Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NKCATV/0/1582E29418E8AD21D7B539F9C2F0A5C758E53551.mft
File:                     1582E29418E8AD21D7B539F9C2F0A5C758E53551.mft (raw, json)
Hash identifier:          cJArrWKcBJuGAVM/j2FwDd4hUvsukOXT8Bx4ZCMRBCk=
Subject key identifier:   38:73:16:E0:FC:1B:A9:1D:21:73:5D:6C:63:78:AA:E3:1E:26:BF:9F
Authority key identifier: 15:82:E2:94:18:E8:AD:21:D7:B5:39:F9:C2:F0:A5:C7:58:E5:35:51
Certificate issuer:       /CN=1582E29418E8AD21D7B539F9C2F0A5C758E53551
Certificate serial:       5ABF4A39F1ACBF6766189DF364BED443916A10C7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1582E29418E8AD21D7B539F9C2F0A5C758E53551.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NKCATV/0/1582E29418E8AD21D7B539F9C2F0A5C758E53551.mft
Manifest number:          2C
Signing time:             Fri 12 Jun 2026 21:18:07 +0000
Manifest this update:     Fri 12 Jun 2026 21:13:07 +0000
Manifest next update:     Sat 13 Jun 2026 21:53:07 +0000
Files and hashes:         1: 1582E29418E8AD21D7B539F9C2F0A5C758E53551.crl (hash: WVSD6upy3M5gZbcvQmIpbGaWb09nz+RQb0932IEi0+w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NKCATV/0/1582E29418E8AD21D7B539F9C2F0A5C758E53551.crl
                          rsync://rpkica.twnic.tw/rpki/NKCATV/0/1582E29418E8AD21D7B539F9C2F0A5C758E53551.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1582E29418E8AD21D7B539F9C2F0A5C758E53551.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 21:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:bf:4a:39:f1:ac:bf:67:66:18:9d:f3:64:be:d4:43:91:6a:10:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1582E29418E8AD21D7B539F9C2F0A5C758E53551
        Validity
            Not Before: Jun 12 21:13:07 2026 GMT
            Not After : Jun 13 21:53:07 2026 GMT
        Subject: CN=387316E0FC1BA91D21735D6C6378AAE31E26BF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:79:8d:fc:d6:0a:ef:6a:84:ff:3f:3a:34:
                    03:3e:f1:d6:4e:12:04:d1:54:38:2b:38:1b:a5:1f:
                    d7:7a:78:8b:c7:aa:5f:df:c2:d7:56:06:b4:88:10:
                    24:0d:17:1a:a2:e7:c3:68:24:b9:f1:e7:87:4d:21:
                    23:0c:ef:fb:20:5a:d3:53:53:0e:7d:e4:13:cf:f5:
                    7f:94:50:e0:c1:3c:b2:bb:44:f8:19:0f:2a:fa:9d:
                    30:18:f8:07:c3:88:89:2b:8d:b2:33:65:bc:cb:33:
                    5c:cf:c2:7c:f2:78:4a:c9:8f:64:01:c6:95:d2:dd:
                    4a:ce:d6:a2:4b:09:47:e4:08:05:b6:5e:aa:a7:80:
                    40:7e:7d:04:b2:fc:42:66:98:f3:e0:8d:53:e7:c1:
                    82:43:e8:4a:93:b9:53:86:65:54:b7:10:73:d1:ff:
                    4c:79:e3:03:c9:51:df:6e:f4:e2:62:e2:98:66:ce:
                    f2:b3:45:44:a6:24:78:6c:d8:63:45:c2:78:a7:2b:
                    7e:88:25:3c:5d:47:9f:8f:0a:23:35:a7:d9:f4:64:
                    68:29:a5:56:3d:30:0f:cc:f9:3e:05:a9:8e:fc:a2:
                    70:a9:e4:3d:d3:ee:72:7b:53:f7:c5:55:c1:31:e3:
                    56:ec:94:2f:f9:9c:4d:01:fd:d8:b6:34:56:92:d3:
                    dc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:73:16:E0:FC:1B:A9:1D:21:73:5D:6C:63:78:AA:E3:1E:26:BF:9F
            X509v3 Authority Key Identifier:
                keyid:15:82:E2:94:18:E8:AD:21:D7:B5:39:F9:C2:F0:A5:C7:58:E5:35:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NKCATV/0/1582E29418E8AD21D7B539F9C2F0A5C758E53551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1582E29418E8AD21D7B539F9C2F0A5C758E53551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NKCATV/0/1582E29418E8AD21D7B539F9C2F0A5C758E53551.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ec:3e:a6:e6:87:ef:22:80:9a:dc:cb:cd:d5:29:87:64:7f:
         e5:32:c4:02:c8:fb:d1:4c:dc:4b:ba:17:75:10:37:07:e9:e8:
         87:63:ce:14:d5:8d:01:f7:83:e6:97:af:16:bc:cb:fa:24:54:
         9a:0b:18:ae:97:04:13:5a:58:6c:2a:65:d5:18:e5:b0:e1:87:
         2a:df:49:06:51:34:fe:a8:ef:18:65:a0:64:a0:ce:ac:45:d1:
         0b:49:90:9b:94:0b:b1:f2:5b:68:bc:af:c0:f0:b6:a4:14:f0:
         5e:e7:bd:a4:b3:3f:a5:ab:1f:f9:06:6d:09:11:cf:2a:e4:bf:
         f3:60:45:c4:d6:f8:9d:52:35:b9:55:0a:23:ca:58:f2:ac:54:
         4b:f8:8d:eb:d0:1b:c4:03:74:c3:b6:b6:9b:a2:b1:50:d1:19:
         da:71:4e:f4:a3:81:8f:05:fe:3e:e9:45:6b:fd:11:9f:8d:33:
         09:5a:ab:8b:59:22:2e:07:29:0e:a3:2b:4f:dc:bb:bd:61:1a:
         70:86:f8:86:a1:47:19:09:b6:35:33:fa:c3:bd:ef:46:8e:3a:
         6b:01:84:e9:48:53:73:6f:db:b6:6c:47:0c:28:97:14:29:1c:
         1e:4b:67:58:4b:4d:87:bb:2a:39:39:47:ea:5e:5f:3d:31:17:
         0a:51:2d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:19:36 2026 by rpki-client