Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
File:                     C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft (raw, json)
Hash identifier:          qgs1LMUH4gfdaWYDAtJ3euNcSRMN21RXFbER9jUHKdQ=
Subject key identifier:   8F:F8:1A:77:E4:ED:BD:FA:B0:CA:04:20:43:BE:AF:E6:E1:C5:C9:79
Authority key identifier: C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1
Certificate issuer:       /CN=C3056C5F157A7E7512FC306EFEDEF92FD12C47F1
Certificate serial:       62FB49C3AC87427FCBACEAB3D5BC46ED9BB9D461
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
Manifest number:          4A
Signing time:             Mon 29 Jun 2026 22:17:28 +0000
Manifest this update:     Mon 29 Jun 2026 22:12:28 +0000
Manifest next update:     Wed 01 Jul 2026 00:27:28 +0000
Files and hashes:         1: C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl (hash: UvkMP5B4+FTLMwk5HURQvqXwKmUJ+RjDUV8P/2s8YAE=)
                          2: 3136312e3234382e34342e302f32332d3332203d3e20313532363139.roa (hash: 4MovYHgGqWQdyUO1Av8kBHVSUNdImBmxnWEFbBFEyVc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl
                          rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 19:24:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:fb:49:c3:ac:87:42:7f:cb:ac:ea:b3:d5:bc:46:ed:9b:b9:d4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3056C5F157A7E7512FC306EFEDEF92FD12C47F1
        Validity
            Not Before: Jun 29 22:12:28 2026 GMT
            Not After : Jul  1 00:27:28 2026 GMT
        Subject: CN=8FF81A77E4EDBDFAB0CA042043BEAFE6E1C5C979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cc:c9:52:31:45:54:7f:77:20:f4:e8:d7:c3:
                    27:31:a0:03:34:cd:62:f0:a6:05:61:6c:75:66:09:
                    a3:c8:f0:45:cb:9d:21:0b:7d:2e:2c:80:39:ba:b5:
                    20:d8:d9:e4:ae:d4:b6:38:41:95:dc:c6:27:3e:e8:
                    79:e4:4a:b0:ef:af:98:d1:62:e2:65:c2:70:f6:4a:
                    1c:1c:a7:ec:27:9f:e1:fe:3c:4e:01:03:f2:0a:4b:
                    84:ad:43:5e:3c:f7:b7:35:6b:38:25:a0:15:5d:c9:
                    a5:1c:c2:02:da:0f:8b:47:12:0c:f2:79:ae:bf:88:
                    d5:c7:8e:4a:b4:8c:84:b7:69:eb:fd:d0:c5:45:0e:
                    0e:f7:e3:dc:f5:6f:b2:08:60:17:cd:3f:c9:b0:c8:
                    f2:91:a7:cf:68:db:e2:e7:c4:1d:0c:4f:27:c1:66:
                    15:95:65:e6:60:27:7c:23:dc:ed:68:df:c4:b4:42:
                    2f:60:63:6b:3c:4d:a5:ad:45:cf:56:b6:85:88:00:
                    53:e0:e3:8f:3e:f5:89:0b:99:be:2f:72:b1:bf:ae:
                    06:af:29:59:f0:e0:a8:ee:bf:21:95:cb:fa:c9:4f:
                    75:af:3f:aa:09:77:85:63:a2:cb:0e:9d:21:2b:f9:
                    62:ce:ff:36:fb:ae:3b:a4:6f:5e:4e:10:75:88:cc:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F8:1A:77:E4:ED:BD:FA:B0:CA:04:20:43:BE:AF:E6:E1:C5:C9:79
            X509v3 Authority Key Identifier:
                keyid:C3:05:6C:5F:15:7A:7E:75:12:FC:30:6E:FE:DE:F9:2F:D1:2C:47:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/1/C3056C5F157A7E7512FC306EFEDEF92FD12C47F1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:b6:62:22:cb:d9:b3:a6:f6:f6:31:b1:2c:1a:c3:fe:bb:df:
         9b:d6:de:69:35:0a:0a:0d:db:df:45:1b:6a:0f:65:0a:06:ab:
         af:84:19:f3:62:b9:9c:86:c7:51:29:5a:43:69:80:c6:d6:d4:
         6c:c1:94:99:cc:b5:ae:06:d8:c6:d1:da:f5:77:5b:27:54:ff:
         49:86:8b:d7:f2:68:47:28:bb:1c:d3:87:3d:c5:44:a7:d8:40:
         1a:09:63:91:13:22:f4:c4:73:19:46:5b:cc:87:bf:46:c6:81:
         bf:c6:f2:a1:a5:d2:41:f3:e7:98:73:4a:ac:ba:8f:cf:9f:73:
         d5:2c:26:2f:16:23:72:fd:1f:50:24:c6:25:a3:10:24:0f:c3:
         ff:74:4f:f5:c5:68:f1:8a:99:c4:0f:aa:28:4b:3c:02:73:9d:
         97:f8:92:6c:f1:2d:c9:d4:b5:db:77:e9:2f:c7:f7:9d:63:63:
         ba:07:75:43:9f:6d:94:16:5e:0a:f4:a6:57:e6:d6:6f:b5:4b:
         db:cd:14:60:3a:33:2e:c2:7f:45:51:e7:c0:e5:78:5b:30:60:
         ac:c1:7b:51:14:2f:57:fd:b8:3f:04:78:8d:8d:38:2d:5e:27:
         1e:54:4b:fd:8f:22:80:f2:88:e7:d0:ba:a5:ef:dd:30:9f:c8:
         5c:db:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 13:09:07 2026 by rpki-client