Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft
File:                     F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft (raw, json)
Hash identifier:          aglDcweqkQrbMCq98ClnTxV0RBQwh7cjcBMXbpPt/qI=
Subject key identifier:   11:FB:D2:73:A7:8A:D0:0A:61:0F:19:50:CE:B7:44:B9:0E:EE:8D:76
Authority key identifier: F9:6D:5B:B5:C5:DA:63:B4:56:BF:63:87:D2:90:3A:75:7B:3F:48:B4
Certificate issuer:       /CN=F96D5BB5C5DA63B456BF6387D2903A757B3F48B4
Certificate serial:       2A7C71A036B713C2615CAF7E7B44D28148EBCDCB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft
Manifest number:          43
Signing time:             Tue 30 Jun 2026 13:24:00 +0000
Manifest this update:     Tue 30 Jun 2026 13:19:00 +0000
Manifest next update:     Wed 01 Jul 2026 16:52:00 +0000
Files and hashes:         1: F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.crl (hash: Kg+5uXsbcCSXsGWF0OW/yxyut+sE2HONX1iqbY9pxWs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.crl
                          rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 14:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7c:71:a0:36:b7:13:c2:61:5c:af:7e:7b:44:d2:81:48:eb:cd:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F96D5BB5C5DA63B456BF6387D2903A757B3F48B4
        Validity
            Not Before: Jun 30 13:19:00 2026 GMT
            Not After : Jul  1 16:52:00 2026 GMT
        Subject: CN=11FBD273A78AD00A610F1950CEB744B90EEE8D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:46:68:d2:0e:4d:76:0f:6e:be:4d:bf:ca:0a:
                    75:45:62:44:92:98:70:62:cb:11:09:13:fd:d7:96:
                    0a:5f:20:b3:d6:a4:66:b7:0d:ce:8b:2c:00:cf:32:
                    b2:b0:c6:77:4d:1f:a6:08:a4:7f:65:a7:33:c3:a2:
                    6d:ea:14:fa:47:55:87:d7:f7:c3:70:f2:05:07:61:
                    ff:ec:ab:0e:17:af:92:96:0f:06:83:d1:fc:6c:04:
                    06:03:05:aa:7e:7d:b6:97:68:bf:1a:e8:32:e1:62:
                    b2:7f:c6:4d:b6:58:0f:bd:f6:6d:05:f0:6f:28:dc:
                    01:91:e2:42:02:de:f0:89:9e:11:9d:6c:91:17:54:
                    5c:d9:75:b6:8d:f0:d0:03:89:e4:0b:a6:b2:d8:f3:
                    03:f8:c1:24:17:a3:12:e2:1b:d7:bf:e6:5b:81:2a:
                    2e:98:b9:d6:18:07:0a:0a:d1:25:6d:4a:45:b6:e9:
                    69:0d:13:55:41:15:a8:36:de:5a:d6:91:ed:fc:5a:
                    ef:07:51:cf:61:85:14:27:9d:1c:c6:f8:ae:d7:1c:
                    7f:79:c9:23:f9:df:ba:c7:c1:fe:e5:5e:b5:f9:16:
                    30:e6:c2:46:98:fa:a5:78:25:96:e2:8f:40:dd:08:
                    6d:ed:3a:29:68:ee:0e:5c:8f:49:1e:4d:e6:b3:5b:
                    b6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FB:D2:73:A7:8A:D0:0A:61:0F:19:50:CE:B7:44:B9:0E:EE:8D:76
            X509v3 Authority Key Identifier:
                keyid:F9:6D:5B:B5:C5:DA:63:B4:56:BF:63:87:D2:90:3A:75:7B:3F:48:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IQRATOR/0/F96D5BB5C5DA63B456BF6387D2903A757B3F48B4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f5:66:e7:64:32:b5:b2:53:63:a3:6b:d1:20:60:0e:7f:80:
         57:0c:94:a0:54:d9:d7:f0:d3:c5:70:67:49:13:65:49:4c:a0:
         84:86:11:b9:1a:f8:16:69:25:b8:f9:19:13:55:a3:8a:21:d4:
         c0:18:91:1d:c1:db:2a:7b:ab:29:f0:3d:22:0a:2a:b4:c4:da:
         18:8d:bc:80:27:fa:b0:8b:6f:73:de:8c:b4:2a:a8:3f:43:54:
         47:06:19:d9:01:79:08:81:63:25:cd:4b:53:b2:31:8a:35:b6:
         2d:d7:02:4b:c0:8c:c0:36:de:65:d7:52:19:ca:67:ef:9c:80:
         c3:86:4e:57:e3:35:44:4f:d5:26:55:b9:f8:44:1d:3e:0d:7c:
         8d:02:5b:a2:1d:bd:86:58:86:7d:02:a6:fb:24:63:55:b1:fe:
         90:bc:62:42:c0:94:13:d8:e6:61:dd:5f:6f:74:7a:a5:31:ed:
         c9:95:76:16:69:8e:31:46:ef:9a:91:e0:2e:2b:bb:4d:88:df:
         0a:1c:78:91:c8:25:8e:fb:53:a8:58:dd:37:ad:63:e1:55:dd:
         6a:83:a8:74:e8:2c:8f:4a:bb:08:87:57:64:a7:96:0c:88:a8:
         2b:d4:2a:bc:93:af:7f:47:84:61:36:0a:d7:02:05:e0:01:b0:
         77:d9:39:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:08 2026 by rpki-client