Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CYCORE/0/1C557B3C7ECE722D00777E0164C48CBF2364F729.mft
File:                     1C557B3C7ECE722D00777E0164C48CBF2364F729.mft (raw, json)
Hash identifier:          g0JvDiBCCtion/HYI8n6poAeQx7l685ycn3PipdRQeo=
Subject key identifier:   C6:D7:0A:C1:0D:CC:73:17:DE:AD:F2:BE:E9:3F:76:45:81:F1:77:38
Authority key identifier: 1C:55:7B:3C:7E:CE:72:2D:00:77:7E:01:64:C4:8C:BF:23:64:F7:29
Certificate issuer:       /CN=1C557B3C7ECE722D00777E0164C48CBF2364F729
Certificate serial:       5220F00E274CB754EC06F6805A13B91B92921164
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1C557B3C7ECE722D00777E0164C48CBF2364F729.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYCORE/0/1C557B3C7ECE722D00777E0164C48CBF2364F729.mft
Manifest number:          B2
Signing time:             Mon 21 Sep 2026 08:26:38 +0000
Manifest this update:     Mon 21 Sep 2026 08:21:38 +0000
Manifest next update:     Tue 22 Sep 2026 09:02:38 +0000
Files and hashes:         1: 1C557B3C7ECE722D00777E0164C48CBF2364F729.crl (hash: RNs70GKph+2vbmd1JFUTgAnVeSmJUtCicdyMghImrUw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CYCORE/0/1C557B3C7ECE722D00777E0164C48CBF2364F729.crl
                          rsync://rpkica.twnic.tw/rpki/CYCORE/0/1C557B3C7ECE722D00777E0164C48CBF2364F729.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1C557B3C7ECE722D00777E0164C48CBF2364F729.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 09:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:20:f0:0e:27:4c:b7:54:ec:06:f6:80:5a:13:b9:1b:92:92:11:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C557B3C7ECE722D00777E0164C48CBF2364F729
        Validity
            Not Before: Sep 21 08:21:38 2026 GMT
            Not After : Sep 22 09:02:38 2026 GMT
        Subject: CN=C6D70AC10DCC7317DEADF2BEE93F764581F17738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:e1:2a:fc:2a:6c:94:2d:29:8b:48:35:5f:
                    9c:c6:c2:83:3a:d4:cd:3d:d8:02:5e:a5:82:27:0e:
                    81:10:ab:0c:ee:7e:29:79:c1:26:fd:9d:48:f4:f6:
                    6f:7b:51:ac:cf:be:66:13:79:c7:30:72:17:e4:13:
                    b2:06:a9:ce:51:f4:db:e4:bf:e0:8b:72:d1:dc:9a:
                    a4:7d:8c:50:d1:eb:b6:00:b8:9a:4e:ca:40:a1:00:
                    54:3f:ac:ba:6b:7f:09:3f:b0:b3:8a:aa:c1:41:d3:
                    3c:66:45:71:e1:72:ee:b8:52:cb:a6:93:14:82:6e:
                    e9:a6:0b:4b:8a:60:72:a5:81:d9:ed:8c:20:8b:9d:
                    48:f5:ab:f5:9c:11:7f:6b:bc:24:bd:98:85:68:a4:
                    7e:01:55:db:ac:2c:87:09:06:e0:7d:ba:b7:0c:6c:
                    fe:07:e4:f4:30:b8:dd:e9:a1:15:4b:cd:3f:00:ee:
                    b1:3f:a7:c7:de:7d:79:44:ea:0d:67:83:43:44:c4:
                    25:a2:62:c1:b8:34:7f:21:cc:44:ae:0f:25:99:d2:
                    0c:34:ac:95:7b:cd:cb:60:0a:b0:cf:74:95:6e:a6:
                    60:f0:e1:48:a0:39:93:74:5a:57:a4:c6:45:26:5a:
                    21:d7:6e:f7:34:b3:6e:a9:6d:ea:7d:4a:97:4f:00:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D7:0A:C1:0D:CC:73:17:DE:AD:F2:BE:E9:3F:76:45:81:F1:77:38
            X509v3 Authority Key Identifier:
                keyid:1C:55:7B:3C:7E:CE:72:2D:00:77:7E:01:64:C4:8C:BF:23:64:F7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYCORE/0/1C557B3C7ECE722D00777E0164C48CBF2364F729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1C557B3C7ECE722D00777E0164C48CBF2364F729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYCORE/0/1C557B3C7ECE722D00777E0164C48CBF2364F729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a1:e9:20:33:7b:f2:92:fc:56:7b:64:60:97:ad:1e:6c:cc:
         d4:73:9f:80:49:17:81:c9:fd:b2:c6:bc:2f:f1:37:33:9d:f7:
         41:9f:d3:0d:82:bb:02:54:fb:fe:a2:fc:01:e7:96:3d:a4:1b:
         9d:b7:a2:5b:5a:66:06:ad:42:e1:55:91:b1:25:19:24:46:e0:
         39:c0:37:96:d0:b7:69:42:2c:55:26:2c:9d:fb:a0:33:17:42:
         1a:00:c1:de:58:2f:5f:0a:ac:32:14:54:99:ce:b5:15:be:dc:
         f1:81:5a:ad:5f:52:88:18:a7:a5:21:a5:eb:a3:20:fb:b4:58:
         e0:dc:2b:20:2c:4c:8f:eb:6e:dd:ad:5f:8c:86:b4:0e:fe:f5:
         44:63:00:15:f8:a3:cb:85:87:8a:2b:cd:e4:9c:51:c8:fc:71:
         5d:bc:99:58:2c:fa:c4:ac:c9:90:45:dd:17:07:a3:2e:50:dd:
         6c:0e:85:1f:59:4b:26:de:35:89:98:a4:31:60:84:f3:be:67:
         d4:87:23:0d:c0:69:01:df:b0:4b:84:94:41:d3:46:ec:01:ce:
         06:37:a5:10:19:ad:50:08:f0:05:23:eb:91:74:c9:7c:3f:f3:
         58:35:de:1f:eb:74:41:46:f4:14:eb:37:e1:8a:70:7c:2e:d4:
         80:aa:67:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:21:28 2026 by rpki-client