Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft
File:                     D2F622A04A47823AB003C84A0427E20441C8BE5E.mft (raw, json)
Hash identifier:          YZ7MC0T0MQlTWmFItudVGLosWOtC16MGoFdImhxAhA0=
Subject key identifier:   16:DD:BE:08:70:62:AB:E8:3D:4A:90:C4:16:80:4A:1B:D4:35:38:95
Authority key identifier: D2:F6:22:A0:4A:47:82:3A:B0:03:C8:4A:04:27:E2:04:41:C8:BE:5E
Certificate issuer:       /CN=D2F622A04A47823AB003C84A0427E20441C8BE5E
Certificate serial:       70FD37EA674E60C927A1D2AC25BE5475669CA816
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D2F622A04A47823AB003C84A0427E20441C8BE5E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 15:28:04 +0000
Manifest this update:     Thu 23 Jul 2026 15:23:04 +0000
Manifest next update:     Fri 24 Jul 2026 18:08:04 +0000
Files and hashes:         1: D2F622A04A47823AB003C84A0427E20441C8BE5E.crl (hash: aSE7S5RlbJvBy/rOuQo0DhhC14yehCLXyFiQZ5f0BDs=)
                          2: 3130332e39392e3134322e302f32332d3332203d3e20313331363432.roa (hash: rL2ri6udnHer5sw3p78xlE4EFTw2M/n/E1Kn2KyLNqI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.crl
                          rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D2F622A04A47823AB003C84A0427E20441C8BE5E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 18:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fd:37:ea:67:4e:60:c9:27:a1:d2:ac:25:be:54:75:66:9c:a8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F622A04A47823AB003C84A0427E20441C8BE5E
        Validity
            Not Before: Jul 23 15:23:04 2026 GMT
            Not After : Jul 24 18:08:04 2026 GMT
        Subject: CN=16DDBE087062ABE83D4A90C416804A1BD4353895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e0:a2:5d:6d:ea:eb:9b:d1:66:7f:c6:ae:85:
                    66:5a:27:9e:c0:41:fa:e0:27:89:3d:e0:95:0f:e7:
                    d2:d6:12:ff:97:52:b8:7e:0f:2c:f2:3b:c6:75:f6:
                    8b:2f:56:c9:d3:0d:a7:98:95:40:b6:7f:38:03:80:
                    54:9a:38:4f:67:6e:f0:a3:57:45:9e:9f:b0:3a:e5:
                    1e:ec:51:6b:f0:2a:1e:75:eb:e6:7f:81:dc:74:1e:
                    82:0a:34:82:fc:bb:32:e6:5b:1d:a1:a4:c8:32:fe:
                    74:80:f8:2e:77:80:d0:6b:8a:59:6b:07:0d:4b:fe:
                    d7:1b:f9:08:0d:2d:cd:37:32:05:15:3f:f4:69:1e:
                    78:7a:1d:27:a4:54:e3:93:9d:d6:29:a1:4c:51:43:
                    be:35:1c:a5:09:9e:a1:39:84:b2:8c:45:32:6a:f0:
                    4b:77:f2:80:d1:86:2e:da:d6:ef:aa:58:f0:33:39:
                    19:d8:fb:05:8a:43:46:e3:6e:a7:f2:01:e4:49:e9:
                    54:ee:3c:40:fb:8d:c4:0a:18:15:09:ed:4a:01:ea:
                    2e:f8:76:75:ee:30:97:80:9d:a1:9b:82:8d:5a:03:
                    45:53:72:8f:66:18:47:a8:70:c6:f2:27:d3:d0:b4:
                    f1:9e:7c:3d:01:5f:14:ce:e7:f1:da:90:81:e5:b5:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DD:BE:08:70:62:AB:E8:3D:4A:90:C4:16:80:4A:1B:D4:35:38:95
            X509v3 Authority Key Identifier:
                keyid:D2:F6:22:A0:4A:47:82:3A:B0:03:C8:4A:04:27:E2:04:41:C8:BE:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/D2F622A04A47823AB003C84A0427E20441C8BE5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HUANGDEXIA/0/D2F622A04A47823AB003C84A0427E20441C8BE5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:39:ef:34:68:0e:77:85:eb:30:54:be:a6:7b:c3:ed:c0:
         99:85:b3:7f:06:d5:d6:2c:93:06:9e:79:aa:6a:04:e0:31:7b:
         58:74:53:12:69:c6:11:76:5d:ab:f7:4c:76:8e:02:af:a8:aa:
         ba:f1:32:b2:bb:09:96:b4:b9:b3:2d:16:d8:68:70:96:4a:d3:
         a7:de:47:a1:a0:10:41:96:e0:dd:bb:24:91:dd:ed:b7:cb:00:
         ed:66:4a:bf:fe:26:73:f1:23:4c:a5:e8:17:b5:2d:f8:c3:03:
         91:90:de:dc:a7:b5:42:e0:46:14:bf:14:a2:6b:f1:37:c0:ba:
         31:4b:8b:5a:a4:fc:5b:08:99:bc:07:0b:46:11:6c:17:53:f0:
         fa:68:86:36:39:62:2b:57:bf:cc:85:2b:72:7e:59:7c:c1:81:
         80:32:fc:9d:e4:49:74:fd:4e:95:de:06:59:6b:60:e4:bf:c5:
         4e:03:21:da:be:92:28:99:7d:6c:d6:af:c7:cf:4d:6b:55:77:
         87:cf:6f:b7:87:d9:8e:f4:29:de:21:27:a0:b7:b3:93:5d:2a:
         88:2d:70:f1:5e:7d:e7:19:44:c6:d4:4d:22:46:fa:e6:14:58:
         e9:f8:29:4e:c1:f1:37:00:09:a3:24:c3:b5:b5:35:38:4c:b5:
         2d:35:ae:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:52 2026 by rpki-client