Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft
File:                     28110DE86B5C0A286A9B3545A4369B11A7480010.mft (raw, json)
Hash identifier:          t4zpMRBgQ1EM43SNB+KJgce2LPEVQDWbh65GddX2DWI=
Subject key identifier:   CA:1E:01:5B:14:8C:F4:67:2D:E4:0E:F4:8C:D4:3D:04:00:EF:00:80
Authority key identifier: 28:11:0D:E8:6B:5C:0A:28:6A:9B:35:45:A4:36:9B:11:A7:48:00:10
Certificate issuer:       /CN=28110DE86B5C0A286A9B3545A4369B11A7480010
Certificate serial:       7958EE358D0759DE348F147E3515F85B53CB0153
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft
Manifest number:          C4
Signing time:             Sat 03 Oct 2026 23:48:24 +0000
Manifest this update:     Sat 03 Oct 2026 23:43:24 +0000
Manifest next update:     Mon 05 Oct 2026 01:50:24 +0000
Files and hashes:         1: 28110DE86B5C0A286A9B3545A4369B11A7480010.crl (hash: Ttn4jfMBj2ATQnEkbVZKyQp5yGhYHKTyEEhB9Lg5gto=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.crl
                          rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 01:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:58:ee:35:8d:07:59:de:34:8f:14:7e:35:15:f8:5b:53:cb:01:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28110DE86B5C0A286A9B3545A4369B11A7480010
        Validity
            Not Before: Oct  3 23:43:24 2026 GMT
            Not After : Oct  5 01:50:24 2026 GMT
        Subject: CN=CA1E015B148CF4672DE40EF48CD43D0400EF0080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5e:03:21:f7:c6:4c:73:1e:1f:02:14:06:88:
                    6e:38:a4:31:4a:46:fd:cd:90:a4:3a:31:0a:96:74:
                    94:86:8e:9d:73:bd:2e:1a:cc:ce:69:1d:d0:36:5e:
                    c7:8d:4c:2d:d6:ee:88:5c:d4:50:c7:6c:7c:17:e8:
                    8a:94:ac:26:be:e8:8a:ed:0b:0e:b6:b7:85:2c:5b:
                    41:96:77:ff:66:3e:62:5e:87:d0:7c:bd:69:40:3c:
                    4c:fe:18:8a:a0:c7:af:d6:9e:f1:73:fc:29:f4:14:
                    65:4c:0a:ac:ed:65:f2:82:57:6e:6d:19:a2:6a:d8:
                    fb:b7:05:e3:d2:6c:9e:83:13:9a:2a:0a:0a:d5:4f:
                    1f:4a:df:03:11:48:88:2b:5b:08:3a:31:fa:59:4b:
                    ef:73:a1:b9:39:a6:8b:f4:f3:d4:e5:aa:74:3f:63:
                    e2:c1:3c:40:50:da:f1:dd:57:e2:82:df:00:d2:3f:
                    4a:af:e5:f3:04:a4:85:e2:8b:25:83:29:7b:98:ca:
                    c5:4f:30:f6:fb:fb:ff:65:02:9b:46:20:6d:01:a1:
                    46:90:92:22:d5:f8:03:3e:44:ec:68:3a:db:e2:f9:
                    0d:36:47:1d:5c:06:40:a3:d2:17:f9:ee:f4:ac:b7:
                    87:65:eb:a0:79:16:07:bd:ab:20:a0:28:1d:d1:eb:
                    e4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1E:01:5B:14:8C:F4:67:2D:E4:0E:F4:8C:D4:3D:04:00:EF:00:80
            X509v3 Authority Key Identifier:
                keyid:28:11:0D:E8:6B:5C:0A:28:6A:9B:35:45:A4:36:9B:11:A7:48:00:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d6:39:e8:1a:dd:8b:6d:bc:d3:04:12:4b:81:e5:59:95:b6:
         9f:9b:8a:37:e9:94:8b:a8:af:af:f5:13:99:92:6b:e4:ae:00:
         3c:23:98:7b:3a:77:ad:1b:0e:3c:65:a5:f3:f7:cf:b3:14:53:
         f1:b7:77:f8:5f:c8:bb:bd:87:24:be:56:d6:4f:5f:47:ed:7b:
         0f:04:44:ea:81:c8:bf:5e:dc:cc:b0:13:bd:58:40:46:6d:a8:
         5e:32:0b:1c:b3:ef:cb:0b:02:35:22:b4:9b:a1:00:15:96:64:
         85:50:d8:2f:0d:50:52:bd:8f:d7:41:d9:d5:48:62:d1:15:55:
         19:29:10:10:d7:35:e2:87:44:35:ab:e1:dd:6a:ac:0f:e1:03:
         c8:17:65:ff:3b:fe:fc:f1:78:c1:1d:09:8b:8a:15:6a:42:2b:
         4e:73:a4:ce:8b:0f:72:45:ce:a6:a0:83:57:68:47:22:5d:3a:
         1d:16:ea:a1:73:b8:2a:e8:60:74:16:26:af:36:a5:59:26:d9:
         02:60:66:61:da:f3:ca:77:e8:85:75:0d:3d:52:cf:7b:54:b6:
         e2:a0:5d:d3:4f:9d:58:bd:4c:9c:e1:01:9e:04:25:d1:78:f4:
         6e:d5:f0:b2:6b:e9:ac:5d:b8:9c:e8:7b:f0:cb:2f:cc:60:a4:
         1f:01:15:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:12:14 2026 by rpki-client