Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
File:                     56C0B74262A19F328983C278635DE9570AFEB948.mft (raw, json)
Hash identifier:          2DvgIgRVqnTOEBUsUDIE6/IO8LEKsU/pwTDzrgGfylg=
Subject key identifier:   FA:8A:26:95:0B:7A:B5:41:12:91:C6:E2:33:A0:C4:18:70:D2:B3:C5
Authority key identifier: 56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48
Certificate issuer:       /CN=56C0B74262A19F328983C278635DE9570AFEB948
Certificate serial:       379EA4E96EEC9AE6A5B0B4087B53085D62990E1B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
Manifest number:          B8
Signing time:             Thu 24 Sep 2026 21:49:33 +0000
Manifest this update:     Thu 24 Sep 2026 21:44:33 +0000
Manifest next update:     Sat 26 Sep 2026 00:27:33 +0000
Files and hashes:         1: 56C0B74262A19F328983C278635DE9570AFEB948.crl (hash: krzNvlcQIjPj20SXg6fX2rryQbytGxPBqP3TJo/t4LA=)
                          2: 323430323a343932303a3a2f33322d3438203d3e203138303434.roa (hash: w+sTaFe8OsYZPZPjwuyvLTqcXmP0CcIo8Vy8833aYz8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl
                          rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 00:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9e:a4:e9:6e:ec:9a:e6:a5:b0:b4:08:7b:53:08:5d:62:99:0e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C0B74262A19F328983C278635DE9570AFEB948
        Validity
            Not Before: Sep 24 21:44:33 2026 GMT
            Not After : Sep 26 00:27:33 2026 GMT
        Subject: CN=FA8A26950B7AB5411291C6E233A0C41870D2B3C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:5d:ed:da:ae:89:2d:a0:0e:38:dc:44:03:
                    ac:a1:f5:98:ba:11:1d:3c:3a:9b:2c:bd:2e:e7:c3:
                    b3:2a:ea:c0:a7:56:d7:67:22:f1:c9:ec:52:14:de:
                    ef:ce:0f:fc:70:17:22:d5:43:2a:6a:3f:ea:fe:f7:
                    fe:7a:47:09:72:1d:07:b7:78:23:52:c3:d6:dd:ff:
                    4d:4b:d5:4b:41:8e:3a:be:d4:c7:e0:25:3f:d6:da:
                    39:db:de:93:6b:68:2e:fa:97:5e:b1:de:04:49:13:
                    a2:0f:a0:76:6c:c4:9d:e3:ae:0b:89:2b:6e:19:ea:
                    a2:fd:41:b8:cc:dc:6b:17:2e:6f:77:5d:44:d0:56:
                    9d:3c:b7:e4:9f:d4:31:4a:e0:fc:02:e2:36:89:7d:
                    13:81:28:0e:ce:8b:3d:63:2e:7c:47:ca:86:17:4f:
                    32:dd:27:86:3c:16:55:bd:90:60:6c:eb:c2:19:78:
                    36:ae:57:a0:f9:1a:03:43:68:1f:a7:44:8b:c5:85:
                    2b:4e:30:67:ca:3a:65:5c:37:f7:08:56:20:90:f2:
                    6a:63:d5:ca:51:0c:80:84:bf:63:79:62:08:01:f8:
                    40:72:b2:bc:a8:3f:ef:fb:cb:51:bd:5d:1d:1c:79:
                    9f:05:5e:57:0e:4a:65:47:c2:82:d6:a7:4a:af:dd:
                    89:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8A:26:95:0B:7A:B5:41:12:91:C6:E2:33:A0:C4:18:70:D2:B3:C5
            X509v3 Authority Key Identifier:
                keyid:56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d2:c9:58:0f:f6:6e:26:99:89:ac:2c:8d:3a:2c:c1:21:78:
         b3:ed:20:d8:78:1e:2c:8a:6c:73:26:c0:20:2d:17:20:28:d2:
         c3:41:a2:be:3f:11:0e:01:ea:da:63:ec:c4:77:ed:9c:08:05:
         38:ee:f3:1a:75:37:ac:76:e8:d8:14:81:dc:0f:d6:33:4c:a6:
         1b:71:89:7d:8d:c5:1a:6a:5b:db:48:c4:ba:10:f7:ef:1e:0a:
         ea:63:a0:e9:57:06:00:41:e6:9d:ed:5f:7d:ed:ff:ed:ba:d4:
         75:37:f5:cd:09:19:53:7e:fb:1a:3f:b7:8f:3b:a7:8b:22:db:
         d2:9f:6a:3f:f9:db:45:37:74:b5:47:37:87:c9:9c:ca:66:f5:
         f1:27:12:7e:fb:c1:d2:7a:cb:39:48:02:b4:dc:3e:68:aa:80:
         b5:77:59:74:c1:e3:50:f3:3c:bc:66:81:de:37:46:1f:71:2b:
         77:72:8f:e1:1a:1e:24:b6:c7:7b:25:0b:18:2e:c7:d0:99:f1:
         74:55:e2:c6:ab:85:84:f6:79:77:f0:81:3c:47:10:03:55:92:
         f0:5b:3a:8f:e7:3b:89:ae:e7:12:7a:b0:65:c4:e2:15:ba:02:
         d0:74:35:b4:93:1b:61:f6:27:84:e9:ae:3a:62:d6:88:50:73:
         34:ba:75:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:52:08 2026 by rpki-client