Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft
File:                     A67F7A72FC031B1A33774C937883F79C7342B848.mft (raw, json)
Hash identifier:          r7/7Zv5wXWQdyyZHa043+W4rAWQJiEnH5aAND1vAdZU=
Subject key identifier:   F9:86:EC:2B:65:75:74:3A:F0:66:6D:D1:D2:BD:E1:0E:31:35:AE:8E
Authority key identifier: A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48
Certificate issuer:       /CN=A67F7A72FC031B1A33774C937883F79C7342B848
Certificate serial:       411D5729F5C94C07F140623F6D27C31C543DD4AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft
Manifest number:          64
Signing time:             Fri 24 Jul 2026 03:42:26 +0000
Manifest this update:     Fri 24 Jul 2026 03:37:26 +0000
Manifest next update:     Sat 25 Jul 2026 07:04:26 +0000
Files and hashes:         1: A67F7A72FC031B1A33774C937883F79C7342B848.crl (hash: afAu+BzPsr960hvJrwXOMkaOMolPmJjGSd7qYI/tp84=)
                          2: 3231312e37382e36342e302f32302d3234203d3e203338383337.roa (hash: BXuBK0LMjwx4Feg0mEC7/E23SnCajtY0CpedBH0UNLE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl
                          rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1d:57:29:f5:c9:4c:07:f1:40:62:3f:6d:27:c3:1c:54:3d:d4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A67F7A72FC031B1A33774C937883F79C7342B848
        Validity
            Not Before: Jul 24 03:37:26 2026 GMT
            Not After : Jul 25 07:04:26 2026 GMT
        Subject: CN=F986EC2B6575743AF0666DD1D2BDE10E3135AE8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:b0:5d:2f:de:46:63:62:b7:d4:85:56:99:
                    14:d1:35:d0:b0:1a:87:44:4d:ad:0a:8a:17:04:6c:
                    83:49:2d:d5:9c:1c:31:9c:19:9a:40:59:7b:16:12:
                    b7:f2:0a:3c:bd:ac:4d:19:4c:d7:9a:3e:1e:2c:f3:
                    a5:e1:2d:1c:ae:25:97:44:2e:83:dc:e3:fc:d5:5f:
                    c0:b5:ed:22:ec:fc:7e:ff:fe:22:91:0e:64:7f:e9:
                    2f:b5:3b:42:3e:c1:ff:86:79:7d:8d:b9:0d:b3:2d:
                    90:8a:f4:6d:8c:7a:0e:c9:54:25:c8:51:f3:3a:08:
                    bc:20:67:20:c5:d7:ee:f2:10:9c:b5:b4:d4:87:8e:
                    13:ac:e6:d7:bb:29:a3:3c:88:e9:62:71:4b:b4:91:
                    9a:e8:86:8d:5d:c2:7d:b2:03:95:86:bc:a6:2d:aa:
                    53:dc:7b:05:b3:f5:ff:f9:a0:ef:7f:a4:55:39:12:
                    17:da:d7:3a:1d:43:3f:0d:71:a3:9d:8c:0b:b1:8e:
                    06:05:88:40:1f:28:02:4d:5b:96:c0:9e:5d:da:83:
                    34:b3:56:d5:1c:36:89:b8:b1:01:ac:03:f8:29:11:
                    d8:bf:09:bc:49:45:2d:c1:c4:43:23:6e:17:18:e2:
                    51:9c:34:56:34:bd:84:a8:10:7b:e3:30:58:25:09:
                    e2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:86:EC:2B:65:75:74:3A:F0:66:6D:D1:D2:BD:E1:0E:31:35:AE:8E
            X509v3 Authority Key Identifier:
                keyid:A6:7F:7A:72:FC:03:1B:1A:33:77:4C:93:78:83:F7:9C:73:42:B8:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/A67F7A72FC031B1A33774C937883F79C7342B848.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GSNET/0/A67F7A72FC031B1A33774C937883F79C7342B848.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d4:27:b5:0b:c8:ea:61:56:f0:eb:da:d0:63:e2:96:60:69:
         4f:a1:69:6e:41:6d:ee:04:31:36:11:1a:c7:b5:65:7d:60:f5:
         b7:f2:51:67:33:9b:f0:c5:f4:4a:66:ec:12:fa:ed:e3:57:45:
         28:58:3f:54:d4:97:77:a9:e6:0a:c5:f8:b2:63:c0:1b:71:61:
         c0:07:6b:f3:dc:bd:85:29:93:55:fb:d8:86:a4:d8:ac:5e:3a:
         6a:3d:e5:f9:c2:1b:d6:8d:57:f1:bf:28:40:40:27:d0:61:73:
         6b:52:e6:6d:72:38:a1:8b:73:dd:a4:d9:3f:74:e9:88:92:83:
         11:68:88:d7:13:2a:f1:1d:20:75:2e:ae:43:bc:a1:fe:5a:ba:
         3c:eb:1a:57:5f:85:8e:50:d2:53:a8:eb:0a:31:09:87:68:83:
         b2:4f:4d:93:d1:5c:a8:72:63:72:8e:93:9e:32:b3:1a:bf:6a:
         d2:73:3d:88:97:95:1b:8e:41:e2:26:40:6b:0d:1f:af:02:fc:
         f7:cf:72:be:4f:e2:70:25:4d:cc:06:82:92:4b:69:93:d0:a9:
         44:d1:fa:25:9a:56:5d:d3:e3:58:13:09:6f:14:b1:1c:d9:94:
         ff:f7:9b:94:af:b3:b0:36:cb:5f:37:a9:1a:fa:3d:28:12:9d:
         80:75:67:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:01:00 2026 by rpki-client