Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft
File:                     0887D67C493519D59AAE1BBED0303F38A26D0712.mft (raw, json)
Hash identifier:          R1rv7IRmLU+vHuiKTAPvi/bs3GfOTYzTTAqXR2d1CUA=
Subject key identifier:   76:5C:40:15:E5:16:24:47:D8:5E:D7:23:98:6F:58:B3:F4:63:42:AE
Authority key identifier: 08:87:D6:7C:49:35:19:D5:9A:AE:1B:BE:D0:30:3F:38:A2:6D:07:12
Certificate issuer:       /CN=0887D67C493519D59AAE1BBED0303F38A26D0712
Certificate serial:       39B0D7F9148C5C48D1979E383AF42CD6BA1A7AE8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft
Manifest number:          B7
Signing time:             Thu 24 Sep 2026 17:00:39 +0000
Manifest this update:     Thu 24 Sep 2026 16:55:39 +0000
Manifest next update:     Fri 25 Sep 2026 20:23:39 +0000
Files and hashes:         1: 0887D67C493519D59AAE1BBED0303F38A26D0712.crl (hash: Ipippcr64KET8ohbuEsWdZ8h1LgbbpJRraoEeb4MOZI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.crl
                          rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 20:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b0:d7:f9:14:8c:5c:48:d1:97:9e:38:3a:f4:2c:d6:ba:1a:7a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0887D67C493519D59AAE1BBED0303F38A26D0712
        Validity
            Not Before: Sep 24 16:55:39 2026 GMT
            Not After : Sep 25 20:23:39 2026 GMT
        Subject: CN=765C4015E5162447D85ED723986F58B3F46342AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:65:61:b4:70:14:92:cd:8d:9f:5e:8c:b2:
                    bd:82:c0:9e:32:20:47:62:f4:21:6e:db:f6:61:db:
                    68:3c:87:4f:be:0d:f3:17:78:60:fa:91:76:32:d9:
                    0f:f4:2e:2a:6b:1d:c5:30:31:f0:1e:36:65:d5:e5:
                    5a:2f:a6:aa:12:5c:d0:85:2d:2b:71:91:50:40:39:
                    8e:ce:e1:a3:c3:cc:46:29:da:46:a6:0a:63:61:3c:
                    e3:d3:ef:d1:f8:38:e1:9e:77:00:cd:67:c5:fa:86:
                    e8:0f:a7:69:ff:12:86:8d:18:f9:dc:9f:95:04:58:
                    d6:f8:93:65:73:e5:04:06:7d:cb:fb:6e:eb:62:a2:
                    2f:db:7e:da:37:4a:aa:43:c6:fa:dc:58:12:71:9d:
                    09:83:db:ab:40:0b:be:ab:d9:b7:10:c6:41:e2:bb:
                    a4:ba:48:28:c1:92:8a:fa:72:c6:75:31:b9:3b:6e:
                    ba:e8:07:72:06:ce:20:87:60:cc:e9:e5:ab:02:91:
                    1c:70:a3:5b:de:58:9b:ac:64:b0:15:6b:ad:4d:db:
                    71:2d:4d:4c:99:8a:db:38:74:2a:98:07:e6:a4:a2:
                    4d:a5:32:f6:a2:7a:2a:73:d9:8c:a3:31:95:44:d6:
                    22:9b:bf:0e:79:e2:fb:6b:ba:01:bf:76:68:61:59:
                    96:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5C:40:15:E5:16:24:47:D8:5E:D7:23:98:6F:58:B3:F4:63:42:AE
            X509v3 Authority Key Identifier:
                keyid:08:87:D6:7C:49:35:19:D5:9A:AE:1B:BE:D0:30:3F:38:A2:6D:07:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3f:1c:2e:6c:22:d1:26:1f:78:89:86:4f:68:e4:01:94:2f:
         18:3f:24:e7:33:ca:2b:c3:d9:2c:c7:6f:cb:1c:88:0b:17:71:
         61:15:4e:ea:dc:21:0a:cd:ed:1e:ad:28:95:4c:c9:95:05:27:
         1c:6a:b5:d5:11:6c:2b:6e:fd:ed:bd:2d:c1:78:cb:1f:3f:f4:
         c1:cf:5b:bb:84:90:02:56:94:cc:2d:d9:c1:44:f2:b9:c0:eb:
         59:02:fc:99:9d:4b:2b:dc:77:a0:19:74:43:ca:62:1e:ba:ea:
         15:19:35:ee:71:b0:6a:2d:6b:f8:f0:45:d5:bf:f6:22:3e:bc:
         63:1d:8b:e9:8f:08:6b:28:71:20:49:72:3f:37:ac:a4:e9:a9:
         38:a6:de:9e:24:23:49:58:41:46:97:71:c0:cc:13:3e:6c:6f:
         10:71:d6:7d:11:d3:75:a6:0d:e7:e0:41:05:76:b6:de:74:d7:
         66:fc:bf:7c:8d:19:aa:d2:55:32:ae:cc:2b:89:35:72:e2:c9:
         e0:05:e7:ee:2a:fa:cc:7e:97:63:39:63:50:b1:45:1e:ca:bb:
         3b:82:78:b4:5a:04:f8:b2:44:a8:c9:11:dd:6b:64:17:e5:16:
         ec:77:25:2a:1d:cd:62:53:75:4b:48:64:57:bc:fb:5f:37:e8:
         21:03:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:01:58 2026 by rpki-client