Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
File:                     21CAA92944B74031E7B05249B1D84BA3997C6E82.mft (raw, json)
Hash identifier:          y4esAJhTqIBKm5tQwOWIYQ1zJfyGuOJU64WW/yk7j+Q=
Subject key identifier:   2B:88:92:10:3B:9D:F7:71:BD:42:02:E9:C1:7F:2A:F1:6E:3D:90:96
Authority key identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82
Certificate issuer:       /CN=21CAA92944B74031E7B05249B1D84BA3997C6E82
Certificate serial:       7350F7F9C4F33A93523D1D1457262B1478F1D037
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
Manifest number:          46
Signing time:             Tue 30 Jun 2026 06:23:16 +0000
Manifest this update:     Tue 30 Jun 2026 06:18:16 +0000
Manifest next update:     Wed 01 Jul 2026 07:21:16 +0000
Files and hashes:         1: 21CAA92944B74031E7B05249B1D84BA3997C6E82.crl (hash: eeIIWaqs+bafyVaj8BJ7dCU4jbqn0sy3awFSVLLg4l8=)
                          2: 323430313a643632303a3a2f33322d3332203d3e203633393038.roa (hash: ofLPjBKTBs9W0l0wBzO55kfak8bQwY7CY2cd13YbZdk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl
                          rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 07:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:50:f7:f9:c4:f3:3a:93:52:3d:1d:14:57:26:2b:14:78:f1:d0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CAA92944B74031E7B05249B1D84BA3997C6E82
        Validity
            Not Before: Jun 30 06:18:16 2026 GMT
            Not After : Jul  1 07:21:16 2026 GMT
        Subject: CN=2B8892103B9DF771BD4202E9C17F2AF16E3D9096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1f:4d:fe:44:a5:27:4d:6a:61:09:d8:3d:7e:
                    8a:3c:8b:d8:1a:94:aa:60:3c:a8:be:04:34:45:b1:
                    cb:22:60:5d:a3:c3:57:7d:d2:07:3e:7b:fe:a6:20:
                    94:c0:33:10:f6:bd:f3:cd:b4:30:5f:6e:90:eb:32:
                    ba:1e:58:88:73:82:c4:a7:3c:a4:b3:da:12:9c:21:
                    56:81:d0:2a:9d:cf:41:35:2d:9c:31:3e:a0:74:1d:
                    44:6f:4a:ff:07:4a:2c:77:ac:e6:d4:71:de:a3:7e:
                    bb:21:94:6a:d2:b3:3c:f6:ad:53:aa:76:ee:7f:95:
                    ee:9c:f4:38:cc:07:98:5d:4b:d3:0e:3a:0f:73:6b:
                    04:22:a9:d8:c3:3e:27:cb:36:37:ff:53:7e:ac:5c:
                    d6:29:13:33:f5:10:cd:6b:7f:58:72:b3:e7:d9:9c:
                    c9:61:e4:fd:bb:f3:ce:5a:fb:c3:b7:69:3a:78:dd:
                    35:20:8a:b2:e9:23:a3:c8:85:bb:a8:61:da:65:ee:
                    08:12:86:f9:99:4d:39:06:cc:f7:dd:1d:e6:13:3b:
                    b3:08:40:9d:c6:0c:8f:99:87:61:5b:d6:2a:07:63:
                    76:1b:f9:9e:e1:95:db:f5:89:50:8a:8f:b2:f4:02:
                    ad:aa:71:f1:20:b4:6d:5b:8d:46:45:b4:51:52:4b:
                    dc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:88:92:10:3B:9D:F7:71:BD:42:02:E9:C1:7F:2A:F1:6E:3D:90:96
            X509v3 Authority Key Identifier:
                keyid:21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:be:3f:72:d0:c8:b2:6b:8b:bf:f4:c4:62:80:aa:25:83:b2:
         c5:d5:1f:e4:5f:26:1b:3c:a8:d4:e0:78:63:95:dd:f2:e2:d0:
         ed:7d:b5:87:58:61:ed:8e:dc:9f:e7:bd:82:a7:1f:5a:cd:e5:
         7e:8f:08:64:10:e8:ef:db:95:d3:de:fc:48:bd:c9:b1:e7:02:
         c8:a2:93:39:e2:72:5b:23:53:77:e1:5a:ab:e8:43:9f:ce:9f:
         05:e2:73:8b:49:26:a2:0d:b3:20:8f:35:38:0d:52:b8:dc:4f:
         be:d7:45:70:e0:fd:35:2b:db:80:63:cb:0b:71:fd:47:08:57:
         ce:c4:de:3d:63:b5:fd:ad:c5:7e:a6:51:9e:5b:3b:7b:4f:33:
         0e:3e:5a:db:0f:e1:0f:99:37:cc:ab:24:9a:0a:20:8e:f6:90:
         e4:a2:3a:6c:e3:70:43:da:67:4e:eb:a9:89:16:ac:6d:1c:ac:
         2e:ca:3a:bf:f3:9a:ae:46:bb:01:ca:07:a4:ed:11:9b:4f:91:
         55:d6:74:ee:df:a4:c2:a5:6f:75:ce:eb:6b:5d:67:ae:0a:c5:
         31:76:87:e2:bc:65:8b:1a:93:25:8b:3f:bd:45:84:fa:26:24:
         25:0a:50:32:d4:74:3c:ee:33:ab:f0:b9:68:ef:2e:49:86:2a:
         ea:0a:18:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:11:38 2026 by rpki-client