Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
File:                     DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft (raw, json)
Hash identifier:          3HVrsesArLsKJ8lFw3UezU9BuW6c6SlSdYk/8jVi48U=
Subject key identifier:   43:BA:1B:65:B1:E0:1B:EE:CA:F3:BD:32:B4:0C:DA:16:99:30:10:11
Authority key identifier: DB:24:67:FD:0A:91:4F:9A:79:D3:36:63:7A:AB:8F:1A:EF:AD:AA:BD
Certificate issuer:       /CN=DB2467FD0A914F9A79D336637AAB8F1AEFADAABD
Certificate serial:       0391C23538511F89C9E3B8CE7E880488DD3DC32D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
Manifest number:          B2
Signing time:             Mon 21 Sep 2026 19:52:04 +0000
Manifest this update:     Mon 21 Sep 2026 19:47:04 +0000
Manifest next update:     Tue 22 Sep 2026 21:22:04 +0000
Files and hashes:         1: DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl (hash: 20AYsqg4thFvbOBFJjH7ZZomJMeE7/c8EoJCq2zsPvk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl
                          rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 21:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:91:c2:35:38:51:1f:89:c9:e3:b8:ce:7e:88:04:88:dd:3d:c3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB2467FD0A914F9A79D336637AAB8F1AEFADAABD
        Validity
            Not Before: Sep 21 19:47:04 2026 GMT
            Not After : Sep 22 21:22:04 2026 GMT
        Subject: CN=43BA1B65B1E01BEECAF3BD32B40CDA1699301011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6b:4b:cf:e1:6f:ec:9b:8d:46:72:15:52:40:
                    68:7f:49:19:27:46:56:30:37:42:ff:53:3f:a4:19:
                    c5:db:09:7c:89:4c:67:8a:b9:1a:e2:f6:94:43:a9:
                    8c:22:14:05:c8:16:98:29:80:63:8d:95:e9:2b:73:
                    7b:cb:7d:34:d2:8d:7c:61:53:5c:95:4a:bf:96:d4:
                    b7:13:44:fb:25:03:69:41:00:28:e0:52:8f:da:01:
                    df:fa:37:c0:15:b6:4c:bf:67:8b:d0:b9:24:a3:56:
                    95:c8:c7:30:98:6b:05:75:20:5c:a7:e7:01:be:11:
                    2e:03:a0:1f:70:af:e4:e5:25:25:9d:d4:ea:30:fd:
                    cd:cf:69:16:af:ad:65:26:a7:47:98:95:af:37:c2:
                    34:95:31:ff:84:90:bd:bb:5b:45:3c:a5:8d:79:55:
                    65:57:ce:e9:f0:e9:72:1e:95:6e:44:0a:f8:4c:55:
                    71:14:85:28:f0:60:70:df:f0:d8:3c:00:c9:af:e2:
                    d3:dc:e3:57:2d:77:4a:42:1d:98:1b:f7:51:ac:3d:
                    a2:de:aa:92:2c:42:f1:1c:fc:51:e6:08:2d:7e:4b:
                    0d:b2:00:ee:c4:e1:82:f3:59:38:14:af:4d:3c:ed:
                    26:cf:3e:43:f8:cb:20:bc:6a:12:29:a4:60:be:7b:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BA:1B:65:B1:E0:1B:EE:CA:F3:BD:32:B4:0C:DA:16:99:30:10:11
            X509v3 Authority Key Identifier:
                keyid:DB:24:67:FD:0A:91:4F:9A:79:D3:36:63:7A:AB:8F:1A:EF:AD:AA:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TISNET/0/DB2467FD0A914F9A79D336637AAB8F1AEFADAABD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:4f:29:66:04:74:5d:0a:3b:43:a9:e2:0e:b7:77:62:52:44:
         f7:31:ee:0f:ee:53:0c:7d:14:58:49:62:29:37:11:91:fc:3c:
         f8:a6:8c:de:81:0e:7c:e6:d8:95:8e:19:4d:e8:fc:e2:5f:a0:
         e2:29:2e:a2:6c:f7:58:f5:61:54:ca:6f:99:69:d9:7a:23:fa:
         08:b1:0a:16:78:6f:41:a6:f8:b7:0c:0c:05:00:0b:d5:97:f3:
         a4:70:6d:c9:c3:a5:a3:d3:ae:2c:92:cf:57:81:b3:e5:3b:01:
         6c:82:2b:0d:6e:e3:e7:24:9e:1a:4e:aa:92:2f:17:21:24:da:
         ce:66:ee:ff:cd:e7:8b:f0:c6:74:a7:52:e5:e8:58:e4:6b:18:
         82:00:bb:d1:98:be:f9:03:f9:47:4d:e0:1f:b7:c6:84:3d:92:
         ae:3e:fd:3e:8a:b4:e0:ac:63:28:9b:24:30:77:4d:83:69:5b:
         1d:cc:ae:78:86:61:9f:ba:95:08:5d:c4:4d:20:fd:94:4e:86:
         0b:60:f5:4f:5f:b8:d8:13:62:2d:4c:b4:24:21:77:ce:95:62:
         dc:b2:a2:fa:5b:de:bc:54:df:04:58:f5:46:79:4e:a2:d5:09:
         34:4b:99:ed:d7:a4:fb:3e:9e:b7:22:a7:a3:2a:2d:70:95:47:
         36:8b:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:25:56 2026 by rpki-client