Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.mft
File:                     08CD1627824D54B3123EE8D800B211C5C2457F0B.mft (raw, json)
Hash identifier:          H+XjY5RrEBWAbS0kJXUzMkOSw11oTK2i4rwsEt1Dwvw=
Subject key identifier:   BC:E4:E5:1F:CC:C4:F0:0F:41:D5:EA:61:A6:32:39:B3:9C:7A:39:C2
Authority key identifier: 08:CD:16:27:82:4D:54:B3:12:3E:E8:D8:00:B2:11:C5:C2:45:7F:0B
Certificate issuer:       /CN=08CD1627824D54B3123EE8D800B211C5C2457F0B
Certificate serial:       7AE2FC249A1BB7B3D82F4FD3BB3443AE59A93813
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08CD1627824D54B3123EE8D800B211C5C2457F0B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.mft
Manifest number:          68
Signing time:             Tue 28 Jul 2026 12:58:59 +0000
Manifest this update:     Tue 28 Jul 2026 12:53:59 +0000
Manifest next update:     Wed 29 Jul 2026 14:23:59 +0000
Files and hashes:         1: 08CD1627824D54B3123EE8D800B211C5C2457F0B.crl (hash: ale4WfN/MKnVezYJQv9UXK9lIAjbx8ObwKWDO2ChE6c=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.crl
                          rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08CD1627824D54B3123EE8D800B211C5C2457F0B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e2:fc:24:9a:1b:b7:b3:d8:2f:4f:d3:bb:34:43:ae:59:a9:38:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08CD1627824D54B3123EE8D800B211C5C2457F0B
        Validity
            Not Before: Jul 28 12:53:59 2026 GMT
            Not After : Jul 29 14:23:59 2026 GMT
        Subject: CN=BCE4E51FCCC4F00F41D5EA61A63239B39C7A39C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:1d:63:0f:52:bb:1e:cd:78:bb:f2:a9:76:
                    a6:cd:a9:0a:46:fa:de:6b:37:eb:5c:7f:8e:10:1f:
                    e5:ec:3f:e0:df:af:ab:c6:be:98:d5:67:a4:2e:63:
                    b0:82:9b:a9:1d:92:10:0f:b0:d3:b2:35:78:e7:6e:
                    a7:30:cb:f8:17:eb:1a:5b:64:2b:ca:17:33:f7:1f:
                    c8:a4:08:d3:14:81:03:b4:f0:ed:56:70:d4:77:9f:
                    f4:d9:1b:9e:2d:fa:8b:fa:e8:dc:eb:c1:b4:5d:0a:
                    e7:90:62:2c:fb:62:8f:80:d4:fe:da:58:57:39:f9:
                    dc:ed:1c:38:33:06:60:28:89:a7:42:7a:2a:eb:0c:
                    09:b9:f5:12:44:05:8f:ba:40:67:3e:ab:51:16:c2:
                    76:f8:d5:34:01:7b:40:5c:f6:5a:5a:70:42:d6:cd:
                    f1:87:ce:93:f2:88:01:d3:41:ce:5c:cd:d3:3e:a7:
                    ce:7e:67:14:9f:ed:96:a2:34:dc:b7:d2:01:f5:d7:
                    42:0b:cc:f8:32:f5:e0:ec:1a:01:e8:f1:cc:6a:68:
                    e1:2b:40:06:6b:f1:ca:2d:ac:cc:4c:5c:b3:5b:91:
                    ab:99:15:fa:91:c5:f9:4a:a8:46:4b:1f:8c:fe:7f:
                    94:71:69:24:59:11:ae:6c:73:61:53:4e:26:65:93:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E4:E5:1F:CC:C4:F0:0F:41:D5:EA:61:A6:32:39:B3:9C:7A:39:C2
            X509v3 Authority Key Identifier:
                keyid:08:CD:16:27:82:4D:54:B3:12:3E:E8:D8:00:B2:11:C5:C2:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08CD1627824D54B3123EE8D800B211C5C2457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SKYBIRD/0/08CD1627824D54B3123EE8D800B211C5C2457F0B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7d:75:91:11:3e:08:68:15:3a:6d:77:21:63:4d:45:7b:23:
         39:83:e1:be:15:7a:68:40:46:68:ed:d2:de:58:a6:ad:6f:46:
         44:7b:b9:8b:ab:75:23:9a:a9:1e:4a:45:b1:5e:64:97:aa:7b:
         43:a3:2b:03:0b:c3:1a:6f:19:31:72:a5:eb:a2:e1:e3:f5:4b:
         6f:4c:a1:41:7e:42:0f:a7:c0:86:ae:3e:c1:22:cf:2d:44:d2:
         5b:d0:aa:bc:c7:ec:d7:d2:a4:b4:d8:61:d6:82:e5:d7:f9:ac:
         ad:09:ce:09:16:21:54:00:6f:72:36:c3:63:ec:9b:bf:7c:22:
         cc:88:a1:af:14:79:1f:0a:1f:e9:1a:84:00:59:b8:58:66:51:
         93:dd:5c:74:68:5a:13:9d:d3:a7:45:4e:dd:85:eb:14:32:36:
         20:d8:b6:68:96:d3:02:91:1c:ae:09:62:6c:3c:4e:2d:91:4b:
         04:32:c3:b3:bf:f8:8b:79:e8:cd:7b:45:db:e9:3a:6c:ec:0b:
         46:af:be:52:b2:cc:43:19:6f:6e:67:ec:b5:f4:1e:ed:d5:f8:
         eb:6a:51:f4:2b:3f:a2:94:9a:1c:70:d4:42:bc:52:4f:66:2a:
         06:42:62:6e:77:7c:5a:c4:e2:18:13:83:3a:2f:08:50:ce:67:
         a9:40:cc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:36 2026 by rpki-client