Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.mft
File:                     08CD1627824D54B3123EE8D800B211C5C2457F0B.mft (raw, json)
Hash identifier:          aHNGovzNHnaD1WTf8IRfvGXdjb0je2th7s46E0xPRbo=
Subject key identifier:   84:9E:95:78:BB:A9:1E:54:45:0B:23:F2:8E:34:82:E8:F1:00:65:06
Authority key identifier: 08:CD:16:27:82:4D:54:B3:12:3E:E8:D8:00:B2:11:C5:C2:45:7F:0B
Certificate issuer:       /CN=08CD1627824D54B3123EE8D800B211C5C2457F0B
Certificate serial:       18C3A4BA7B7E9493643655335F953A649DCA8D95
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08CD1627824D54B3123EE8D800B211C5C2457F0B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.mft
Manifest number:          B2
Signing time:             Tue 22 Sep 2026 05:13:47 +0000
Manifest this update:     Tue 22 Sep 2026 05:08:47 +0000
Manifest next update:     Wed 23 Sep 2026 06:08:47 +0000
Files and hashes:         1: 08CD1627824D54B3123EE8D800B211C5C2457F0B.crl (hash: 3d65bcmA4/mzUCT7AKwNR0i1jqenvUXoyDFrCzbbqiI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.crl
                          rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08CD1627824D54B3123EE8D800B211C5C2457F0B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 22:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c3:a4:ba:7b:7e:94:93:64:36:55:33:5f:95:3a:64:9d:ca:8d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08CD1627824D54B3123EE8D800B211C5C2457F0B
        Validity
            Not Before: Sep 22 05:08:47 2026 GMT
            Not After : Sep 23 06:08:47 2026 GMT
        Subject: CN=849E9578BBA91E54450B23F28E3482E8F1006506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:df:9f:33:d8:f8:d1:6c:66:7d:86:16:d2:
                    1f:ef:0f:d2:53:cc:e8:4f:cb:ce:db:ec:d9:fc:89:
                    ff:30:0e:71:94:b1:94:62:8e:6b:f3:22:d4:db:07:
                    09:58:94:fc:a6:b5:1d:5c:1a:a4:01:54:94:ee:b7:
                    48:40:29:b3:1d:28:9c:ec:c7:39:b5:83:a9:06:d3:
                    39:12:99:df:8b:8a:83:f3:3a:43:0b:aa:a0:4b:df:
                    45:0c:5b:5f:8a:f6:b6:5e:69:ab:47:89:8e:01:0e:
                    4b:b0:3e:41:7d:52:a5:82:2d:5e:80:86:27:7b:81:
                    8d:c5:67:f5:98:20:1a:b8:99:fe:07:d3:9d:5c:e7:
                    4c:99:3e:6d:e6:29:cf:f6:01:61:7d:6f:df:15:61:
                    a2:e5:6a:7e:8e:ce:fc:1c:ef:7e:29:40:a9:86:05:
                    1b:d5:f7:1b:72:03:f3:40:2f:c8:ea:c6:72:71:f8:
                    04:10:2d:70:5c:37:03:ac:40:35:c0:cc:4c:6a:ed:
                    e6:e1:b8:83:e1:71:06:38:38:96:a0:59:80:a2:54:
                    5a:9b:22:58:3e:9a:78:37:91:ca:ac:f5:6f:59:82:
                    47:7d:3b:41:5b:86:58:45:24:d1:af:3d:4b:af:12:
                    dd:08:e5:81:bf:73:1e:b5:de:f6:d1:99:aa:40:92:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9E:95:78:BB:A9:1E:54:45:0B:23:F2:8E:34:82:E8:F1:00:65:06
            X509v3 Authority Key Identifier:
                keyid:08:CD:16:27:82:4D:54:B3:12:3E:E8:D8:00:B2:11:C5:C2:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08CD1627824D54B3123EE8D800B211C5C2457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:03:44:16:f2:90:dc:28:98:47:1c:86:ac:a1:18:6a:05:6f:
         78:47:7b:9a:a5:3e:1a:e8:96:45:6b:f9:f7:6a:cd:0e:a8:ba:
         d2:58:29:45:d1:91:ef:fb:69:fa:ba:cf:4a:bd:01:df:21:6d:
         18:44:6d:5f:f7:d8:09:61:30:c0:0c:6b:9d:c6:90:5b:96:96:
         35:38:0f:92:c8:6a:8d:8a:84:3a:83:9d:48:f3:d4:fc:89:89:
         86:96:79:27:b4:bb:cd:25:74:1b:67:a9:dc:41:54:30:df:dd:
         1b:bc:b6:da:34:2f:e0:4a:3d:4d:1e:a9:24:c9:5a:b7:e6:b2:
         ed:83:f9:e1:4c:79:ec:df:cc:f7:45:de:29:ef:e5:8d:4d:92:
         4d:8e:85:c2:38:1b:09:ce:c6:83:69:4f:7d:53:28:7c:f3:b5:
         cb:55:e3:74:d7:36:76:cd:77:d6:1c:e8:1a:26:65:bf:3e:f2:
         78:ba:81:31:cc:3d:af:b8:54:0e:15:37:07:68:c6:78:12:09:
         3f:d9:0a:b8:28:eb:11:2a:a8:69:ff:a0:07:f1:50:7d:6c:8f:
         83:e2:02:d7:13:89:fb:ce:cc:20:78:a2:6a:dc:30:89:9b:15:
         ff:7e:87:eb:0b:7e:67:8c:1b:6a:89:12:b3:65:12:04:66:58:
         26:7d:01:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:54:40 2026 by rpki-client