Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HAOWANG/0/BA76DF7F88073A2138A8860116C53F470BF01FF5.mft
File:                     BA76DF7F88073A2138A8860116C53F470BF01FF5.mft (raw, json)
Hash identifier:          KrZt1SD5O4OdvucvtbI1nVhA3uD90GGqiXs2HXlZeSI=
Subject key identifier:   F7:AB:D8:A9:E9:B4:B9:63:D1:5B:31:8F:3D:EA:01:31:50:ED:56:8A
Authority key identifier: BA:76:DF:7F:88:07:3A:21:38:A8:86:01:16:C5:3F:47:0B:F0:1F:F5
Certificate issuer:       /CN=BA76DF7F88073A2138A8860116C53F470BF01FF5
Certificate serial:       057AF7B959332E3BBD0710289A7BC69787FD9470
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BA76DF7F88073A2138A8860116C53F470BF01FF5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HAOWANG/0/BA76DF7F88073A2138A8860116C53F470BF01FF5.mft
Manifest number:          64
Signing time:             Fri 24 Jul 2026 01:52:17 +0000
Manifest this update:     Fri 24 Jul 2026 01:47:17 +0000
Manifest next update:     Sat 25 Jul 2026 05:06:17 +0000
Files and hashes:         1: BA76DF7F88073A2138A8860116C53F470BF01FF5.crl (hash: dHJeBiiMPcoxYLUCX43+T9GK2Ggd8H5EkRwN76xKNwo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HAOWANG/0/BA76DF7F88073A2138A8860116C53F470BF01FF5.crl
                          rsync://rpkica.twnic.tw/rpki/HAOWANG/0/BA76DF7F88073A2138A8860116C53F470BF01FF5.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BA76DF7F88073A2138A8860116C53F470BF01FF5.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7a:f7:b9:59:33:2e:3b:bd:07:10:28:9a:7b:c6:97:87:fd:94:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA76DF7F88073A2138A8860116C53F470BF01FF5
        Validity
            Not Before: Jul 24 01:47:17 2026 GMT
            Not After : Jul 25 05:06:17 2026 GMT
        Subject: CN=F7ABD8A9E9B4B963D15B318F3DEA013150ED568A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:39:c1:ca:a4:39:ef:46:93:3c:1c:b5:8e:
                    a5:6a:1d:d3:db:bd:7b:f7:c9:bb:56:1e:48:20:3b:
                    94:b2:61:2c:77:dd:15:19:36:40:a6:ff:b6:50:8d:
                    87:a7:a5:9e:05:5d:59:50:aa:50:9c:ba:41:24:a1:
                    13:ba:bb:dd:06:07:ed:f1:8f:94:47:49:a2:19:09:
                    93:17:7c:a3:cd:63:ca:68:ce:85:7f:39:10:27:bc:
                    f9:6f:66:08:53:dd:48:64:96:7f:3a:7b:5c:2f:45:
                    36:7a:34:de:1e:e3:86:d6:8e:6d:50:09:05:bf:b7:
                    c6:45:66:cb:4e:00:49:1e:cf:77:a2:c2:c4:04:15:
                    3f:4f:52:47:ee:e4:8a:3e:85:13:db:d9:39:df:08:
                    d7:cf:3a:64:7d:30:22:7f:9d:a3:b3:d3:9d:e6:18:
                    e4:0b:1e:38:38:02:71:92:58:0f:4b:44:65:c8:f6:
                    be:ee:66:bb:a8:09:7c:4e:b9:b9:23:c4:23:ff:cd:
                    de:dc:06:dd:23:ad:4f:b5:2e:91:2e:f1:e4:95:0f:
                    06:6f:c3:09:09:d4:16:de:d8:0b:85:1d:e5:13:9f:
                    00:ee:b7:f0:7a:6c:fb:36:47:24:9a:73:aa:bd:15:
                    de:8e:98:f2:bd:27:86:d3:33:ac:be:bc:3c:a9:b2:
                    16:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AB:D8:A9:E9:B4:B9:63:D1:5B:31:8F:3D:EA:01:31:50:ED:56:8A
            X509v3 Authority Key Identifier:
                keyid:BA:76:DF:7F:88:07:3A:21:38:A8:86:01:16:C5:3F:47:0B:F0:1F:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HAOWANG/0/BA76DF7F88073A2138A8860116C53F470BF01FF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BA76DF7F88073A2138A8860116C53F470BF01FF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HAOWANG/0/BA76DF7F88073A2138A8860116C53F470BF01FF5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:00:48:61:a6:28:96:7c:9e:d6:2b:80:4c:53:21:46:3a:67:
         9e:86:8f:91:27:8b:03:10:c8:95:06:f9:54:f1:1c:4a:86:c7:
         af:28:f3:8d:e5:77:5e:fc:bd:56:c3:f8:68:52:0d:c4:1f:f8:
         c9:6c:22:ea:97:81:bf:58:e7:a5:24:f8:9b:76:09:9b:26:34:
         71:2f:1d:1b:02:1a:e0:fd:e7:bb:bf:76:49:12:dc:4a:db:01:
         01:72:61:d0:ef:28:92:b6:d4:49:ff:e9:28:dc:1a:a6:69:e9:
         37:db:e1:05:0c:6a:8c:9c:5a:23:42:23:c9:98:49:5b:46:97:
         69:4e:a5:d8:db:d4:56:04:d6:05:25:de:3d:77:eb:05:c5:d6:
         34:ce:8f:59:00:46:d3:57:62:95:65:99:5c:e6:17:08:a1:31:
         e7:8b:6d:38:88:da:2b:61:ed:98:1b:43:09:bb:b9:35:d6:1b:
         49:a0:e0:17:4a:b7:29:25:00:8f:e5:a5:5c:83:57:a6:9d:7c:
         2f:0f:7d:f9:6c:d2:00:f9:f5:0c:66:82:84:1f:fb:6c:2f:02:
         64:ed:34:dc:96:92:bf:9c:0f:59:09:cb:3f:fa:77:6e:14:f8:
         f3:23:f5:7e:3b:7e:7c:19:1b:29:6e:32:4a:01:da:78:1b:bf:
         36:35:a5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:25 2026 by rpki-client