Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
File:                     FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft (raw, json)
Hash identifier:          ygHRBX+qDaZeUE3gevHjf6HPUQU7w2JUJzaZT55C8j0=
Subject key identifier:   CF:32:54:7B:D0:1D:A8:9C:92:46:9D:03:BE:20:DD:D2:64:6C:6D:8C
Authority key identifier: FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B
Certificate issuer:       /CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
Certificate serial:       9E6505155DAC5338A5DA28D17BE8BF190E4AD1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
Manifest number:          44
Signing time:             Tue 30 Jun 2026 07:43:20 +0000
Manifest this update:     Tue 30 Jun 2026 07:38:20 +0000
Manifest next update:     Wed 01 Jul 2026 09:25:20 +0000
Files and hashes:         1: FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl (hash: oYFNdptQBGl3H9kiNEP0XiLhEpN4+PMkk0VyM5qLfXc=)
                          2: 323430313a653736303a3a2f33322d3438203d3e20313331363435.roa (hash: 8YC3WhfA/JwpTpT4EA1dLfSVRzAraHz3m65LBo1nSas=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl
                          rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 09:25:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9e:65:05:15:5d:ac:53:38:a5:da:28:d1:7b:e8:bf:19:0e:4a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB752D6E1A89A824BE6E04852D1F505F01ED185B
        Validity
            Not Before: Jun 30 07:38:20 2026 GMT
            Not After : Jul  1 09:25:20 2026 GMT
        Subject: CN=CF32547BD01DA89C92469D03BE20DDD2646C6D8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ee:84:ae:39:0c:48:bc:38:c5:cb:ff:7a:63:
                    11:5a:4a:f9:f6:cc:05:2e:c2:22:9a:1b:74:97:61:
                    b6:cf:81:aa:c5:94:e1:96:fc:87:bf:2f:20:fc:63:
                    2c:b1:47:cc:ee:31:c9:b6:80:c9:07:a1:c2:59:22:
                    74:90:60:3f:19:6a:ee:28:2f:ce:a7:c2:f1:4e:ce:
                    1b:38:6d:33:7c:b6:36:07:7d:40:4a:79:24:33:00:
                    50:f9:5c:47:36:39:43:c8:2e:91:f5:f6:05:92:e7:
                    a2:db:e5:33:ea:ff:78:48:bb:e6:02:e8:92:a1:17:
                    41:bc:be:d1:2b:b6:f7:20:01:3e:1d:9a:78:4a:16:
                    2b:3a:45:17:ba:2d:79:35:3d:a9:0c:2a:bb:a5:e4:
                    86:94:67:4a:bf:5e:78:00:29:1e:bc:88:ea:b9:a8:
                    89:f3:f2:71:3b:fa:78:4a:af:ef:b8:12:fc:c7:49:
                    6a:94:12:15:e8:a9:0d:60:8e:97:bd:4f:e0:86:2a:
                    a4:5d:49:57:92:10:9e:b0:8a:2c:d4:27:7d:af:18:
                    a2:e2:0b:c7:12:ac:7a:d1:14:5f:71:86:f9:d4:45:
                    b7:2e:19:9a:78:1e:f4:bd:7d:43:60:47:9b:20:f5:
                    bc:10:cd:b2:10:d6:a8:97:3e:02:29:ce:0a:0d:b4:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:32:54:7B:D0:1D:A8:9C:92:46:9D:03:BE:20:DD:D2:64:6C:6D:8C
            X509v3 Authority Key Identifier:
                keyid:FB:75:2D:6E:1A:89:A8:24:BE:6E:04:85:2D:1F:50:5F:01:ED:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/FB752D6E1A89A824BE6E04852D1F505F01ED185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KKH/0/FB752D6E1A89A824BE6E04852D1F505F01ED185B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c7:f5:e4:b6:fe:50:f7:1e:3f:92:dd:bb:db:c1:8f:94:f6:
         b1:80:34:cd:88:7c:d3:74:0e:53:ac:52:5c:64:7d:b4:0d:4d:
         96:c7:3e:e4:dd:ce:da:af:28:f0:66:c2:f7:c0:65:22:76:45:
         fd:74:7d:e1:c1:a0:04:ad:82:70:4b:e8:df:54:59:c3:85:b0:
         68:46:93:6c:dc:62:75:64:7f:09:27:10:ab:e0:14:23:64:b9:
         c9:94:f1:52:7d:d9:e9:99:f3:f2:a8:1a:cf:1c:52:62:06:cc:
         32:4f:e7:47:b5:ff:33:12:f8:dd:f3:07:c7:d7:05:c6:64:b0:
         6a:a3:fb:9a:55:85:ce:fb:b3:1f:d5:40:e8:de:5e:8a:6f:2e:
         16:e9:32:20:99:a2:ae:1f:29:53:74:d0:ca:16:a6:a7:79:6d:
         b3:e9:9a:7c:84:65:a9:bc:ae:12:02:cc:34:22:33:e1:79:2c:
         bd:1c:d9:fb:97:9f:f9:c6:f2:70:d3:90:84:94:71:c2:0e:27:
         94:ab:fb:28:23:79:fa:25:5f:51:6a:c9:7e:f3:3a:6f:97:c1:
         4c:72:fe:62:26:2a:4b:96:97:dd:6b:37:38:8b:8c:3f:17:87:
         6f:0e:db:73:e8:82:47:fa:b3:88:47:0e:55:d6:dc:f8:9e:50:
         f1:67:ee:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:52 2026 by rpki-client