Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TPEFUBON/0/10637DD43C0C29CF40478635264B40BB26F4D7E3.mft
File:                     10637DD43C0C29CF40478635264B40BB26F4D7E3.mft (raw, json)
Hash identifier:          Qa6gARDn5rYsHmgFrCEzxAiF+fH4YyYo4lsYUrkzWo0=
Subject key identifier:   06:A4:1E:5B:B5:96:4E:5A:4F:BB:58:84:87:C1:48:6A:AE:C0:D8:4B
Authority key identifier: 10:63:7D:D4:3C:0C:29:CF:40:47:86:35:26:4B:40:BB:26:F4:D7:E3
Certificate issuer:       /CN=10637DD43C0C29CF40478635264B40BB26F4D7E3
Certificate serial:       4CFD80A7AC433C0836F9FD1DA3F25D4EEC371FAC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/10637DD43C0C29CF40478635264B40BB26F4D7E3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TPEFUBON/0/10637DD43C0C29CF40478635264B40BB26F4D7E3.mft
Manifest number:          AB
Signing time:             Thu 24 Sep 2026 19:14:13 +0000
Manifest this update:     Thu 24 Sep 2026 19:09:13 +0000
Manifest next update:     Fri 25 Sep 2026 19:57:13 +0000
Files and hashes:         1: 10637DD43C0C29CF40478635264B40BB26F4D7E3.crl (hash: n9qbZ4NFHByjAU8PArQQJlZhHOKsRcNmrMF1IFZls8s=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TPEFUBON/0/10637DD43C0C29CF40478635264B40BB26F4D7E3.crl
                          rsync://rpkica.twnic.tw/rpki/TPEFUBON/0/10637DD43C0C29CF40478635264B40BB26F4D7E3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/10637DD43C0C29CF40478635264B40BB26F4D7E3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 19:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:fd:80:a7:ac:43:3c:08:36:f9:fd:1d:a3:f2:5d:4e:ec:37:1f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10637DD43C0C29CF40478635264B40BB26F4D7E3
        Validity
            Not Before: Sep 24 19:09:13 2026 GMT
            Not After : Sep 25 19:57:13 2026 GMT
        Subject: CN=06A41E5BB5964E5A4FBB588487C1486AAEC0D84B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:95:fc:8b:76:8b:3e:98:f4:72:bc:5b:e1:61:
                    69:37:74:e0:6d:04:f9:3f:8a:a1:d5:73:2f:10:c3:
                    57:7b:78:af:d6:2b:66:37:16:cb:fa:1d:15:35:12:
                    8e:46:64:89:c7:bc:8c:6a:2b:84:41:3e:dc:e4:91:
                    5d:df:88:bf:c9:4e:7e:2c:b8:d0:7c:3c:18:dc:ee:
                    40:35:fe:4a:48:60:4e:25:9c:bf:86:08:42:fe:bc:
                    7f:67:34:f0:ea:92:79:33:66:a9:66:6b:fa:dc:52:
                    9d:f3:da:55:4e:ba:69:5a:1a:05:e8:32:17:43:52:
                    45:d9:9e:ea:3f:27:92:59:52:40:16:ac:ce:3c:8c:
                    2d:12:bd:1d:2f:8f:c5:a6:e2:18:16:85:4a:c1:f4:
                    46:45:81:87:3d:15:f9:e3:51:c8:a3:46:97:01:09:
                    17:cd:47:b8:87:31:18:25:f7:14:37:52:33:14:ec:
                    e5:89:24:5a:2a:1a:de:8e:85:69:3f:68:3a:62:ad:
                    e3:ce:09:5d:22:f7:72:5f:f0:a7:bd:2d:fb:62:be:
                    e2:87:51:c6:e0:a1:63:2d:29:4f:79:96:f2:e2:5f:
                    de:14:c0:88:81:f9:2d:af:2e:6e:be:6b:6b:47:63:
                    e0:a1:78:3e:11:18:c0:0a:f6:55:9e:a9:b0:f0:65:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A4:1E:5B:B5:96:4E:5A:4F:BB:58:84:87:C1:48:6A:AE:C0:D8:4B
            X509v3 Authority Key Identifier:
                keyid:10:63:7D:D4:3C:0C:29:CF:40:47:86:35:26:4B:40:BB:26:F4:D7:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TPEFUBON/0/10637DD43C0C29CF40478635264B40BB26F4D7E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/10637DD43C0C29CF40478635264B40BB26F4D7E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TPEFUBON/0/10637DD43C0C29CF40478635264B40BB26F4D7E3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:01:71:c8:c6:5c:55:ee:d2:79:ff:dd:c9:33:19:c0:73:9b:
         c8:aa:59:67:cc:20:3e:d3:fc:17:f8:1c:1b:5b:01:98:4d:2e:
         ee:ec:44:b9:e0:f7:17:ea:90:d3:04:4d:96:5f:8a:06:a9:88:
         c7:58:e5:29:c2:43:78:d5:18:c7:a9:60:3b:66:4c:e7:7a:e6:
         a6:d1:60:a7:a4:6b:bb:1f:97:72:f5:f8:e3:08:70:07:61:32:
         a1:69:00:3d:f3:c3:e8:83:ca:08:2d:ad:d1:ce:64:8a:43:2b:
         b5:98:f8:56:aa:38:5f:77:fe:ed:6b:cf:01:5a:d6:f4:6e:67:
         b7:8e:04:96:bd:a4:25:63:59:fc:4d:fa:ba:00:e7:73:59:b7:
         1c:48:80:89:35:2f:b6:26:8d:d3:95:b1:59:05:31:37:e5:a0:
         52:d3:5c:bf:b1:e7:ab:cc:ee:58:56:00:2c:fb:95:da:94:d3:
         3f:34:97:49:bf:16:15:35:2e:75:d1:89:7e:bc:90:85:06:06:
         9e:ef:ab:fc:25:da:6e:df:d2:bd:cd:54:df:e6:b0:6c:7b:61:
         97:ad:f6:b0:17:6e:20:cf:44:08:73:37:91:92:4d:ab:c2:96:
         f1:c5:df:7d:27:2b:d2:e7:1e:2f:93:b5:72:a2:3b:41:95:ee:
         a1:ac:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:59:14 2026 by rpki-client