Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
File:                     DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft (raw, json)
Hash identifier:          biI+vqNVmrKcwzd/b0o3nH6NpmTuH+OpK2irJBRjgl0=
Subject key identifier:   30:EE:DD:AA:50:D8:9B:96:0D:9B:E9:6C:41:A4:21:1D:73:AF:33:70
Authority key identifier: DB:24:67:FD:0A:91:4F:9A:79:D3:36:63:7A:AB:8F:1A:EF:AD:AA:BD
Certificate issuer:       /CN=DB2467FD0A914F9A79D336637AAB8F1AEFADAABD
Certificate serial:       3F843616D0E9C7F6F254708E0CDFEC63DCE59289
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
Manifest number:          69
Signing time:             Mon 27 Jul 2026 22:46:50 +0000
Manifest this update:     Mon 27 Jul 2026 22:41:50 +0000
Manifest next update:     Wed 29 Jul 2026 00:37:50 +0000
Files and hashes:         1: DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl (hash: cKRubgSs75c2Rg3kxlb6FLgdR9W9i6hp3wQHFsk4fcc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl
                          rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 00:37:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:84:36:16:d0:e9:c7:f6:f2:54:70:8e:0c:df:ec:63:dc:e5:92:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB2467FD0A914F9A79D336637AAB8F1AEFADAABD
        Validity
            Not Before: Jul 27 22:41:50 2026 GMT
            Not After : Jul 29 00:37:50 2026 GMT
        Subject: CN=30EEDDAA50D89B960D9BE96C41A4211D73AF3370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:68:42:b2:90:db:09:e6:8d:06:f1:ca:82:16:
                    33:0e:be:fd:3e:e5:7d:2d:d0:b1:a9:3f:0e:d5:eb:
                    fd:cf:a6:61:2e:8e:45:fa:d8:57:2f:20:d2:ce:c2:
                    6a:7d:ad:df:eb:66:97:ac:4c:2d:ba:2d:0b:c5:0a:
                    63:1c:74:9e:8a:5d:33:d4:cb:02:7a:4e:7c:a7:6a:
                    a8:0f:9d:9a:38:88:9b:30:a8:d8:79:6d:18:5b:23:
                    2c:e6:09:87:02:b1:f1:15:db:ef:3c:0c:38:f6:ac:
                    75:93:10:d0:bd:5d:0b:3a:8a:4f:3d:3b:6b:a2:91:
                    52:54:cf:7d:59:9d:0e:54:3b:0a:c5:99:f7:cd:2e:
                    e2:fc:e0:8e:43:3d:e7:e1:e3:e1:88:5b:db:7a:78:
                    d4:96:db:d8:64:e9:4d:a8:31:df:23:32:1d:20:d6:
                    f1:30:c1:d0:02:af:e3:b6:a0:92:ec:b1:25:34:0c:
                    33:cb:03:f2:ec:d9:bb:a5:e9:88:20:b8:ec:11:32:
                    f9:0d:82:d6:02:0f:de:d3:c0:b1:96:ca:2c:09:99:
                    39:91:0e:c0:c0:63:d1:0b:87:2f:3d:c6:7f:04:c7:
                    ca:83:0a:bc:56:72:a4:59:91:62:de:f6:18:e0:a6:
                    da:8c:7a:db:1e:28:78:58:c1:5d:c8:95:41:2e:98:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EE:DD:AA:50:D8:9B:96:0D:9B:E9:6C:41:A4:21:1D:73:AF:33:70
            X509v3 Authority Key Identifier:
                keyid:DB:24:67:FD:0A:91:4F:9A:79:D3:36:63:7A:AB:8F:1A:EF:AD:AA:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:72:60:ea:70:99:1f:f1:95:96:f3:d5:a8:85:01:c4:9d:63:
         c6:e5:48:c6:32:46:6d:a8:51:ce:0b:0b:b9:3c:fe:b6:be:41:
         28:e4:0d:36:f1:b1:40:2f:73:0f:1c:48:dc:42:7b:1a:dd:a8:
         01:79:f2:67:60:a9:38:e2:a4:01:ab:d9:63:4b:89:7f:af:d4:
         11:8e:19:c0:32:35:a8:46:dd:62:f2:bf:20:8c:44:6a:05:d9:
         2d:cb:07:80:d7:33:59:75:53:34:5a:3c:25:8b:43:85:27:72:
         42:c7:de:84:73:ce:bd:31:9d:50:01:cd:0a:08:1c:14:7f:bc:
         ef:cc:1c:d8:d8:d5:5f:73:0f:df:59:c0:d8:7f:7c:4a:cb:7c:
         cd:d1:1e:16:9f:df:96:c6:cd:11:f2:67:5f:d8:40:b8:2a:29:
         1c:15:93:4f:67:4d:5d:99:4a:34:c1:91:d5:13:0b:73:ff:14:
         75:7c:e9:73:88:21:e3:1f:ed:de:9f:66:b5:99:c8:ba:f6:c5:
         1b:ae:f3:3c:f1:3b:09:b0:20:91:1b:9c:03:0b:45:9b:1e:5b:
         b6:be:cd:7d:9e:5c:0c:a1:9a:9e:5c:b4:81:ae:16:b5:00:86:
         4d:39:bc:b8:1b:79:50:88:8e:2b:5b:85:e0:c9:f2:67:f0:b0:
         8e:26:7b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:09:16 2026 by rpki-client