6f:
         94:1c:c0:20:96:cc:f7:9a:ee:b0:33:a6:78:dc:97:53:46:35:
         94:c6:27:e6:77:46:bc:62:41:20:79:1d:d0:10:c2:1a:02:15:
         a9:b5:9b:1c:94:97:02:c2:31:77:b3:dc:f4:a2:88:52:39:5b:
         55:65:71:c5:24:08:66:d4:bd:3b:bb:01:13:58:b2:87:08:a7:
         39:61:91:74:66:ac:a0:eb:89:23:e1:13:08:5b:aa:0b:7b:f4:
         3e:e6:71:a7:d1:2f:09:4f:9c:cf:df:f2:ef:dd:b6:f7:c7:98:
         67:c3:aa:1b:a8:cd:fb:f7:fd:64:44:38:2b:23:6c:4d:b8:bc:
         98:5a:d4:7d:09:a9:d9:b4:37:bf:9a:c3:07:87:32:90:26:ca:
         e3:4d:26:41:16:27:41:1a:3b:93:7a:c4:94:59:c0:3a:81:b5:
         4a:00:b2:a1:0f:bd:89:40:71:d1:ae:5e:e9:0e:10:e0:e5:da:
         b5:a6:22:d4:be:a6:a5:f9:71:77:65:e6:3f:1c:9e:49:2a:a0:
         65:ee:d8:83:53:9f:db:2a:49:50:71:11:94:1b:b2:25:75:24:
         a4:3e:da:09
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUEXfGNUKzPtQ2NELh7ybiZMHmmrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkRGMTMzQTk4REM1OUNDQzEyM0UwMjZDNEYyOUE1RTkw
MTI2N0VDMjAeFw0yNjA2MTIyMjM4MTlaFw0yNjA2MTQwMjMzMTlaMDMxMTAvBgNV
BAMTKDlFNTZGRTI5Rjk3MDhEMEE5RkJEQTg1RDYxMkQ3OTE2MTg3NTJDN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjgJZi822r4948VypKGj+49sYn
tZFQOohs8cUB3l9Fq1/B+EG4owRNrOmn3bkFFtLko3KK5kMGJ+t6NYVmStFWyjx/
qLrqkv7WM1l21DXypnxuah0mwLmRcC37vcekmUgDqAM4P4SJDawk58wb159+wH1J
4kZ3P79bLvABi6yfEqtb8qEp3jA0AYnzRjmSmzKJXRevYB+4x6h++KYGT8dt0Y2x
Evx4G94YwnMWANy6DmYd/2nJIwDpcQHK+YuA8gfhm7o7XYnQhfWpmgdnUDjg102g
uq6Q9eA8+XKoaT/ozewS/CKMaR1lEPPhOJsQBmPs0rpaSEv7xQNtufpPy/PNAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUnlb+KflwjQqfvahdYS15Fhh1LHwwHwYDVR0j
BBgwFoAU/fEzqY3FnMwSPgJsTyml6QEmfsIwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR01JQ0xP
VURfUC8wL0ZERjEzM0E5OERDNTlDQ0MxMjNFMDI2QzRGMjlBNUU5MDEyNjdFQzIu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvRkRGMTMzQTk4REM1OUNDQzEyM0UwMjZD
NEYyOUE1RTkwMTI2N0VDMi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dNSUNMT1VEX1AvMC9GREYx
MzNBOThEQzU5Q0NDMTIzRTAyNkM0RjI5QTVFOTAxMjY3RUMyLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
O2DcC13U3NyGiV1fxtW1clUBOfcE2O/szsWCenqDT0jYZKZvlBzAIJbM95rusDOm
eNyXU0Y1lMYn5ndGvGJBIHkd0BDCGgIVqbWbHJSXAsIxd7Pc9KKIUjlbVWVxxSQI
ZtS9O7sBE1iyhwinOWGRdGasoOuJI+ETCFuqC3v0PuZxp9EvCU+cz9/y792298eY
Z8OqG6jN+/f9ZEQ4KyNsTbi8mFrUfQmp2bQ3v5rDB4cykCbK400mQRYnQRo7k3rE
lFnAOoG1SgCyoQ+9iUBx0a5e6Q4Q4OXataYi1L6mpflxd2XmPxyeSSqgZe7Yg1Of
2ypJUHERlBuyJXUkpD7aCQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:05 2026 by rpki-client