Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
File:                     D1EE894ECDA357FF3B846E2660D95F0535127E79.mft (raw, json)
Hash identifier:          dyS9JxjNqc1bPlApdKAP+X1Qk9XS9Dg3BkkkdK7nY6A=
Subject key identifier:   AA:72:1B:3C:18:CD:5B:09:C0:CA:53:6F:FA:E9:59:1F:DB:DB:30:F7
Authority key identifier: D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79
Certificate issuer:       /CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
Certificate serial:       17B330389DB0839A725B56D8BF40FA1F021970FC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
Manifest number:          31
Signing time:             Wed 17 Jun 2026 02:46:39 +0000
Manifest this update:     Wed 17 Jun 2026 02:41:39 +0000
Manifest next update:     Thu 18 Jun 2026 05:44:39 +0000
Files and hashes:         1: D1EE894ECDA357FF3B846E2660D95F0535127E79.crl (hash: uhTqtGecCYjEajwwEYBIg7xoF69mzTPWVYhXp/vUQHo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl
                          rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 18:58:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b3:30:38:9d:b0:83:9a:72:5b:56:d8:bf:40:fa:1f:02:19:70:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
        Validity
            Not Before: Jun 17 02:41:39 2026 GMT
            Not After : Jun 18 05:44:39 2026 GMT
        Subject: CN=AA721B3C18CD5B09C0CA536FFAE9591FDBDB30F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:58:90:65:91:78:a7:2f:73:a6:18:38:2c:5f:
                    8e:50:c7:69:f5:f3:9d:be:fc:35:30:ea:ea:b5:b9:
                    99:41:4f:5d:c5:f5:17:73:4e:3d:d2:c2:30:2a:16:
                    35:e8:90:98:d6:ce:3b:c5:e7:3e:b8:87:41:25:8e:
                    f7:d9:fb:1d:c3:a1:9a:8b:62:43:fc:06:68:27:7c:
                    b8:00:0c:20:d2:a1:66:3a:21:f8:d9:2b:8e:02:b5:
                    7e:c2:55:cf:0a:43:64:39:fd:e4:e1:6b:29:ad:d8:
                    8d:91:95:68:55:74:1c:e2:1d:74:6f:aa:0a:3b:a1:
                    c3:d5:45:d7:22:e8:b6:03:e5:7a:f6:62:c9:7c:47:
                    f9:16:28:19:b3:37:17:29:8c:a3:ee:4f:fa:ac:af:
                    89:bf:02:13:47:f5:3e:40:da:b2:32:1c:62:94:cd:
                    6a:65:67:0d:d5:bc:6c:02:44:53:ed:c1:81:40:30:
                    17:ce:15:7c:36:f6:50:9a:d4:60:a3:01:0c:1b:fb:
                    34:64:78:95:0f:fb:34:4c:a1:63:72:5d:12:b8:f0:
                    32:35:aa:8e:56:d4:d4:4c:41:1a:ea:96:3e:34:ce:
                    75:da:77:1f:b7:4c:85:cb:4d:ce:e6:80:25:88:90:
                    21:f3:c2:40:aa:2b:5e:f7:d6:e0:c2:81:a7:a0:89:
                    80:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:72:1B:3C:18:CD:5B:09:C0:CA:53:6F:FA:E9:59:1F:DB:DB:30:F7
            X509v3 Authority Key Identifier:
                keyid:D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f7:59:0b:a2:f7:5e:45:bb:cf:07:8a:92:98:2a:df:90:ea:
         47:2b:3a:4e:49:a8:c3:4e:53:77:0d:cd:3b:d7:d7:43:8b:8d:
         cb:5c:31:ac:fe:c9:16:ca:e5:7b:53:b2:28:c2:4d:e1:c2:5a:
         66:5a:05:bc:5f:dd:81:39:e3:74:9d:40:a2:ad:17:a5:d5:e7:
         b8:6b:69:f4:7a:d3:ff:bb:6c:12:e4:3d:dc:bc:c8:67:3f:00:
         c8:9c:4e:09:2b:78:4b:6a:34:4b:15:7f:45:a8:57:fa:1c:4d:
         bd:5f:32:5a:58:5d:fa:1e:3e:bd:e8:5b:65:81:73:c4:3d:0f:
         31:e6:10:3c:8a:7e:1c:af:17:fb:5c:14:58:33:0c:a3:1a:b7:
         e7:8b:c6:69:18:c3:a7:ce:c2:1e:91:fa:41:9b:b1:d3:b3:27:
         6c:dd:87:ae:90:14:ed:a9:d0:21:77:6e:d0:9d:89:2c:8a:db:
         95:2a:8e:44:a6:d5:a2:20:c5:4c:56:4c:72:a9:81:b1:89:ba:
         19:e4:bd:76:7e:ef:bd:9f:c2:be:db:55:ab:71:2b:5f:c9:9e:
         64:90:b3:65:22:6e:6a:05:73:2f:16:81:84:d7:1b:f0:c5:e3:
         23:ca:07:a0:7f:2d:20:08:92:84:88:1f:f2:db:c2:36:73:81:
         60:12:26:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:24 2026 by rpki-client