Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
File:                     D1EE894ECDA357FF3B846E2660D95F0535127E79.mft (raw, json)
Hash identifier:          7B9MLWB+S43U78zxUAAHNx+y3Zppou04tAkKzMJlkBM=
Subject key identifier:   53:2F:B8:E9:7F:21:9D:03:1B:C3:4C:B2:A4:45:F9:5D:5D:AB:41:50
Authority key identifier: D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79
Certificate issuer:       /CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
Certificate serial:       44D68BC16EC3AFC5C044C7E89F814A116C8C4946
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
Manifest number:          43
Signing time:             Tue 30 Jun 2026 07:33:19 +0000
Manifest this update:     Tue 30 Jun 2026 07:28:19 +0000
Manifest next update:     Wed 01 Jul 2026 07:56:19 +0000
Files and hashes:         1: D1EE894ECDA357FF3B846E2660D95F0535127E79.crl (hash: R0iCT1xYaAs5G/ymTLZDvkgVwfQ3Dtnum2A83ppScMM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl
                          rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 07:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d6:8b:c1:6e:c3:af:c5:c0:44:c7:e8:9f:81:4a:11:6c:8c:49:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1EE894ECDA357FF3B846E2660D95F0535127E79
        Validity
            Not Before: Jun 30 07:28:19 2026 GMT
            Not After : Jul  1 07:56:19 2026 GMT
        Subject: CN=532FB8E97F219D031BC34CB2A445F95D5DAB4150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:e6:c3:b7:72:42:4d:37:36:b0:58:fc:41:
                    be:b0:f9:09:ba:45:23:34:40:30:83:43:89:ea:31:
                    5f:13:2b:9a:30:2d:77:01:2e:71:b7:2b:4a:ac:37:
                    82:8d:d3:47:7d:82:8f:84:b3:98:50:8f:07:70:e6:
                    2b:f8:0e:ec:2c:0f:69:b5:5d:e4:4c:5a:9c:11:92:
                    ab:ec:f4:1f:c7:0c:b5:fb:39:c5:71:dc:5e:81:0f:
                    a0:ef:1a:38:ba:f1:04:fa:71:3a:51:e1:87:e4:db:
                    a9:f4:45:fc:be:4a:87:6a:5b:11:f3:b7:30:46:d2:
                    0c:fe:c0:a4:41:73:f6:ab:14:17:67:23:df:4e:17:
                    68:cd:00:5f:27:d1:c2:20:37:d8:8b:41:df:98:ab:
                    19:b3:e0:0e:59:3b:aa:a4:e7:bb:e4:73:1d:ba:57:
                    dc:c7:5d:71:d2:61:1f:69:95:ea:b4:44:05:d9:ec:
                    2d:51:86:34:46:80:42:0b:eb:1e:f4:a8:e3:40:6a:
                    9e:58:d5:98:08:cf:c2:a9:3f:53:0d:39:1c:13:57:
                    4b:6c:bb:e3:55:c8:9e:b4:53:76:cb:9a:80:a6:67:
                    85:31:02:67:b1:5c:78:c0:da:a4:67:d7:98:d5:75:
                    4c:2d:c2:f7:a0:75:ff:6d:19:c8:26:89:87:d3:42:
                    13:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2F:B8:E9:7F:21:9D:03:1B:C3:4C:B2:A4:45:F9:5D:5D:AB:41:50
            X509v3 Authority Key Identifier:
                keyid:D1:EE:89:4E:CD:A3:57:FF:3B:84:6E:26:60:D9:5F:05:35:12:7E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D1EE894ECDA357FF3B846E2660D95F0535127E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/QYCLOUD/0/D1EE894ECDA357FF3B846E2660D95F0535127E79.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8f:b5:d2:63:1c:3f:36:2d:ba:78:c0:7f:7e:63:eb:d3:44:
         95:ba:71:39:67:4e:3e:6f:1a:c3:fb:46:f4:29:87:d2:58:44:
         85:13:70:3a:1a:ab:c8:3b:a1:48:ca:14:8e:de:c8:c6:c7:c4:
         45:f2:bd:5a:1b:7a:6b:72:f7:c2:62:6e:ab:d4:16:b7:98:3b:
         82:7e:50:82:7a:b8:c4:1c:a4:0e:71:68:79:37:d4:ab:33:7d:
         5f:0a:2b:4c:0a:0b:5d:57:ff:32:77:19:41:8f:26:c8:90:02:
         e4:ec:9e:0c:84:95:1c:3f:92:01:c9:89:b8:54:41:63:4f:14:
         d2:1e:eb:b2:87:30:41:6e:5d:5e:fe:0f:fe:64:e9:eb:47:53:
         99:83:5c:92:04:5d:cb:0f:37:46:74:0e:9a:b4:c0:d7:ce:7d:
         7d:87:f9:b1:85:dc:98:28:24:00:01:07:b2:31:69:88:01:96:
         87:87:45:47:db:09:c9:69:8d:7c:00:b2:58:fc:ef:f6:bc:2b:
         55:63:d2:46:2e:f6:b3:43:6d:81:68:71:34:40:42:05:29:21:
         d8:16:cc:f3:72:cc:33:67:4e:1c:52:9b:18:99:14:28:78:f9:
         35:fb:a0:57:df:bb:96:ad:05:c5:c7:28:d6:b6:4f:70:7e:08:
         83:db:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:07 2026 by rpki-client