Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
File:                     35904BA082DF1690711D4866CC0E87AF00FA998D.mft (raw, json)
Hash identifier:          i5YdNkor2bB+/8uruR+UsIU6Za3IdB4Gax/VMj60GrA=
Subject key identifier:   A6:0E:B7:18:AF:85:2E:32:51:6D:15:D5:26:87:E4:23:25:81:7C:62
Authority key identifier: 35:90:4B:A0:82:DF:16:90:71:1D:48:66:CC:0E:87:AF:00:FA:99:8D
Certificate issuer:       /CN=35904BA082DF1690711D4866CC0E87AF00FA998D
Certificate serial:       1139A96210C217B7912833F1B397D070699F4259
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
Manifest number:          2C
Signing time:             Fri 12 Jun 2026 17:12:25 +0000
Manifest this update:     Fri 12 Jun 2026 17:07:25 +0000
Manifest next update:     Sat 13 Jun 2026 20:15:25 +0000
Files and hashes:         1: 35904BA082DF1690711D4866CC0E87AF00FA998D.crl (hash: 8YIuckZmzvmVLfZWEFOMA5dUDZizoKl1/tbLIqShICk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.crl
                          rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 20:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:39:a9:62:10:c2:17:b7:91:28:33:f1:b3:97:d0:70:69:9f:42:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35904BA082DF1690711D4866CC0E87AF00FA998D
        Validity
            Not Before: Jun 12 17:07:25 2026 GMT
            Not After : Jun 13 20:15:25 2026 GMT
        Subject: CN=A60EB718AF852E32516D15D52687E42325817C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:a8:e9:8d:15:05:2f:ac:3d:16:46:22:2d:
                    51:2a:a9:fe:45:03:59:f0:a0:4e:87:2f:6a:06:ba:
                    61:9f:ef:47:5c:de:3f:41:5b:ed:29:ab:eb:6e:1d:
                    05:d8:22:e0:bc:88:ce:c4:2c:bc:66:dd:02:bc:ee:
                    a3:0d:ff:9b:33:92:df:1f:cc:00:82:ad:a2:0b:de:
                    5f:da:9b:16:4f:27:12:29:eb:de:67:85:a6:0e:d0:
                    32:a1:85:bf:42:7b:df:bc:70:0d:a3:0a:b9:28:39:
                    f7:75:94:c0:3e:51:48:a2:30:5e:eb:d8:e3:06:e5:
                    99:43:29:99:00:da:6d:b0:25:5a:6e:f2:7f:79:80:
                    12:cd:91:e9:9c:37:cd:4c:b0:3a:c8:66:8f:ae:f7:
                    53:82:0d:21:8e:06:27:7b:e6:14:45:ed:ba:d7:3d:
                    5f:41:29:b6:41:06:ae:a2:ec:b6:02:e4:93:e6:cc:
                    e8:26:81:e3:79:8e:be:51:5a:af:9d:a5:16:bb:41:
                    65:6b:d9:39:82:44:5e:30:a4:aa:f8:a7:87:99:93:
                    d5:b9:c8:5c:e8:9a:68:47:94:1a:5c:9d:b3:fd:ac:
                    45:e9:8c:a2:6f:a9:a9:10:97:5a:ef:e3:f1:e0:61:
                    86:e9:78:5b:fc:35:ad:60:16:aa:7a:98:fc:3c:88:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0E:B7:18:AF:85:2E:32:51:6D:15:D5:26:87:E4:23:25:81:7C:62
            X509v3 Authority Key Identifier:
                keyid:35:90:4B:A0:82:DF:16:90:71:1D:48:66:CC:0E:87:AF:00:FA:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:33:2c:f5:19:43:02:48:bb:a4:a0:12:d7:9c:6a:4a:3f:73:
         fd:02:22:cf:d1:dc:d1:fa:35:28:29:03:2a:9e:05:f1:04:0c:
         9d:ae:b9:81:71:99:2c:f7:00:8b:f7:bd:73:ad:b6:75:cd:e0:
         ea:c2:2d:9e:64:e5:30:dd:a8:5c:43:e1:53:03:02:0a:20:69:
         2a:0e:ee:c9:cd:11:8c:71:81:5f:72:80:26:3a:2e:c3:b4:4e:
         6d:8e:92:f1:23:c8:d8:65:b3:e9:70:e3:10:16:7f:b5:cf:8e:
         59:ab:f0:0c:b2:e4:c8:d2:81:3e:61:93:11:62:b8:93:b1:43:
         19:e6:3d:5b:20:0e:64:21:a2:ac:25:d2:44:b2:62:08:96:5d:
         c4:40:a9:10:79:24:7b:ee:59:8a:1c:c7:2b:a4:2d:d5:78:45:
         72:58:13:3a:5e:9f:61:3d:40:8c:f1:3c:28:fe:c4:b6:25:41:
         f6:c7:3b:4b:14:62:19:25:fb:ec:9f:ad:5f:59:d8:04:36:79:
         39:32:6c:dd:b5:6d:14:cf:71:1d:2b:7b:1c:09:d7:4b:a1:b8:
         e0:94:be:26:50:46:e3:98:9f:0b:fc:d4:b9:27:c8:f0:e2:e0:
         ee:d3:b9:73:2d:99:b5:eb:f4:04:3b:ab:98:2a:c5:18:cd:40:
         ca:3d:c4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:28:32 2026 by rpki-client