Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/UNET/0/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.mft
File:                     54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.mft (raw, json)
Hash identifier:          U0X7ny8Td1p91loc6Fi4+d6SjZOZbGWTKsPpt7O0PCU=
Subject key identifier:   81:10:C2:45:1A:68:6C:D4:A9:F5:7D:CB:3F:F0:D0:A6:55:3B:AA:B6
Authority key identifier: 54:97:04:74:B1:0E:AA:E3:7D:7C:73:CD:EA:1E:4C:E4:AF:05:D2:D9
Certificate issuer:       /CN=54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9
Certificate serial:       3F5C61F31372AF2C9AD6091AF1ACC3F576442AB1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/UNET/0/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.mft
Manifest number:          43
Signing time:             Tue 30 Jun 2026 09:33:35 +0000
Manifest this update:     Tue 30 Jun 2026 09:28:35 +0000
Manifest next update:     Wed 01 Jul 2026 09:53:35 +0000
Files and hashes:         1: 54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.crl (hash: Xj8pv/mhm7ZT3u5ivF7y/Vd21NrC3w7KCM9jaDSAX+8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/UNET/0/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.crl
                          rsync://rpkica.twnic.tw/rpki/UNET/0/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 09:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5c:61:f3:13:72:af:2c:9a:d6:09:1a:f1:ac:c3:f5:76:44:2a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9
        Validity
            Not Before: Jun 30 09:28:35 2026 GMT
            Not After : Jul  1 09:53:35 2026 GMT
        Subject: CN=8110C2451A686CD4A9F57DCB3FF0D0A6553BAAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:dd:08:29:ea:17:7d:ef:11:83:56:8b:0b:
                    9b:50:7b:fe:0e:d9:9f:b0:80:1d:d4:60:30:63:fb:
                    2b:d5:14:71:2d:06:73:a8:f3:f8:3e:70:45:d5:c5:
                    09:f6:b7:51:94:3d:5c:bb:ef:bc:3d:6f:2c:b9:bb:
                    6b:88:42:ad:05:2e:3a:86:f9:53:3c:fe:57:0d:01:
                    2e:23:ae:49:7c:c6:0b:84:bb:1d:4e:ec:7c:16:cd:
                    ef:c8:48:31:d9:18:fe:a0:de:ab:a9:48:77:94:d7:
                    03:6b:49:65:2c:d0:59:d8:a6:c2:d0:aa:f5:99:fe:
                    94:fa:da:bf:0a:4c:c4:24:ca:c5:74:bd:e0:70:4c:
                    c8:e9:e2:17:02:f2:02:1b:f3:84:6a:14:af:26:d6:
                    87:7a:19:98:4c:34:cd:d9:f9:ad:51:dd:f0:b2:13:
                    cf:26:60:0b:84:c7:0b:55:bf:d2:45:29:9f:49:9d:
                    ff:ff:d7:1d:8f:e5:32:2f:9b:b4:f7:ab:e1:3e:16:
                    f3:83:02:bb:80:9e:81:99:a6:01:6c:a0:8d:8b:54:
                    5c:2e:a8:8d:93:2d:a8:a0:b7:ac:e8:7c:7b:f7:70:
                    78:d4:99:f9:04:db:4c:4d:84:f8:b7:a9:6d:62:76:
                    6b:79:93:47:7c:97:87:2c:10:40:e6:50:12:a5:e3:
                    3c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:10:C2:45:1A:68:6C:D4:A9:F5:7D:CB:3F:F0:D0:A6:55:3B:AA:B6
            X509v3 Authority Key Identifier:
                keyid:54:97:04:74:B1:0E:AA:E3:7D:7C:73:CD:EA:1E:4C:E4:AF:05:D2:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/UNET/0/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/UNET/0/54970474B10EAAE37D7C73CDEA1E4CE4AF05D2D9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:04:35:fb:ff:76:e6:27:ec:b2:b3:b9:2d:1b:85:be:b3:
         33:71:c4:f2:43:c5:2f:8d:5c:e7:d8:d6:91:9d:68:9f:13:73:
         2e:3f:1f:fc:d6:8b:24:a6:4b:97:b0:f2:db:f0:03:2f:4d:ce:
         34:0d:7b:f9:27:96:ee:42:5a:f0:ff:2b:71:45:1d:0c:26:46:
         e3:8d:a1:7e:4f:c7:2a:72:93:59:83:69:8f:02:0f:3d:55:62:
         36:7a:aa:aa:69:db:04:08:08:32:9a:e7:19:0f:b9:45:01:21:
         14:a4:6e:48:c9:84:51:8e:bb:5e:bd:41:0d:46:a6:d7:6c:6f:
         cc:9c:95:af:03:8c:cf:bf:ba:60:c5:57:37:af:33:98:21:e4:
         a0:0e:96:62:1d:46:32:7e:84:1a:6a:46:3c:73:79:9a:4c:da:
         ac:ec:b7:7a:f5:96:8b:d6:66:24:fe:2b:6f:06:00:ab:70:be:
         cd:aa:28:fb:de:75:33:52:03:1d:1b:32:d5:00:c4:45:0a:3d:
         bd:0c:c4:5b:05:0b:fd:3e:0c:83:3d:8d:b4:ef:6b:23:61:15:
         94:75:26:d3:42:cc:ad:e4:c7:9b:62:43:34:8a:68:d8:bf:93:
         a8:37:0d:76:07:00:7f:79:b8:84:45:78:b2:bb:c5:17:e4:59:
         46:99:b5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:11:40 2026 by rpki-client