Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
File:                     jCH-vEkP9giqCpuTTqr2g05UUms.mft (raw, json)
Hash identifier:          tZecJRpsb7lftbhFIDuTOw/KjyCFMtvjIpHNq0fcAlc=
Subject key identifier:   6C:40:07:38:AD:52:C4:5C:95:3F:10:B8:25:79:EC:42:E9:74:F5:3B
Authority key identifier: 8C:21:FE:BC:49:0F:F6:08:AA:0A:9B:93:4E:AA:F6:83:4E:54:52:6B
Certificate issuer:       /CN=8C21FEBC490FF608AA0A9B934EAAF6834E54526B
Certificate serial:       012C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
Manifest number:          012C
Signing time:             Mon 02 Mar 2026 08:23:07 +0000
Manifest this update:     Mon 02 Mar 2026 08:23:07 +0000
Manifest next update:     Mon 02 Mar 2026 14:23:07 +0000
Files and hashes:         1: jCH-vEkP9giqCpuTTqr2g05UUms.crl (hash: OLYufE9T1yyuZRrJ/5IupQFuYVTtcNjb+KEVy6mObMo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 12:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C21FEBC490FF608AA0A9B934EAAF6834E54526B
        Validity
            Not Before: Mar  2 08:23:07 2026 GMT
            Not After : Nov 12 15:30:20 2026 GMT
        Subject: CN=6C400738AD52C45C953F10B82579EC42E974F53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:72:df:cc:fb:5b:90:95:4d:0e:e0:34:a0:
                    7b:8a:90:fc:fd:92:56:6f:13:85:b6:ce:9f:ef:ee:
                    9d:77:7a:45:15:c6:5f:9f:8d:5c:40:93:20:20:0a:
                    75:ad:b1:f0:f3:45:6e:a2:60:c5:12:31:2c:15:49:
                    5c:4e:23:f1:51:71:a0:6c:b1:46:e6:ba:c4:e1:b5:
                    cc:7d:7d:36:e6:9f:1f:bf:93:72:94:80:db:de:8c:
                    72:81:c7:a5:7d:64:32:20:f8:61:87:2d:27:b8:1f:
                    3e:e4:10:6a:bc:37:0c:87:cb:20:0c:10:84:e1:fa:
                    cd:8c:dc:6e:97:6d:d5:cf:ae:42:21:7d:b2:03:ee:
                    00:07:b8:bb:f2:a2:27:95:a1:2b:be:44:f4:b9:93:
                    7a:ec:52:84:a6:ee:f9:75:cf:2f:0d:ff:d7:84:55:
                    70:80:29:69:49:2e:bd:09:2c:11:d1:b4:2e:55:1a:
                    fc:db:07:5d:49:a2:42:61:b8:2d:27:59:78:e5:3c:
                    51:57:98:12:7d:5e:af:e3:33:03:fe:c5:9b:3c:b0:
                    2c:1b:98:3d:75:a2:52:f7:b7:62:75:ec:09:39:78:
                    52:13:47:bc:1e:18:cd:c3:71:86:69:0d:bf:68:f4:
                    1c:c4:b9:86:0b:a1:0c:96:1d:fa:b7:eb:99:a6:a4:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:40:07:38:AD:52:C4:5C:95:3F:10:B8:25:79:EC:42:E9:74:F5:3B
            X509v3 Authority Key Identifier:
                keyid:8C:21:FE:BC:49:0F:F6:08:AA:0A:9B:93:4E:AA:F6:83:4E:54:52:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:7f:ba:2a:fa:c7:2c:3a:4d:42:0b:d8:7a:73:b9:17:44:
         21:05:76:a0:38:44:21:53:42:34:1d:46:ac:5e:c4:fb:70:53:
         24:89:f8:16:2f:bd:5b:ad:61:a1:40:d0:74:91:0a:88:01:bb:
         19:c7:e5:eb:0f:ba:ad:83:53:75:91:af:b1:d1:63:dd:d4:83:
         d1:ae:d7:df:9e:6f:5e:fa:1c:22:2a:43:c3:58:7d:ab:3a:58:
         67:06:6f:75:5a:6b:e5:03:6a:63:dd:26:d3:87:2a:e3:ed:56:
         e3:21:78:f4:f2:61:84:62:7a:4d:c8:a9:c3:fd:94:78:79:02:
         b1:1d:99:0d:78:ec:a0:41:a0:00:c9:c0:4c:99:52:b5:55:f5:
         b7:29:0b:24:bc:b2:c3:f0:72:37:36:71:73:83:ae:2a:be:a8:
         f6:7d:da:7f:81:df:c6:38:83:74:f9:d1:57:9e:f2:a0:75:a8:
         d5:9c:f1:57:b3:84:d7:a3:52:59:8e:8c:c2:96:e4:a0:4a:ff:
         4e:c5:60:49:90:bd:25:68:e7:0b:5b:48:d3:df:11:32:91:d4:
         1d:3a:c3:20:33:d7:f2:df:61:6c:95:ee:19:4c:12:e7:2c:ad:
         fe:6e:fe:18:be:cc:a1:f9:e7:1e:28:0d:a1:ac:9a:01:4c:5c:
         11:b1:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:25 2026 by rpki-client