Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/MYNET/0/F5B0A9BE20A65AD4D8D2CC9F86F3DB14D909C882.mft
File:                     F5B0A9BE20A65AD4D8D2CC9F86F3DB14D909C882.mft (raw, json)
Hash identifier:          gNn4JCpcv2nfP2VRYMtWfp8fk7oHC3SGOhZB6Tt++b4=
Subject key identifier:   D5:0D:9E:69:CE:01:61:D7:D6:C7:4A:53:D2:FE:22:A6:7F:98:DD:E0
Authority key identifier: F5:B0:A9:BE:20:A6:5A:D4:D8:D2:CC:9F:86:F3:DB:14:D9:09:C8:82
Certificate issuer:       /CN=F5B0A9BE20A65AD4D8D2CC9F86F3DB14D909C882
Certificate serial:       620680C4492A5B6901B1A1B6383964EC3FC21261
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5B0A9BE20A65AD4D8D2CC9F86F3DB14D909C882.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MYNET/0/F5B0A9BE20A65AD4D8D2CC9F86F3DB14D909C882.mft
Manifest number:          B1
Signing time:             Mon 21 Sep 2026 08:41:42 +0000
Manifest this update:     Mon 21 Sep 2026 08:36:42 +0000
Manifest next update:     Tue 22 Sep 2026 10:37:42 +0000
Files and hashes:         1: F5B0A9BE20A65AD4D8D2CC9F86F3DB14D909C882.crl (hash: 1LPOW7FgPvvdspQqJAlc9PsPSi7Y0NW4OfDpRm8KANU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/MYNET/0/F5B0A9BE20A65AD4D8D2CC9F86F3DB14D909C882.crl
                          rsync://rpkica.twnic.tw/rpki/MYNET/0/F5B0A9BE20A65AD4D8D2CC9F86F3DB14D909C882.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5B0A9BE20A65AD4D8D2CC9F86F3DB14D909C882.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:06:80:c4:49:2a:5b:69:01:b1:a1:b6:38:39:64:ec:3f:c2:12:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B0A9BE20A65AD4D8D2CC9F86F3DB14D909C882
        Validity
            Not Before: Sep 21 08:36:42 2026 GMT
            Not After : Sep 22 10:37:42 2026 GMT
        Subject: CN=D50D9E69CE0161D7D6C74A53D2FE22A67F98DDE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:a2:e7:3a:cc:a8:fb:7e:81:d9:39:4e:98:
                    58:5d:10:66:62:67:42:5c:55:cb:66:ca:ef:0c:5d:
                    20:dd:d9:b1:71:47:8f:1d:de:fc:da:a4:07:52:5c:
                    ce:62:f0:b4:e5:58:6b:b2:6c:17:d0:c1:5a:b4:20:
                    84:3c:a0:d5:7a:e1:52:7c:6e:28:2c:5d:5b:b7:7d:
                    8e:76:56:fc:58:ea:3e:1e:96:92:15:0c:e5:7f:52:
                    ab:f8:c0:85:a3:fd:a1:5e:5c:cc:47:b2:13:3a:ed:
                    e6:bb:2f:03:72:44:0e:da:9c:a2:e1:96:bb:e6:dc:
                    55:d9:2e:1f:b8:e3:33:51:9f:fa:d9:29:75:26:d6:
                    b0:fb:fa:31:69:6a:f7:fa:c9:93:ab:0d:74:1e:50:
                    2c:08:88:e4:ee:f4:76:64:b0:dc:a8:4f:70:da:51:
                    91:a7:32:e9:74:a6:f4:26:6b:2a:fa:7c:9a:1f:01:
                    28:61:69:d9:dd:22:b8:36:3c:bb:78:29:a2:7c:cc:
                    ec:ca:c6:66:69:13:2e:d7:22:e9:a5:ab:df:1b:59:
                    33:b0:8f:ef:48:9b:87:4b:05:0b:2e:c3:27:17:70:
                    33:9e:5f:61:46:80:0f:d0:aa:bc:c5:c2:b0:dd:dc:
                    7c:59:e9:bf:89:32:95:10:44:09:2e:25:f2:cc:9f:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0D:9E:69:CE:01:61:D7:D6:C7:4A:53:D2:FE:22:A6:7F:98:DD:E0
            X509v3 Authority Key Identifier:
                keyid:F5:B0:A9:BE:20:A6:5A:D4:D8:D2:CC:9F:86:F3:DB:14:D9:09:C8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MYNET/0/F5B0A9BE20A65AD4D8D2CC9F86F3DB14D909C882.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F5B0A9BE20A65AD4D8D2CC9F86F3DB14D909C882.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MYNET/0/F5B0A9BE20A65AD4D8D2CC9F86F3DB14D909C882.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:38:83:ff:72:e8:9c:2b:37:d3:9a:3e:46:87:ca:1b:aa:72:
         57:5c:e9:7e:f8:a3:9e:4b:0a:34:00:73:9b:69:86:62:13:51:
         c6:03:d9:c8:2d:31:95:36:64:25:3d:e2:91:96:15:92:2e:41:
         67:34:a7:1c:67:5d:61:ad:4c:50:de:38:34:4a:14:d8:6a:7e:
         f4:09:ac:11:e7:ae:5e:54:03:f7:3c:9c:c2:62:03:5d:b0:3e:
         05:1e:0f:d5:25:83:fa:31:01:d7:cb:4b:46:2e:97:59:92:41:
         3c:59:ad:49:3a:51:42:5c:12:ba:d2:d8:bf:ff:63:f2:9d:e2:
         3e:1c:2d:bf:fa:1e:64:79:00:7f:13:0a:31:88:5d:fd:7b:58:
         ce:47:b4:10:39:c2:a2:f8:8a:10:c7:ae:c3:87:2e:54:a3:5b:
         d7:a6:4a:9d:3c:ac:4b:8a:ad:0c:77:64:c3:b1:68:0d:ea:7a:
         6d:f7:e9:ee:8d:6c:d1:9b:92:e7:b2:32:e2:ff:6a:ae:49:26:
         b0:60:33:bf:a0:91:34:cf:40:41:04:6c:9f:46:24:8b:36:1f:
         5c:16:09:be:02:f3:17:de:6f:57:9e:73:2b:bb:22:df:ec:f8:
         ba:bb:8f:93:77:d7:74:87:45:0e:5a:5f:61:c4:6e:25:63:50:
         cf:ab:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:55:31 2026 by rpki-client