Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
File:                     D1EE894ECDA357FF3B846E2660D95F0535127E79.mft (raw, json)
Hash identifier:          Lp//XmY7TVT2Zx0WeICSI+wkhOh9IRH1dYbHiJ0AQCA=
Subject key identifier:   CC:FA:3D:91:88:8E:07:B1:AB:07:F1:9D:92:37:48:BA:64:C4:37:ED
Authority key identifier: D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79
Certificate issuer:       /CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
Certificate serial:       09B8A5FCFA81C3385EEA85B6B35F36B8543629E2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
Manifest number:          B2
Signing time:             Mon 21 Sep 2026 02:30:03 +0000
Manifest this update:     Mon 21 Sep 2026 02:25:03 +0000
Manifest next update:     Tue 22 Sep 2026 03:26:03 +0000
Files and hashes:         1: D1EE894ECDA357FF3B846E2660D95F0535127E79.crl (hash: RsyFKyhuOcLVm8a3T75cFtVdwvyFFOe2ef3fBKTIDC4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl
                          rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b8:a5:fc:fa:81:c3:38:5e:ea:85:b6:b3:5f:36:b8:54:36:29:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
        Validity
            Not Before: Sep 21 02:25:03 2026 GMT
            Not After : Sep 22 03:26:03 2026 GMT
        Subject: CN=CCFA3D91888E07B1AB07F19D923748BA64C437ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:74:37:dc:62:bf:b4:db:10:af:25:60:de:
                    76:a0:c6:3e:b4:4e:e8:b1:35:c9:3c:42:87:43:45:
                    88:50:32:d5:e8:ce:6c:c7:63:3a:62:61:d0:45:5b:
                    1e:9d:01:5c:dc:89:01:62:d6:03:0a:7c:49:44:a1:
                    71:3f:56:e5:28:4e:0b:d1:93:fe:df:89:fb:b1:0c:
                    3a:bc:3e:2f:1e:00:f2:64:aa:80:8a:6c:66:02:ef:
                    a0:74:25:b1:d0:38:f9:4b:92:17:89:4f:bd:a2:af:
                    b3:5d:db:0a:ec:6a:a9:d6:e7:3e:09:32:45:d6:32:
                    be:75:73:bd:fe:26:fe:4a:29:cc:e9:8f:b2:fe:9b:
                    d7:ad:a0:6c:db:6a:e4:ca:26:ba:28:97:9f:9a:5a:
                    f6:01:07:38:e2:3e:a3:7c:c8:95:43:9b:b3:6b:5f:
                    ae:6c:c5:20:01:00:0f:ed:6d:77:99:f7:38:70:4b:
                    4e:89:21:67:df:7c:6d:a7:87:13:b6:96:6f:30:97:
                    56:17:ca:b6:e7:f2:42:af:41:ac:2c:08:14:17:4d:
                    c0:9d:e0:36:61:10:d5:10:c5:b3:a2:a9:66:d5:3d:
                    9f:1e:ed:b5:71:31:cc:90:f7:28:13:b9:f2:a3:66:
                    cf:d8:59:be:1d:0a:63:f0:21:ea:e6:8f:1d:61:51:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FA:3D:91:88:8E:07:B1:AB:07:F1:9D:92:37:48:BA:64:C4:37:ED
            X509v3 Authority Key Identifier:
                keyid:D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:13:c6:5e:96:2e:56:d3:1a:e4:75:ed:4b:79:f0:2b:43:e2:
         a9:74:40:03:4b:a2:55:b4:15:74:51:83:11:31:1b:35:e0:a5:
         ba:c5:51:50:d7:0a:76:b7:50:14:2a:0b:7d:23:6c:3f:57:b6:
         7b:ef:5d:41:0e:19:94:72:04:bf:e4:31:57:92:bc:30:ba:41:
         79:1d:6e:1f:63:b2:c8:31:9f:07:09:5b:0f:0c:71:a0:d6:f3:
         40:85:e4:d1:04:3d:91:ea:c9:44:02:7a:9a:ed:f2:37:40:b6:
         8e:20:6d:4d:cd:80:fe:40:d6:67:a8:87:2f:e5:09:94:c0:65:
         21:05:68:59:e2:5b:bb:6c:7c:c5:15:cb:64:25:8c:e1:ef:10:
         f8:a8:af:29:f2:d0:c9:a5:c9:12:97:32:96:55:c8:94:90:7f:
         65:1c:1a:52:47:40:e5:b0:de:df:7e:9d:f0:ab:2c:99:21:0f:
         d1:d1:85:06:38:7d:66:bc:ae:09:c8:bc:69:7c:e0:fa:47:8a:
         f5:14:b1:fe:21:85:cd:15:df:be:84:14:12:de:81:a1:a6:93:
         48:2b:5a:5e:76:52:e2:aa:73:cc:d1:be:29:12:68:98:66:75:
         65:4e:57:69:14:d9:41:43:4d:d2:5e:72:da:ed:5e:0b:5d:11:
         ea:f9:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:05:30 2026 by rpki-client