Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft
File:                     28110DE86B5C0A286A9B3545A4369B11A7480010.mft (raw, json)
Hash identifier:          BlNpfBst8T123J6jE9Zptb2+lhuNkzstyw5/bdYJwY8=
Subject key identifier:   45:C6:6C:AF:F9:C8:1E:F0:AD:B8:9C:02:94:F0:B9:66:6E:BD:CE:B2
Authority key identifier: 28:11:0D:E8:6B:5C:0A:28:6A:9B:35:45:A4:36:9B:11:A7:48:00:10
Certificate issuer:       /CN=28110DE86B5C0A286A9B3545A4369B11A7480010
Certificate serial:       3BE23F497281A53C94AE9C4784E04472AEC6CBA8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft
Manifest number:          2C
Signing time:             Fri 12 Jun 2026 23:38:24 +0000
Manifest this update:     Fri 12 Jun 2026 23:33:24 +0000
Manifest next update:     Sun 14 Jun 2026 01:07:24 +0000
Files and hashes:         1: 28110DE86B5C0A286A9B3545A4369B11A7480010.crl (hash: Ri7958NgYT9VFZQxQv0hcVMR4RMageYSshMS22bN8IU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.crl
                          rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e2:3f:49:72:81:a5:3c:94:ae:9c:47:84:e0:44:72:ae:c6:cb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28110DE86B5C0A286A9B3545A4369B11A7480010
        Validity
            Not Before: Jun 12 23:33:24 2026 GMT
            Not After : Jun 14 01:07:24 2026 GMT
        Subject: CN=45C66CAFF9C81EF0ADB89C0294F0B9666EBDCEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:df:c4:a1:b3:cd:bc:32:03:23:45:05:54:
                    71:77:ce:cd:33:d3:8d:1b:3e:0a:33:0c:a8:3c:28:
                    a0:0b:f9:47:b3:6a:1a:76:14:ab:f8:f2:c6:6a:40:
                    3d:9a:0b:41:1f:ee:68:bd:ad:c8:17:8b:b0:f3:1b:
                    8a:fa:16:e5:53:0d:b4:6c:66:5a:5b:55:30:d2:b9:
                    55:ba:88:57:c5:30:c2:04:88:de:5d:95:3f:20:19:
                    f6:2c:7e:46:15:38:03:c3:09:4c:88:32:17:80:c4:
                    9c:3b:ca:17:b0:52:31:0b:01:c6:7c:60:3a:ca:6c:
                    22:46:a2:92:a1:44:67:c2:ba:28:2f:8f:50:16:ac:
                    bf:7f:40:a2:1f:18:ab:cc:4f:02:79:38:0d:f1:26:
                    76:b9:08:d3:ba:b9:ae:d9:a6:89:a4:65:79:bc:e3:
                    10:bc:45:b6:f4:14:a3:31:cc:b6:ff:15:4b:af:79:
                    4b:f0:22:cf:a4:7f:92:12:8f:2d:fd:89:06:f6:3b:
                    79:ae:24:ab:25:3a:de:bc:90:11:64:97:c1:8f:42:
                    f1:92:b9:95:03:72:fc:89:e9:22:88:ea:08:73:cf:
                    9a:c4:b1:bd:fb:89:a5:85:c1:3a:84:40:24:f1:e2:
                    8a:fd:aa:75:74:0c:20:e7:11:d6:72:c3:ed:94:1c:
                    40:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C6:6C:AF:F9:C8:1E:F0:AD:B8:9C:02:94:F0:B9:66:6E:BD:CE:B2
            X509v3 Authority Key Identifier:
                keyid:28:11:0D:E8:6B:5C:0A:28:6A:9B:35:45:A4:36:9B:11:A7:48:00:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:d1:13:48:5f:dc:86:08:01:6e:5a:8a:e4:f8:7d:df:c8:ef:
         48:d9:cf:05:a1:57:e4:ea:eb:cc:17:07:8b:34:5a:33:4d:74:
         20:5a:53:03:d9:b2:a2:23:8c:12:7e:6c:01:0b:e5:c6:b5:81:
         ce:fa:cd:4d:d6:4a:2e:b2:3f:10:5f:ce:a1:6f:1a:f8:0b:9f:
         5a:e6:78:e4:a1:b9:ba:25:2a:c5:71:08:8c:b8:7c:ac:06:7e:
         3a:ae:22:51:a0:3c:ad:8f:d5:47:fd:be:54:8f:69:e1:a9:f6:
         33:6b:76:78:03:72:15:d5:95:dc:b0:16:22:ea:2b:36:ce:56:
         41:fd:97:39:60:79:b0:a5:f5:17:7c:82:0f:83:0f:d5:c7:fc:
         ec:13:9d:93:7f:a0:e3:01:04:a0:a6:dd:ff:d1:26:91:78:e2:
         8f:ab:d5:a1:1f:73:9e:47:77:81:5a:39:71:14:0d:bf:15:49:
         37:f0:97:91:46:1c:89:bd:41:01:e8:d5:fd:6d:d5:1d:3e:b4:
         46:b9:f8:81:8f:00:d9:73:11:4f:36:9d:ea:62:04:e6:90:89:
         a8:15:b2:26:41:1a:d4:8d:71:aa:a2:08:28:49:71:fd:1b:e1:
         a3:de:71:0d:5b:59:80:50:64:cb:63:61:d2:7a:26:38:fc:3d:
         ac:d4:4c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:11 2026 by rpki-client