Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
File:                     21CAA92944B74031E7B05249B1D84BA3997C6E82.mft (raw, json)
Hash identifier:          q1FwOABpILFBFVybH81dKOaIVPO/mRsylqpsQOWtBEM=
Subject key identifier:   45:A7:A7:16:CF:2D:D2:51:AA:32:E6:36:BC:B1:06:74:E1:30:32:02
Authority key identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82
Certificate issuer:       /CN=21CAA92944B74031E7B05249B1D84BA3997C6E82
Certificate serial:       5800BB8D395C25853F4E063C306BA2CBB78664DF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
Manifest number:          83
Signing time:             Fri 14 Aug 2026 14:52:06 +0000
Manifest this update:     Fri 14 Aug 2026 14:47:06 +0000
Manifest next update:     Sat 15 Aug 2026 15:05:06 +0000
Files and hashes:         1: 21CAA92944B74031E7B05249B1D84BA3997C6E82.crl (hash: ecKqziQlgAaReL856ocrZrBTuvsmgFmQSnvxH7bjItk=)
                          2: 323430313a643632303a3a2f33322d3332203d3e203633393038.roa (hash: ofLPjBKTBs9W0l0wBzO55kfak8bQwY7CY2cd13YbZdk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl
                          rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 15:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:00:bb:8d:39:5c:25:85:3f:4e:06:3c:30:6b:a2:cb:b7:86:64:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CAA92944B74031E7B05249B1D84BA3997C6E82
        Validity
            Not Before: Aug 14 14:47:06 2026 GMT
            Not After : Aug 15 15:05:06 2026 GMT
        Subject: CN=45A7A716CF2DD251AA32E636BCB10674E1303202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4e:9d:c2:60:41:a4:51:e9:07:68:7c:b5:98:
                    a5:03:48:96:ba:fd:13:eb:c0:ab:2a:ac:31:e9:71:
                    e3:23:91:24:bb:af:bf:91:2e:47:79:be:95:67:ee:
                    32:f5:53:91:f0:e6:54:45:65:6f:96:62:53:8e:41:
                    8e:cc:2d:43:98:8f:8a:86:dd:19:6b:eb:28:95:e8:
                    5d:19:5a:95:ce:3d:70:fe:07:97:bd:2f:b3:1a:68:
                    52:c6:17:a6:9a:84:f8:a2:c8:ae:e9:3a:b4:fc:ad:
                    cd:a8:6d:a7:0d:84:0e:0b:bb:6b:d1:04:41:5f:81:
                    52:c6:34:59:ef:d7:4a:77:d1:2f:ab:93:16:02:91:
                    c9:34:42:1a:2d:63:d1:96:8b:f3:28:1b:d8:c9:24:
                    9f:5e:05:28:3c:c3:8e:45:73:ae:eb:c6:46:75:72:
                    7e:3d:c2:6d:ef:80:5b:85:d5:cf:ab:b9:b8:96:7e:
                    f7:35:89:46:72:67:da:a5:e3:1c:36:d5:76:f8:0d:
                    f2:a6:78:65:d5:d9:b9:39:32:10:43:02:26:f9:fb:
                    4d:66:21:4c:43:c5:30:ce:2b:0e:3a:8f:47:eb:21:
                    32:aa:38:77:21:9b:30:49:2a:9c:50:e0:26:54:88:
                    e5:55:82:33:44:c9:4f:0c:37:64:08:a5:2b:18:96:
                    1f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A7:A7:16:CF:2D:D2:51:AA:32:E6:36:BC:B1:06:74:E1:30:32:02
            X509v3 Authority Key Identifier:
                keyid:21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:ff:b1:6c:58:b1:04:46:0b:02:bb:69:42:13:b3:69:c9:
         e5:35:aa:da:8f:9f:f7:55:0f:13:65:ba:4b:79:dc:06:4b:64:
         d0:cc:98:8d:20:69:f0:57:55:06:9e:a9:73:7c:e7:7e:7c:57:
         7c:0a:c1:3d:87:bf:f9:13:04:78:be:59:18:fa:25:61:39:72:
         e0:2a:da:09:e8:fd:78:92:46:68:1d:8f:b6:73:52:2a:8e:4a:
         fa:90:b0:8d:96:29:b5:19:b3:89:a0:43:97:ba:4c:7f:0c:68:
         78:38:8c:9b:3d:26:b9:2c:92:2b:7c:8a:2c:c4:53:f5:c4:60:
         77:06:23:bc:c3:73:19:2a:4d:2e:90:64:77:8b:ae:c0:ea:f2:
         68:1e:d4:a2:c8:b0:12:97:e6:82:29:0f:82:42:ae:8d:c9:3d:
         ec:5b:a6:40:19:f5:0a:6c:9a:9c:75:e9:3d:6e:bf:8b:e8:54:
         40:58:92:6e:93:8d:42:06:f3:98:8b:37:09:d4:42:65:16:d6:
         2a:cb:ad:9d:9d:70:ad:dc:d8:c0:a0:d4:de:34:b2:6b:c3:39:
         18:5e:68:48:48:76:42:1f:85:f1:da:7d:e1:05:42:3d:84:6b:
         02:f5:0c:6a:a0:eb:f4:cd:ea:fc:d4:c6:fc:25:aa:a5:e5:83:
         db:9a:e5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:29:10 2026 by rpki-client