Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
File:                     1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft (raw, json)
Hash identifier:          xOeGnIDDnJSjAqM3BEWiUYAUZkRpA2G3rBPtT4HAOYI=
Subject key identifier:   81:8E:5A:B5:FF:1B:6B:0B:2F:4B:18:41:7A:56:9E:D7:69:1E:B7:89
Authority key identifier: 16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
Certificate issuer:       /CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
Certificate serial:       474D63122AB82F93C8F52804FFFB883411902760
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
Manifest number:          33
Signing time:             Wed 17 Jun 2026 05:36:51 +0000
Manifest this update:     Wed 17 Jun 2026 05:31:51 +0000
Manifest next update:     Thu 18 Jun 2026 06:43:51 +0000
Files and hashes:         1: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl (hash: tfDG00Dbzuj27BMA6ZE+aqXAZRxp293HHlSbA0Q5ju4=)
                          2: 3135312e3135382e38382e302f32332d3234203d3e20313331363332.roa (hash: c6jDK+d+OW0nq16fGHUI84OiS+BXXy5ZOIm0keyUDog=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl
                          rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 06:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:4d:63:12:2a:b8:2f:93:c8:f5:28:04:ff:fb:88:34:11:90:27:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
        Validity
            Not Before: Jun 17 05:31:51 2026 GMT
            Not After : Jun 18 06:43:51 2026 GMT
        Subject: CN=818E5AB5FF1B6B0B2F4B18417A569ED7691EB789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:e9:a9:c3:b2:0d:64:a1:4e:e9:2e:50:5d:
                    da:de:9c:55:45:0b:d5:73:5b:20:28:6f:9f:af:45:
                    29:75:d4:38:c3:22:8e:2e:c1:ef:1a:00:5b:76:c8:
                    3b:53:d6:11:f9:e5:04:98:7c:91:d0:4a:41:60:c0:
                    b5:a4:c8:b8:e0:14:57:60:49:50:75:1f:58:cd:f3:
                    c8:e9:71:8b:0e:67:2a:9f:40:c7:98:8d:c9:88:96:
                    77:d6:92:a6:2b:ae:26:8a:99:78:aa:96:41:de:b8:
                    5a:26:af:43:5d:c3:d3:7a:81:39:89:d6:0c:e5:da:
                    8c:f3:ab:a1:fc:79:80:62:55:a5:5e:d0:f7:ea:c0:
                    1e:6a:00:f3:04:cf:89:15:bb:67:ef:1a:15:88:f3:
                    2e:14:fe:a2:9b:fc:01:63:01:4a:2e:29:0f:2c:1f:
                    73:38:6c:fc:96:94:ee:ba:1d:db:17:9d:6f:13:9a:
                    13:fc:73:5b:0a:be:5b:4e:9e:ef:e9:4a:29:70:2b:
                    b9:60:d9:81:7a:5c:63:55:ce:bd:12:f7:38:15:ad:
                    29:80:3b:8c:8d:8f:ff:f0:ef:a2:9f:ec:06:7a:60:
                    26:c1:f4:6d:a7:52:05:6e:42:2c:03:d0:c8:ec:08:
                    29:83:14:a2:5e:ff:e2:9e:22:04:aa:3f:d5:31:74:
                    44:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8E:5A:B5:FF:1B:6B:0B:2F:4B:18:41:7A:56:9E:D7:69:1E:B7:89
            X509v3 Authority Key Identifier:
                keyid:16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:0d:92:e6:fb:77:06:91:b2:dd:2a:39:b4:61:e6:37:91:5a:
         36:3f:45:4f:c2:08:f5:ae:b3:ef:cb:77:78:fc:59:55:a5:a8:
         04:72:78:68:2b:ea:34:81:de:88:90:fc:76:d1:f5:cb:64:ef:
         b1:cc:6a:a7:a8:60:7d:06:ea:5e:f2:2d:8a:3c:39:5d:52:21:
         70:d0:64:f7:e7:5e:6a:ba:19:64:5c:67:2e:60:68:f6:9c:7a:
         45:2d:66:ca:db:ac:85:c9:59:5f:cf:c1:24:e3:a0:fa:1f:9d:
         d8:fc:ca:c7:59:cd:81:a4:61:8e:ce:b2:91:d1:dc:54:db:6d:
         32:bb:c4:ef:3b:c8:b0:e6:15:66:af:ca:43:c2:02:2c:5f:cd:
         ff:34:53:45:da:0d:08:b3:97:b5:9c:0d:8b:aa:29:47:af:27:
         15:f6:1b:ae:fb:b6:b6:bf:05:30:44:d6:00:99:64:ba:e9:c0:
         f6:64:af:32:a5:ed:78:90:4f:80:ba:80:d1:30:d7:ca:83:40:
         d1:73:c3:c6:9e:8a:30:f6:51:ae:51:0e:d3:cd:b5:e7:15:68:
         ee:14:a9:ce:6c:89:58:e9:68:9e:8b:88:65:4e:69:27:4e:0e:
         a7:b9:92:24:8a:f0:3f:c7:cd:6e:16:e8:5c:24:d7:ff:d9:6b:
         82:64:1f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:39:05 2026 by rpki-client