Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
File:                     71525972E3C1153DE53054798F51A5BD55C75019.mft (raw, json)
Hash identifier:          t8Psg6Q0ZbBXzew25FhJk00MKgS13JYQUAJjFfwqOog=
Subject key identifier:   2D:B2:FC:0E:69:36:50:96:67:47:4B:DD:87:9F:E1:2F:4E:DF:A7:92
Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
Certificate issuer:       /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
Certificate serial:       5880DDD36F283CE5E61DDEC4EB8B87A295132661
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
Manifest number:          01C6
Signing time:             Sat 13 Jun 2026 15:45:29 +0000
Manifest this update:     Sat 13 Jun 2026 15:40:29 +0000
Manifest next update:     Sun 14 Jun 2026 18:46:29 +0000
Files and hashes:         1: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (hash: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg=)
                          2: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (hash: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=)
                          3: 71525972E3C1153DE53054798F51A5BD55C75019.crl (hash: dntVblqnOtliJwb8Y4NzrbmqmqgTlw/8+pl5jJ+wqbA=)
                          4: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (hash: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 18:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:80:dd:d3:6f:28:3c:e5:e6:1d:de:c4:eb:8b:87:a2:95:13:26:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
        Validity
            Not Before: Jun 13 15:40:29 2026 GMT
            Not After : Jun 14 18:46:29 2026 GMT
        Subject: CN=2DB2FC0E6936509667474BDD879FE12F4EDFA792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:7d:aa:08:14:fd:c5:4e:ce:e8:3b:ed:8f:
                    6f:b0:19:92:b9:d5:c9:b6:3f:6b:c6:40:e2:a4:c5:
                    8e:6a:e0:46:af:cd:e0:cc:dd:63:b2:e5:01:04:9c:
                    53:84:10:19:67:a8:da:19:3e:c7:fa:95:d3:2f:92:
                    f5:ff:d2:88:04:eb:b8:0f:b0:16:8c:98:8e:a0:ee:
                    82:f1:f0:b1:8d:db:ce:1f:50:38:ef:f4:90:88:2b:
                    bf:42:45:df:a2:24:5d:a5:e1:12:46:a1:40:bb:a3:
                    1a:a2:88:62:12:8d:a4:ba:33:62:72:d9:61:a2:22:
                    ef:95:d6:d7:fb:17:c8:67:53:cb:64:f3:a6:41:e1:
                    95:ac:44:d4:e5:76:9a:d5:4f:b5:b5:22:93:92:8a:
                    79:5c:c4:cb:4e:23:a8:51:da:8c:da:6b:d9:89:0a:
                    38:a4:00:40:1e:9d:07:1d:ac:83:f6:36:57:8e:8f:
                    47:ab:80:16:e2:64:92:72:2d:2b:97:41:ed:17:41:
                    34:c0:a6:21:08:d7:00:9a:de:bb:e5:48:a9:67:d7:
                    20:2e:7a:26:b6:54:b3:89:34:5c:25:aa:3a:72:c5:
                    3b:4f:a5:4c:5d:83:b5:2b:9c:ad:71:bf:87:b9:d5:
                    b7:e2:0a:10:11:14:23:09:d5:9a:ed:1a:e3:60:09:
                    4f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B2:FC:0E:69:36:50:96:67:47:4B:DD:87:9F:E1:2F:4E:DF:A7:92
            X509v3 Authority Key Identifier:
                keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4e:05:3c:91:e8:db:7b:4b:48:5c:e1:be:3a:b7:47:f2:9e:
         73:f1:02:b3:83:bb:62:59:fc:ef:cf:fa:43:60:ab:90:d5:d8:
         5a:9c:86:3e:b7:4b:ce:91:06:81:9a:0f:df:ce:6c:d7:21:68:
         91:86:0b:58:91:d7:32:e5:83:43:97:33:09:69:b1:7b:33:28:
         97:07:fc:f0:92:41:9c:30:d7:b6:44:d4:d3:bd:38:73:14:b3:
         04:5a:e7:50:01:8a:e1:a5:23:6a:96:70:39:3f:97:11:12:91:
         43:0a:9d:3e:f1:7a:91:23:24:ad:0e:e3:31:23:f2:0e:43:eb:
         c6:94:73:cb:50:b0:09:34:3a:e5:69:dc:38:95:b7:38:28:87:
         4a:92:ad:58:aa:4a:9c:0d:87:86:2f:9a:bc:6f:4a:ef:ab:d1:
         3e:12:b4:49:32:13:dc:36:c2:bb:cd:b5:6c:48:0e:0b:47:43:
         e4:5b:68:68:ae:c9:96:a6:06:1a:c3:89:b6:5b:c5:7f:61:b5:
         eb:b4:61:52:1b:af:80:d2:7f:bd:5b:cb:4c:01:ea:74:ec:8c:
         fa:a2:b8:2c:f8:df:40:51:9f:ec:08:1a:71:f0:31:90:45:af:
         dd:d6:51:e1:bf:17:d2:31:cf:16:70:57:48:2b:39:7a:07:67:
         e0:27:55:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:29:26 2026 by rpki-client