Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft
File:                     34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft (raw, json)
Hash identifier:          kYr33c67IhEDIUzcHF5xWXyjvIuvZ2wC1uHaHuVmpMY=
Subject key identifier:   0C:EE:75:C9:A4:1F:3D:DA:C0:7D:E8:26:12:C1:5C:83:33:DB:12:20
Authority key identifier: 34:DC:43:57:C9:2F:21:89:45:C1:FA:7B:D9:A8:04:84:41:D4:AB:ED
Certificate issuer:       /CN=34DC4357C92F218945C1FA7BD9A8048441D4ABED
Certificate serial:       6581A02584A9B61FA261F946ACB3BB185BDFD27A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/34DC4357C92F218945C1FA7BD9A8048441D4ABED.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft
Manifest number:          4A
Signing time:             Tue 30 Jun 2026 08:58:28 +0000
Manifest this update:     Tue 30 Jun 2026 08:53:28 +0000
Manifest next update:     Wed 01 Jul 2026 09:38:28 +0000
Files and hashes:         1: 34DC4357C92F218945C1FA7BD9A8048441D4ABED.crl (hash: LMnsW7a9Iz2tcwJFc1jcym+AYquNYYNAJa//J/4FcrY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.crl
                          rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/34DC4357C92F218945C1FA7BD9A8048441D4ABED.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 09:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:81:a0:25:84:a9:b6:1f:a2:61:f9:46:ac:b3:bb:18:5b:df:d2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DC4357C92F218945C1FA7BD9A8048441D4ABED
        Validity
            Not Before: Jun 30 08:53:28 2026 GMT
            Not After : Jul  1 09:38:28 2026 GMT
        Subject: CN=0CEE75C9A41F3DDAC07DE82612C15C8333DB1220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:2a:6a:6e:34:23:a2:40:e8:7b:e2:aa:4b:
                    1f:ac:54:35:c9:97:01:8f:ff:c3:8f:86:23:46:47:
                    f0:8b:90:f0:3a:25:08:5a:61:b5:3c:f6:b7:0f:8e:
                    eb:19:3a:22:14:f9:20:07:9a:98:ec:c9:c7:37:11:
                    88:2f:08:22:64:41:8b:d8:3f:3f:d6:3d:53:fe:96:
                    2d:10:89:ee:16:db:6e:e7:9d:8b:bb:64:68:51:85:
                    4e:ee:a4:1a:35:7b:61:57:19:bd:eb:32:06:36:bd:
                    0c:89:d6:d2:fa:e0:2c:cc:c6:ad:cd:e1:01:89:35:
                    c5:dc:57:9e:d6:c2:90:00:85:ed:72:65:5c:2a:ed:
                    94:77:d9:f4:ef:bd:ad:09:04:75:9e:c5:9d:22:be:
                    b4:40:e4:be:29:2a:04:25:23:ec:84:e4:19:36:40:
                    60:79:6f:c3:30:d9:31:00:c5:25:51:8e:3e:bb:0d:
                    b1:27:2d:e7:09:29:62:95:6e:f7:74:55:80:b3:86:
                    67:77:30:0b:ce:df:d6:a1:e8:ce:bc:32:08:b1:8c:
                    23:f5:a6:d3:0e:28:dc:2e:99:c2:a1:1f:82:0c:59:
                    27:a0:f5:b4:96:de:4c:99:bd:9e:e1:81:43:3c:1f:
                    3d:14:90:f2:ae:ad:c4:a7:72:d0:07:34:4a:dd:0c:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EE:75:C9:A4:1F:3D:DA:C0:7D:E8:26:12:C1:5C:83:33:DB:12:20
            X509v3 Authority Key Identifier:
                keyid:34:DC:43:57:C9:2F:21:89:45:C1:FA:7B:D9:A8:04:84:41:D4:AB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/34DC4357C92F218945C1FA7BD9A8048441D4ABED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:3a:82:82:41:b1:80:f7:de:31:d0:cc:23:65:2d:3e:03:68:
         6b:10:6f:ff:48:4a:83:2a:25:1e:ae:ea:2e:80:48:15:e3:66:
         ad:1d:32:9c:0d:05:26:18:21:30:a2:b5:f1:0c:77:3f:31:31:
         29:9d:f4:0a:db:dc:02:70:a8:c1:78:90:20:1b:45:3a:69:fb:
         4a:4a:d1:3a:23:e9:ff:c9:32:e4:8e:83:1d:9b:06:01:e4:0a:
         8a:2a:aa:fd:4e:68:72:e5:7c:ca:b6:4c:38:c3:27:5a:ae:e0:
         cb:5b:00:80:60:4e:0e:4a:22:46:26:0b:0e:fc:61:3a:ee:d3:
         35:fe:59:85:07:7d:58:1e:fe:a3:c4:1c:96:2a:97:1a:83:92:
         46:41:35:12:95:a4:7f:10:5b:8f:b4:8c:22:73:14:79:49:5a:
         b7:e9:62:d5:ea:84:23:67:4e:8f:71:4f:93:9d:a2:ec:f1:63:
         88:f3:08:e7:ec:c9:8d:db:5f:8b:2b:2a:f6:77:b0:a6:30:60:
         5b:7f:cf:05:45:82:f1:74:4f:d0:99:e2:44:e9:c7:3e:1a:1b:
         85:73:92:91:af:1e:01:fb:16:2b:e5:54:45:16:32:5f:72:ac:
         ee:5e:d8:83:87:0c:3b:3b:25:fb:33:5f:d8:61:ff:02:7f:7f:
         ff:de:d0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:16 2026 by rpki-client