Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
File:                     E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft (raw, json)
Hash identifier:          f1bDcpb0KoZ0mBQRBz5sO/fuBbOLklthkEX5W/z6bp4=
Subject key identifier:   70:7B:B5:EE:1D:9C:A3:89:A7:74:6A:AD:AD:3D:24:0A:C6:B2:88:B9
Authority key identifier: E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB
Certificate issuer:       /CN=E4763E7E7DC8760889BF64C180AA4F95C50445AB
Certificate serial:       1ACE92149BA3B39AD6936B1A8AFB45A57DEAF44C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 16:56:11 +0000
Manifest this update:     Thu 23 Jul 2026 16:51:11 +0000
Manifest next update:     Fri 24 Jul 2026 17:40:11 +0000
Files and hashes:         1: E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl (hash: rJ9umVMC1nGqaLgwgd4EDrwdLmW08mQoZTAQgEEW0XU=)
                          2: 3130332e3235352e3231302e302f32332d3332203d3e20313331363432.roa (hash: FaPlqa1DeUZTg3kaDmHEbki3z5vF9i3TucSszJSHI3U=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl
                          rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 17:40:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ce:92:14:9b:a3:b3:9a:d6:93:6b:1a:8a:fb:45:a5:7d:ea:f4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4763E7E7DC8760889BF64C180AA4F95C50445AB
        Validity
            Not Before: Jul 23 16:51:11 2026 GMT
            Not After : Jul 24 17:40:11 2026 GMT
        Subject: CN=707BB5EE1D9CA389A7746AADAD3D240AC6B288B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:20:b7:30:aa:c2:a4:48:9d:10:3a:fd:27:
                    73:15:8b:b6:d4:e7:d4:dd:2b:f8:ad:35:73:40:14:
                    41:e6:fc:c2:67:b0:64:f7:fb:1e:59:a3:9f:ea:5c:
                    69:d8:f9:68:29:3c:42:d3:98:ee:81:1a:8f:28:49:
                    a6:84:6e:a3:8b:3e:a2:3a:df:06:63:a9:40:85:24:
                    19:7e:6a:d5:e5:88:bb:35:1f:37:36:d8:1a:7e:45:
                    4f:9d:e0:c6:c3:56:1b:a8:e6:e5:91:74:b6:38:a5:
                    4c:86:98:1c:fa:9e:85:09:b8:bd:4b:67:b4:11:0a:
                    d4:01:2b:9a:c8:f9:01:6d:a3:00:14:3e:7a:d1:7e:
                    0f:9e:d6:e4:27:ad:12:5b:40:3f:73:27:8a:45:42:
                    8a:73:43:25:f9:85:2e:70:53:dd:f6:d1:b0:3c:73:
                    7e:1c:f4:d5:e8:9d:04:47:5d:7f:3c:84:eb:0b:b9:
                    4c:cb:29:c3:58:a1:d6:5c:4a:c7:ae:d9:3d:7d:03:
                    50:bf:5f:19:a0:49:c4:70:72:2a:a7:83:94:d8:4a:
                    90:26:90:df:28:12:89:ac:7b:10:a5:23:58:7b:b2:
                    ad:4d:3d:1d:99:2e:ef:79:22:d8:1a:9a:27:66:52:
                    cc:ac:89:a3:52:75:5d:a7:8e:ea:df:86:64:4d:e1:
                    e7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7B:B5:EE:1D:9C:A3:89:A7:74:6A:AD:AD:3D:24:0A:C6:B2:88:B9
            X509v3 Authority Key Identifier:
                keyid:E4:76:3E:7E:7D:C8:76:08:89:BF:64:C1:80:AA:4F:95:C5:04:45:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E4763E7E7DC8760889BF64C180AA4F95C50445AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CROWN/0/E4763E7E7DC8760889BF64C180AA4F95C50445AB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fd:f3:b4:2c:87:a6:72:19:b0:2b:4b:d4:a7:5e:2d:e1:a8:
         40:6e:ca:4d:22:86:79:65:76:d0:bf:7c:dc:e9:9c:21:f4:64:
         79:d1:48:4e:cc:cb:94:2f:c7:2b:9f:0e:12:7d:18:d4:ed:3c:
         ac:25:cf:62:df:f9:fa:3d:30:d2:63:8f:36:f3:17:0d:31:1a:
         24:d9:76:6d:99:2a:45:f9:91:f4:4d:70:a1:b9:ed:6c:5e:0f:
         47:31:15:d9:5b:3d:80:bb:27:de:04:a6:34:1e:d6:d9:83:4d:
         ee:c0:27:ac:32:d4:e0:c8:6e:58:ca:ae:66:0c:0b:d5:27:f5:
         3c:41:b5:52:cb:81:cc:91:d8:43:0d:dc:f3:fa:8e:95:51:90:
         25:5d:8d:d9:77:93:65:02:5a:01:56:f8:59:14:7b:88:11:b6:
         c4:c7:d2:dc:5d:a8:ae:48:f0:cf:3c:9b:78:58:3e:ea:d6:cc:
         4a:90:a2:f9:b3:7d:cd:52:1e:11:cc:60:ef:f0:51:7b:97:1a:
         c7:b2:47:ec:b3:d3:04:84:71:b6:3a:72:6a:a7:20:6c:02:c1:
         03:23:04:32:59:8d:21:62:a4:4d:b5:78:14:e3:f7:1c:0a:27:
         cc:b1:8f:a0:3b:a2:e8:d3:69:2f:9a:29:29:8a:4c:72:92:9b:
         2f:c9:68:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:49 2026 by rpki-client