Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
File:                     71525972E3C1153DE53054798F51A5BD55C75019.mft (raw, json)
Hash identifier:          27hqrCyTez0o23E4c/rxVdnsSdPZfokMvETbvYc4vOc=
Subject key identifier:   5F:56:4C:A4:E0:46:0F:C4:C8:26:0F:42:FE:2C:80:43:FD:80:CC:6F
Authority key identifier: 71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19
Certificate issuer:       /CN=A91BDB290000/serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
Certificate serial:       315C8AFE23984521871009732F36C0D3E2FD8F41
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
Manifest number:          01C3
Signing time:             Thu 11 Jun 2026 08:39:48 +0000
Manifest this update:     Thu 11 Jun 2026 08:34:48 +0000
Manifest next update:     Fri 12 Jun 2026 12:37:48 +0000
Files and hashes:         1: DFAD87735B96E38C5B16450D06F1E3F05D1C0B50.cer (hash: igsdE4f1Y42tZEivMwx3eHh5HVhFmHDZJfR7gCVbVBY=)
                          2: 3C219263F26B99E2DB375CD0CDFE5E54B57B5C26.cer (hash: R1kblQJMjAsS/YNh6d7aaVt7qie9Fxfl9yAQ//XEynw=)
                          3: 95B1A62479B36C1414FF17CE759F45E2E7E421A3.cer (hash: BPhgrofW+MPV8EIXWYSG7NFjsYgtzBTWs7BZJx8QvFg=)
                          4: 71525972E3C1153DE53054798F51A5BD55C75019.crl (hash: nxRz0yh+EPiSqgwSYnKAPDh/d+DR5e/QpfA94T/c/OE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 12:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5c:8a:fe:23:98:45:21:87:10:09:73:2f:36:c0:d3:e2:fd:8f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=71525972E3C1153DE53054798F51A5BD55C75019
        Validity
            Not Before: Jun 11 08:34:48 2026 GMT
            Not After : Jun 12 12:37:48 2026 GMT
        Subject: CN=5F564CA4E0460FC4C8260F42FE2C8043FD80CC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8c:e2:9b:47:5c:ae:d2:1e:da:5a:b7:90:f3:
                    72:4c:f9:7a:b3:f5:1a:13:e0:d3:5d:7a:06:47:98:
                    1b:aa:6b:c2:69:ba:1c:7d:ff:72:ab:41:50:b0:4b:
                    3c:d4:a1:94:9e:ca:4d:44:93:a6:3b:aa:8b:85:c3:
                    7c:b1:08:88:2f:30:3b:f3:14:92:96:0e:44:a0:44:
                    83:91:5d:14:11:f5:f5:8a:c9:e2:a6:07:fb:e3:ab:
                    7f:da:c2:60:01:7f:b0:70:ea:31:10:d7:b4:26:2e:
                    95:fb:78:89:b0:93:1d:cc:7c:ba:7c:a1:3f:44:80:
                    27:a6:29:7c:ed:07:d7:37:30:13:0f:ea:14:dd:3a:
                    a1:9c:c5:ef:4c:e3:cd:29:b7:00:28:81:18:eb:0b:
                    0b:9f:c2:95:8d:8c:5b:1f:98:a5:c6:b1:a1:d9:b6:
                    6e:94:28:ee:12:ba:56:9d:a7:ee:68:e6:7e:ec:db:
                    50:03:3f:e6:06:f5:9c:e1:78:d3:fd:98:dc:12:af:
                    0d:43:de:36:6a:7a:d4:ed:dd:8c:ce:24:70:d8:86:
                    73:2f:7b:21:92:28:d0:d5:32:31:4d:a5:72:9b:87:
                    9f:cc:4a:99:dd:5f:ec:d5:c2:85:35:3f:17:50:b5:
                    99:0e:d2:c5:1a:5a:bb:0d:a7:60:5b:4e:9e:92:8d:
                    ea:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:56:4C:A4:E0:46:0F:C4:C8:26:0F:42:FE:2C:80:43:FD:80:CC:6F
            X509v3 Authority Key Identifier:
                keyid:71:52:59:72:E3:C1:15:3D:E5:30:54:79:8F:51:A5:BD:55:C7:50:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/cVJZcuPBFT3lMFR5j1GlvVXHUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/2/71525972E3C1153DE53054798F51A5BD55C75019.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:9b:0c:21:c3:b6:2a:25:57:32:a7:2a:d1:e6:50:ef:dc:b0:
         85:2a:1f:4b:5e:a8:9e:6f:9b:0b:ff:b5:16:b1:31:ef:ae:79:
         d4:03:72:79:fc:ea:6b:26:2c:bf:ec:75:e5:1e:0c:04:22:cd:
         a9:35:49:92:44:ec:07:80:50:eb:47:fc:ca:54:c1:ce:ed:40:
         96:35:99:cf:a4:18:77:0a:c8:46:6b:6c:ba:64:de:f0:37:c7:
         5c:ad:95:7e:46:76:52:2e:3c:c2:e7:8a:f4:af:26:c7:26:68:
         5e:ab:d2:66:72:c7:7b:cc:3e:09:e8:7b:a3:db:5b:4f:79:44:
         d3:f1:d2:e7:be:16:77:58:88:0d:6a:ec:30:7d:e3:90:48:25:
         51:20:17:30:6b:b6:f1:28:7e:1d:b1:46:be:1d:35:89:bb:d0:
         e6:2b:3b:9a:c1:c4:e4:36:05:ed:14:73:67:28:80:7b:06:e0:
         34:b6:3e:fa:4e:29:67:ee:ae:6f:93:1a:0c:ff:2b:9b:d5:4e:
         cf:6f:b2:02:70:5c:c9:e9:2a:72:08:6a:10:16:75:be:be:43:
         3b:9c:83:d1:58:f8:05:6d:f3:ac:5d:42:1b:be:20:21:36:13:
         b6:f1:bf:0c:6b:b4:eb:ed:c2:2e:ba:48:23:cd:67:f6:30:7e:
         d4:a6:ef:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:23:05 2026 by rpki-client