Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
File:                     034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft (raw, json)
Hash identifier:          AX05LiLMhBbImayBU3dnoUREzCKO29AeJU+P0/2JUpA=
Subject key identifier:   F9:C5:E1:6A:4B:20:44:C8:92:DD:FC:11:26:C7:56:81:43:89:ED:B4
Authority key identifier: 03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
Certificate issuer:       /CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Certificate serial:       5C76F22A15399ED4DD57708F54C70CFD071FC5E5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
Manifest number:          62
Signing time:             Thu 23 Jul 2026 09:37:07 +0000
Manifest this update:     Thu 23 Jul 2026 09:32:07 +0000
Manifest next update:     Fri 24 Jul 2026 11:34:07 +0000
Files and hashes:         1: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl (hash: YcBMn+lOpqqwUhIJDfzkOSyyql53nuTuE8cz5XRGmRA=)
                          2: 3130332e3137362e35302e302f32332d3234203d3e203138303436.roa (hash: nI0+2spKrN4Xv9D36qIey0CsWmeOODfk2dYZVrt7wH8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
                          rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 11:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:76:f2:2a:15:39:9e:d4:dd:57:70:8f:54:c7:0c:fd:07:1f:c5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
        Validity
            Not Before: Jul 23 09:32:07 2026 GMT
            Not After : Jul 24 11:34:07 2026 GMT
        Subject: CN=F9C5E16A4B2044C892DDFC1126C756814389EDB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:99:0f:8e:f1:ac:c6:d1:e6:0f:a5:ea:9e:6c:
                    66:d0:30:82:7d:2e:9f:68:d4:9c:5c:90:73:11:f9:
                    f1:48:b9:a0:51:bc:4c:a1:77:27:03:9d:8a:8e:46:
                    15:ba:b9:50:8e:10:03:6c:56:3d:91:6d:77:02:f7:
                    13:3f:bb:01:8f:cc:44:3e:83:40:a0:67:6c:ce:97:
                    75:2d:63:77:02:63:95:14:e7:dd:72:6c:d1:da:60:
                    ac:d7:6c:04:5f:d4:d0:bd:bb:d0:a8:f4:a5:b5:85:
                    a5:b1:f2:fd:80:95:f9:24:61:d9:78:d1:2f:2f:56:
                    e5:fe:87:b1:87:f3:a6:e8:c6:0f:5a:1c:76:55:8e:
                    f0:ca:b2:0d:d3:57:e4:0b:ee:1d:c1:b8:e2:3b:12:
                    67:05:69:14:3a:14:a0:46:e7:9d:df:db:de:60:0d:
                    80:26:8a:42:92:37:98:8d:4f:b3:fc:03:0a:b9:8d:
                    14:25:9b:5e:b7:01:c1:33:16:53:76:66:f3:c2:01:
                    d3:32:31:fe:9c:f1:93:86:cf:6b:91:55:a1:0c:05:
                    67:e8:91:83:fc:bb:b5:42:a6:71:eb:f9:42:b8:a1:
                    e2:a8:90:07:11:e6:2c:04:74:87:22:da:9b:d4:36:
                    3a:5c:c3:7a:d9:b0:f6:58:19:ac:ff:c7:84:1d:22:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C5:E1:6A:4B:20:44:C8:92:DD:FC:11:26:C7:56:81:43:89:ED:B4
            X509v3 Authority Key Identifier:
                keyid:03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:08:bf:bc:f3:67:de:46:72:cc:84:1a:cb:2a:19:a2:f8:9d:
         af:7f:bf:03:bc:cc:e8:f4:a7:a8:ed:92:5c:f3:f0:84:a3:d7:
         e9:f9:7b:06:b6:69:4b:2c:4e:ea:7f:d8:35:fb:32:5e:a7:fd:
         d4:88:2b:25:69:5e:d6:ce:30:83:f3:c9:51:e7:51:51:4d:41:
         02:13:42:82:24:99:9e:8f:c8:84:e1:bf:e3:a5:bd:9c:14:df:
         eb:0b:53:55:98:e8:80:1b:84:6b:f2:b3:c7:68:53:6f:7d:ba:
         8a:2f:d1:83:93:07:ea:ca:da:3e:cc:94:e2:b6:a8:03:3c:4c:
         10:06:35:28:5a:37:39:82:c7:5d:63:62:f2:e4:db:f7:4a:b1:
         ee:bb:33:85:fc:0c:50:3c:31:e5:35:8f:26:9e:01:ae:cd:7f:
         0a:fb:e7:2c:1a:11:42:94:0f:a6:7b:ac:1c:a6:00:62:e2:dc:
         3b:a9:da:0b:cc:04:6d:ba:11:37:81:cc:88:23:a7:c2:44:5b:
         dd:07:e0:bc:00:29:25:13:f3:1e:71:00:01:45:93:64:e7:3c:
         e9:c8:21:10:e8:b7:98:b0:58:20:d7:04:fa:e7:9e:b9:4e:17:
         94:9e:97:27:98:51:42:36:40:d9:13:6c:a4:b2:38:cc:cf:e4:
         9f:0f:a2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:12:41 2026 by rpki-client