Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/RUIKE/0/1D963FA6AA9567D65CC0F02634BA04F35A360003.mft
File:                     1D963FA6AA9567D65CC0F02634BA04F35A360003.mft (raw, json)
Hash identifier:          hgWOM+c7lHZuvNUXbF7XGK6l3PQmQssTozdLCmOrpgs=
Subject key identifier:   83:0E:13:B1:30:CF:2E:F4:B6:43:26:C4:70:4B:52:00:11:43:3B:0C
Authority key identifier: 1D:96:3F:A6:AA:95:67:D6:5C:C0:F0:26:34:BA:04:F3:5A:36:00:03
Certificate issuer:       /CN=1D963FA6AA9567D65CC0F02634BA04F35A360003
Certificate serial:       3F74654990D446F3DEBDFF80580E10A47020CB2D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1D963FA6AA9567D65CC0F02634BA04F35A360003.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/RUIKE/0/1D963FA6AA9567D65CC0F02634BA04F35A360003.mft
Manifest number:          6B
Signing time:             Tue 28 Jul 2026 14:24:09 +0000
Manifest this update:     Tue 28 Jul 2026 14:19:09 +0000
Manifest next update:     Wed 29 Jul 2026 15:26:09 +0000
Files and hashes:         1: 1D963FA6AA9567D65CC0F02634BA04F35A360003.crl (hash: yArqOhBFHXT+uTuQYOqvSdsNFfwK1jrLma+kjp6UJjM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/RUIKE/0/1D963FA6AA9567D65CC0F02634BA04F35A360003.crl
                          rsync://rpkica.twnic.tw/rpki/RUIKE/0/1D963FA6AA9567D65CC0F02634BA04F35A360003.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1D963FA6AA9567D65CC0F02634BA04F35A360003.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:74:65:49:90:d4:46:f3:de:bd:ff:80:58:0e:10:a4:70:20:cb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D963FA6AA9567D65CC0F02634BA04F35A360003
        Validity
            Not Before: Jul 28 14:19:09 2026 GMT
            Not After : Jul 29 15:26:09 2026 GMT
        Subject: CN=830E13B130CF2EF4B64326C4704B520011433B0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:be:0e:16:65:ff:ee:6e:87:2c:e1:cc:b0:
                    b0:63:c4:74:98:3a:eb:4b:a1:5b:53:c5:34:68:51:
                    6c:9f:e5:46:9b:8f:73:14:1d:8f:ab:72:cc:15:1b:
                    aa:96:e2:db:f8:0a:69:39:24:ea:d0:a3:d3:43:8b:
                    d1:a2:77:7f:a6:7b:53:34:20:83:f3:7e:38:22:e4:
                    1a:16:02:07:39:96:7a:45:69:51:10:17:14:e8:0d:
                    13:6b:01:04:77:a6:ad:74:71:c1:a6:f6:47:e5:5c:
                    89:83:66:59:bb:56:26:65:21:b8:6f:43:cd:de:c7:
                    9c:2d:ad:58:3f:e7:3b:b2:d0:50:9a:f9:41:34:03:
                    39:a0:ad:a9:69:1e:cd:8d:a2:02:23:42:74:24:82:
                    b4:9a:18:74:16:5c:7a:2e:5a:aa:81:13:77:c6:27:
                    b7:fe:3e:10:a5:56:2f:de:9b:d5:d7:f2:20:5c:d4:
                    28:67:60:dc:f0:23:6c:a8:7f:98:04:fe:31:d8:c1:
                    7e:3a:c3:7a:c0:f1:6a:f6:30:0a:74:85:be:2a:99:
                    63:2e:05:22:c7:8b:73:18:cb:bf:5f:7e:15:87:e9:
                    c1:f8:70:71:dd:5e:36:bb:43:71:09:66:07:54:bc:
                    20:26:c2:dc:a9:d6:8c:a8:15:23:cf:9f:da:c0:fd:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0E:13:B1:30:CF:2E:F4:B6:43:26:C4:70:4B:52:00:11:43:3B:0C
            X509v3 Authority Key Identifier:
                keyid:1D:96:3F:A6:AA:95:67:D6:5C:C0:F0:26:34:BA:04:F3:5A:36:00:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/RUIKE/0/1D963FA6AA9567D65CC0F02634BA04F35A360003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/1D963FA6AA9567D65CC0F02634BA04F35A360003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RUIKE/0/1D963FA6AA9567D65CC0F02634BA04F35A360003.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d7:1b:16:80:5e:16:98:e3:26:4b:34:56:af:b8:72:9e:b0:
         b1:e7:cd:ac:fd:6c:c1:96:55:81:7d:39:3c:e9:5d:46:34:f6:
         e7:bf:3b:34:bf:1b:f3:c2:9b:65:9f:bd:e1:7f:e4:b3:6d:46:
         b9:c8:09:df:d5:b8:51:b8:c2:f4:5a:d7:eb:62:29:ae:52:06:
         24:ba:11:77:0a:2f:4a:c7:8b:fc:4a:be:ba:79:f4:59:9b:0a:
         a4:88:df:3e:cc:e1:6d:1d:a8:0b:2e:ed:7f:30:80:a7:5f:1d:
         2f:f0:49:5f:2f:22:1f:25:f4:42:43:31:1c:d9:30:50:3e:88:
         55:5a:76:74:fb:c4:75:93:c3:37:08:fd:f7:75:fd:8b:a0:d9:
         c9:8e:18:b7:df:be:bc:78:5c:3f:bd:f9:5f:32:ac:e2:6d:43:
         af:3d:21:9b:2b:d5:a3:16:c1:87:f4:68:19:fd:49:14:e4:d7:
         31:fb:67:df:55:ce:f2:48:9a:39:88:cf:a1:86:dc:db:03:05:
         d8:fb:9f:f8:fc:2f:60:ab:19:93:53:e7:bb:fa:99:67:54:5c:
         a2:bb:0c:b9:4b:fb:0c:2a:a1:46:2e:d8:42:12:5a:90:4c:0f:
         42:3c:64:19:a0:70:6e:d8:a5:ab:99:25:fe:c6:e9:3c:ac:f4:
         b9:af:01:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:22:42 2026 by rpki-client