Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft
File:                     2963CB623A578334B7033062B58BFED2DC07BB04.mft (raw, json)
Hash identifier:          EwyXHPZmxlQWWTW1sW7bvMnk0LhCTtX5nwtRRoMNflE=
Subject key identifier:   30:77:9A:F8:4C:B6:BC:AA:A0:EB:8B:CC:48:40:AC:35:07:62:DC:52
Authority key identifier: 29:63:CB:62:3A:57:83:34:B7:03:30:62:B5:8B:FE:D2:DC:07:BB:04
Certificate issuer:       /CN=2963CB623A578334B7033062B58BFED2DC07BB04
Certificate serial:       5AA0ADC361E58CF3FEAA3041F623E4B3709A1435
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft
Manifest number:          82
Signing time:             Sat 15 Aug 2026 00:33:54 +0000
Manifest this update:     Sat 15 Aug 2026 00:28:54 +0000
Manifest next update:     Sun 16 Aug 2026 03:43:54 +0000
Files and hashes:         1: 2963CB623A578334B7033062B58BFED2DC07BB04.crl (hash: Kfz2jB36NlaxXg1qkJKlCLZbO7IuTRlIMX0gEkx1vCg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.crl
                          rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Aug 2026 03:24:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a0:ad:c3:61:e5:8c:f3:fe:aa:30:41:f6:23:e4:b3:70:9a:14:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2963CB623A578334B7033062B58BFED2DC07BB04
        Validity
            Not Before: Aug 15 00:28:54 2026 GMT
            Not After : Aug 16 03:43:54 2026 GMT
        Subject: CN=30779AF84CB6BCAAA0EB8BCC4840AC350762DC52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:17:d1:02:28:70:b4:c4:25:97:14:e2:3b:9e:
                    b8:64:7e:68:8f:0f:73:8a:57:8c:1b:68:22:72:88:
                    a3:e1:60:45:e6:69:c7:c3:92:ee:9c:76:c1:b2:22:
                    31:ca:86:d0:6d:c2:d4:98:cd:0e:53:d3:92:9f:f5:
                    be:6f:22:11:a4:d3:3c:91:cd:e7:b1:d0:1d:d1:ec:
                    68:34:26:a7:6a:f0:ef:46:8b:61:a1:cc:b6:d2:5b:
                    4a:74:8d:af:ba:be:26:0e:21:56:4e:b1:c8:87:aa:
                    bc:8e:7e:60:53:62:ed:76:bf:fd:24:e5:b2:5e:23:
                    aa:ef:07:17:78:19:f2:3f:ed:87:df:54:1f:03:e8:
                    2e:85:e3:fb:80:79:01:f8:ff:75:b0:8e:1d:14:be:
                    db:8b:77:fd:b6:ad:1f:ba:f3:12:84:0b:df:34:db:
                    aa:94:7e:a3:28:ae:1b:f9:c5:09:6a:66:fb:55:f9:
                    57:d4:91:0d:3b:85:e3:03:1d:be:47:05:d2:eb:f4:
                    cb:be:a9:2a:03:bf:92:97:6d:78:00:f7:90:ad:de:
                    ea:e1:48:a2:ca:2a:dc:b4:49:cf:11:38:f5:e2:9d:
                    d8:d8:51:d2:b3:2c:3e:f8:e0:8a:4c:6d:6c:8f:63:
                    89:40:5c:0e:b1:8c:1e:1e:41:18:46:39:4a:35:1d:
                    65:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:77:9A:F8:4C:B6:BC:AA:A0:EB:8B:CC:48:40:AC:35:07:62:DC:52
            X509v3 Authority Key Identifier:
