Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft
File:                     DF363D7461650156F76A26CBA12EB3420DB3D849.mft (raw, json)
Hash identifier:          ZgwxdzIP416c0NydEPlHfv85rchQaBV/4OO2/UOAl8A=
Subject key identifier:   50:D9:70:E9:EA:3A:57:5C:BF:B3:F2:8F:F3:67:41:BD:BE:0B:C7:07
Authority key identifier: DF:36:3D:74:61:65:01:56:F7:6A:26:CB:A1:2E:B3:42:0D:B3:D8:49
Certificate issuer:       /CN=DF363D7461650156F76A26CBA12EB3420DB3D849
Certificate serial:       21B54FC74503BF454966D07F7694AA8145740400
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft
Manifest number:          44
Signing time:             Tue 30 Jun 2026 01:47:50 +0000
Manifest this update:     Tue 30 Jun 2026 01:42:50 +0000
Manifest next update:     Wed 01 Jul 2026 02:06:50 +0000
Files and hashes:         1: DF363D7461650156F76A26CBA12EB3420DB3D849.crl (hash: ii8ZhuSG2RzPj6PSM9aRjYUVAHHFNZwzXzoxDNFzARc=)
                          2: 3130332e3131362e31342e302f32332d3234203d3e203633393032.roa (hash: ngTeNrAtpPC35YX71ipwovbw5e/8zCnuwIl4yirC2Qs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.crl
                          rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 02:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b5:4f:c7:45:03:bf:45:49:66:d0:7f:76:94:aa:81:45:74:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF363D7461650156F76A26CBA12EB3420DB3D849
        Validity
            Not Before: Jun 30 01:42:50 2026 GMT
            Not After : Jul  1 02:06:50 2026 GMT
        Subject: CN=50D970E9EA3A575CBFB3F28FF36741BDBE0BC707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:fc:69:9e:78:f0:52:c9:6b:19:fe:9a:d2:
                    7d:58:62:26:cd:7e:59:da:98:13:44:7f:b0:c7:a9:
                    bb:66:58:d6:d8:f7:ab:36:aa:96:c8:5b:b9:69:53:
                    0a:88:4a:89:26:06:a3:e1:2e:92:8d:94:ae:74:e1:
                    3f:af:94:73:5c:ab:b4:fd:82:42:4b:32:c3:50:bd:
                    45:a2:b4:5d:69:06:73:da:c9:71:81:a9:05:50:b1:
                    ec:c4:ec:c5:df:5e:fd:a2:68:43:de:c7:d3:bc:ac:
                    0d:97:f9:69:b1:c8:e9:e7:d4:17:8f:e0:89:9e:25:
                    ff:a3:33:f8:f9:80:c2:27:b5:e3:7d:42:a1:65:d8:
                    a5:f6:d2:ec:fe:72:02:ed:2d:33:c6:e9:0e:60:ff:
                    e9:fb:6b:76:dd:55:82:13:ba:79:74:7f:e1:eb:01:
                    dc:76:db:2a:0c:cb:91:bd:99:43:f5:a5:f8:c8:43:
                    db:8b:b7:38:0c:34:92:cc:42:a5:09:52:91:c3:2f:
                    a4:e4:a6:73:b1:a4:46:00:a5:c0:2d:30:c2:90:82:
                    80:cb:00:c5:21:cf:ce:e3:42:2c:09:74:9c:2d:72:
                    06:ed:78:6a:39:a8:8c:35:45:4b:62:a4:c0:73:60:
                    14:96:93:c9:c8:b7:65:6e:c6:30:1d:1c:b3:1b:7d:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D9:70:E9:EA:3A:57:5C:BF:B3:F2:8F:F3:67:41:BD:BE:0B:C7:07
            X509v3 Authority Key Identifier:
                keyid:DF:36:3D:74:61:65:01:56:F7:6A:26:CB:A1:2E:B3:42:0D:B3:D8:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF363D7461650156F76A26CBA12EB3420DB3D849.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SHINETEL/0/DF363D7461650156F76A26CBA12EB3420DB3D849.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9a:db:b9:05:dd:83:91:f9:8d:24:b9:1e:82:8a:d3:cf:d8:
         22:a0:5c:81:5e:29:97:fe:e7:d8:b7:b5:cf:5b:f9:39:fe:10:
         0a:86:3e:f7:2c:7a:ef:04:ba:9a:f1:9c:89:dc:fb:9a:1a:ad:
         1f:da:e4:5a:75:62:a6:77:2e:07:71:84:53:f4:b9:23:27:0a:
         5d:45:be:ee:d9:6e:d2:04:4d:53:0f:92:49:69:60:1e:59:da:
         1f:df:bd:69:b5:40:36:61:e3:4d:b9:fb:c1:89:a4:1e:53:b0:
         e7:4b:da:e6:85:c9:d3:31:08:f9:4d:bc:4a:6d:d4:57:43:4d:
         79:bc:47:c4:4a:b1:e9:5a:d4:0d:a2:93:71:e1:ba:3b:3c:fe:
         8e:8d:30:19:02:e3:52:73:be:ac:02:e6:de:70:7e:dd:37:a8:
         2a:b0:fe:22:a4:5b:da:2d:de:9f:bf:6e:10:c8:1e:73:d9:9e:
         4a:8c:df:fc:8a:78:30:6b:7c:3d:34:97:10:dc:f0:3d:01:83:
         ef:d1:5b:9e:40:b9:37:14:47:da:5f:51:33:8e:7f:cd:d6:0e:
         d2:26:95:e4:63:76:f1:ce:33:d0:26:77:79:09:d8:0b:20:ab:
         aa:9b:25:52:c8:9a:96:ad:3b:a0:91:cc:ac:04:be:89:0d:80:
         9a:8c:ef:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:17 2026 by rpki-client