Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CYCORE/0/1C557B3C7ECE722D00777E0164C48CBF2364F729.mft
File:                     1C557B3C7ECE722D00777E0164C48CBF2364F729.mft (raw, json)
Hash identifier:          zz9EP27FTItqDoVmtRGyNcrI6SP8wTiva8Cq2y2nKFE=
Subject key identifier:   54:0B:79:48:C7:D3:32:69:6F:BB:74:0B:B1:A0:BE:52:58:81:04:89
Authority key identifier: 1C:55:7B:3C:7E:CE:72:2D:00:77:7E:01:64:C4:8C:BF:23:64:F7:29
Certificate issuer:       /CN=1C557B3C7ECE722D00777E0164C48CBF2364F729
Certificate serial:       7381BA0D91E0725DD2D15E39B25E0930A6E090B5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1C557B3C7ECE722D00777E0164C48CBF2364F729.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CYCORE/0/1C557B3C7ECE722D00777E0164C48CBF2364F729.mft
Manifest number:          31
Signing time:             Tue 16 Jun 2026 15:25:10 +0000
Manifest this update:     Tue 16 Jun 2026 15:20:10 +0000
Manifest next update:     Wed 17 Jun 2026 17:24:10 +0000
Files and hashes:         1: 1C557B3C7ECE722D00777E0164C48CBF2364F729.crl (hash: NHnttnr2cp6ZD8GDrFiahnF+5mzS4BEcgMNJvdCPBlM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CYCORE/0/1C557B3C7ECE722D00777E0164C48CBF2364F729.crl
                          rsync://rpkica.twnic.tw/rpki/CYCORE/0/1C557B3C7ECE722D00777E0164C48CBF2364F729.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1C557B3C7ECE722D00777E0164C48CBF2364F729.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 17:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:81:ba:0d:91:e0:72:5d:d2:d1:5e:39:b2:5e:09:30:a6:e0:90:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C557B3C7ECE722D00777E0164C48CBF2364F729
        Validity
            Not Before: Jun 16 15:20:10 2026 GMT
            Not After : Jun 17 17:24:10 2026 GMT
        Subject: CN=540B7948C7D332696FBB740BB1A0BE5258810489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:d7:37:b9:53:d5:62:66:a3:8d:70:28:8d:
                    ff:b0:4c:ac:3b:3b:fd:3d:84:6c:73:39:8c:e9:24:
                    11:ab:e9:ef:fe:ea:cd:9c:88:94:d9:d1:e2:d6:57:
                    fd:86:d6:f9:b2:6e:55:f6:2b:4b:e4:c1:f9:29:cd:
                    9d:d5:5f:c3:82:6f:86:f7:ba:6f:02:31:61:d0:36:
                    3f:f6:93:52:5e:9d:f1:50:53:9b:c2:b7:6e:ed:30:
                    e1:ab:e9:d5:88:47:cc:1c:8e:7d:b7:05:19:c9:2d:
                    69:fc:5f:5e:9a:21:55:ae:c3:41:65:c8:d5:ff:76:
                    8a:9b:e2:d9:7f:28:b7:11:8b:d4:b1:09:57:0a:04:
                    df:50:cb:c3:3e:ef:9e:f4:f4:ee:e6:19:02:68:6b:
                    8c:ff:5b:28:dc:2e:0e:c4:e0:9f:ff:ec:6e:b8:a1:
                    a8:92:b1:a0:aa:50:88:4f:44:7a:dc:83:29:fa:2e:
                    37:56:26:db:e2:b0:2a:91:4c:72:4d:05:bd:42:ec:
                    be:3e:6a:40:a2:cc:c6:ce:8c:5c:f5:3d:74:4e:05:
                    95:02:2d:91:c4:86:a6:6b:f5:a8:81:4b:af:6e:71:
                    81:07:0c:d9:31:7e:cf:68:d2:4f:ea:8e:f0:8f:0c:
                    29:dd:fe:2d:be:f7:14:4e:a2:6e:e2:ff:d2:da:d0:
                    59:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0B:79:48:C7:D3:32:69:6F:BB:74:0B:B1:A0:BE:52:58:81:04:89
            X509v3 Authority Key Identifier:
                keyid:1C:55:7B:3C:7E:CE:72:2D:00:77:7E:01:64:C4:8C:BF:23:64:F7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CYCORE/0/1C557B3C7ECE722D00777E0164C48CBF2364F729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1C557B3C7ECE722D00777E0164C48CBF2364F729.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CYCORE/0/1C557B3C7ECE722D00777E0164C48CBF2364F729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c3:73:77:62:04:fe:a1:50:c9:53:b1:d3:e2:9a:ae:a9:f5:
         58:ae:2b:b6:4a:f6:0f:ae:1a:42:af:9b:4e:6b:2c:04:2c:7f:
         a3:2c:61:39:12:45:d0:19:c6:05:73:7e:28:19:f7:49:91:83:
         2d:1f:4b:7d:db:21:17:59:ab:7a:37:4a:cb:9e:1c:fe:df:f9:
         4a:ed:04:28:d8:30:e8:33:0d:da:7b:d6:c1:dd:32:61:0a:2f:
         d1:80:ff:0a:38:a4:2f:d6:65:ef:34:14:d3:96:9c:29:ed:5b:
         71:27:54:7c:f0:b6:1f:93:76:ad:2e:8b:a4:ab:a6:13:21:99:
         54:95:ef:c5:e7:f5:44:bc:63:4a:82:5d:d3:cd:af:3c:78:d9:
         b3:aa:a3:70:0b:72:14:7e:93:87:ac:23:7c:d6:d0:c5:b0:96:
         dc:ec:65:4f:2f:87:a9:04:f4:36:48:33:04:d4:0e:0f:d4:bc:
         0f:ac:fe:c5:17:b6:82:dc:25:66:51:61:11:88:1b:18:e3:ff:
         65:d0:48:ef:d0:ee:af:ac:50:f3:47:e6:af:63:de:2b:63:e9:
         02:47:d0:aa:23:b6:36:6f:75:fb:e6:d5:95:f7:32:db:12:12:
         f6:90:fb:48:4e:84:01:96:7b:a5:a1:ad:50:9c:e9:19:cd:05:
         72:77:b2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:21 2026 by rpki-client