Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
File:                     56C0B74262A19F328983C278635DE9570AFEB948.mft (raw, json)
Hash identifier:          Fgf9N9nnLN32kENldNal49bsoqBs6EthIREObUjlQ54=
Subject key identifier:   83:1F:B8:59:F7:3C:E2:22:15:61:8B:5E:A7:C2:43:9E:42:CA:07:24
Authority key identifier: 56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48
Certificate issuer:       /CN=56C0B74262A19F328983C278635DE9570AFEB948
Certificate serial:       2A912F087AE38414C0A043377A30AFB280B2CBD4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
Manifest number:          05
Signing time:             Wed 13 May 2026 08:57:49 +0000
Manifest this update:     Wed 13 May 2026 08:52:49 +0000
Manifest next update:     Thu 14 May 2026 11:40:49 +0000
Files and hashes:         1: 56C0B74262A19F328983C278635DE9570AFEB948.crl (hash: u3zPoMeMAEeWpNE0rqXTSTHRCpRuOGYZvRJHSjTq+S8=)
                          2: 323430323a343932303a3a2f33322d3438203d3e203138303434.roa (hash: w+sTaFe8OsYZPZPjwuyvLTqcXmP0CcIo8Vy8833aYz8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl
                          rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:91:2f:08:7a:e3:84:14:c0:a0:43:37:7a:30:af:b2:80:b2:cb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C0B74262A19F328983C278635DE9570AFEB948
        Validity
            Not Before: May 13 08:52:49 2026 GMT
            Not After : May 14 11:40:49 2026 GMT
        Subject: CN=831FB859F73CE22215618B5EA7C2439E42CA0724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:61:cd:98:97:46:23:5a:b3:17:d8:3a:fa:
                    92:b1:c7:f9:8c:17:04:9e:b6:5c:e1:c6:69:1e:7f:
                    b4:f8:fb:66:5d:41:1e:d7:c6:f3:5a:78:77:a0:dc:
                    88:92:af:ff:2c:ea:15:69:ff:ae:8d:ee:6c:f2:e3:
                    72:b2:1b:3c:20:87:67:e5:bb:4e:6e:36:56:91:56:
                    b6:09:63:c2:42:09:9c:19:ca:c1:83:99:12:93:e9:
                    8e:d9:91:ed:9e:9f:23:c4:a4:b5:60:85:b2:5a:ee:
                    e4:46:5c:7f:e8:81:9a:82:d7:52:af:7a:74:7b:48:
                    97:a4:5a:fb:93:b3:e7:e8:08:04:6b:8c:27:1a:65:
                    e6:07:57:2f:e4:4b:ef:3a:48:54:30:c7:c5:17:d3:
                    1e:5e:b4:8a:0a:4d:13:83:e5:29:01:d0:a5:85:cd:
                    6a:c9:11:d6:e6:7d:38:ef:cf:3e:9c:e1:fb:44:c4:
                    ce:1b:a3:6a:16:dc:91:52:4a:7e:06:28:f6:13:20:
                    e9:c6:2e:23:38:8f:03:7c:8c:91:74:69:01:c7:48:
                    51:24:30:62:24:42:79:28:e1:a5:72:c2:de:10:43:
                    07:c2:9d:3c:0f:f5:74:fe:ff:eb:55:09:8d:3b:87:
                    c0:67:a8:a9:99:3a:75:12:4a:47:2a:cc:c4:05:c4:
                    a1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1F:B8:59:F7:3C:E2:22:15:61:8B:5E:A7:C2:43:9E:42:CA:07:24
            X509v3 Authority Key Identifier:
                keyid:56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:12:d2:43:59:71:88:83:77:50:25:3c:07:ef:46:8e:c3:d8:
         9d:e6:f0:65:25:e9:40:e1:17:98:29:e5:4c:7c:9f:2b:eb:20:
         e4:6c:ea:b4:af:4c:e3:c4:31:39:1d:1a:3f:05:3b:69:fe:ef:
         c7:3c:8b:2d:3c:78:06:dd:0c:2b:1a:c9:35:59:f8:65:52:1b:
         03:d2:26:7b:0c:2d:fd:03:d2:54:b0:0a:0a:6f:a1:41:b5:4a:
         7e:8f:c6:17:96:78:e7:0b:58:4e:cf:b3:45:49:23:69:e0:e6:
         25:bd:40:ef:85:5e:d9:04:f6:6c:4d:41:11:01:2a:c1:b6:95:
         18:9f:b7:32:e9:04:0c:a5:11:ab:4b:da:e0:73:27:a5:1c:50:
         61:76:2e:de:8f:29:d7:06:e3:ae:ea:29:ed:2e:b6:f8:ea:0a:
         a2:37:65:38:1f:ce:89:8b:74:14:df:97:a7:e7:be:54:aa:4b:
         55:73:c1:ca:81:c4:cf:ee:d0:59:94:71:c4:58:99:b8:05:9b:
         b3:25:11:c4:67:9c:91:db:4b:92:47:25:61:5e:c8:8b:f0:79:
         38:2e:34:14:4f:37:63:c6:63:e4:9f:11:63:82:33:85:91:37:
         4a:f4:39:19:8b:8b:8c:c8:4a:f8:4b:4a:d5:f6:56:3f:1a:92:
         a5:e2:4d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:34:17 2026 by rpki-client