Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft
File:                     9B5DA40B0F23621450755917A456431F689EB049.mft (raw, json)
Hash identifier:          2rD7niS77tOUdortWchxFfli82ugCK9tqbZU5R6KPpE=
Subject key identifier:   99:6D:C3:20:A1:FB:A8:10:F0:C1:8D:93:D7:69:6E:82:9A:3F:86:ED
Authority key identifier: 9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49
Certificate issuer:       /CN=9B5DA40B0F23621450755917A456431F689EB049
Certificate serial:       73AFD466197FBB78A2C0DF6810893AEC8AAA8CB6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft
Manifest number:          47
Signing time:             Tue 30 Jun 2026 16:39:18 +0000
Manifest this update:     Tue 30 Jun 2026 16:34:18 +0000
Manifest next update:     Wed 01 Jul 2026 19:37:18 +0000
Files and hashes:         1: 323430303a663432303a3a2f33322d3634203d3e203633393130.roa (hash: nHJZCc2ObG/YAr0XIyCnCXOkUDdTdP47YAnSTHpOSa4=)
                          2: 9B5DA40B0F23621450755917A456431F689EB049.crl (hash: yF4l/wcBtrS0I/pBJS2lnTIpWwQRtlfvJ/h0aw0IdGQ=)
                          3: 3130332e3133302e3233362e302f32332d3234203d3e203633393130.roa (hash: 8S5OsugAwixeQ8Ag9hxeeLoX3QQmkvW+iKjWp7BvVWA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.crl
                          rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 14:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:af:d4:66:19:7f:bb:78:a2:c0:df:68:10:89:3a:ec:8a:aa:8c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B5DA40B0F23621450755917A456431F689EB049
        Validity
            Not Before: Jun 30 16:34:18 2026 GMT
            Not After : Jul  1 19:37:18 2026 GMT
        Subject: CN=996DC320A1FBA810F0C18D93D7696E829A3F86ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f1:e1:19:28:61:97:7a:73:53:63:ab:27:8d:
                    bd:dd:3e:66:65:f3:a0:0c:27:a5:9d:aa:30:85:22:
                    74:99:44:74:ba:96:35:5e:08:52:33:d5:45:59:a2:
                    ba:05:45:9f:f4:b8:f6:ec:22:24:a1:4b:35:5e:d9:
                    7c:11:1c:47:0a:34:b4:7f:9a:61:9b:bb:85:bb:61:
                    63:d1:12:3f:87:65:12:94:24:c3:8d:2c:cf:0f:83:
                    2b:2a:f5:dc:2f:6e:ec:b0:24:3f:54:37:29:a4:a5:
                    91:55:e1:ce:d3:ab:c9:39:5d:99:e8:69:85:2c:9f:
                    c1:38:c0:09:31:23:34:92:78:02:9c:da:70:8e:c8:
                    74:27:1d:26:ae:0c:04:e0:be:f0:3b:5f:f7:98:7e:
                    1e:d9:96:68:1d:88:40:af:19:65:67:7d:85:1c:dd:
                    49:c5:9e:25:01:41:e3:5a:98:c7:b0:77:3b:44:03:
                    11:e3:7d:32:c0:b5:37:0e:04:70:25:18:f2:d0:4d:
                    3b:ea:98:95:e7:a5:c0:5e:9c:38:07:6d:1d:f1:f3:
                    a9:24:e1:8f:4c:e2:66:fd:29:a5:28:7a:ce:c9:79:
                    3c:a1:e9:e0:03:9a:12:f0:6c:78:b2:27:d9:ca:58:
                    81:5b:48:5b:63:6b:46:18:5b:94:c0:3c:f4:60:c5:
                    0f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6D:C3:20:A1:FB:A8:10:F0:C1:8D:93:D7:69:6E:82:9A:3F:86:ED
            X509v3 Authority Key Identifier:
                keyid:9B:5D:A4:0B:0F:23:62:14:50:75:59:17:A4:56:43:1F:68:9E:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B5DA40B0F23621450755917A456431F689EB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CLARK/0/9B5DA40B0F23621450755917A456431F689EB049.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:f4:6f:5b:4b:a0:28:02:3f:6d:e7:99:0d:74:eb:80:76:
         59:d5:c7:2c:9a:48:3d:52:53:cc:cd:b7:8d:fb:69:02:6f:d5:
         66:d4:eb:d1:28:e2:5d:60:07:97:b3:f6:38:18:56:a1:57:74:
         bf:e9:18:13:86:0b:63:c1:db:8d:d6:b7:8f:72:6e:8f:df:8f:
         92:32:cd:b1:52:91:ae:2d:10:b5:ea:dc:70:6e:d7:7b:81:2b:
         88:62:cc:89:fc:16:ac:8b:67:4c:14:59:9b:bc:fd:90:43:c7:
         e8:01:00:52:9d:d4:7c:3f:5e:6d:7a:13:1f:01:20:e8:05:98:
         5a:d9:d3:75:c1:b6:38:06:b3:b3:0a:64:60:25:86:12:21:e1:
         75:de:fd:64:d1:c2:89:c0:e9:24:17:d6:2f:d9:70:db:11:4a:
         82:b0:8e:a4:52:56:b3:ee:21:b8:2e:a6:a3:64:5f:e3:95:1c:
         46:7a:52:2b:a3:1a:02:48:b6:ee:59:1a:c6:65:1f:8d:d6:2a:
         d6:cb:9a:2c:62:72:46:3d:c9:fd:2e:81:d6:e6:53:4a:98:f3:
         04:dc:c6:c3:8a:75:14:5f:b4:be:9b:2c:6f:95:03:e8:d4:50:
         88:40:c9:a3:4e:f2:14:68:3a:3c:14:7f:3c:71:a8:f0:ba:b9:
         18:fa:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:30 2026 by rpki-client