Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
File:                     4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft (raw, json)
Hash identifier:          QsDoXt8vafqF5zTSEBpYl2Cc0GwFTO7dTsBbZSF76hA=
Subject key identifier:   C2:CA:BD:16:45:42:F7:BD:ED:7B:92:B6:FE:E8:76:D2:F7:49:E8:27
Authority key identifier: 46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8
Certificate issuer:       /CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8
Certificate serial:       64595CC606AFFA91DCBF81455A56BFF806CFA976
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
Manifest number:          66
Signing time:             Fri 24 Jul 2026 03:47:26 +0000
Manifest this update:     Fri 24 Jul 2026 03:42:26 +0000
Manifest next update:     Sat 25 Jul 2026 07:02:26 +0000
Files and hashes:         1: 4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl (hash: I+mMu65u8jy42HhMur0XaXGGoLsco2vbB7+8diH06nA=)
                          2: 323430313a393765303a3a2f34382d3438203d3e20313331313437.roa (hash: p8UsvXIz5WgkEXh1nf22VVGfO3Td54MJiWuDiLo2EHQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl
                          rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:59:5c:c6:06:af:fa:91:dc:bf:81:45:5a:56:bf:f8:06:cf:a9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4672CC1FE2708E882C7C7AC9F016C9C5350301B8
        Validity
            Not Before: Jul 24 03:42:26 2026 GMT
            Not After : Jul 25 07:02:26 2026 GMT
        Subject: CN=C2CABD164542F7BDED7B92B6FEE876D2F749E827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:f2:ab:9c:9f:80:12:5b:36:bb:92:84:f7:
                    27:e4:e7:36:94:93:9c:cc:f4:35:fc:00:6a:96:40:
                    c7:4d:f5:0b:69:e2:23:0d:14:f6:a5:ea:eb:6f:64:
                    08:ac:90:f1:0d:ed:ab:43:d9:81:06:73:1f:ee:de:
                    88:f3:2c:74:94:d3:8a:f4:84:ba:b8:35:c0:11:cf:
                    5e:1b:b4:c2:b4:a7:9d:d4:02:cf:6c:f3:a3:c3:3d:
                    69:54:68:de:3d:78:9c:46:05:7c:d1:4f:d5:07:e6:
                    aa:ea:5f:58:01:72:d9:6d:c4:0c:ee:40:94:1d:d5:
                    52:e2:d7:7d:6d:0f:85:e8:da:46:dc:60:bf:bb:27:
                    bf:99:06:2f:c7:5d:77:0b:63:70:7b:3c:8f:a2:82:
                    a2:93:5b:42:1e:cf:e2:e0:9c:46:b6:52:44:70:4f:
                    6d:62:94:f7:ac:7f:a3:03:36:da:e2:0b:6e:33:46:
                    4d:08:ec:3b:55:6f:06:58:53:fb:be:40:16:79:aa:
                    31:d2:23:d0:07:e3:18:3a:b6:84:f3:8e:39:f0:99:
                    f1:d8:70:04:72:35:a5:b7:d3:41:47:d4:b1:5e:c5:
                    3f:53:ea:76:2d:d8:7b:70:4b:d8:29:00:35:19:90:
                    fe:f2:4a:07:08:c0:0e:f6:85:00:22:df:ad:3d:cf:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CA:BD:16:45:42:F7:BD:ED:7B:92:B6:FE:E8:76:D2:F7:49:E8:27
            X509v3 Authority Key Identifier:
                keyid:46:72:CC:1F:E2:70:8E:88:2C:7C:7A:C9:F0:16:C9:C5:35:03:01:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIRUN/0/4672CC1FE2708E882C7C7AC9F016C9C5350301B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:da:2a:0d:63:35:16:be:e7:fc:bf:cc:c8:f0:7e:a3:b5:d9:
         22:02:05:19:2c:35:81:4c:00:1d:d5:3b:c1:ce:33:f4:bc:79:
         d3:46:d4:09:b4:e8:9d:8c:4d:fd:a6:3c:57:2d:bd:be:58:9f:
         0d:72:6e:6e:95:a4:85:df:d5:93:42:56:3c:57:97:58:81:d1:
         28:17:8a:82:8e:dd:db:9e:fc:95:35:44:2f:b1:81:81:43:4c:
         7e:a3:33:f3:e1:88:3d:c1:80:4d:86:7b:a6:a5:d3:70:56:56:
         b7:cc:cd:6f:86:48:cb:40:dd:69:80:23:af:d4:12:55:bc:86:
         72:6a:59:ac:30:6c:f0:4d:21:4d:15:8c:4a:12:b6:6b:9b:3f:
         8e:f7:b7:9a:b8:ce:a5:81:5b:21:ba:72:9d:ad:36:52:5b:1d:
         d7:ca:5c:31:4c:98:9a:44:bb:9f:96:f7:28:38:e5:2f:15:94:
         55:64:11:88:d1:4f:e0:67:48:bf:2b:1c:82:f9:f5:2d:00:b9:
         4b:04:24:f0:8c:0a:4f:29:31:62:3d:74:f8:68:76:b4:e6:23:
         37:e9:cd:b2:60:fe:46:61:2b:da:f7:d3:85:53:79:ce:ef:28:
         57:a5:cd:12:4d:a7:47:68:8f:56:98:0c:30:6e:2e:b2:63:e1:
         12:46:c5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:28 2026 by rpki-client