Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/RUIKE/0/1D963FA6AA9567D65CC0F02634BA04F35A360003.mft
File:                     1D963FA6AA9567D65CC0F02634BA04F35A360003.mft (raw, json)
Hash identifier:          +I4Gu1Ol2XPLt+v8nMS50NWZ4j81BAluMRBfruWj8y4=
Subject key identifier:   AD:AE:7E:F3:F2:B1:9F:4F:0E:B5:99:0D:30:9D:2A:52:37:C0:90:02
Authority key identifier: 1D:96:3F:A6:AA:95:67:D6:5C:C0:F0:26:34:BA:04:F3:5A:36:00:03
Certificate issuer:       /CN=1D963FA6AA9567D65CC0F02634BA04F35A360003
Certificate serial:       059F9779E4006237C8A058C7DD1E725F199865CE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1D963FA6AA9567D65CC0F02634BA04F35A360003.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/RUIKE/0/1D963FA6AA9567D65CC0F02634BA04F35A360003.mft
Manifest number:          B4
Signing time:             Mon 21 Sep 2026 07:16:29 +0000
Manifest this update:     Mon 21 Sep 2026 07:11:29 +0000
Manifest next update:     Tue 22 Sep 2026 09:31:29 +0000
Files and hashes:         1: 1D963FA6AA9567D65CC0F02634BA04F35A360003.crl (hash: VwtFDtgOGMZDmKugcz/3u3tXDBlpn+xe/R2Gsj7mPtI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/RUIKE/0/1D963FA6AA9567D65CC0F02634BA04F35A360003.crl
                          rsync://rpkica.twnic.tw/rpki/RUIKE/0/1D963FA6AA9567D65CC0F02634BA04F35A360003.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1D963FA6AA9567D65CC0F02634BA04F35A360003.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9f:97:79:e4:00:62:37:c8:a0:58:c7:dd:1e:72:5f:19:98:65:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D963FA6AA9567D65CC0F02634BA04F35A360003
        Validity
            Not Before: Sep 21 07:11:29 2026 GMT
            Not After : Sep 22 09:31:29 2026 GMT
        Subject: CN=ADAE7EF3F2B19F4F0EB5990D309D2A5237C09002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:e3:a2:c9:e2:86:d8:af:60:6d:8f:c1:0e:
                    c1:ed:98:b9:14:f9:97:f2:cf:59:da:4e:34:f0:04:
                    2b:a1:2d:9f:04:e7:fe:18:6d:28:0e:2b:2c:c2:11:
                    85:ab:f1:fd:4c:79:56:67:ab:23:4d:64:e4:26:2f:
                    93:c1:84:dc:ee:28:2e:58:fe:fe:3a:44:c4:8a:63:
                    51:ed:c9:3c:c4:f3:a6:a1:d9:63:b1:8d:1a:9c:4e:
                    7b:a7:56:ed:ca:cc:81:cf:97:01:8f:b0:2d:e4:b3:
                    eb:e1:d9:eb:0b:dc:48:df:08:3d:77:49:01:01:e7:
                    4d:07:7b:ce:59:ab:4f:f1:5e:75:6f:a2:33:15:45:
                    de:6f:75:1e:16:25:ef:89:62:83:f6:28:16:62:3d:
                    3e:3d:ea:d8:6a:d3:eb:be:4b:3e:6c:8e:56:4e:ae:
                    ec:54:f1:3b:ec:75:a6:11:e4:05:0b:ae:72:bd:f7:
                    3a:61:98:11:ea:e1:60:59:a2:7e:70:b8:08:ce:c8:
                    75:12:19:d1:da:83:4a:a4:6c:03:c6:9e:d7:f3:7d:
                    8e:32:06:f0:8c:0d:d4:0a:e9:9b:cd:f2:4e:03:01:
                    d4:6b:43:79:6e:2b:72:31:cf:e3:85:95:8b:19:e9:
                    48:81:81:c5:1d:93:9f:94:6f:95:35:c7:61:cd:69:
                    09:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AE:7E:F3:F2:B1:9F:4F:0E:B5:99:0D:30:9D:2A:52:37:C0:90:02
            X509v3 Authority Key Identifier:
                keyid:1D:96:3F:A6:AA:95:67:D6:5C:C0:F0:26:34:BA:04:F3:5A:36:00:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/RUIKE/0/1D963FA6AA9567D65CC0F02634BA04F35A360003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1D963FA6AA9567D65CC0F02634BA04F35A360003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RUIKE/0/1D963FA6AA9567D65CC0F02634BA04F35A360003.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2d:a8:6d:8b:f3:3e:fe:f0:63:14:cb:b7:cc:f6:c4:c1:bb:
         fd:18:6b:a5:98:d6:f9:71:12:76:e7:68:f0:49:16:ac:b3:1c:
         f4:95:81:90:82:44:95:99:78:95:79:14:fb:66:61:75:e4:66:
         3c:84:d5:84:03:64:6e:cb:39:de:5a:59:8a:4a:0f:b6:62:a3:
         29:1e:5a:4b:94:2b:dc:ed:73:58:a0:8a:b5:c7:f5:4b:8e:36:
         96:48:70:71:61:87:eb:cc:c6:09:fc:b2:54:4f:cb:6c:59:c9:
         b6:8a:fa:ee:9a:ec:fe:a5:9a:70:32:1d:ec:29:68:d7:50:32:
         5b:46:50:3c:61:d4:51:ef:0e:d2:37:af:e4:e3:63:07:63:14:
         76:f0:a3:23:22:2f:42:82:bb:65:36:ed:eb:c6:bc:32:c0:08:
         78:b9:d6:c3:40:98:fc:d4:ee:91:d7:d7:59:6d:93:bc:02:93:
         be:ec:e8:74:1d:dd:09:1b:94:01:3f:0e:c0:d2:46:72:af:88:
         eb:06:52:44:2e:95:34:17:3c:dc:c8:cc:4e:e3:8f:87:74:99:
         d7:02:92:f0:65:8e:78:c4:06:b1:db:45:cd:1c:58:86:db:68:
         63:9c:12:9a:2a:87:4f:42:ed:fa:56:d5:83:9b:b8:64:bb:28:
         b8:bb:c4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:09:18 2026 by rpki-client