Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
File:                     DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft (raw, json)
Hash identifier:          +16TSNr7IKNIIPrL2NhWsx5FF9SNJahPQSJpNRlGwks=
Subject key identifier:   37:90:C5:22:B5:51:AC:1C:8B:E6:F3:A9:3C:D0:C2:F6:F2:EE:29:AE
Authority key identifier: DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66
Certificate issuer:       /CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166
Certificate serial:       433AAA74B22959D7099FE325617DF4092F174F55
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
Manifest number:          B4
Signing time:             Wed 23 Sep 2026 03:41:30 +0000
Manifest this update:     Wed 23 Sep 2026 03:36:30 +0000
Manifest next update:     Thu 24 Sep 2026 06:51:30 +0000
Files and hashes:         1: DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl (hash: d0KoB/kJa/THjFLDyb2/tt9rONSmBnz2mnrwxOm5dAA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl
                          rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 06:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3a:aa:74:b2:29:59:d7:09:9f:e3:25:61:7d:f4:09:2f:17:4f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166
        Validity
            Not Before: Sep 23 03:36:30 2026 GMT
            Not After : Sep 24 06:51:30 2026 GMT
        Subject: CN=3790C522B551AC1C8BE6F3A93CD0C2F6F2EE29AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:95:4c:bd:4d:4f:b4:42:00:03:e2:41:34:6a:
                    b2:c4:52:88:55:29:cb:12:cc:e7:52:9c:a2:22:5d:
                    fe:d1:bd:bb:69:68:62:33:55:e1:e1:d5:68:c4:3b:
                    57:0b:37:71:9c:ee:39:2e:ce:25:f7:c6:ca:52:b2:
                    44:08:f9:cd:6a:06:73:22:5b:06:1c:48:fb:8e:a7:
                    e6:5a:7b:75:8d:05:12:4f:3c:fa:51:3f:34:84:05:
                    49:d1:5c:96:a4:f8:b1:99:74:0e:3b:94:c1:e7:f0:
                    ad:e2:67:6e:17:e5:8e:f0:f3:ab:42:6f:53:aa:bd:
                    83:6b:18:ae:39:7d:57:12:f0:94:69:51:d1:e9:82:
                    0f:97:2f:61:cf:c3:12:f4:89:29:46:40:8d:8d:4c:
                    2a:90:ff:c1:4e:99:89:43:cf:8c:60:2b:90:7e:df:
                    aa:8c:7d:45:d3:7e:7c:6b:2c:04:1b:37:02:0d:ef:
                    c3:3d:66:bf:53:b4:29:14:ea:83:74:6e:9f:a2:72:
                    65:84:09:18:44:a9:cd:bc:5f:a0:3f:e3:2b:d1:67:
                    b1:73:1d:60:5d:7a:b6:02:53:15:8c:ea:46:e6:41:
                    2f:df:b4:63:7a:5e:27:d6:e9:1a:51:d9:cc:c9:e2:
                    18:83:8e:88:a4:52:d3:3f:3c:71:0f:2a:32:3a:8e:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:90:C5:22:B5:51:AC:1C:8B:E6:F3:A9:3C:D0:C2:F6:F2:EE:29:AE
            X509v3 Authority Key Identifier:
                keyid:DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:4e:5a:4b:2a:d5:60:bc:81:a0:f9:46:1f:58:2c:ad:06:ac:
         2b:1b:f5:a2:24:3b:5e:16:69:fd:74:8b:d8:e9:6b:61:ae:1c:
         6e:5e:74:79:10:5c:01:5a:ff:39:6f:b0:88:b4:eb:ce:e2:d5:
         d9:83:85:4f:b5:5e:4b:5d:c0:a1:6a:5e:8a:6a:ad:24:6d:e3:
         a8:3d:50:53:e6:e5:2c:d0:b0:de:e8:e9:8c:db:29:c9:fd:c6:
         6e:7a:83:7d:71:14:bd:30:26:a5:dc:76:59:6e:e7:36:93:e1:
         5b:53:09:13:85:e1:3c:fd:43:4a:7e:c4:42:20:a3:6f:2e:7c:
         e0:6e:7a:f1:c6:ed:0a:c5:0b:d0:2d:41:d8:88:ce:85:49:7f:
         fb:9e:6b:c1:27:b6:c4:9d:e6:5d:18:a8:8c:87:a2:f6:f6:34:
         c2:a7:6e:73:5d:43:40:04:9f:98:46:60:91:83:5c:cb:5d:35:
         4d:a7:87:a1:43:09:70:5a:1e:d6:0f:55:39:01:98:c5:ec:68:
         2b:8a:1e:75:37:7e:55:c8:7e:81:03:58:6c:0b:e1:3d:32:03:
         74:e5:37:c2:ad:87:09:85:7b:22:a1:86:d7:f8:aa:24:78:b6:
         15:f3:c1:1b:58:4e:c1:0c:b7:5f:f5:1d:97:f5:8b:84:5f:84:
         77:68:b7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:33:53 2026 by rpki-client