Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft
File:                     34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft (raw, json)
Hash identifier:          5yAtaAjaU35iP5otSBCxfwqxSjyqkumjrbxGqBI8LCQ=
Subject key identifier:   51:FC:DE:EF:3A:26:E1:3B:9B:AE:98:06:4D:2C:F4:CA:81:76:C6:A2
Authority key identifier: 34:DC:43:57:C9:2F:21:89:45:C1:FA:7B:D9:A8:04:84:41:D4:AB:ED
Certificate issuer:       /CN=34DC4357C92F218945C1FA7BD9A8048441D4ABED
Certificate serial:       65AD7F58586E0BDC4A18648B3153155306205295
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/34DC4357C92F218945C1FA7BD9A8048441D4ABED.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft
Manifest number:          0A
Signing time:             Wed 13 May 2026 07:52:41 +0000
Manifest this update:     Wed 13 May 2026 07:47:41 +0000
Manifest next update:     Thu 14 May 2026 08:59:41 +0000
Files and hashes:         1: 34DC4357C92F218945C1FA7BD9A8048441D4ABED.crl (hash: I0h2S89to5NU6oLene8hZW1f+y3f49vxa0ph32fz5i0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.crl
                          rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/34DC4357C92F218945C1FA7BD9A8048441D4ABED.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ad:7f:58:58:6e:0b:dc:4a:18:64:8b:31:53:15:53:06:20:52:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34DC4357C92F218945C1FA7BD9A8048441D4ABED
        Validity
            Not Before: May 13 07:47:41 2026 GMT
            Not After : May 14 08:59:41 2026 GMT
        Subject: CN=51FCDEEF3A26E13B9BAE98064D2CF4CA8176C6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:68:ab:5d:f3:58:e4:25:51:f1:cd:66:97:7a:
                    f3:61:62:3b:9f:f7:fe:cc:37:70:ce:5e:35:d6:a4:
                    56:95:a7:55:66:75:58:45:13:0a:f6:b5:bd:2d:f0:
                    18:aa:74:07:38:19:83:b3:a2:c6:3e:81:f8:67:c3:
                    6c:0a:32:8d:b9:22:c4:1c:10:a1:5a:2d:b4:54:45:
                    8b:7a:fa:32:98:a3:70:df:1e:60:58:25:c6:8a:b7:
                    43:f5:20:e1:81:c0:c2:22:40:64:46:cf:82:df:72:
                    d8:a4:09:eb:22:fd:04:80:b9:cf:78:3b:bf:25:29:
                    3a:b8:53:a5:e9:0e:bf:2d:a7:0b:50:2d:fa:cf:6f:
                    51:1e:29:a1:2c:74:16:42:a1:e2:8b:4b:00:76:02:
                    e3:92:16:a7:f8:7d:89:b5:9f:89:96:ef:f8:67:31:
                    c0:75:4f:7d:c7:56:55:9a:b1:0d:bf:68:47:f6:bf:
                    e3:d8:3a:89:16:70:82:db:c0:92:f7:a6:87:88:f1:
                    9f:1c:c1:34:d5:4d:e2:5f:7b:ae:17:4f:27:20:43:
                    2d:f0:c1:18:1e:00:40:99:bb:5f:77:f5:08:75:43:
                    c0:16:1d:19:8c:93:95:8b:82:06:11:c1:7e:73:f1:
                    16:ff:86:89:29:fe:df:73:16:fa:52:ce:a3:6d:db:
                    32:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FC:DE:EF:3A:26:E1:3B:9B:AE:98:06:4D:2C:F4:CA:81:76:C6:A2
            X509v3 Authority Key Identifier:
                keyid:34:DC:43:57:C9:2F:21:89:45:C1:FA:7B:D9:A8:04:84:41:D4:AB:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/34DC4357C92F218945C1FA7BD9A8048441D4ABED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:8b:d3:4e:a9:da:86:ba:e6:b4:4f:ea:eb:ea:e9:b3:2c:15:
         fc:d2:82:09:0e:d9:21:fb:75:b5:f6:02:b4:e4:26:73:76:fc:
         f1:cd:bc:53:74:ea:6e:bb:df:4c:c0:ba:53:67:92:14:01:8f:
         6b:1c:03:aa:40:33:d4:a9:1c:a2:e5:72:3c:92:0d:92:a0:2d:
         97:28:0f:19:31:9f:d3:95:4b:2f:1b:36:ac:17:11:5b:04:44:
         75:fe:fc:ed:30:08:8b:9f:11:d3:1f:91:bd:f8:fc:6b:ff:36:
         6e:8e:33:1b:3c:39:e6:50:95:da:a9:8d:1a:09:6d:67:dc:eb:
         36:5e:55:7e:27:8b:9f:66:9a:0e:cd:1c:33:28:23:63:4b:9b:
         cc:e0:5e:22:be:4b:00:be:0f:49:c4:17:1c:c6:2b:fd:ac:14:
         1a:63:8a:57:c4:c2:cb:0d:8b:c8:f3:cd:56:52:8b:21:b1:93:
         d1:11:0d:8d:d8:2c:11:f6:81:e0:2c:93:64:09:52:25:f8:11:
         ba:64:92:43:64:f1:ee:3c:a8:61:c1:d6:41:43:cd:72:b5:18:
         c0:18:b5:ed:ab:f3:d0:e8:29:83:cc:70:3e:59:33:70:ac:35:
         1b:82:17:f9:26:44:ef:d0:75:e0:c2:d3:ef:8f:c4:1d:58:12:
         bb:09:8c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:00 2026 by rpki-client