Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
File:                     4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft (raw, json)
Hash identifier:          eZ0S03N69FMk0YHO1+4bGMIVQdK+DTly/D+5Uk06eS0=
Subject key identifier:   43:60:5C:DA:5D:5E:28:41:B1:D4:45:BD:C3:47:E1:8C:D3:EB:C9:33
Authority key identifier: 46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8
Certificate issuer:       /CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8
Certificate serial:       0901F853284814B1E4F25E1BE87CCFBE9858489B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
Manifest number:          30
Signing time:             Fri 12 Jun 2026 23:18:22 +0000
Manifest this update:     Fri 12 Jun 2026 23:13:22 +0000
Manifest next update:     Sun 14 Jun 2026 00:30:22 +0000
Files and hashes:         1: 323430313a393765303a3a2f34382d3438203d3e20313331313437.roa (hash: p8UsvXIz5WgkEXh1nf22VVGfO3Td54MJiWuDiLo2EHQ=)
                          2: 4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl (hash: MLc0MqUu0Z6Jid8dYXAqsmzkJHeAd+9MsERXyiqFuvo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl
                          rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:01:f8:53:28:48:14:b1:e4:f2:5e:1b:e8:7c:cf:be:98:58:48:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8
        Validity
            Not Before: Jun 12 23:13:22 2026 GMT
            Not After : Jun 14 00:30:22 2026 GMT
        Subject: CN=43605CDA5D5E2841B1D445BDC347E18CD3EBC933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:c2:db:c6:e5:cb:6a:16:5e:d1:1f:53:7a:
                    4a:5c:42:d5:e1:c7:6e:a1:a5:f2:36:73:32:e6:99:
                    fd:03:d7:12:31:2c:c8:ae:c9:08:67:79:7e:05:96:
                    f2:60:e0:d4:1d:44:89:78:97:9d:57:53:66:9b:bb:
                    ce:19:11:da:75:b3:08:16:c7:26:6b:4f:c5:06:58:
                    cd:c8:f5:ad:2b:78:b7:bc:03:9b:5e:79:7f:eb:10:
                    1e:50:6e:08:ea:b1:42:4b:53:7c:4f:0d:8b:0f:bb:
                    28:c3:8d:df:58:25:6d:cc:5a:45:fe:56:73:eb:7f:
                    3d:68:e8:b6:3c:6d:26:f4:ef:81:48:35:9c:35:ca:
                    7d:36:80:90:1d:18:f4:40:e0:5b:f9:20:5a:09:3b:
                    c6:d1:aa:de:04:2e:03:e6:55:79:1d:c6:cf:6b:16:
                    ad:c4:74:46:09:b4:96:fa:d0:05:86:3f:2d:3e:c0:
                    90:34:89:e9:45:79:97:fb:00:c2:ed:e5:e2:0c:93:
                    fe:d1:fe:30:79:1e:59:59:dc:9c:7e:af:ad:ea:3c:
                    9a:3f:a7:df:97:d6:c8:15:e1:24:59:9a:7c:92:3e:
                    b2:66:a8:72:af:38:13:b2:dd:bf:15:a5:52:d8:5f:
                    16:7a:35:23:87:56:e2:88:f2:9d:de:e2:08:6b:05:
                    bf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:60:5C:DA:5D:5E:28:41:B1:D4:45:BD:C3:47:E1:8C:D3:EB:C9:33
            X509v3 Authority Key Identifier:
                keyid:46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:dd:0d:9f:cc:16:66:7c:fe:da:05:bf:f4:fb:4f:25:80:a7:
         9e:8f:cc:ea:b5:b1:be:7e:6d:ea:27:c4:1c:44:e9:e7:d6:53:
         45:8a:76:de:10:c4:51:48:70:a6:ab:08:d9:b3:6b:52:5f:84:
         48:cf:52:6a:ef:39:36:3a:41:2e:39:33:84:0b:98:44:31:4e:
         79:7e:58:84:45:f1:09:e0:73:28:cf:b2:88:da:d3:7d:70:f0:
         f2:cf:0f:fc:64:b2:32:3c:5f:ee:fc:ff:5e:07:14:0e:8b:d2:
         30:33:92:62:62:7e:08:00:55:b8:36:ab:3f:df:ea:9b:91:2b:
         6d:16:17:02:08:8a:12:1a:14:4e:f9:46:f4:30:b6:6f:c3:35:
         24:93:07:8d:07:bc:00:74:01:33:33:71:b6:66:66:4f:fd:c4:
         2c:bf:c3:0b:3b:c4:56:ad:aa:2a:77:44:54:97:c0:60:3b:1a:
         09:5d:83:75:19:19:fa:5d:71:3e:13:eb:75:bf:a9:1b:f7:33:
         1d:28:db:6b:76:cf:33:85:be:3e:67:7a:4f:51:69:e4:05:65:
         ed:a9:52:3f:cf:85:f7:22:d9:eb:01:66:b0:4c:5f:c5:30:15:
         1a:76:d5:bc:5a:f8:18:18:13:b4:94:a0:89:1b:6e:7d:03:d7:
         2c:32:7a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:37 2026 by rpki-client