Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
File:                     4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft (raw, json)
Hash identifier:          KIQkcG9FqhRNMp6bpOuDIzmrt/Rab063VaZfa0CJWJE=
Subject key identifier:   DB:49:00:77:88:9D:B0:9B:65:73:03:B6:6E:91:3F:F9:41:23:CA:3D
Authority key identifier: 46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8
Certificate issuer:       /CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8
Certificate serial:       69F4BB8441C49C988E0760CBBD94FEA5F23B6CA7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
Manifest number:          47
Signing time:             Tue 30 Jun 2026 13:59:06 +0000
Manifest this update:     Tue 30 Jun 2026 13:54:06 +0000
Manifest next update:     Wed 01 Jul 2026 15:24:06 +0000
Files and hashes:         1: 4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl (hash: 9O7/4FYbmfl+DaQURZJXOOiYdJVuc4wdquEgQPE9CbY=)
                          2: 323430313a393765303a3a2f34382d3438203d3e20313331313437.roa (hash: p8UsvXIz5WgkEXh1nf22VVGfO3Td54MJiWuDiLo2EHQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl
                          rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 14:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f4:bb:84:41:c4:9c:98:8e:07:60:cb:bd:94:fe:a5:f2:3b:6c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8
        Validity
            Not Before: Jun 30 13:54:06 2026 GMT
            Not After : Jul  1 15:24:06 2026 GMT
        Subject: CN=DB490077889DB09B657303B66E913FF94123CA3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:d8:8f:61:4e:9a:fd:d0:79:09:b4:63:81:
                    4b:b8:59:1a:2f:a3:0c:dc:96:8b:93:08:3e:95:6e:
                    63:81:60:5c:95:ab:99:2e:3a:eb:69:f9:60:54:a1:
                    a0:c3:44:35:8a:39:36:93:e0:92:bf:e3:c8:57:08:
                    8e:03:0f:b5:a3:b1:ee:26:81:ce:7e:a8:92:d1:5e:
                    aa:66:80:c6:02:28:68:c8:9e:d3:d3:a0:b6:32:ad:
                    43:f7:7d:e7:85:37:fe:2f:6e:3c:40:5f:8b:bd:66:
                    36:8b:84:75:81:3b:c0:03:89:9b:e7:70:e3:43:eb:
                    68:46:55:e0:50:78:11:95:e0:3d:ab:d3:24:ae:99:
                    00:f8:c5:d6:20:02:f2:dd:2b:ab:04:c7:46:ee:d1:
                    78:e0:ee:a3:66:b8:1b:55:b7:dc:ec:67:f1:ab:e4:
                    15:bb:cb:14:24:ef:b9:b6:50:3e:0e:d0:72:5d:fe:
                    3e:a4:c3:a1:68:8e:da:09:40:0a:60:f0:c1:1d:05:
                    9d:82:2b:20:36:5e:3c:63:62:48:61:f3:ec:e1:9a:
                    ac:0c:07:5e:64:88:db:8a:44:13:17:5c:4c:a3:76:
                    20:9a:0a:58:3d:74:89:9c:ae:6d:5a:8f:c6:0a:cb:
                    5c:c5:ed:c1:d3:c1:3f:8c:48:0b:60:f4:b0:79:d4:
