Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
File:                     453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft (raw, json)
Hash identifier:          8UM8SfGzmrzpF6ZVMSSAsdUMHbIV1tTeorkkD7jW7ew=
Subject key identifier:   2E:7B:DB:86:42:65:04:29:6C:0F:E3:65:74:B2:03:B4:32:2F:AD:38
Authority key identifier: 45:38:85:A7:EE:A9:58:3A:51:24:AC:D3:2D:CB:0B:F2:FE:82:71:48
Certificate issuer:       /CN=453885A7EEA9583A5124ACD32DCB0BF2FE827148
Certificate serial:       2F10974F71B5F34A91B57E63B799AC3292AB1444
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
Manifest number:          43
Signing time:             Tue 30 Jun 2026 02:47:58 +0000
Manifest this update:     Tue 30 Jun 2026 02:42:58 +0000
Manifest next update:     Wed 01 Jul 2026 04:39:58 +0000
Files and hashes:         1: 453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl (hash: 1OQ+7N9p6OkfD/Z6Gx/UCRYXYmxt8Pw9ZBbRbxxLmj4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl
                          rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 04:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:10:97:4f:71:b5:f3:4a:91:b5:7e:63:b7:99:ac:32:92:ab:14:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453885A7EEA9583A5124ACD32DCB0BF2FE827148
        Validity
            Not Before: Jun 30 02:42:58 2026 GMT
            Not After : Jul  1 04:39:58 2026 GMT
        Subject: CN=2E7BDB86426504296C0FE36574B203B4322FAD38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:e7:7c:58:55:c2:37:8e:df:e4:20:b4:fd:
                    d4:17:de:9f:f4:47:be:37:b1:a9:f8:65:75:cd:2f:
                    c8:70:db:ba:41:93:ff:8d:2d:88:80:05:24:8b:47:
                    9f:7e:fa:83:19:1c:29:73:ee:68:f9:c6:d0:45:c6:
                    66:ac:16:9b:ce:cb:13:69:71:12:b9:fb:9a:14:56:
                    de:57:83:bf:d3:36:d2:94:09:5c:e0:c7:b8:12:fa:
                    94:0c:08:a8:71:95:99:d5:78:7a:15:cf:70:e4:db:
                    15:b3:f5:f1:1e:d4:dc:20:2f:95:d5:88:f3:cb:04:
                    74:35:f0:bb:44:fa:2a:f4:46:a3:14:da:5f:ea:bf:
                    36:01:0a:d7:a0:8f:10:76:5b:38:bb:f4:69:cc:46:
                    ee:e3:19:9c:61:c8:ce:05:12:29:67:25:ee:bd:d0:
                    20:97:44:e2:14:66:18:65:e9:da:44:35:e8:de:ae:
                    07:8e:fa:a8:fe:f0:d4:c1:6e:f6:9d:ae:76:0c:fc:
                    61:40:0f:5e:b5:7b:65:ca:b3:4e:02:73:c5:ea:0f:
                    3b:24:2a:97:21:2d:fe:c0:30:a9:0a:ad:9d:ea:fa:
                    77:c0:60:dd:d2:c7:1f:63:b3:77:3f:18:e1:6a:d2:
                    8e:2d:8c:a7:a1:e6:eb:6e:e9:72:48:42:b0:8a:8c:
                    c2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7B:DB:86:42:65:04:29:6C:0F:E3:65:74:B2:03:B4:32:2F:AD:38
            X509v3 Authority Key Identifier:
                keyid:45:38:85:A7:EE:A9:58:3A:51:24:AC:D3:2D:CB:0B:F2:FE:82:71:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:85:a3:23:21:4a:f7:32:54:49:a4:84:e5:50:bd:68:03:cf:
         21:94:98:6d:a8:a5:7c:40:f4:3d:5f:01:1f:43:a9:b5:06:00:
         2e:b3:80:47:7c:f6:f1:79:a7:fb:55:8a:b8:78:89:77:4e:e1:
         f3:06:06:80:3e:d2:ed:06:d3:43:ab:90:b1:0f:d4:7d:74:fe:
         4e:5d:ab:34:68:96:9c:6c:1b:16:fb:85:08:d5:36:7b:21:61:
         3c:41:dd:f1:01:a7:16:81:86:b5:80:b7:05:e4:10:05:92:57:
         4b:86:48:14:5e:03:16:98:67:13:d0:2f:6c:ed:aa:db:53:27:
         19:a2:6c:83:b9:09:92:2f:c5:b0:d1:71:a7:de:3d:12:d3:ab:
         aa:1a:be:1e:2e:1d:10:b6:c4:c4:0d:c6:ac:1b:3d:cd:19:16:
         db:54:70:c0:a4:0c:62:1f:ee:dc:bc:30:11:a9:bd:1c:83:15:
         a4:70:0d:86:8c:d8:cd:da:07:42:d0:25:d5:f6:9a:02:b6:b4:
         50:b2:89:76:d9:d4:68:a2:81:3c:3b:4f:39:6b:21:77:54:c9:
         5c:35:19:da:b9:f1:ea:5a:62:e2:d9:d2:e7:3e:11:29:f8:81:
         34:ab:58:e6:c8:41:b7:34:f8:0c:be:56:86:0a:e8:6b:8b:19:
         83:b8:7b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:56 2026 by rpki-client