                keyid:29:63:CB:62:3A:57:83:34:B7:03:30:62:B5:8B:FE:D2:DC:07:BB:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2963CB623A578334B7033062B58BFED2DC07BB04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STW/0/2963CB623A578334B7033062B58BFED2DC07BB04.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:cd:4f:ec:eb:90:45:85:64:b5:20:b8:cb:7e:8e:a2:ce:a6:
         7c:05:30:fd:65:4e:b3:73:de:77:c7:75:a3:8a:fb:82:1b:7a:
         58:1e:f9:54:5e:62:ad:2c:fa:6f:ad:97:8f:38:51:9b:9c:7e:
         5d:d9:8d:7b:09:53:e6:08:bb:e2:ee:60:71:eb:02:bb:2d:48:
         b1:42:bc:f7:fd:c1:5c:83:5a:e9:db:0d:b7:c3:41:f9:32:6e:
         3e:20:67:b9:4f:0a:67:f4:24:4f:c6:c8:56:1a:2e:c5:d5:b2:
         48:ae:44:ed:13:83:f7:56:6c:fc:71:d1:27:07:95:36:76:6b:
         4d:b7:93:4e:97:01:c9:2f:d6:d9:b1:b7:c9:70:02:60:88:03:
         e6:cb:17:d0:82:e8:4d:38:bd:9d:3b:65:aa:15:5a:f2:a3:7f:
         39:20:26:07:f3:43:ad:6f:e3:72:2b:bf:f6:fb:87:f5:da:99:
         e6:aa:a4:c6:6a:6b:6b:db:8d:ec:83:2d:fd:8f:44:e7:19:91:
         d5:aa:72:fb:44:da:63:cd:78:a6:51:f5:3e:2c:3c:76:73:02:
         b2:e1:15:5d:2e:ea:d2:25:ce:80:81:54:90:b8:92:5c:5d:bf:
         fa:6f:c4:ca:b3:d6:a0:46:5c:4e:d7:91:69:6c:02:e2:fb:ca:
         ca:a0:4f:21
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUWqCtw2HljPP+qjBB9iPks3CaFDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk2M0NCNjIzQTU3ODMzNEI3MDMzMDYyQjU4QkZFRDJE
QzA3QkIwNDAeFw0yNjA4MTUwMDI4NTRaFw0yNjA4MTYwMzQzNTRaMDMxMTAvBgNV
BAMTKDMwNzc5QUY4NENCNkJDQUFBMEVCOEJDQzQ4NDBBQzM1MDc2MkRDNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTF9ECKHC0xCWXFOI7nrhkfmiP
D3OKV4wbaCJyiKPhYEXmacfDku6cdsGyIjHKhtBtwtSYzQ5T05Kf9b5vIhGk0zyR
zeex0B3R7Gg0Jqdq8O9Gi2GhzLbSW0p0ja+6viYOIVZOsciHqryOfmBTYu12v/0k
5bJeI6rvBxd4GfI/7YffVB8D6C6F4/uAeQH4/3Wwjh0UvtuLd/22rR+68xKEC980
26qUfqMorhv5xQlqZvtV+VfUkQ07heMDHb5HBdLr9Mu+qSoDv5KXbXgA95Ct3urh
SKLKKty0Sc8ROPXindjYUdKzLD744IpMbWyPY4lAXA6xjB4eQRhGOUo1HWXhAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUMHea+Ey2vKqg64vMSECsNQdi3FIwHwYDVR0j
BBgwFoAUKWPLYjpXgzS3AzBitYv+0twHuwQwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzAv
Mjk2M0NCNjIzQTU3ODMzNEI3MDMzMDYyQjU4QkZFRDJEQzA3QkIwNC5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS8yOTYzQ0I2MjNBNTc4MzM0QjcwMzMwNjJCNThCRkVE
MkRDMDdCQjA0LmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU1RXLzAvMjk2M0NCNjIzQTU3ODMzNEI3
MDMzMDYyQjU4QkZFRDJEQzA3QkIwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABDNT+zrkEWFZLUguMt+
jqLOpnwFMP1lTrNz3nfHdaOK+4Ibelge+VReYq0s+m+tl484UZucfl3ZjXsJU+YI
u+LuYHHrArstSLFCvPf9wVyDWunbDbfDQfkybj4gZ7lPCmf0JE/GyFYaLsXVskiu
RO0Tg/dWbPxx0ScHlTZ2a023k06XAckv1tmxt8lwAmCIA+bLF9CC6E04vZ07ZaoV
WvKjfzkgJgfzQ61v43Irv/b7h/XameaqpMZqa2vbjeyDLf2PROcZkdWqcvtE2mPN
eKZR9T4sPHZzArLhFV0u6tIlzoCBVJC4klxdv/pvxMqz1qBGXE7XkWlsAuL7ysqg
TyE=
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:37:48 2026 by rpki-client