Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft
File:                     9B5DA40B0F23621450755917A456431F689EB049.mft (raw, json)
Hash identifier:          EDDyysv+NbiXD6auuCK1YFUAQyzHCsRTU7IgxIgRFfE=
Subject key identifier:   62:BA:A8:B4:51:27:D8:03:E9:2B:B9:F9:48:AA:DA:8F:9D:D7:53:D9
Authority key identifier: 9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49
Certificate issuer:       /CN=9B5DA40B0F23621450755917A456431F689EB049
Certificate serial:       06EFC79C396B126DD758D776DBC527FACC170C84
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft
Manifest number:          35
Signing time:             Wed 17 Jun 2026 02:16:34 +0000
Manifest this update:     Wed 17 Jun 2026 02:11:34 +0000
Manifest next update:     Thu 18 Jun 2026 03:32:34 +0000
Files and hashes:         1: 9B5DA40B0F23621450755917A456431F689EB049.crl (hash: LMnw575SugnC6sP0NTSGGJtr/N3zILHMlDVl0SRYu6I=)
                          2: 3130332e3133302e3233362e302f32332d3234203d3e203633393130.roa (hash: 8S5OsugAwixeQ8Ag9hxeeLoX3QQmkvW+iKjWp7BvVWA=)
                          3: 323430303a663432303a3a2f33322d3634203d3e203633393130.roa (hash: nHJZCc2ObG/YAr0XIyCnCXOkUDdTdP47YAnSTHpOSa4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.crl
                          rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ef:c7:9c:39:6b:12:6d:d7:58:d7:76:db:c5:27:fa:cc:17:0c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B5DA40B0F23621450755917A456431F689EB049
        Validity
            Not Before: Jun 17 02:11:34 2026 GMT
            Not After : Jun 18 03:32:34 2026 GMT
        Subject: CN=62BAA8B45127D803E92BB9F948AADA8F9DD753D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:65:8b:57:7f:72:cb:6e:14:2f:e8:3e:16:e0:
                    80:f0:aa:52:63:5d:80:ad:68:b7:a0:d1:c2:05:a7:
                    a9:69:4c:9c:25:70:21:f3:81:39:33:cd:b1:1c:69:
                    9f:02:de:d6:99:f7:44:2b:91:e7:5d:f5:9c:9f:79:
                    a2:02:50:5d:58:c3:fb:de:67:94:b9:95:e5:c9:3f:
                    38:65:e6:04:10:50:02:35:4d:c3:e3:d5:fe:8d:1f:
                    97:4b:c8:1a:0d:ee:da:0a:5e:03:26:d4:19:c9:47:
                    92:db:ed:0a:d3:6f:82:9e:02:47:60:0e:a5:32:e5:
                    02:8b:fa:15:8c:a0:53:ba:9d:9f:33:c1:d4:72:46:
                    18:2f:9d:73:a3:d7:28:15:98:79:bb:b0:c6:ae:a2:
                    74:79:88:d1:df:36:cb:ea:9e:7f:26:a6:4d:d2:6e:
                    da:ee:b9:e9:61:96:6c:b1:e9:ba:6d:1f:73:33:c5:
                    9e:e8:b6:9b:92:be:a7:8e:f1:bf:a7:44:e6:49:69:
                    cb:48:87:e9:8f:0c:bd:2c:55:6a:7f:21:84:40:fa:
                    41:56:bd:6c:16:24:68:50:92:88:77:26:04:26:81:
                    f3:f6:52:af:f4:f4:6d:72:db:4a:d8:47:85:d2:c7:
                    6f:e9:4d:7b:f5:86:70:b3:f8:90:94:aa:c4:0f:a8:
                    c4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BA:A8:B4:51:27:D8:03:E9:2B:B9:F9:48:AA:DA:8F:9D:D7:53:D9
            X509v3 Authority Key Identifier:
                keyid:9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d7:cb:51:98:2f:5d:86:34:8f:90:ee:94:cb:b6:be:ea:0f:
         ea:2d:6f:fb:3d:0f:2a:71:7e:de:ae:cd:07:ac:a2:9e:34:b3:
         98:30:53:77:d0:d2:f6:98:3d:b7:cc:0d:4a:14:19:9a:de:db:
         32:47:9f:1f:99:bf:e8:77:e7:e1:dd:8b:d1:88:df:99:0d:55:
         fb:2b:d9:88:f4:07:77:6e:4a:fd:a5:5d:68:80:49:c4:2a:e4:
         24:99:7f:d1:29:c5:3d:b6:b9:b4:17:21:2c:78:e1:c3:3d:06:
         52:08:76:a6:8b:cc:ba:36:6f:e8:9a:0e:db:f9:82:b9:f8:02:
         29:68:4f:57:8b:c5:c8:5a:ab:22:c1:8d:07:f9:fe:75:db:e6:
         a2:23:f7:16:f4:09:a1:5d:a1:96:84:35:7e:3b:8e:95:66:c6:
         8b:b7:51:8f:a5:a4:c3:22:31:77:fe:09:24:08:b3:95:be:1f:
         21:b3:e8:0d:5c:ff:bb:54:9d:ec:af:df:82:49:98:79:e9:f5:
         4f:29:5b:fe:66:ca:4f:7f:87:a0:a4:f7:aa:e2:40:51:b3:35:
         42:e7:68:70:ce:14:de:1d:58:64:bf:25:e8:12:77:00:90:29:
         ca:43:a4:b4:83:0a:d5:3c:50:2c:d0:89:f1:db:a8:aa:0c:38:
         6c:4c:09:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:26 2026 by rpki-client