Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
File:                     56C0B74262A19F328983C278635DE9570AFEB948.mft (raw, json)
Hash identifier:          +cFpnFgmzd4yuPiMzRtge6t++A3Imd5tjw6tCXHwhXE=
Subject key identifier:   89:8C:20:25:83:3C:99:32:71:AE:8E:CC:80:6A:AD:D7:09:B7:FC:2A
Authority key identifier: 56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48
Certificate issuer:       /CN=56C0B74262A19F328983C278635DE9570AFEB948
Certificate serial:       713304F418B80629A77E8C8FE6A66075831B2B8D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
Manifest number:          64
Signing time:             Fri 24 Jul 2026 00:32:07 +0000
Manifest this update:     Fri 24 Jul 2026 00:27:07 +0000
Manifest next update:     Sat 25 Jul 2026 01:17:07 +0000
Files and hashes:         1: 323430323a343932303a3a2f33322d3438203d3e203138303434.roa (hash: w+sTaFe8OsYZPZPjwuyvLTqcXmP0CcIo8Vy8833aYz8=)
                          2: 56C0B74262A19F328983C278635DE9570AFEB948.crl (hash: Etqdr4qRQN7ycdcpY4y/IH1hUUx1DDTji8lyZyiWNeg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl
                          rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 01:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:33:04:f4:18:b8:06:29:a7:7e:8c:8f:e6:a6:60:75:83:1b:2b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56C0B74262A19F328983C278635DE9570AFEB948
        Validity
            Not Before: Jul 24 00:27:07 2026 GMT
            Not After : Jul 25 01:17:07 2026 GMT
        Subject: CN=898C2025833C993271AE8ECC806AADD709B7FC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:34:41:b8:aa:31:db:b4:19:78:c2:27:5b:
                    f4:ac:1d:94:9b:b8:4e:d3:0c:a7:a4:cc:cf:6c:39:
                    2d:11:d8:8f:a4:9f:69:95:b5:2c:59:50:a3:f8:71:
                    61:42:80:49:b7:44:0a:10:63:e1:80:92:93:4f:cb:
                    4e:e7:31:ef:06:6f:60:7a:79:32:df:aa:c7:32:bf:
                    20:a6:71:b3:dc:bf:b4:4f:8d:83:89:bc:5f:bc:c7:
                    b3:81:ab:ac:80:59:0e:e7:7c:d9:3d:27:8e:39:d6:
                    cf:0e:b8:c9:11:a9:7f:4a:f3:c3:eb:c1:c0:d9:2a:
                    0c:26:d3:be:3e:c9:b1:3b:4a:43:e6:5c:9d:61:05:
                    9c:66:03:02:44:35:87:0f:d5:0d:25:26:72:51:b5:
                    6a:de:25:14:be:96:79:71:e5:41:0d:e0:df:26:7c:
                    01:8c:2d:0e:31:ff:5a:2a:f0:82:ea:77:13:08:c1:
                    08:42:37:3f:b9:2d:28:25:e4:a7:fd:41:10:5b:5f:
                    99:60:fe:26:2a:f7:f3:16:25:c7:0f:2e:d3:d2:92:
                    ac:fd:e8:92:3f:84:1a:ce:53:28:77:75:bd:7c:5f:
                    60:96:e8:b0:33:d0:9a:60:e1:fc:ee:61:33:39:31:
                    93:2d:be:c9:7e:f8:dd:7b:11:27:a4:59:e2:96:b7:
                    14:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8C:20:25:83:3C:99:32:71:AE:8E:CC:80:6A:AD:D7:09:B7:FC:2A
            X509v3 Authority Key Identifier:
                keyid:56:C0:B7:42:62:A1:9F:32:89:83:C2:78:63:5D:E9:57:0A:FE:B9:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56C0B74262A19F328983C278635DE9570AFEB948.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/KANRAYS/0/56C0B74262A19F328983C278635DE9570AFEB948.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:76:ae:cb:dc:e9:a0:79:e6:08:ef:bd:50:66:4c:e5:20:3b:
         d1:7b:a2:37:1e:1f:06:d3:f4:d2:37:f0:98:88:47:40:c5:5e:
         74:f1:cc:b1:08:27:b4:8a:f9:1d:58:74:83:4d:f5:44:e3:c9:
         42:63:a6:3e:fd:67:d4:1d:a1:15:a3:d6:ef:50:3e:46:3c:36:
         7f:12:c9:1f:d7:02:49:71:4c:98:3d:c4:c8:a6:26:4d:e0:69:
         ef:c2:54:cd:71:b8:ce:d2:d6:c1:c2:4c:17:00:78:8c:c9:0d:
         ba:b0:b1:5b:a4:4e:b7:ab:50:fd:b3:89:ae:3a:bf:7e:f1:c7:
         a0:cc:49:60:e1:53:d2:69:7c:06:00:36:4b:9d:63:9c:74:63:
         d0:53:27:bb:f9:bc:6c:2a:98:05:85:26:4a:7e:94:67:95:f3:
         80:87:d9:71:32:03:db:ec:ef:92:57:ff:c4:0f:9d:ec:7b:f8:
         aa:3a:03:75:1a:c6:1a:5f:85:68:d7:67:96:8e:90:51:6c:62:
         44:24:9b:19:e6:6c:d4:37:c4:03:a2:95:03:46:dc:c8:8d:4d:
         6e:1f:c8:d9:21:ef:42:18:ff:52:ab:ae:c4:21:c7:7c:ad:4d:
         ca:ef:2e:8a:b4:ad:51:e2:22:3a:02:ce:77:61:86:52:c7:a6:
         42:4f:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:11 2026 by rpki-client