Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
File:                     BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft (raw, json)
Hash identifier:          rwJrhOSA8dU3hywEy+ZLZk9MGpjP0neZXdEuYYDQAIs=
Subject key identifier:   A8:B4:00:65:95:D2:AA:00:84:4E:B8:96:D5:D5:4E:0C:BC:D7:64:47
Authority key identifier: BB:DA:B4:FF:02:5C:8E:48:6A:D2:FF:B6:9F:33:09:CD:E5:48:8C:33
Certificate issuer:       /CN=BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33
Certificate serial:       6CE1FD94297827C69B9C7BD0E74E32A45E4CDFD1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
Manifest number:          B1
Signing time:             Mon 21 Sep 2026 11:12:02 +0000
Manifest this update:     Mon 21 Sep 2026 11:07:02 +0000
Manifest next update:     Tue 22 Sep 2026 11:15:02 +0000
Files and hashes:         1: BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl (hash: mwQu07ut+OaIpEvp4Pa9wchc/fM3nNLC1lxgTpc5itE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl
                          rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 11:15:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e1:fd:94:29:78:27:c6:9b:9c:7b:d0:e7:4e:32:a4:5e:4c:df:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33
        Validity
            Not Before: Sep 21 11:07:02 2026 GMT
            Not After : Sep 22 11:15:02 2026 GMT
        Subject: CN=A8B4006595D2AA00844EB896D5D54E0CBCD76447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:3a:7f:60:bf:99:8b:2c:fc:a7:1e:4c:8a:
                    82:5c:3a:3d:92:bf:00:da:83:1e:49:92:ef:33:c7:
                    46:77:43:03:ea:b8:7b:cb:b0:c6:32:35:32:dd:f3:
                    60:bc:f1:21:c8:b3:07:3e:98:72:60:7c:41:f2:fd:
                    8b:a0:a0:7e:ff:b5:7c:e7:95:ce:62:66:d2:2d:5f:
                    4a:f2:d3:0e:49:d6:bd:2e:5f:82:4c:98:c7:04:33:
                    df:de:c3:ff:6b:1c:45:fd:24:5b:88:9d:1c:a5:87:
                    c5:61:d4:8c:38:4c:70:97:1c:73:7a:0f:a9:94:56:
                    b4:16:b1:a8:c1:99:8f:ab:6e:fa:0c:75:a0:54:b9:
                    28:21:af:aa:f6:09:53:1c:3c:95:12:33:72:90:21:
                    f8:e5:06:c8:86:bf:b9:b2:00:07:33:bf:59:25:df:
                    ef:04:7c:21:f9:bb:e5:40:98:b9:a4:e7:78:88:2a:
                    58:1b:e4:71:9a:9d:79:7b:c5:ca:8c:65:29:94:3a:
                    c5:15:d0:a8:c7:9e:4e:a8:f4:dc:63:d8:f9:03:ec:
                    c3:8a:d8:82:ee:62:6c:82:b0:e2:46:79:c8:27:f5:
                    6e:19:e2:2f:20:79:5d:5c:d8:4a:7f:40:d3:35:ed:
                    b1:1a:ed:0e:cb:d0:bd:93:8a:af:2c:b0:ac:7f:7f:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B4:00:65:95:D2:AA:00:84:4E:B8:96:D5:D5:4E:0C:BC:D7:64:47
            X509v3 Authority Key Identifier:
                keyid:BB:DA:B4:FF:02:5C:8E:48:6A:D2:FF:B6:9F:33:09:CD:E5:48:8C:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TLGCAPITAL/0/BBDAB4FF025C8E486AD2FFB69F3309CDE5488C33.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ae:f0:7a:0d:0a:b5:ec:bc:55:46:1d:1f:0a:da:ba:b7:37:
         e3:b4:e2:75:a2:ba:91:f4:f0:87:14:61:af:33:b6:15:61:f7:
         75:f7:38:1f:04:e7:4b:9a:0a:c8:d8:18:40:a2:14:7d:ea:fd:
         38:5d:91:c7:1b:4a:3b:3b:d2:ac:c8:dc:63:ab:12:bf:6d:ae:
         73:35:58:83:e7:83:f1:fa:29:5e:d0:a8:2c:1d:d5:f6:6f:ab:
         01:73:a6:c8:41:b0:a5:2e:70:71:31:a8:1f:f0:88:80:c3:e7:
         e9:29:6c:6b:8e:b7:a1:22:47:d7:e7:96:ef:0a:0d:51:8f:c5:
         88:6d:71:98:04:e5:c4:b9:2d:10:bd:46:4a:06:7e:a3:e6:3b:
         cc:b1:e4:f1:cc:17:b9:98:83:43:09:d7:74:25:b9:78:46:ec:
         18:ae:1b:b4:36:21:91:bd:24:a2:cd:0a:dc:b6:dc:34:3e:f7:
         25:54:92:ea:2a:dc:44:f9:23:ec:c2:3f:37:78:89:94:9b:ef:
         a7:0b:28:61:17:b1:15:d3:27:97:23:2c:48:7a:49:ad:71:70:
         1e:40:1d:aa:13:10:d9:42:52:73:09:35:01:de:50:c9:f3:84:
         6b:53:3d:41:a4:5d:6c:b0:d9:f7:14:a6:8b:84:b4:af:c2:69:
         11:d5:df:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:56:09 2026 by rpki-client