Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft
File:                     0887D67C493519D59AAE1BBED0303F38A26D0712.mft (raw, json)
Hash identifier:          +B0yZscLmbs+Jb78KkYKRGK65zjcMxEBlVnMFrKoVf8=
Subject key identifier:   B3:0D:97:62:45:44:77:E3:6E:0E:AE:63:C4:21:CF:75:04:05:92:6D
Authority key identifier: 08:87:D6:7C:49:35:19:D5:9A:AE:1B:BE:D0:30:3F:38:A2:6D:07:12
Certificate issuer:       /CN=0887D67C493519D59AAE1BBED0303F38A26D0712
Certificate serial:       36CBCF3D621304AB8D039D629C311AF4326EC31C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft
Manifest number:          42
Signing time:             Tue 30 Jun 2026 02:37:57 +0000
Manifest this update:     Tue 30 Jun 2026 02:32:57 +0000
Manifest next update:     Wed 01 Jul 2026 06:08:57 +0000
Files and hashes:         1: 0887D67C493519D59AAE1BBED0303F38A26D0712.crl (hash: mcBbk9U3ilYspth0M45UEGRwajcaYNi2Qc2zj5+nhe8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.crl
                          rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 06:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:cb:cf:3d:62:13:04:ab:8d:03:9d:62:9c:31:1a:f4:32:6e:c3:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0887D67C493519D59AAE1BBED0303F38A26D0712
        Validity
            Not Before: Jun 30 02:32:57 2026 GMT
            Not After : Jul  1 06:08:57 2026 GMT
        Subject: CN=B30D9762454477E36E0EAE63C421CF750405926D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:4e:42:ef:84:59:9e:83:4e:04:b6:7c:a6:
                    ee:de:cd:51:a3:36:16:b5:ac:f6:4e:66:19:01:c6:
                    30:02:f7:0c:f3:9d:02:e6:23:8f:ee:e0:3b:91:f5:
                    a5:9c:4f:1f:0b:94:84:f8:8a:06:d9:ea:9b:43:8e:
                    6d:b5:11:75:b2:50:2d:27:c3:01:37:ff:61:28:63:
                    d0:6e:58:e3:3f:30:7b:64:ee:8c:49:2b:ac:61:c0:
                    56:19:ed:c3:99:94:ec:78:8a:ab:ba:84:be:d5:d3:
                    19:8e:d5:c5:79:d2:d7:0e:23:e9:cc:29:2e:88:84:
                    73:a7:02:c7:a3:d6:4f:32:3a:a5:ca:f1:15:09:6b:
                    2c:f3:ea:3c:e8:a0:18:24:31:41:46:a0:c5:02:10:
                    8f:7f:f5:85:3b:ef:08:32:7b:b4:fa:f9:dd:83:c8:
                    e9:cd:1b:66:2d:7e:35:0a:7f:ad:e3:87:15:07:2e:
                    f0:fe:6c:42:39:0b:04:a5:c9:a2:f6:ff:4d:ae:83:
                    a1:91:f5:2a:59:d8:7e:d0:5e:a3:73:e5:db:8e:39:
                    91:e9:07:42:96:c0:f3:7f:29:87:04:77:54:bb:cd:
                    a3:0b:c5:b1:eb:9f:d8:5c:1d:32:a9:13:cf:f4:7b:
                    46:a1:07:40:ce:b1:5d:ba:64:56:bf:8a:8b:a2:09:
                    c7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0D:97:62:45:44:77:E3:6E:0E:AE:63:C4:21:CF:75:04:05:92:6D
            X509v3 Authority Key Identifier:
                keyid:08:87:D6:7C:49:35:19:D5:9A:AE:1B:BE:D0:30:3F:38:A2:6D:07:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ff:d7:32:79:60:ad:00:ef:0d:a3:9a:46:0b:0a:40:a7:af:
         fe:f3:27:83:42:74:1d:cd:7e:42:76:c8:4f:ac:09:70:69:73:
         e0:3e:4b:9a:8a:1a:89:35:63:27:05:55:05:66:93:14:2c:75:
         db:85:56:66:b5:d9:fa:9c:d2:71:fb:cb:6a:61:3b:45:11:d6:
         bf:c0:92:a2:98:a7:b8:f1:2c:d5:be:c8:d6:f7:f1:30:98:ea:
         a9:f3:f7:16:31:6e:15:14:ce:13:47:6b:9e:f2:90:b5:3d:8a:
         07:b1:82:54:fa:7a:b5:68:2c:0c:50:fd:03:b5:6c:34:85:55:
         e9:e9:a6:8d:13:36:67:82:8f:50:6e:5d:fc:03:6f:e9:61:ba:
         fa:b5:1c:36:2b:49:ef:8e:31:94:ee:d7:d9:02:70:b1:1d:ae:
         7c:64:2b:6c:e4:a2:f6:cb:d6:dc:59:bd:a2:d1:f0:27:44:8d:
         43:f3:c9:8c:e8:34:b4:36:34:fa:dc:a6:f3:ab:72:bc:81:61:
         0c:f4:40:53:2e:f4:ed:63:78:57:a2:a9:71:e9:ae:90:a6:79:
         09:86:06:7c:9b:fb:13:0b:3a:53:0b:b3:f2:cc:02:8f:ee:1d:
         e9:85:ee:e9:b6:75:5a:c7:6a:76:ab:0f:2d:d4:e5:e0:fb:6d:
         6e:62:c3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:11:23 2026 by rpki-client