Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
File:                     35904BA082DF1690711D4866CC0E87AF00FA998D.mft (raw, json)
Hash identifier:          AVPEmy+1eSk2frDCMYFVVMnrEvF/0PW2MNsO89iacjA=
Subject key identifier:   3D:5B:3E:6D:8B:00:27:6C:8F:88:4C:8D:AA:68:49:FD:AE:FD:89:78
Authority key identifier: 35:90:4B:A0:82:DF:16:90:71:1D:48:66:CC:0E:87:AF:00:FA:99:8D
Certificate issuer:       /CN=35904BA082DF1690711D4866CC0E87AF00FA998D
Certificate serial:       3F51C0FDD74F65AFDEF3DF5096294DFA79C60889
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
Manifest number:          43
Signing time:             Tue 30 Jun 2026 01:17:46 +0000
Manifest this update:     Tue 30 Jun 2026 01:12:46 +0000
Manifest next update:     Wed 01 Jul 2026 02:11:46 +0000
Files and hashes:         1: 35904BA082DF1690711D4866CC0E87AF00FA998D.crl (hash: mLO5PYr+NAjv0aE7sfHS+Nvo86LksRdi65Xr8/DPdPw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.crl
                          rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 02:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:51:c0:fd:d7:4f:65:af:de:f3:df:50:96:29:4d:fa:79:c6:08:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35904BA082DF1690711D4866CC0E87AF00FA998D
        Validity
            Not Before: Jun 30 01:12:46 2026 GMT
            Not After : Jul  1 02:11:46 2026 GMT
        Subject: CN=3D5B3E6D8B00276C8F884C8DAA6849FDAEFD8978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:d2:52:12:80:74:e7:1d:88:1c:1f:11:14:
                    92:12:a5:d3:a2:0a:bf:0d:b3:c2:cc:05:16:a2:1c:
                    10:a9:c0:17:42:a8:b6:41:e3:d6:09:51:7b:ef:93:
                    fa:71:22:74:21:e6:74:a8:69:5d:1c:d5:7e:bc:69:
                    f4:b1:8a:4a:8d:10:8b:b8:41:57:67:1a:07:f2:f4:
                    3a:2c:28:e3:ed:b1:be:70:bc:35:9c:05:f3:72:55:
                    a7:81:1a:97:a3:45:ab:b1:17:e5:3f:43:22:ae:fa:
                    f2:4b:81:5e:31:54:5a:a1:81:ff:1e:81:12:03:f1:
                    d0:db:d5:e5:7b:89:d0:7e:71:f2:ea:03:d1:b5:6d:
                    6f:ac:dd:34:cc:0a:eb:4b:7a:0e:1b:89:fe:1d:28:
                    05:63:f0:b9:53:a9:90:b5:fa:4e:bb:e9:19:7d:ba:
                    82:0c:b5:a6:46:16:61:3d:20:2c:e2:fd:27:74:c1:
                    15:99:ef:0c:8b:f7:44:7e:69:73:2d:01:a3:87:54:
                    2c:ac:08:e2:cc:ac:20:78:9e:2b:92:a2:52:e9:51:
                    98:8c:99:17:87:73:91:7c:e0:0a:48:37:55:23:71:
                    64:0a:a7:95:09:e4:00:6e:9c:09:0e:56:85:9f:61:
                    71:ce:eb:44:a2:00:93:23:8c:cb:d1:c7:c7:e6:19:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5B:3E:6D:8B:00:27:6C:8F:88:4C:8D:AA:68:49:FD:AE:FD:89:78
            X509v3 Authority Key Identifier:
                keyid:35:90:4B:A0:82:DF:16:90:71:1D:48:66:CC:0E:87:AF:00:FA:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c5:d3:67:b1:e4:a1:f7:7a:c9:99:c2:22:17:7d:6c:0f:80:
         e6:c9:75:03:7a:c2:a2:09:c4:e9:46:96:eb:73:bf:87:57:7c:
         21:c5:02:4d:2c:ff:ff:98:0c:b1:a1:d6:5f:82:64:b0:ab:ab:
         cc:06:44:81:9a:68:76:74:dd:b7:83:4e:07:cb:90:6e:0c:c1:
         e2:03:13:51:ca:ae:97:9f:34:dc:61:72:d1:1f:e4:28:d2:45:
         d5:f2:72:e6:75:7e:bf:4e:ac:e5:1c:21:27:8f:44:48:58:12:
         62:8f:15:d6:81:e2:93:99:d7:47:76:8a:c1:13:46:f9:06:b5:
         0d:08:13:18:6e:66:0b:0f:3c:26:fc:ad:ed:fd:36:3c:69:7e:
         c8:a7:2e:63:9e:a5:78:e5:01:18:a2:79:b6:74:08:79:45:d4:
         58:80:06:db:d0:54:38:8e:b9:b4:85:58:7b:03:39:e5:6b:9f:
         ea:11:0e:95:9e:2c:ea:c0:93:d8:74:15:43:4c:4f:5b:f0:05:
         ba:13:22:cf:2d:65:1e:1f:d2:bb:49:27:f7:b5:94:68:53:34:
         2b:56:aa:76:bf:ac:3d:46:2a:7d:32:ea:3e:84:8d:83:48:cf:
         68:20:6d:58:91:12:36:08:ab:54:46:4c:9f:a3:50:ec:6a:f8:
         f6:3a:01:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:07:16 2026 by rpki-client