Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
File:                     56C0B74262A19F328983C278635DE9570AFEB948.mft (raw, json)
Hash identifier:          ZKf4W6XzEUSbRyW6tw2DJpcn30wnfaANvGNnZilY5MU=
Subject key identifier:   BA:8A:92:BC:D1:C9:BA:F1:E6:58:DD:4E:54:C5:11:E9:44:6F:92:3F
Authority key identifier: 56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48
Certificate issuer:       /CN=56C0B74262A19F328983C278635DE9570AFEB948
Certificate serial:       44FAC0E95C00E9B36342259701847ECEC9D40810
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
Manifest number:          81
Signing time:             Fri 14 Aug 2026 18:32:45 +0000
Manifest this update:     Fri 14 Aug 2026 18:27:45 +0000
Manifest next update:     Sat 15 Aug 2026 20:08:45 +0000
Files and hashes:         1: 56C0B74262A19F328983C278635DE9570AFEB948.crl (hash: ioT15bx3ITbtC7Cfw4DLbg6xzmpLklA//HGN/BLr9rQ=)
                          2: 323430323a343932303a3a2f33322d3438203d3e203138303434.roa (hash: w+sTaFe8OsYZPZPjwuyvLTqcXmP0CcIo8Vy8833aYz8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl
                          rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 20:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fa:c0:e9:5c:00:e9:b3:63:42:25:97:01:84:7e:ce:c9:d4:08:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C0B74262A19F328983C278635DE9570AFEB948
        Validity
            Not Before: Aug 14 18:27:45 2026 GMT
            Not After : Aug 15 20:08:45 2026 GMT
        Subject: CN=BA8A92BCD1C9BAF1E658DD4E54C511E9446F923F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:fd:0e:6b:53:e8:b8:46:4a:42:42:4a:1b:
                    a0:6d:cb:b6:2c:0d:95:23:25:39:69:13:41:49:29:
                    78:35:81:e7:35:77:e7:0e:4f:27:36:1e:43:12:ac:
                    a7:f9:20:75:96:97:4b:88:a5:df:6d:82:e5:84:47:
                    b9:69:3d:fd:f7:58:df:04:24:62:2f:23:c7:88:49:
                    1f:96:51:a2:42:eb:c7:8b:0a:b2:b9:30:0c:ae:48:
                    5c:76:9a:7f:ff:9f:da:1b:b6:d9:f6:50:65:c1:43:
                    29:38:73:c5:e1:b7:fa:39:94:12:dc:82:9d:e1:e5:
                    fa:7f:2e:29:d8:86:bb:94:99:96:b0:06:76:bd:f7:
                    de:75:2b:d6:c8:98:f6:27:d8:80:82:2f:2f:83:15:
                    5d:bb:76:8b:e3:65:d5:85:8d:5d:5a:10:a5:fa:6e:
                    b6:e9:08:ec:30:5c:78:fc:b4:63:e3:ea:ed:c1:de:
                    20:97:c0:53:ee:b1:dd:7f:a5:a6:45:1d:59:47:56:
                    1d:a6:dd:8d:25:d5:b1:a1:28:0f:7b:ea:d2:8a:18:
                    8e:84:54:47:ee:fd:d4:ef:7c:69:a9:56:c5:29:c0:
                    c6:cd:c6:fb:41:b4:98:a3:e5:4d:4d:78:9d:f7:3d:
                    ea:17:fd:9e:6e:fb:65:d0:b9:1a:fc:01:48:52:11:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8A:92:BC:D1:C9:BA:F1:E6:58:DD:4E:54:C5:11:E9:44:6F:92:3F
            X509v3 Authority Key Identifier:
                keyid:56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:36:79:e1:5a:83:a7:20:47:d9:f3:37:96:a0:fa:bf:65:03:
         6b:71:43:c0:fb:5c:54:b4:78:df:b8:36:a6:a0:09:25:29:82:
         f1:90:6a:3d:92:52:d5:35:5d:64:73:23:81:49:be:78:1d:5c:
         26:d6:09:16:63:7c:80:30:14:3f:33:8e:d2:d9:bd:b0:1b:c4:
         01:86:23:c5:13:f9:55:0f:f2:e2:5c:29:28:b1:6c:2e:4a:99:
         83:d2:fb:a7:cf:96:1c:06:97:ff:c1:b7:58:e5:1a:86:be:6c:
         0e:30:bf:04:65:61:db:f7:24:45:85:e3:8b:69:26:41:3d:b8:
         49:cd:b2:47:d1:a8:66:b0:f4:5b:d2:02:e3:42:75:90:8e:0b:
         be:fa:31:64:d1:22:d8:96:a4:99:4e:29:a7:46:ff:67:54:50:
         62:be:31:70:be:97:da:31:83:bc:d3:e6:ee:b9:22:52:59:86:
         04:20:ae:4c:53:ec:c0:21:7b:75:9a:27:48:58:28:ef:06:ed:
         f4:ff:67:19:9b:ed:23:e3:ab:bc:b0:3c:fc:07:0a:80:d5:51:
         72:63:80:7b:a1:39:69:a1:5c:ff:04:da:66:46:1f:37:e4:b5:
         b1:69:c4:56:6c:0b:f8:1c:f9:1e:f5:0e:42:51:af:ba:96:15:
         8b:f4:06:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:38:42 2026 by rpki-client