Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft
File:                     76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft (raw, json)
Hash identifier:          qDxnwSH8cqF+4ZFFAf28lEZhgZvJ8UXRF8fXlLzZLhQ=
Subject key identifier:   35:26:C2:52:D1:B4:31:65:7E:51:E1:3F:ED:ED:B3:CC:BF:F1:DD:B9
Authority key identifier: 76:A7:E3:7B:E9:87:6B:8A:C3:A3:1B:9E:D3:93:79:96:84:2E:BB:78
Certificate issuer:       /CN=76A7E37BE9876B8AC3A31B9ED3937996842EBB78
Certificate serial:       26A4D93BC394A7D0828443D7A6192A55195002BE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 08:57:49 +0000
Manifest this update:     Wed 13 May 2026 08:52:49 +0000
Manifest next update:     Thu 14 May 2026 11:55:49 +0000
Files and hashes:         1: 76A7E37BE9876B8AC3A31B9ED3937996842EBB78.crl (hash: BmvU9nXlOxHXXn3lKxxZTBrpp1lKXReXMaxZwFdzJf4=)
                          2: 3130332e3235342e3231322e302f32332d3332203d3e20313331363432.roa (hash: qzl9dOSKwgCXVZTZxr3Z7XqLacSrZMcN+zOVWKu4R9w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.crl
                          rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:55:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a4:d9:3b:c3:94:a7:d0:82:84:43:d7:a6:19:2a:55:19:50:02:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76A7E37BE9876B8AC3A31B9ED3937996842EBB78
        Validity
            Not Before: May 13 08:52:49 2026 GMT
            Not After : May 14 11:55:49 2026 GMT
        Subject: CN=3526C252D1B431657E51E13FEDEDB3CCBFF1DDB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:83:9d:95:6b:c2:c0:4c:bb:52:c4:df:82:
                    dc:a2:9d:00:9f:a8:47:73:30:f8:a4:24:6e:b0:f4:
                    99:fc:af:c0:dc:25:24:70:da:d0:44:0c:b4:f4:f4:
                    77:50:91:d5:6e:17:09:2d:16:73:41:d3:22:84:04:
                    b1:71:a2:3c:1e:1b:25:d0:b7:57:d2:ff:d2:3e:e3:
                    70:eb:0d:e0:4e:5a:92:a3:b7:22:e6:13:74:b2:dc:
                    f6:ac:17:a0:2b:fe:17:c0:f8:56:36:85:d5:e3:82:
                    0d:d2:2b:10:6b:51:b3:1b:d7:d5:4b:97:29:7b:9d:
                    d7:39:ab:93:f8:d7:3d:5c:c4:48:7c:6d:ca:85:05:
                    a5:e4:11:fc:72:42:fc:d6:92:af:35:41:3d:5c:bc:
                    7f:0c:b8:92:10:f6:c8:35:22:b4:20:f3:f3:3c:45:
                    1d:42:24:6c:7b:fa:df:72:e5:87:c9:da:aa:6b:14:
                    53:39:43:f4:73:3f:4d:3a:55:36:4c:31:45:48:6f:
                    6d:ff:3b:f9:b4:d5:a4:45:7c:13:f2:39:21:5b:f2:
                    bd:c7:77:78:7b:bb:28:2c:f0:bc:1d:a3:33:6c:f8:
                    47:ef:0d:b9:76:4b:e6:49:fe:81:6b:d2:87:44:39:
                    0d:ea:b0:61:e7:61:b1:5b:4b:52:ce:79:01:e4:23:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:26:C2:52:D1:B4:31:65:7E:51:E1:3F:ED:ED:B3:CC:BF:F1:DD:B9
            X509v3 Authority Key Identifier:
                keyid:76:A7:E3:7B:E9:87:6B:8A:C3:A3:1B:9E:D3:93:79:96:84:2E:BB:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JCA/0/76A7E37BE9876B8AC3A31B9ED3937996842EBB78.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:31:a1:98:fd:7f:31:34:51:29:0e:85:f0:3d:4e:d6:5e:31:
         92:86:de:ac:35:69:17:ca:d0:ba:fb:ba:98:0e:c0:e2:c0:de:
         13:cd:2e:87:ad:88:cb:24:ab:5b:f8:dd:66:e5:b9:6b:87:2a:
         c9:02:cb:7c:ec:6e:f9:3d:94:f4:49:df:95:bf:b3:64:93:28:
         ef:6b:57:db:5d:37:5a:da:e8:b4:57:e5:e8:e2:57:33:7a:b8:
         66:53:74:be:79:7c:ff:40:f1:8d:18:76:dc:44:fa:28:a0:1b:
         cb:16:2c:e3:7c:5f:71:5c:49:c0:02:8b:38:ba:a7:e3:0f:df:
         9e:dc:d1:99:f0:77:ec:ae:67:24:01:4a:74:ea:70:ea:48:18:
         7d:a2:80:83:b4:b1:b7:a6:20:fe:47:f1:00:20:35:19:5a:ab:
         0f:4d:12:08:bf:9e:4c:a6:1c:25:bf:84:26:48:d7:5b:f9:84:
         d5:17:ad:21:b8:08:e7:48:17:7b:b5:c0:6f:b6:ae:07:75:58:
         ce:64:16:30:ca:58:c8:65:0b:28:81:1c:e4:6b:b2:3a:f8:0c:
         3a:ea:b1:8d:64:5f:20:7e:05:da:d5:ff:8d:b5:44:3e:22:76:
         2c:40:90:32:4a:e6:23:0d:9a:4d:f9:83:eb:fd:a1:16:a0:25:
         1b:ee:f2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:35 2026 by rpki-client