Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
File:                     21CAA92944B74031E7B05249B1D84BA3997C6E82.mft (raw, json)
Hash identifier:          yeNtQvSvouqoii9ZELexdxMqsnum7RbLtdqhcYg3i0c=
Subject key identifier:   92:DD:13:4A:2A:99:37:D3:E8:9B:82:F4:6F:AC:AE:29:D0:AD:60:6A
Authority key identifier: 21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82
Certificate issuer:       /CN=21CAA92944B74031E7B05249B1D84BA3997C6E82
Certificate serial:       0284E360729D2BC2D0A50F3E45877330763BA545
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
Manifest number:          05
Signing time:             Wed 13 May 2026 04:16:42 +0000
Manifest this update:     Wed 13 May 2026 04:11:42 +0000
Manifest next update:     Thu 14 May 2026 07:38:42 +0000
Files and hashes:         1: 21CAA92944B74031E7B05249B1D84BA3997C6E82.crl (hash: ZwOS4DbtZR/AAhcIc64ZMZ6dhmbVqEB6HJLfdhlLxDg=)
                          2: 323430313a643632303a3a2f33322d3332203d3e203633393038.roa (hash: ofLPjBKTBs9W0l0wBzO55kfak8bQwY7CY2cd13YbZdk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl
                          rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:84:e3:60:72:9d:2b:c2:d0:a5:0f:3e:45:87:73:30:76:3b:a5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21CAA92944B74031E7B05249B1D84BA3997C6E82
        Validity
            Not Before: May 13 04:11:42 2026 GMT
            Not After : May 14 07:38:42 2026 GMT
        Subject: CN=92DD134A2A9937D3E89B82F46FACAE29D0AD606A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:46:03:30:60:3e:a9:1a:08:26:3f:b1:fc:86:
                    76:eb:78:5d:c5:43:cc:0e:f2:c5:2e:e8:5b:3f:a4:
                    84:d5:df:4e:ab:30:e8:ad:28:61:e5:00:2a:5f:93:
                    dd:7d:3e:70:90:13:fd:b8:28:57:b0:d9:95:08:ec:
                    5b:1f:c7:f5:1f:84:fa:ea:f4:65:db:4e:e4:19:21:
                    b7:0d:b6:ba:fd:26:ba:20:66:bd:df:bc:47:30:a1:
                    55:a8:22:f0:3a:5a:bf:79:69:9b:8c:08:43:5a:c6:
                    39:6b:e9:a1:5f:0a:eb:0c:07:ca:62:a9:7a:b5:44:
                    8c:18:22:4b:b9:f2:34:2d:bd:bb:33:c6:6f:b8:3e:
                    07:e7:e2:09:f6:0e:5e:dc:e8:f2:fa:46:3d:73:be:
                    49:5c:7d:70:c5:94:ff:66:8e:9a:21:54:30:e2:24:
                    da:5d:bf:da:88:0c:91:3f:cd:d8:36:74:ed:ef:cd:
                    95:be:0a:a1:26:cf:f6:92:8d:15:50:83:2e:b7:42:
                    88:2c:35:a8:e8:43:22:7b:6a:5b:01:c5:b8:63:15:
                    c6:90:03:46:96:f3:0e:20:2b:f0:36:93:a1:be:c2:
                    6d:da:1f:bd:26:b3:05:b3:08:b3:35:cb:ab:88:37:
                    6d:29:55:ab:46:6b:c2:bd:6e:2c:bf:fd:4c:71:7e:
                    89:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DD:13:4A:2A:99:37:D3:E8:9B:82:F4:6F:AC:AE:29:D0:AD:60:6A
            X509v3 Authority Key Identifier:
                keyid:21:CA:A9:29:44:B7:40:31:E7:B0:52:49:B1:D8:4B:A3:99:7C:6E:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/21CAA92944B74031E7B05249B1D84BA3997C6E82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TCSKY/0/21CAA92944B74031E7B05249B1D84BA3997C6E82.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5c:7a:7d:0f:9e:38:eb:3e:56:4c:7d:5f:73:e4:3a:f6:b5:
         a1:0d:b4:d1:90:a8:3e:86:ec:5b:63:cd:60:9f:e1:e7:7e:e5:
         80:54:da:79:f2:01:c9:72:af:a5:01:c6:d2:06:85:4d:fe:94:
         13:51:8e:58:f8:12:93:bc:b1:34:53:df:59:1b:66:9c:f7:8e:
         94:40:5c:3b:da:c0:b9:bc:ff:2a:e2:77:71:71:97:3d:1a:50:
         50:cc:39:15:77:da:6c:6c:7a:bd:d4:81:16:9e:00:7c:98:fa:
         74:56:f8:ba:a3:98:29:91:05:19:e3:b9:52:52:6c:aa:4c:d8:
         aa:23:a2:85:6d:91:5d:13:09:c0:25:7d:24:b9:a0:ac:fc:83:
         7d:39:6f:76:cd:76:52:0a:77:13:45:45:ee:4e:5f:6d:63:91:
         e4:d5:de:c7:b5:cb:b0:1c:5e:54:e2:98:1f:07:8f:8f:b8:3d:
         ec:46:7c:a5:6e:9f:1d:d1:10:60:30:6d:92:50:d9:4e:e0:96:
         e2:f5:4d:3b:e5:10:84:ee:4a:66:6c:7c:46:a0:9d:a4:b7:87:
         44:79:23:4a:c4:4e:66:01:0e:75:fe:f4:d4:f5:82:e0:cc:0c:
         2d:9f:d2:f7:b7:c8:99:26:c6:b0:ba:6e:9d:d5:e2:72:d9:e5:
         63:54:54:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:37 2026 by rpki-client