Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
File:                     DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft (raw, json)
Hash identifier:          4Vlq2JQGo6jRC9b2+CbYroZ64KcNjARH6VzAUqK94TM=
Subject key identifier:   75:AD:5A:3E:15:3D:EC:CC:AF:E4:3E:71:36:E0:48:AA:16:9F:9D:85
Authority key identifier: DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66
Certificate issuer:       /CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166
Certificate serial:       323E391B02F87E482C7EC60E59C168DCB413D36A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
Manifest number:          68
Signing time:             Tue 28 Jul 2026 03:32:24 +0000
Manifest this update:     Tue 28 Jul 2026 03:27:24 +0000
Manifest next update:     Wed 29 Jul 2026 05:42:24 +0000
Files and hashes:         1: DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl (hash: 2/P0B/Nl2uSQruWdITerJPrDYW9wYcxXwtdrUaH12MM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl
                          rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 05:42:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3e:39:1b:02:f8:7e:48:2c:7e:c6:0e:59:c1:68:dc:b4:13:d3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166
        Validity
            Not Before: Jul 28 03:27:24 2026 GMT
            Not After : Jul 29 05:42:24 2026 GMT
        Subject: CN=75AD5A3E153DECCCAFE43E7136E048AA169F9D85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:28:2a:0d:8f:d7:57:3f:ec:37:3f:66:7b:
                    a8:24:7d:d8:02:f9:c6:29:96:33:33:f4:8c:c6:eb:
                    e8:4c:bd:33:89:ba:5b:25:15:34:84:dc:54:f1:0a:
                    84:b8:88:ee:10:bc:5a:44:59:79:1a:1b:41:ac:85:
                    8d:ca:4a:04:78:58:36:02:ab:9f:9c:11:6d:a4:72:
                    f0:78:87:ee:51:64:cc:62:03:f6:f1:3e:50:84:35:
                    75:ad:5a:04:49:63:5c:e3:c8:ef:63:ab:aa:29:5f:
                    c4:3a:b1:95:6a:55:aa:ed:6a:d1:4d:ba:b4:59:1e:
                    8d:ee:65:3a:30:83:d3:39:e0:bb:f1:33:ca:58:a2:
                    b5:cb:68:83:96:b6:ee:65:9f:99:fa:9d:be:f7:06:
                    10:11:0d:13:ec:4f:01:07:66:97:3d:9d:fb:b5:4c:
                    4d:7d:8f:6a:14:9b:7a:9b:ff:1c:22:70:7a:2a:0c:
                    5c:cc:3c:28:ba:60:ac:f9:f6:96:6c:b2:de:87:d3:
                    aa:60:b5:17:1a:6c:38:30:95:26:05:96:8b:09:06:
                    2b:e1:bb:61:ac:ea:41:e0:dd:f5:f7:cf:6d:82:ac:
                    ab:77:3c:a6:bf:95:75:48:12:34:ba:c5:1a:14:e0:
                    de:6b:55:26:d2:8f:39:9f:63:88:25:dd:6a:1f:3b:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AD:5A:3E:15:3D:EC:CC:AF:E4:3E:71:36:E0:48:AA:16:9F:9D:85
            X509v3 Authority Key Identifier:
                keyid:DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4d:b1:3a:b9:c2:8a:2c:c4:df:f4:a5:94:00:92:df:2a:63:
         5f:76:d1:38:f8:42:c6:ee:82:7f:69:2c:52:27:b2:d1:11:6f:
         59:fe:79:a0:50:f2:9a:ce:fb:f1:60:d3:11:cc:29:e9:0d:57:
         ce:7d:18:c7:c6:c3:69:c6:40:7a:d2:93:09:52:68:55:91:41:
         0c:d1:02:53:2b:e5:3e:62:23:6d:a3:dc:ec:1c:f8:6c:aa:30:
         3e:83:04:ac:35:f9:04:0f:88:36:55:76:bd:52:74:5d:11:01:
         1a:73:1c:c5:cd:e5:e4:20:6f:78:b1:f4:0c:59:7e:f3:a8:3f:
         2b:22:16:83:8b:ee:81:fb:a8:a7:38:7d:d7:61:5b:4d:27:b6:
         fb:57:f4:90:d1:9b:51:fc:b4:db:ea:3d:c9:7c:61:14:8b:d2:
         e1:5a:41:81:d3:83:bc:e5:9b:ef:1f:15:bc:14:38:12:69:e6:
         70:7b:a0:75:17:bd:5f:52:d8:f5:62:44:37:72:18:b0:9f:22:
         36:3f:e8:6f:f4:84:06:6f:fe:7e:01:ab:c3:07:ee:50:3f:a7:
         4e:39:86:78:91:dc:31:6e:69:3b:3a:c8:04:69:61:44:48:dc:
         c0:c5:f1:a4:8d:76:f1:cf:fa:b9:b8:46:6c:48:d3:05:67:80:
         b9:f6:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:46 2026 by rpki-client