Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
File:                     56C0B74262A19F328983C278635DE9570AFEB948.mft (raw, json)
Hash identifier:          jRea/Ex9S4IjfkxDM/wdoBKWJLsJ2dkaWgfVbDTFA7g=
Subject key identifier:   68:BA:69:8B:90:71:A1:BD:60:8A:94:E2:38:51:2D:C0:AD:25:D3:73
Authority key identifier: 56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48
Certificate issuer:       /CN=56C0B74262A19F328983C278635DE9570AFEB948
Certificate serial:       2387FCACECE990976A9AD242C6ACEB6D667AE5F6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
Manifest number:          2E
Signing time:             Sat 13 Jun 2026 08:14:23 +0000
Manifest this update:     Sat 13 Jun 2026 08:09:23 +0000
Manifest next update:     Sun 14 Jun 2026 10:37:23 +0000
Files and hashes:         1: 323430323a343932303a3a2f33322d3438203d3e203138303434.roa (hash: w+sTaFe8OsYZPZPjwuyvLTqcXmP0CcIo8Vy8833aYz8=)
                          2: 56C0B74262A19F328983C278635DE9570AFEB948.crl (hash: tS+CQ4NnDcYNSc+W9nv7dCwysfBu1ZBLPRKukawTuhQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl
                          rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:87:fc:ac:ec:e9:90:97:6a:9a:d2:42:c6:ac:eb:6d:66:7a:e5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C0B74262A19F328983C278635DE9570AFEB948
        Validity
            Not Before: Jun 13 08:09:23 2026 GMT
            Not After : Jun 14 10:37:23 2026 GMT
        Subject: CN=68BA698B9071A1BD608A94E238512DC0AD25D373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:05:a7:28:87:00:cb:25:0e:0c:08:9a:40:ae:
                    fc:c0:65:59:b4:2d:3a:f8:25:41:8a:a4:b9:75:e3:
                    ea:25:dd:5f:e8:bf:ac:32:46:02:58:04:49:79:b6:
                    a9:a0:b6:a4:c3:14:60:e5:91:11:ce:de:e3:49:90:
                    b4:87:b9:52:87:6b:e1:e3:84:a6:6c:2d:0f:2d:19:
                    10:a7:2b:9e:4f:1a:72:df:0d:09:94:12:7a:87:5d:
                    7b:fe:06:9e:38:e5:97:37:2f:e0:a8:c3:85:16:35:
                    b6:33:4e:60:8f:c5:c4:a7:89:04:41:d8:0c:47:61:
                    c2:48:96:d3:f6:b1:60:f6:9f:25:66:ad:eb:4f:3f:
                    30:23:2c:3d:1f:76:c1:a7:c4:fd:2b:8c:1c:fa:55:
                    a8:56:b1:b6:ae:0b:71:e0:8d:7d:64:57:17:54:f9:
                    0d:b3:2c:cc:c6:15:d4:eb:20:a4:54:90:19:3d:e5:
                    11:31:79:b0:57:fc:dc:d6:7b:54:94:f4:c6:c6:68:
                    36:d5:ca:37:b5:a6:a0:cc:13:cb:d6:af:c6:38:af:
                    0b:52:33:e9:a6:0e:f5:e5:d9:e8:ef:a3:c2:ce:24:
                    01:9e:1f:b6:f9:bd:04:bd:fb:bf:d5:86:73:2b:5a:
                    fe:00:36:8f:ac:31:15:69:95:0b:85:58:99:c2:a7:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BA:69:8B:90:71:A1:BD:60:8A:94:E2:38:51:2D:C0:AD:25:D3:73
            X509v3 Authority Key Identifier:
                keyid:56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d7:4f:4b:63:50:e9:f6:86:72:a4:d3:0c:a5:93:3b:1f:c5:
         37:42:74:3a:8a:ed:db:1d:1e:3f:98:ea:75:de:50:04:b1:96:
         fd:e6:af:ff:f4:72:0b:63:a9:07:37:26:8f:89:de:69:df:ee:
         5a:fd:cb:36:12:6a:4a:1c:4a:27:b0:45:0c:82:3c:61:6e:79:
         20:10:21:56:d6:63:40:93:ee:ed:19:ac:eb:ca:7e:08:cb:b4:
         a9:2c:c0:89:39:03:5a:38:85:c7:c9:1b:23:94:da:ea:85:89:
         62:71:46:ee:44:48:31:09:93:92:9a:82:f3:aa:c7:f5:17:bd:
         f0:c4:28:fc:dc:06:4f:2e:50:9a:f0:45:13:b0:69:d7:ab:e9:
         7b:a9:1a:98:06:57:54:f3:0d:b5:98:09:36:14:84:26:9c:fc:
         30:bb:7b:84:17:c5:ae:05:39:4c:a0:67:8e:f4:24:66:43:f1:
         14:05:5e:a1:94:77:39:bc:ca:f2:13:d7:44:94:0f:79:21:14:
         d2:8d:02:18:76:ca:71:4f:18:c1:f6:f4:9f:17:db:dd:52:64:
         b8:71:41:d6:30:3a:d6:e0:94:1d:9d:4b:22:b6:a0:f6:59:45:
         ac:4c:63:ea:4e:f4:1b:c0:81:9a:20:d2:34:a3:43:63:ac:e2:
         35:df:25:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:20:22 2026 by rpki-client