Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
File:                     56C0B74262A19F328983C278635DE9570AFEB948.mft (raw, json)
Hash identifier:          9CsexEDPVsG/abi94m0NnyyT6VFT0pMf5HdBnIvcSoo=
Subject key identifier:   20:11:00:98:DE:9A:EF:BB:54:69:66:7D:76:AD:57:AE:73:4C:AC:FB
Authority key identifier: 56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48
Certificate issuer:       /CN=56C0B74262A19F328983C278635DE9570AFEB948
Certificate serial:       4294224862674852444EDC234E917146D20D9F52
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
Manifest number:          C1
Signing time:             Thu 01 Oct 2026 08:55:02 +0000
Manifest this update:     Thu 01 Oct 2026 08:50:02 +0000
Manifest next update:     Fri 02 Oct 2026 10:26:02 +0000
Files and hashes:         1: 323430323a343932303a3a2f33322d3438203d3e203138303434.roa (hash: w+sTaFe8OsYZPZPjwuyvLTqcXmP0CcIo8Vy8833aYz8=)
                          2: 56C0B74262A19F328983C278635DE9570AFEB948.crl (hash: oCwLs8OAAD7bdO6gy5DFTr0rMn5VsDroYQXslPG2Sc4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl
                          rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 10:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:94:22:48:62:67:48:52:44:4e:dc:23:4e:91:71:46:d2:0d:9f:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C0B74262A19F328983C278635DE9570AFEB948
        Validity
            Not Before: Oct  1 08:50:02 2026 GMT
            Not After : Oct  2 10:26:02 2026 GMT
        Subject: CN=20110098DE9AEFBB5469667D76AD57AE734CACFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:1f:f1:6d:53:3d:39:87:ee:81:1e:31:ca:
                    eb:32:81:6c:f4:ed:0f:75:e3:6f:31:94:1c:ef:e4:
                    c7:28:af:51:b2:9b:6f:c8:b5:f1:8f:c6:5d:50:f5:
                    3f:c9:2f:aa:ff:34:14:6b:ee:19:fa:1e:3f:82:a7:
                    4c:b6:6a:ef:e4:b7:78:6c:89:6b:4f:34:6a:99:35:
                    9e:a7:70:26:ee:56:7a:83:7b:a2:36:01:02:43:22:
                    4e:21:04:66:2a:98:d2:b6:15:04:54:a2:1c:b8:47:
                    cf:15:41:14:b6:f2:06:79:24:bd:94:0d:21:2c:fa:
                    aa:69:69:0c:fc:f2:49:7b:c2:02:2d:19:c6:33:f8:
                    08:cf:9a:02:04:c4:00:a4:90:54:49:e9:6a:e3:3e:
                    e7:5b:cc:fb:b9:fb:d6:84:00:70:14:97:e8:e6:b1:
                    5a:10:79:fe:17:7c:3b:10:99:a5:74:6d:83:41:36:
                    74:f8:52:29:1f:18:4f:c9:77:ac:b7:2e:e0:22:22:
                    b4:ed:40:86:c2:ec:9b:32:e9:d2:6d:90:3e:ec:dd:
                    6a:55:cc:ec:06:20:01:10:0c:2c:96:1a:1f:d1:81:
                    36:87:86:13:af:be:74:05:95:36:9f:63:88:d7:c2:
                    b0:d0:4d:8e:bb:10:54:91:02:67:9b:5e:e2:97:5a:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:11:00:98:DE:9A:EF:BB:54:69:66:7D:76:AD:57:AE:73:4C:AC:FB
            X509v3 Authority Key Identifier:
                keyid:56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:4c:6f:0f:c0:a1:20:b4:12:74:58:c5:3c:c4:6f:26:c4:22:
         b9:25:43:03:22:29:13:9d:6f:17:dd:cd:1a:3c:a5:5f:c8:c3:
         e0:af:9d:22:39:0d:ab:0b:ef:fc:95:45:08:fb:9e:de:65:70:
         1b:07:84:b2:bb:d5:65:64:27:d2:a6:5e:6d:15:c3:30:27:78:
         04:22:e3:7f:61:7f:92:8a:7a:56:a5:99:9f:03:3f:a8:9a:d9:
         04:bd:af:67:dc:87:8e:7d:c2:e2:da:57:0e:56:d7:ab:a0:c3:
         62:0d:b4:93:22:dc:53:99:4d:bb:f3:4a:bc:cd:3b:5d:b8:d3:
         eb:1b:83:a9:92:87:8b:3d:ba:14:33:a1:4c:90:36:be:b7:b2:
         55:36:43:ce:ca:6a:02:ac:69:0d:a6:b9:11:89:d5:72:91:8e:
         62:71:ee:7e:07:ae:92:89:55:1f:50:f2:09:c4:c8:15:56:7d:
         e8:3a:5c:fd:25:4a:51:32:67:a1:7f:95:26:7d:7b:8f:74:f1:
         9b:5c:1f:c6:13:9a:3e:2c:c3:f8:0a:99:d2:d7:0c:2d:16:c0:
         69:ee:29:5e:40:1b:3d:c9:62:67:cd:23:d6:6a:78:fe:6d:ff:
         cd:c7:1c:c9:b7:85:8a:fc:30:46:47:94:63:00:db:dc:bf:ec:
         5f:87:59:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:33:07 2026 by rpki-client