Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
File:                     35904BA082DF1690711D4866CC0E87AF00FA998D.mft (raw, json)
Hash identifier:          6R6CXhprN0PdenSCTacABVt5p98aPNoNrQvkHOZqO9s=
Subject key identifier:   84:F1:1E:EC:C3:CE:13:94:EA:E6:1B:6D:2B:92:97:F2:05:F8:48:AA
Authority key identifier: 35:90:4B:A0:82:DF:16:90:71:1D:48:66:CC:0E:87:AF:00:FA:99:8D
Certificate issuer:       /CN=35904BA082DF1690711D4866CC0E87AF00FA998D
Certificate serial:       2EEF5501EC7712A3DFB7610DF1B7943DEE571751
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
Manifest number:          03
Signing time:             Wed 13 May 2026 06:27:21 +0000
Manifest this update:     Wed 13 May 2026 06:22:21 +0000
Manifest next update:     Thu 14 May 2026 08:45:21 +0000
Files and hashes:         1: 35904BA082DF1690711D4866CC0E87AF00FA998D.crl (hash: Xx9swaFuVo7WFXLLXdKf3pP79whtp5j/Y7EotvF1HMQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.crl
                          rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ef:55:01:ec:77:12:a3:df:b7:61:0d:f1:b7:94:3d:ee:57:17:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35904BA082DF1690711D4866CC0E87AF00FA998D
        Validity
            Not Before: May 13 06:22:21 2026 GMT
            Not After : May 14 08:45:21 2026 GMT
        Subject: CN=84F11EECC3CE1394EAE61B6D2B9297F205F848AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:12:15:11:6b:3f:38:98:31:ed:05:3e:b1:89:
                    7d:e3:e9:8d:81:78:69:35:e4:8b:7f:35:1e:40:a9:
                    42:50:10:43:82:d6:50:aa:23:02:08:54:f5:1a:c0:
                    bf:7f:9a:96:d5:0a:ef:67:7d:14:44:c5:2d:30:77:
                    98:86:d2:1f:05:38:8b:37:64:25:8f:7e:6c:62:cb:
                    99:9e:b6:4d:ea:6e:70:15:e0:71:c3:82:a7:f1:2d:
                    bf:80:9b:41:f2:10:a0:0f:08:79:e2:39:8e:15:d6:
                    58:c1:35:0d:0a:9f:c1:30:56:98:a3:0e:a9:aa:f6:
                    21:c8:02:e8:54:3c:f9:b8:18:ea:8c:cf:a8:4b:41:
                    53:ed:71:cc:21:d6:78:86:0f:af:f8:57:a9:e8:27:
                    3e:12:fb:08:4d:9d:40:c9:cf:cd:8b:3e:1d:48:d4:
                    4a:ca:95:28:07:85:8a:12:4e:d1:f9:52:e5:13:b4:
                    91:61:b1:21:da:df:fc:75:e3:ac:ef:02:4c:33:2e:
                    f7:9d:30:cd:5f:cf:f3:66:33:0b:dc:a3:f7:00:07:
                    08:82:83:ef:2e:40:d8:84:72:5e:9f:66:e9:10:d7:
                    d5:35:d5:75:62:9a:b7:53:c4:99:0b:06:9e:cf:8c:
                    b1:ae:5d:12:9c:ce:c9:c7:54:3b:3e:80:fb:7a:5d:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F1:1E:EC:C3:CE:13:94:EA:E6:1B:6D:2B:92:97:F2:05:F8:48:AA
            X509v3 Authority Key Identifier:
                keyid:35:90:4B:A0:82:DF:16:90:71:1D:48:66:CC:0E:87:AF:00:FA:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:94:4d:f4:86:02:fc:10:66:62:25:f2:cd:97:89:12:c1:35:
         f0:29:99:10:7a:c2:b5:27:7c:2f:29:13:87:17:e7:25:ff:6d:
         79:25:27:40:2c:e3:7f:68:75:3b:d3:e0:fa:50:ad:36:5f:4a:
         07:3a:be:b9:82:23:bc:8e:94:53:8f:a2:ba:90:a0:da:71:3f:
         29:e3:ba:05:4d:6e:e7:c0:02:85:44:42:db:5c:69:73:bb:98:
         38:51:12:b6:3c:c8:3d:30:b8:e8:7c:42:bf:e0:29:5b:e8:51:
         94:60:cc:ea:7c:3a:65:33:04:7d:c8:61:e1:5c:54:d9:88:bf:
         04:fe:69:15:73:2b:03:61:52:83:dd:eb:be:66:aa:4f:c2:23:
         5a:02:fd:c1:5f:18:ee:1b:0c:d9:4f:3c:c0:3f:6b:a2:9c:c2:
         7a:fb:bb:97:21:a0:13:66:27:e1:1f:25:db:c5:69:bb:dd:1e:
         2d:73:9a:84:bb:0d:de:25:c1:94:5a:1e:6c:f7:7f:86:47:39:
         c9:2c:a2:73:d1:90:05:aa:20:c0:83:a5:9f:f4:e0:50:8e:00:
         8b:a4:e3:c2:56:f5:db:77:4e:04:43:de:8e:7c:75:40:a5:78:
         82:07:cb:e3:4c:4f:d2:37:b1:48:38:f0:90:3d:93:cd:0e:1b:
         0a:e7:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:01 2026 by rpki-client