Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ZENLAYERTW/0/A871DEB1956B99A007A90B9648C90D93B3C874C4.mft
File:                     A871DEB1956B99A007A90B9648C90D93B3C874C4.mft (raw, json)
Hash identifier:          watKyX3cVmWcxRz8Jx2C/GIL/u1LHVUitds0vSXZ8ag=
Subject key identifier:   ED:9E:08:DC:36:2B:33:CF:5D:B7:FF:37:E9:0F:F1:9F:27:B6:F4:28
Authority key identifier: A8:71:DE:B1:95:6B:99:A0:07:A9:0B:96:48:C9:0D:93:B3:C8:74:C4
Certificate issuer:       /CN=A871DEB1956B99A007A90B9648C90D93B3C874C4
Certificate serial:       6CEDED96B913F071AC14037ED5095E5A498D6840
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A871DEB1956B99A007A90B9648C90D93B3C874C4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ZENLAYERTW/0/A871DEB1956B99A007A90B9648C90D93B3C874C4.mft
Manifest number:          43
Signing time:             Tue 30 Jun 2026 07:28:18 +0000
Manifest this update:     Tue 30 Jun 2026 07:23:18 +0000
Manifest next update:     Wed 01 Jul 2026 11:21:18 +0000
Files and hashes:         1: A871DEB1956B99A007A90B9648C90D93B3C874C4.crl (hash: 44Aq9AMlA2d/9wJBniQ/911dm4/KDJzVRH46e1DdrWg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/ZENLAYERTW/0/A871DEB1956B99A007A90B9648C90D93B3C874C4.crl
                          rsync://rpkica.twnic.tw/rpki/ZENLAYERTW/0/A871DEB1956B99A007A90B9648C90D93B3C874C4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A871DEB1956B99A007A90B9648C90D93B3C874C4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 11:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ed:ed:96:b9:13:f0:71:ac:14:03:7e:d5:09:5e:5a:49:8d:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A871DEB1956B99A007A90B9648C90D93B3C874C4
        Validity
            Not Before: Jun 30 07:23:18 2026 GMT
            Not After : Jul  1 11:21:18 2026 GMT
        Subject: CN=ED9E08DC362B33CF5DB7FF37E90FF19F27B6F428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:66:ed:fc:69:b5:51:b8:df:90:de:ec:10:
                    49:96:82:44:74:6f:bc:72:bb:dc:39:9b:c7:e0:33:
                    e5:b3:9a:67:20:64:94:72:f3:49:a8:d5:98:9e:59:
                    3f:e8:b1:3e:6d:ee:05:31:c6:74:84:66:62:04:19:
                    bc:fb:64:bf:e5:ce:57:eb:e4:ba:5c:b4:dc:93:36:
                    2e:f1:b8:e6:59:da:8d:47:26:1f:4f:18:5b:69:1c:
                    a0:04:31:4f:b7:c7:6c:56:72:45:e5:89:a4:70:04:
                    10:cc:e1:12:8d:df:58:23:42:58:56:93:4a:4b:e0:
                    4f:22:88:17:2b:d9:06:0b:ab:00:74:49:00:2b:24:
                    60:fe:e5:f2:03:01:ab:c0:da:31:48:49:7c:5f:8e:
                    f9:06:d3:50:35:b9:2e:4f:e5:b5:c3:fe:7a:2c:7e:
                    c3:11:0d:99:96:74:23:c2:90:19:ee:45:3f:67:c9:
                    7c:5a:0a:9a:84:2d:dc:b7:50:8a:42:ec:a6:46:37:
                    9b:14:78:60:be:a2:2c:97:a5:06:77:d5:84:8c:ff:
                    17:07:76:59:16:36:fb:90:ce:fb:48:1c:9a:f4:2d:
                    73:63:92:9c:b5:17:33:c2:23:2b:69:28:ce:d9:42:
                    d2:76:7b:45:87:e7:d7:ed:d7:a2:c0:6f:f8:aa:85:
                    72:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9E:08:DC:36:2B:33:CF:5D:B7:FF:37:E9:0F:F1:9F:27:B6:F4:28
            X509v3 Authority Key Identifier:
                keyid:A8:71:DE:B1:95:6B:99:A0:07:A9:0B:96:48:C9:0D:93:B3:C8:74:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ZENLAYERTW/0/A871DEB1956B99A007A90B9648C90D93B3C874C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A871DEB1956B99A007A90B9648C90D93B3C874C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ZENLAYERTW/0/A871DEB1956B99A007A90B9648C90D93B3C874C4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:05:9b:17:23:13:10:21:35:80:43:47:4b:5a:0e:03:f9:f2:
         a7:07:ac:a3:fe:15:1e:a5:dc:a6:1d:62:cf:f0:22:df:38:c5:
         78:e8:43:43:28:de:ba:32:77:ee:5f:70:93:36:af:1c:2d:0d:
         75:52:3f:13:b5:d2:34:c5:e4:6c:b8:39:17:88:17:03:90:e4:
         e7:7d:e1:93:91:89:df:44:4e:9a:e1:6e:0e:98:96:ba:06:1a:
         71:8c:a7:be:89:f1:ee:2e:87:bb:2c:75:02:44:16:75:84:7d:
         50:05:b6:95:bc:74:ec:da:bd:09:82:73:bc:19:03:0a:f8:30:
         46:c6:72:54:04:43:5b:be:74:4d:40:b2:44:e1:ba:7f:ce:6b:
         21:32:66:38:6c:89:d8:d2:05:4b:28:6a:5e:7d:01:e7:00:94:
         50:a1:f6:56:be:11:9d:92:aa:f4:c0:b7:2a:b7:d0:44:15:0a:
         e3:cd:f7:d5:c0:5e:eb:be:11:d1:db:ca:47:34:58:47:f1:be:
         f3:30:c7:c4:1b:e0:93:b9:08:f2:bb:39:40:e5:6a:4e:5b:e7:
         fa:c4:df:1e:28:65:7b:b0:c4:c7:b4:13:11:68:56:de:28:b3:
         e3:be:ff:4d:be:51:36:80:a6:58:39:fc:f0:06:d8:cd:dc:e5:
         f2:c0:da:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:12:56 2026 by rpki-client