Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
File:                     56C0B74262A19F328983C278635DE9570AFEB948.mft (raw, json)
Hash identifier:          Oi1Cgj7+npTF9xAYn9qjrmVigMacXCeFGneok3UHpf4=
Subject key identifier:   7C:45:8E:DE:06:8B:E3:3F:16:03:02:7E:4C:0F:FD:4F:1F:3D:DF:45
Authority key identifier: 56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48
Certificate issuer:       /CN=56C0B74262A19F328983C278635DE9570AFEB948
Certificate serial:       642008B075F8C99282FA7EFB22B3F49CD6311078
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
Manifest number:          C7
Signing time:             Mon 05 Oct 2026 21:40:11 +0000
Manifest this update:     Mon 05 Oct 2026 21:35:11 +0000
Manifest next update:     Tue 06 Oct 2026 23:17:11 +0000
Files and hashes:         1: 56C0B74262A19F328983C278635DE9570AFEB948.crl (hash: xEcGaofKz6QbLsC6Cc69WTCrCYkfzukNRwqaOajOr24=)
                          2: 323430323a343932303a3a2f33322d3438203d3e203138303434.roa (hash: w+sTaFe8OsYZPZPjwuyvLTqcXmP0CcIo8Vy8833aYz8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl
                          rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 09:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:20:08:b0:75:f8:c9:92:82:fa:7e:fb:22:b3:f4:9c:d6:31:10:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C0B74262A19F328983C278635DE9570AFEB948
        Validity
            Not Before: Oct  5 21:35:11 2026 GMT
            Not After : Oct  6 23:17:11 2026 GMT
        Subject: CN=7C458EDE068BE33F1603027E4C0FFD4F1F3DDF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:4a:c6:ea:4f:56:1b:dd:41:66:9e:20:16:
                    72:10:7d:c5:f8:82:97:1f:36:2e:9c:42:3b:be:96:
                    83:5d:ff:17:62:28:30:1b:f1:3c:ea:19:b8:b2:4b:
                    42:d4:12:be:bb:36:d5:45:b3:97:71:bb:33:26:1a:
                    cf:a7:c6:58:fb:3d:49:97:67:86:de:e2:d9:d1:47:
                    eb:22:d3:2f:39:1d:4a:02:f4:0f:00:d7:e5:1f:da:
                    df:bb:e1:01:35:96:f7:69:cb:03:df:34:d1:fa:cb:
                    ad:2d:43:4b:ff:d8:34:a1:5f:86:3c:c7:8f:6f:fb:
                    7f:05:26:1e:e0:18:0d:b3:4e:79:6a:15:9b:3a:49:
                    5b:4c:28:8a:6b:9b:6b:4c:60:64:90:52:d8:ae:6c:
                    32:0f:3d:d8:72:cb:e6:c2:97:ea:79:68:dd:fb:62:
                    f1:fb:ec:c4:0c:e6:2e:f1:2e:45:45:e3:bf:99:f3:
                    b3:9e:5f:31:a5:6a:f4:78:2e:41:b6:7c:cb:81:19:
                    df:13:03:85:5c:e3:eb:51:1b:54:50:46:fd:8a:c1:
                    50:78:fe:7c:fc:26:89:5e:87:13:37:b0:43:f0:9c:
                    5d:25:28:0b:b5:54:cb:94:c9:c4:16:fe:22:b7:22:
                    4f:be:83:1c:f8:59:ba:dd:a8:f6:b8:a5:49:3c:be:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:45:8E:DE:06:8B:E3:3F:16:03:02:7E:4C:0F:FD:4F:1F:3D:DF:45
            X509v3 Authority Key Identifier:
                keyid:56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c0:52:bc:c3:11:da:a5:5c:e0:51:06:f3:c0:2c:84:81:0e:
         a5:5f:fa:c0:4a:58:5a:bc:3f:db:32:c5:27:ff:b0:9f:8e:89:
         1b:e2:58:d9:af:02:85:86:5a:da:1f:61:f9:cb:89:c4:a2:d5:
         67:8e:fe:07:4a:09:40:ce:df:ba:57:cd:b3:36:03:3a:74:c3:
         4a:92:f2:ad:cc:75:d4:2e:98:a8:13:3d:cd:13:66:e3:9a:82:
         cc:7a:9f:32:d7:02:2c:78:9d:c8:2b:28:1c:37:ea:6b:61:40:
         cb:c3:84:62:80:02:7e:d8:0d:20:52:aa:88:99:9d:2e:6f:f2:
         5d:d0:99:91:c4:62:1b:8d:ee:22:8a:fa:b3:70:85:92:e3:5f:
         29:ff:45:9b:9f:27:b1:65:ce:4a:e2:01:4a:7e:89:d1:9c:45:
         45:2d:86:4b:86:be:af:7b:dc:42:48:fb:8a:9e:bc:10:23:12:
         c7:dd:53:22:be:c6:d8:c0:12:41:f4:6f:f1:cf:88:96:43:8e:
         94:7a:01:96:0b:d1:c7:95:e7:22:c1:e6:b4:99:16:70:1a:20:
         8f:dd:a8:f9:ef:01:ec:a3:08:c5:9a:e7:9e:4c:34:87:4f:0e:
         8a:cf:08:2f:c6:bb:e4:c7:4e:9d:20:cc:aa:80:12:29:65:74:
         f7:af:50:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:25:43 2026 by rpki-client