Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft
File:                     76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft (raw, json)
Hash identifier:          DKr2iCpRIZXCspW6VsERqhAzwEUsQ9G/BIFDJIIN4M4=
Subject key identifier:   F5:FF:E5:2C:83:2A:E3:60:B4:5F:5D:F4:29:00:AE:C9:AE:41:50:AB
Authority key identifier: 76:A7:E3:7B:E9:87:6B:8A:C3:A3:1B:9E:D3:93:79:96:84:2E:BB:78
Certificate issuer:       /CN=76A7E37BE9876B8AC3A31B9ED3937996842EBB78
Certificate serial:       704B9D645AA67E825107CBA0854A75397BF17ECD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft
Manifest number:          2D
Signing time:             Sat 13 Jun 2026 06:44:16 +0000
Manifest this update:     Sat 13 Jun 2026 06:39:16 +0000
Manifest next update:     Sun 14 Jun 2026 06:46:16 +0000
Files and hashes:         1: 76A7E37BE9876B8AC3A31B9ED3937996842EBB78.crl (hash: sq58zIdgXAbLteL9U1KKhXgJdi3JPWy3Hjr5b4kfEtM=)
                          2: 3130332e3235342e3231322e302f32332d3332203d3e20313331363432.roa (hash: qzl9dOSKwgCXVZTZxr3Z7XqLacSrZMcN+zOVWKu4R9w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.crl
                          rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4b:9d:64:5a:a6:7e:82:51:07:cb:a0:85:4a:75:39:7b:f1:7e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76A7E37BE9876B8AC3A31B9ED3937996842EBB78
        Validity
            Not Before: Jun 13 06:39:16 2026 GMT
            Not After : Jun 14 06:46:16 2026 GMT
        Subject: CN=F5FFE52C832AE360B45F5DF42900AEC9AE4150AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:85:35:cd:c3:58:89:ef:24:7b:48:bc:36:e7:
                    7a:21:7f:63:fe:e2:02:bb:0b:b5:df:e9:50:2f:a4:
                    d0:ef:15:8b:f5:87:c9:eb:41:30:f0:55:cd:f5:1e:
                    21:90:f1:fb:ea:29:45:8c:66:8c:20:e4:f4:2a:f0:
                    db:90:64:74:d8:8a:be:3d:4f:91:e4:db:e4:77:6d:
                    55:08:76:7a:8a:0d:9c:f9:4c:64:59:f4:df:28:1a:
                    b5:a2:1e:29:a6:10:9d:06:0b:a0:63:12:27:84:75:
                    b5:3e:57:b0:da:75:37:56:0d:bd:b6:b8:9d:56:aa:
                    25:ab:de:3d:e2:2b:e5:5f:9a:ea:d9:da:f0:5e:e1:
                    b6:63:00:4f:bb:2f:15:5e:a0:84:25:4d:bc:75:2e:
                    a6:e7:e9:88:51:39:36:47:56:09:f3:c8:e2:ef:8f:
                    66:92:58:43:63:6e:ea:d4:24:ca:b5:e0:7c:59:a3:
                    27:66:c4:ce:cb:17:da:eb:af:64:4c:d9:08:de:3c:
                    39:27:b6:a6:c6:f3:56:b8:5c:65:c6:13:da:cd:d0:
                    ed:f0:7f:4b:88:28:e4:b4:f8:91:1e:9b:15:25:12:
                    2b:89:bf:bc:08:5e:6c:b4:2b:91:48:61:e8:37:cf:
                    52:c1:5a:b0:16:20:bd:70:5a:88:4f:1b:93:13:bd:
                    79:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FF:E5:2C:83:2A:E3:60:B4:5F:5D:F4:29:00:AE:C9:AE:41:50:AB
            X509v3 Authority Key Identifier:
                keyid:76:A7:E3:7B:E9:87:6B:8A:C3:A3:1B:9E:D3:93:79:96:84:2E:BB:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4f:c8:2f:b8:cb:01:a4:b8:fe:24:c4:de:97:a1:db:55:87:
         fe:3f:9e:6d:fc:d0:01:ca:de:50:e4:8d:91:f4:ba:5d:48:8b:
         25:10:2d:30:bb:db:02:87:94:72:94:94:b6:88:99:4b:94:70:
         71:2c:07:6e:f1:d0:56:a0:0d:fa:bb:68:34:3f:6e:00:c7:2f:
         18:ee:74:79:45:4e:ef:df:bf:1b:ef:b6:e9:c1:62:6f:36:98:
         49:c3:2c:4e:a8:a5:5f:9a:d4:0a:ab:82:55:c0:bb:c1:c1:95:
         64:8f:77:09:51:25:55:bf:56:f8:dc:56:9e:e4:33:ad:e5:3b:
         f5:fd:4e:f9:56:c2:d0:0d:d5:b0:a6:32:c1:07:25:88:73:a9:
         5c:d2:1a:64:cb:94:83:af:c6:fb:fa:77:cf:64:fd:dd:ea:18:
         7c:43:51:2f:31:0b:c7:f5:94:a6:da:d5:2f:0b:d9:72:9d:19:
         2a:75:de:33:f2:72:7b:b4:0d:65:c1:5f:b6:f5:7a:8d:ab:7d:
         64:9a:74:b2:49:ed:c7:6e:12:7f:73:8f:cf:c7:f0:ab:4c:63:
         8a:00:ec:68:40:85:1d:6a:43:ed:50:54:29:a1:70:83:28:78:
         23:2a:73:e9:8d:76:f4:41:79:8d:a3:e8:6f:a6:56:ea:8e:2f:
         5a:7f:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:00:06 2026 by rpki-client