Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft
File:                     0887D67C493519D59AAE1BBED0303F38A26D0712.mft (raw, json)
Hash identifier:          naUxekMI6vhy6p++7ubr8WomFHWQCr/rQxEMlKnY5rw=
Subject key identifier:   9D:E0:5C:9E:A7:29:8F:DA:FF:87:3E:AA:AE:7B:35:71:D6:1A:C1:17
Authority key identifier: 08:87:D6:7C:49:35:19:D5:9A:AE:1B:BE:D0:30:3F:38:A2:6D:07:12
Certificate issuer:       /CN=0887D67C493519D59AAE1BBED0303F38A26D0712
Certificate serial:       0A93520DF76F453F3C98A8453466DFB005B85C99
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft
Manifest number:          62
Signing time:             Thu 23 Jul 2026 18:06:25 +0000
Manifest this update:     Thu 23 Jul 2026 18:01:25 +0000
Manifest next update:     Fri 24 Jul 2026 21:58:25 +0000
Files and hashes:         1: 0887D67C493519D59AAE1BBED0303F38A26D0712.crl (hash: c5Z3INQTnRrXXZrjn+GdldUK1zffPdLZcPc3hZPs1us=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.crl
                          rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 21:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:93:52:0d:f7:6f:45:3f:3c:98:a8:45:34:66:df:b0:05:b8:5c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0887D67C493519D59AAE1BBED0303F38A26D0712
        Validity
            Not Before: Jul 23 18:01:25 2026 GMT
            Not After : Jul 24 21:58:25 2026 GMT
        Subject: CN=9DE05C9EA7298FDAFF873EAAAE7B3571D61AC117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ea:92:f4:f8:56:86:86:16:f9:2b:fa:cc:1b:
                    48:68:29:f3:43:94:5c:f1:be:d6:d2:82:c9:24:11:
                    38:86:e2:27:a9:bf:0d:14:dc:c6:ef:e5:1e:4f:19:
                    08:18:3c:08:f2:c2:c3:43:f1:15:27:91:64:d8:05:
                    a3:9c:aa:35:62:82:38:fd:07:63:b7:e5:94:09:86:
                    4b:8d:33:db:02:71:fa:37:a8:11:64:db:da:13:fb:
                    7d:55:ea:9d:f3:99:9d:36:ad:97:5f:b7:f5:0a:2c:
                    a9:63:31:ba:95:93:7a:0f:9e:e9:a9:ae:f8:31:49:
                    99:52:7c:0f:27:ec:0a:d6:8b:d1:12:f8:50:fa:4c:
                    d2:e7:75:89:60:8e:78:98:53:31:8b:1a:c8:eb:5c:
                    9f:a7:5f:c5:9e:01:c0:e2:4e:58:58:91:0f:ac:ca:
                    df:b2:3e:6d:0f:f2:ea:97:ef:a9:7e:a0:fa:f0:35:
                    e3:5e:a4:41:91:f6:17:4a:d6:06:b1:4c:71:1f:80:
                    16:90:36:f8:f9:99:5b:1f:26:f6:67:19:c3:fc:54:
                    91:2d:18:9e:6b:c5:22:7f:79:e9:80:43:66:c4:6d:
                    9e:06:47:4b:fe:6f:ac:eb:6a:d0:73:18:d5:cc:60:
                    c0:7a:65:b5:4c:4b:3f:5e:be:ba:88:bd:47:42:b7:
                    1e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E0:5C:9E:A7:29:8F:DA:FF:87:3E:AA:AE:7B:35:71:D6:1A:C1:17
            X509v3 Authority Key Identifier:
                keyid:08:87:D6:7C:49:35:19:D5:9A:AE:1B:BE:D0:30:3F:38:A2:6D:07:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0887D67C493519D59AAE1BBED0303F38A26D0712.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HCT/0/0887D67C493519D59AAE1BBED0303F38A26D0712.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:96:55:fe:95:e9:2b:71:e9:fd:dd:33:e8:a1:ef:ed:f2:aa:
         1a:31:23:60:75:be:17:d4:f6:65:26:6d:45:d9:a6:68:ef:31:
         78:ba:d4:bf:d2:24:f4:7e:82:e6:56:80:4f:cb:72:2c:8c:62:
         f6:85:33:39:5f:c1:7a:14:cb:df:09:b9:64:38:d3:70:26:1b:
         14:7c:66:d2:c8:ba:45:11:47:69:ec:55:f6:17:12:c7:fe:60:
         38:46:cc:12:20:20:18:9b:33:e1:eb:df:3b:78:2e:24:cb:20:
         f5:f2:ff:3c:1e:d2:03:21:06:cb:4d:1e:80:39:53:0f:69:8c:
         95:a1:c0:a6:53:69:e9:09:81:f1:9d:bd:81:99:2e:ac:48:ea:
         ef:84:14:01:13:a7:8f:67:87:d1:52:f9:0f:a4:34:ad:c0:2f:
         e8:b0:c8:e6:3f:39:61:af:0c:0c:86:30:52:32:8b:20:86:f1:
         db:50:4a:ec:54:8a:55:07:53:09:b4:e5:a0:c1:b9:05:52:f2:
         bb:56:b5:78:f9:6e:3e:57:a7:51:51:0c:01:6f:1d:a3:0f:d9:
         ea:66:7a:d9:0c:ea:7c:e8:ab:ca:d9:67:1d:a0:da:9d:f4:b6:
         02:23:a5:76:e5:d0:2b:67:68:02:01:3c:e6:42:4f:4f:b5:4e:
         a3:8e:0d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:52 2026 by rpki-client