Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
File:                     C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft (raw, json)
Hash identifier:          kTuOP1Qf2hFrv0iXeFsYI/DLN3z03G0FJmcIJPVPX9A=
Subject key identifier:   AF:88:96:03:E7:2D:43:D4:F3:1F:41:39:69:5F:EF:7A:4B:76:5B:68
Authority key identifier: C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1
Certificate issuer:       /CN=C3056C5F157A7E7512FC306EFEDEF92FD12C47F1
Certificate serial:       439B5E133FBAD6B60AE0D84A2EBC6EC9B556ABE2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
Manifest number:          35
Signing time:             Sat 13 Jun 2026 19:55:22 +0000
Manifest this update:     Sat 13 Jun 2026 19:50:22 +0000
Manifest next update:     Sun 14 Jun 2026 21:26:22 +0000
Files and hashes:         1: C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl (hash: vLso8IOQIm1VQMCR0FNuJLkIe/ZGTNTWeHSVBhLzA2Y=)
                          2: 3136312e3234382e34342e302f32332d3332203d3e20313532363139.roa (hash: 4MovYHgGqWQdyUO1Av8kBHVSUNdImBmxnWEFbBFEyVc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl
                          rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 17:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9b:5e:13:3f:ba:d6:b6:0a:e0:d8:4a:2e:bc:6e:c9:b5:56:ab:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3056C5F157A7E7512FC306EFEDEF92FD12C47F1
        Validity
            Not Before: Jun 13 19:50:22 2026 GMT
            Not After : Jun 14 21:26:22 2026 GMT
        Subject: CN=AF889603E72D43D4F31F4139695FEF7A4B765B68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:51:e5:72:dc:57:5a:3b:6c:45:09:26:fd:85:
                    83:f7:14:ca:19:6d:56:a4:85:e1:3f:71:20:29:c5:
                    f9:73:de:bd:40:08:68:26:59:10:d6:6f:f2:47:58:
                    7b:d9:44:71:bf:78:f8:df:2f:c9:6c:c1:fd:a7:86:
                    99:ae:18:3a:26:a3:91:eb:8f:86:f4:28:bb:4f:6d:
                    cd:a0:c2:ea:57:37:82:10:cb:4a:47:28:71:fe:9e:
                    77:f4:ef:e1:65:3c:40:75:1d:8a:bd:ba:b1:6d:95:
                    c9:7c:9e:57:b6:47:6f:81:8f:ca:e5:06:88:55:06:
                    c9:db:12:52:8d:50:0f:f8:d4:10:a4:1c:c8:1f:51:
                    7e:40:92:db:02:32:62:56:d2:21:9d:99:cf:b6:87:
                    c2:49:ab:08:61:b5:b5:aa:67:e2:23:0d:83:f0:c1:
                    cf:e9:ac:4c:a2:f6:e3:c8:67:75:9c:95:37:53:3a:
                    37:29:4b:15:38:33:62:b2:e6:c5:58:dd:72:38:fe:
                    8c:5a:5c:a5:16:ce:82:fa:92:bb:94:9e:3d:71:db:
                    f2:1e:eb:3b:4c:e2:7a:1f:c5:f6:b1:81:19:c1:d9:
                    b9:60:bf:81:54:34:4e:4f:fb:2a:6f:cf:27:d1:e1:
                    ee:52:33:14:c7:c9:c2:c1:b1:e6:2c:73:e0:ac:69:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:88:96:03:E7:2D:43:D4:F3:1F:41:39:69:5F:EF:7A:4B:76:5B:68
