Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.mft
File:                     2ACE8EBB5D802619255E989E55D535E4E07C90CB.mft (raw, json)
Hash identifier:          Vt1yD5PPCpNAGBTn7KX8S3uJ4eOyrs3FxXOQ7h4kGHo=
Subject key identifier:   44:E0:59:A9:F7:59:8A:D5:33:DA:10:72:7E:AD:6F:F2:B0:55:16:A6
Authority key identifier: 2A:CE:8E:BB:5D:80:26:19:25:5E:98:9E:55:D5:35:E4:E0:7C:90:CB
Certificate issuer:       /CN=2ACE8EBB5D802619255E989E55D535E4E07C90CB
Certificate serial:       639CB768927DD655FA356F7D005A00F6ECA88B55
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2ACE8EBB5D802619255E989E55D535E4E07C90CB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.mft
Manifest number:          D0
Signing time:             Sun 11 Oct 2026 07:57:11 +0000
Manifest this update:     Sun 11 Oct 2026 07:52:11 +0000
Manifest next update:     Mon 12 Oct 2026 10:51:11 +0000
Files and hashes:         1: 2ACE8EBB5D802619255E989E55D535E4E07C90CB.crl (hash: qGrS15dU0rrboSsUScqzgba/pRjZGZKu/6iDDDEd79w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.crl
                          rsync://rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2ACE8EBB5D802619255E989E55D535E4E07C90CB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9c:b7:68:92:7d:d6:55:fa:35:6f:7d:00:5a:00:f6:ec:a8:8b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ACE8EBB5D802619255E989E55D535E4E07C90CB
        Validity
            Not Before: Oct 11 07:52:11 2026 GMT
            Not After : Oct 12 10:51:11 2026 GMT
        Subject: CN=44E059A9F7598AD533DA10727EAD6FF2B05516A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:52:75:22:31:6d:73:ac:d9:10:33:56:8b:32:
                    2e:1b:cb:7f:6a:7b:83:8b:15:ee:24:fa:e0:c7:bd:
                    e9:54:46:ed:a8:a0:17:5f:6f:cc:d0:3d:97:63:ac:
                    3d:fc:91:29:cc:03:fe:f1:a8:a9:45:da:d4:80:4d:
                    5f:13:78:59:63:79:4c:23:91:28:10:f0:3b:e3:d2:
                    01:60:14:82:ab:86:35:5f:22:da:f2:81:e2:46:bb:
                    2c:39:95:5e:57:dd:b8:fa:56:44:44:c8:75:7a:fd:
                    98:83:b7:01:62:38:d6:31:b5:19:00:30:97:e4:f1:
                    c3:af:8a:79:5a:0a:e7:a0:71:1f:b2:e8:2f:72:e4:
                    9e:33:63:d2:12:7b:4f:78:bb:86:f1:f9:03:b9:34:
                    99:9e:3e:3d:25:e5:58:cf:bf:bc:d0:88:3a:a4:f3:
                    67:c3:91:73:50:de:d3:71:90:65:c3:06:a2:2b:25:
                    cd:0c:87:e0:78:31:71:86:fc:a3:e2:c7:a7:96:fb:
                    86:8b:99:ec:c1:de:95:a5:a7:f8:81:58:12:d5:54:
                    9d:95:a6:1e:b3:86:16:67:e3:63:36:36:e3:95:c2:
                    a4:bb:1d:a7:0e:ee:b4:dd:f7:cd:9b:a9:e8:cf:f9:
                    3c:c0:87:a6:11:d9:d2:89:e9:30:5c:ed:e7:29:dd:
                    ea:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E0:59:A9:F7:59:8A:D5:33:DA:10:72:7E:AD:6F:F2:B0:55:16:A6
            X509v3 Authority Key Identifier:
                keyid:2A:CE:8E:BB:5D:80:26:19:25:5E:98:9E:55:D5:35:E4:E0:7C:90:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2ACE8EBB5D802619255E989E55D535E4E07C90CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKGAME/0/2ACE8EBB5D802619255E989E55D535E4E07C90CB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:74:a5:ac:63:ba:4a:66:30:e7:b2:fd:82:14:b3:9c:8d:20:
         01:61:80:e9:38:99:3e:3f:7f:80:d1:cd:c0:d9:f8:17:2f:ab:
         9a:0f:c1:2d:07:64:ca:3a:a1:68:4b:5e:75:87:b4:0f:87:70:
         0a:2e:d8:5a:b9:62:6e:0d:03:4d:a0:69:c8:b1:01:d4:b8:d6:
         32:a7:9c:fb:ce:0b:c3:ad:45:bf:b8:e2:7a:30:33:5b:72:8f:
         20:8c:d9:a0:f7:d9:eb:e2:f6:ba:d1:ff:0a:1f:67:42:d4:b7:
         b4:a8:96:8b:1e:6e:84:1c:a4:81:ee:61:c2:1c:32:17:aa:55:
         f7:5d:dd:25:a5:e6:05:5b:84:b7:29:7b:82:69:ef:81:6a:cb:
         3b:95:05:25:58:39:ef:d6:1b:b8:b1:27:41:b5:b3:fc:d0:cf:
         42:f3:92:b7:7d:87:26:6b:e6:f0:9f:36:6c:84:82:72:04:0b:
         6e:1c:6e:97:a2:7d:4c:d8:b5:af:1a:3d:51:86:98:21:3c:19:
         9c:de:d9:c6:c1:f6:9b:8c:b8:00:4b:98:71:b1:8e:5c:c1:b5:
         66:b4:57:2f:f5:9b:47:33:86:56:0a:ba:7a:a9:a9:1a:a2:02:
         7f:fa:c6:a7:84:96:59:79:c4:21:e5:15:7a:77:a5:a1:b6:32:
         62:71:27:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:18:05 2026 by rpki-client