                    83:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:49:00:77:88:9D:B0:9B:65:73:03:B6:6E:91:3F:F9:41:23:CA:3D
            X509v3 Authority Key Identifier:
                keyid:46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3f:4e:fb:15:ae:7e:a7:2e:ee:61:71:26:4d:7f:e5:89:f9:
         42:1b:1c:97:6f:04:84:c5:7e:44:59:c4:00:a1:8e:fe:33:71:
         ba:74:28:72:54:8c:de:8d:81:72:38:c5:6f:25:13:78:8a:ac:
         1d:f7:fd:aa:86:07:0b:2f:de:65:da:47:a8:6e:fb:47:f1:68:
         3d:0a:05:e6:fa:4b:fa:7b:04:9b:9b:5e:61:cc:4e:ed:5d:06:
         c7:be:4b:0b:35:fb:78:65:1b:93:91:3c:a9:9e:fb:48:a1:34:
         ef:b6:8c:4e:98:29:9b:b0:d4:4c:bb:bb:d8:33:06:10:47:2d:
         aa:40:91:28:18:13:8c:df:ca:13:0e:17:75:78:24:ba:97:e2:
         43:86:15:48:7a:46:54:48:ff:c8:6b:a8:5e:e5:8c:af:86:22:
         50:e3:ca:a3:ce:1b:d3:fc:fe:85:4e:ba:86:59:73:77:78:fd:
         ff:e7:4f:28:58:77:81:1e:a4:32:b9:e6:71:4e:41:31:a4:96:
         f1:eb:00:1e:9a:af:1d:13:ed:f3:75:69:20:d1:09:bb:d6:8a:
         b4:c9:5f:1b:37:6d:1a:b2:e8:4a:78:5e:75:5e:4a:3e:f2:93:
         7f:05:47:18:5a:a3:94:e3:9a:cf:f3:50:5b:c4:c0:27:88:17:
         1f:f3:6b:62
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUafS7hEHEnJiOB2DLvZT+pfI7bKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY3MkNDMUZFMjcwOEU4ODJDN0M3QUM5RjAxNkM5QzUz
NTAzMDFCODAeFw0yNjA2MzAxMzU0MDZaFw0yNjA3MDExNTI0MDZaMDMxMTAvBgNV
BAMTKERCNDkwMDc3ODg5REIwOUI2NTczMDNCNjZFOTEzRkY5NDEyM0NBM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDx9iPYU6a/dB5CbRjgUu4WRov
owzclouTCD6VbmOBYFyVq5kuOutp+WBUoaDDRDWKOTaT4JK/48hXCI4DD7Wjse4m
gc5+qJLRXqpmgMYCKGjIntPToLYyrUP3feeFN/4vbjxAX4u9ZjaLhHWBO8ADiZvn
cOND62hGVeBQeBGV4D2r0ySumQD4xdYgAvLdK6sEx0bu0Xjg7qNmuBtVt9zsZ/Gr
5BW7yxQk77m2UD4O0HJd/j6kw6FojtoJQApg8MEdBZ2CKyA2XjxjYkhh8+zhmqwM
B15kiNuKRBMXXEyjdiCaClg9dImcrm1aj8YKy1zF7cHTwT+MSAtg9LB51INDAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQU20kAd4idsJtlcwO2bpE/+UEjyj0wHwYDVR0j
BBgwFoAURnLMH+JwjogsfHrJ8BbJxTUDAbgwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTElSVU4v
MC80NjcyQ0MxRkUyNzA4RTg4MkM3QzdBQzlGMDE2QzlDNTM1MDMwMUI4LmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzQ2NzJDQzFGRTI3MDhFODgyQzdDN0FDOUYwMTZD
OUM1MzUwMzAxQjguY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MSVJVTi8wLzQ2NzJDQzFGRTI3MDhF
ODgyQzdDN0FDOUYwMTZDOUM1MzUwMzAxQjgubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBiP077Fa5+py7u
YXEmTX/liflCGxyXbwSExX5EWcQAoY7+M3G6dChyVIzejYFyOMVvJRN4iqwd9/2q
hgcLL95l2keobvtH8Wg9CgXm+kv6ewSbm15hzE7tXQbHvksLNft4ZRuTkTypnvtI
oTTvtoxOmCmbsNRMu7vYMwYQRy2qQJEoGBOM38oTDhd1eCS6l+JDhhVIekZUSP/I
a6he5YyvhiJQ48qjzhvT/P6FTrqGWXN3eP3/508oWHeBHqQyueZxTkExpJbx6wAe
mq8dE+3zdWkg0Qm71oq0yV8bN20asuhKeF51Xko+8pN/BUcYWqOU45rP81BbxMAn
iBcf82ti
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:29 2026 by rpki-client