            X509v3 Authority Key Identifier:
                keyid:C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:cb:6e:6d:91:29:59:6d:24:d6:d7:0a:2e:1a:ab:30:fd:7f:
         74:88:56:d5:18:57:81:5c:cb:b6:2f:6e:43:37:1c:26:4a:ce:
         50:a8:7c:17:64:20:93:ce:41:a5:4a:e2:df:14:4b:6e:57:69:
         ce:16:d5:00:06:7f:e1:7c:60:57:a8:14:82:46:29:90:f3:d9:
         ab:df:22:54:ae:8c:5d:4f:29:4c:4a:2e:9a:6a:d0:ea:c5:5b:
         bb:e8:fb:8b:4a:b0:fa:bf:33:2b:d9:f0:06:02:38:5b:b2:df:
         8a:f2:92:2c:a6:85:6f:4e:c9:d6:bf:6a:05:c1:93:87:b1:1a:
         a3:f1:85:ed:76:c1:f2:23:88:ab:c8:e5:fb:07:77:d9:57:52:
         ed:8b:9a:73:0b:db:e4:47:29:16:c9:44:a4:3c:f2:0c:b2:b6:
         b4:09:a9:e9:8f:e7:a0:21:80:92:ac:cc:d4:dd:69:0e:0f:ed:
         b7:f1:94:a1:cc:fd:8c:d3:8c:b5:1f:83:ee:cc:9c:4c:b9:f0:
         aa:f4:77:b3:99:ef:e5:52:a9:7c:07:2e:16:08:a1:9a:3f:e8:
         25:41:9c:70:83:d6:aa:ff:87:50:29:87:8f:b2:89:70:6a:22:
         f0:6c:15:e1:f9:c8:6a:1a:66:3a:e5:34:5a:d6:c4:ae:61:8f:
         13:ac:06:48
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUQ5teEz+61rYK4NhKLrxuybVWq+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzMwNTZDNUYxNTdBN0U3NTEyRkMzMDZFRkVERUY5MkZE
MTJDNDdGMTAeFw0yNjA2MTMxOTUwMjJaFw0yNjA2MTQyMTI2MjJaMDMxMTAvBgNV
BAMTKEFGODg5NjAzRTcyRDQzRDRGMzFGNDEzOTY5NUZFRjdBNEI3NjVCNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUeVy3FdaO2xFCSb9hYP3FMoZ
bVakheE/cSApxflz3r1ACGgmWRDWb/JHWHvZRHG/ePjfL8lswf2nhpmuGDomo5Hr
j4b0KLtPbc2gwupXN4IQy0pHKHH+nnf07+FlPEB1HYq9urFtlcl8nle2R2+Bj8rl
BohVBsnbElKNUA/41BCkHMgfUX5AktsCMmJW0iGdmc+2h8JJqwhhtbWqZ+IjDYPw
wc/prEyi9uPIZ3WclTdTOjcpSxU4M2Ky5sVY3XI4/oxaXKUWzoL6kruUnj1x2/Ie
6ztM4nofxfaxgRnB2blgv4FUNE5P+ypvzyfR4e5SMxTHycLBseYsc+CsaWiBAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUr4iWA+ctQ9TzH0E5aV/vekt2W2gwHwYDVR0j
BBgwFoAUwwVsXxV6fnUS/DBu/t75L9EsR/EwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVkVSWUZB
U1QvMS9DMzA1NkM1RjE1N0E3RTc1MTJGQzMwNkVGRURFRjkyRkQxMkM0N0YxLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wL0MzMDU2QzVGMTU3QTdFNzUxMkZDMzA2RUZF
REVGOTJGRDEyQzQ3RjEuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9WRVJZRkFTVC8xL0MzMDU2QzVG
MTU3QTdFNzUxMkZDMzA2RUZFREVGOTJGRDEyQzQ3RjEubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPy25t
kSlZbSTW1wouGqsw/X90iFbVGFeBXMu2L25DNxwmSs5QqHwXZCCTzkGlSuLfFEtu
V2nOFtUABn/hfGBXqBSCRimQ89mr3yJUroxdTylMSi6aatDqxVu76PuLSrD6vzMr
2fAGAjhbst+K8pIspoVvTsnWv2oFwZOHsRqj8YXtdsHyI4iryOX7B3fZV1Lti5pz
C9vkRykWyUSkPPIMsra0Canpj+egIYCSrMzU3WkOD+238ZShzP2M04y1H4PuzJxM
ufCq9Hezme/lUql8By4WCKGaP+glQZxwg9aq/4dQKYePsolwaiLwbBXh+chqGmY6
5TRa1sSuYY8TrAZI
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:31:01 2026 by rpki-client