Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
File:                     35904BA082DF1690711D4866CC0E87AF00FA998D.mft (raw, json)
Hash identifier:          mQ2Ahiur4z6Z7W3MwGTPgWHPo5b1L4laaJZVpVJHxTI=
Subject key identifier:   3D:0D:73:47:F8:3A:64:28:EC:35:24:12:BB:CB:99:0D:BF:68:D3:13
Authority key identifier: 35:90:4B:A0:82:DF:16:90:71:1D:48:66:CC:0E:87:AF:00:FA:99:8D
Certificate issuer:       /CN=35904BA082DF1690711D4866CC0E87AF00FA998D
Certificate serial:       374486430C5A95650C6E3F11B5E33D344E626D35
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
Manifest number:          69
Signing time:             Tue 28 Jul 2026 05:17:37 +0000
Manifest this update:     Tue 28 Jul 2026 05:12:37 +0000
Manifest next update:     Wed 29 Jul 2026 06:16:37 +0000
Files and hashes:         1: 35904BA082DF1690711D4866CC0E87AF00FA998D.crl (hash: BBy0Nmor2OY40ioKMlB68h0pH/EOf6uY8VtmRPRQgSY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.crl
                          rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 06:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:44:86:43:0c:5a:95:65:0c:6e:3f:11:b5:e3:3d:34:4e:62:6d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35904BA082DF1690711D4866CC0E87AF00FA998D
        Validity
            Not Before: Jul 28 05:12:37 2026 GMT
            Not After : Jul 29 06:16:37 2026 GMT
        Subject: CN=3D0D7347F83A6428EC352412BBCB990DBF68D313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:5e:6a:4c:0c:17:22:4a:60:e9:1f:5b:5f:
                    d1:89:67:b0:92:8d:4a:89:fb:31:db:94:f6:a4:9d:
                    2c:98:03:27:5a:23:84:7c:97:b6:21:f9:87:90:23:
                    4b:ab:44:c9:fe:ac:47:5a:04:04:09:97:59:51:bc:
                    a8:f7:ae:18:a7:1b:ba:16:63:4a:68:85:81:4f:28:
                    a5:2e:65:10:da:cd:bd:47:72:08:2d:56:d7:14:74:
                    78:08:59:b7:26:92:fc:95:98:77:e8:72:2a:4f:1f:
                    bb:2c:8b:a4:59:0d:a6:68:e3:e2:b5:ef:10:af:c5:
                    61:7a:eb:3e:c0:69:ef:4d:bb:68:16:2c:df:91:df:
                    77:ba:b3:14:8e:24:b2:bf:2e:18:2a:59:c2:98:f7:
                    81:3c:4d:db:d8:34:93:ce:89:a5:df:86:e5:77:d1:
                    44:2d:79:d2:5d:15:06:98:41:a0:4e:c8:f5:6a:28:
                    ea:7f:60:75:14:b1:3e:0b:ea:aa:aa:08:13:80:19:
                    1d:c0:d5:6f:74:66:17:10:4d:2c:53:a4:f9:47:14:
                    d9:35:6f:01:0e:61:97:f4:92:86:0d:a5:53:ed:e5:
                    34:a0:6e:a8:e3:1e:25:df:6f:f1:4c:79:39:d7:3f:
                    f5:ac:20:e1:dc:92:67:7a:48:6d:9e:be:b0:05:f6:
                    8e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0D:73:47:F8:3A:64:28:EC:35:24:12:BB:CB:99:0D:BF:68:D3:13
            X509v3 Authority Key Identifier:
                keyid:35:90:4B:A0:82:DF:16:90:71:1D:48:66:CC:0E:87:AF:00:FA:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ef:47:06:05:02:6b:48:d8:90:08:94:14:1c:6f:25:87:12:
         d1:2a:52:34:70:05:89:cd:98:2a:27:36:26:9c:07:97:b1:88:
         db:e4:e1:8a:ac:21:40:af:ff:8c:5c:df:76:cd:eb:6a:ec:1e:
         00:21:e4:6d:e5:7f:c4:65:be:d0:ff:0a:de:23:20:21:c7:89:
         60:7d:aa:28:0f:35:27:a0:89:1f:31:f5:6b:76:79:94:57:f7:
         a0:21:72:f3:56:20:aa:e5:2b:3f:29:c9:63:a0:3d:07:13:cd:
         0f:0e:fc:0a:f6:ab:ef:d8:43:60:c9:7f:09:d9:5c:d8:ba:af:
         ca:c3:ac:d5:d0:26:d1:1f:38:ea:61:9f:84:a4:1f:31:fd:52:
         a9:da:bd:9d:c9:cf:81:17:18:dd:bb:3f:64:36:f4:9f:d6:cb:
         c1:a4:b5:4f:46:75:0a:4c:5f:16:ac:97:7b:b7:2f:d1:37:f3:
         8a:bf:ed:45:c9:5d:65:90:4b:e5:f3:e7:ef:32:54:42:a0:38:
         62:dc:d6:a5:ae:f9:c6:a7:c0:b3:e4:7d:ec:0f:bb:57:62:b2:
         cb:a8:8c:72:a4:c1:5a:78:07:4a:3b:01:7a:29:52:92:44:79:
         f8:71:b0:33:0e:65:84:f4:9e:e1:44:e7:95:87:d5:e0:f3:68:
         f5:ef:0a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:02:38 2026 by rpki-client