Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
File:                     453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft (raw, json)
Hash identifier:          wECeGL++kQS6s6J8mxaRbC8jDFIoQIDOPmi/n2GZ2RA=
Subject key identifier:   C8:D4:87:B9:04:FB:44:DF:73:DE:14:9B:EE:68:2F:DF:93:E8:00:3D
Authority key identifier: 45:38:85:A7:EE:A9:58:3A:51:24:AC:D3:2D:CB:0B:F2:FE:82:71:48
Certificate issuer:       /CN=453885A7EEA9583A5124ACD32DCB0BF2FE827148
Certificate serial:       4D71E7045CDBE7935FB9678334FB00E902C715C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 19:56:38 +0000
Manifest this update:     Thu 23 Jul 2026 19:51:38 +0000
Manifest next update:     Fri 24 Jul 2026 22:15:38 +0000
Files and hashes:         1: 453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl (hash: gCxUGSrC8Ji4rtGA8bcMjlaJ4GCpg8Ne5y7Rqjqk7Fs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl
                          rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 22:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:71:e7:04:5c:db:e7:93:5f:b9:67:83:34:fb:00:e9:02:c7:15:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453885A7EEA9583A5124ACD32DCB0BF2FE827148
        Validity
            Not Before: Jul 23 19:51:38 2026 GMT
            Not After : Jul 24 22:15:38 2026 GMT
        Subject: CN=C8D487B904FB44DF73DE149BEE682FDF93E8003D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:1c:ac:e7:99:32:0d:97:64:75:f7:8b:d6:
                    1c:af:a6:b3:11:e0:36:5c:62:90:6f:be:e0:ad:ca:
                    c9:17:21:42:7d:9a:c8:9d:79:51:fd:65:b7:00:67:
                    e3:98:7d:44:06:71:cd:87:f3:16:ed:ea:8b:19:ec:
                    5a:00:eb:d7:d3:bd:a9:7d:68:14:b6:77:f2:bb:21:
                    53:88:ba:e2:c3:24:be:29:f9:70:39:49:90:d5:35:
                    62:a9:1a:7b:44:e2:25:9c:8f:37:0c:ee:1a:f9:ae:
                    23:39:ee:e7:5c:1e:9b:81:7d:8e:95:68:29:1e:c1:
                    3e:26:46:25:6e:79:2a:fe:aa:84:15:d1:cf:21:c7:
                    9c:f4:2e:8b:e1:1f:b2:73:d0:4a:87:2c:63:09:ce:
                    41:bb:06:b3:f0:ac:d9:15:65:97:42:70:a2:96:f8:
                    ea:d6:7b:c5:8b:74:f4:91:2e:71:ab:0d:22:43:d8:
                    de:96:6e:2f:04:63:b1:37:e8:15:4b:68:71:ee:85:
                    9a:1e:8a:d2:a8:57:82:99:9c:32:55:e1:48:c7:e8:
                    69:66:db:cd:5b:e1:1b:7a:01:56:20:f9:ae:1d:24:
                    61:90:d7:ec:ae:08:c8:62:18:af:c0:e2:d0:56:ed:
                    3c:3a:1f:04:92:ff:f5:d2:6d:20:ec:d1:34:11:85:
                    b8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D4:87:B9:04:FB:44:DF:73:DE:14:9B:EE:68:2F:DF:93:E8:00:3D
            X509v3 Authority Key Identifier:
                keyid:45:38:85:A7:EE:A9:58:3A:51:24:AC:D3:2D:CB:0B:F2:FE:82:71:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/453885A7EEA9583A5124ACD32DCB0BF2FE827148.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCDR/0/453885A7EEA9583A5124ACD32DCB0BF2FE827148.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:21:27:23:72:f3:db:45:9b:f5:b6:16:ed:5e:63:20:f7:e3:
         e7:48:cc:ec:63:03:7b:69:01:48:c7:e8:74:f0:6c:8e:e1:91:
         a1:af:ca:15:58:8d:33:00:03:50:8d:b1:ea:fb:c5:c7:3e:d1:
         e6:58:c5:11:ce:27:19:e1:bb:87:c0:3a:29:22:c4:b5:ea:61:
         39:b8:bd:9f:16:de:95:21:a4:c5:93:fc:28:d4:ae:7b:f9:35:
         89:6c:6d:db:e8:78:62:2f:f7:3b:ff:64:81:c8:52:25:39:81:
         68:ac:f8:d3:1a:79:09:27:19:02:10:c3:23:6d:ce:26:c5:03:
         51:9a:21:5f:54:34:12:78:e3:0f:9a:f6:c6:d8:19:d3:b1:46:
         b8:ef:39:3c:df:80:29:aa:2b:bd:e2:48:ba:2a:3f:56:25:9a:
         5e:27:aa:e5:a2:f3:cc:c1:ba:da:23:a3:2c:d8:ec:21:5f:25:
         44:e7:49:20:64:62:4c:0b:d8:0e:82:8f:a3:9e:c1:7a:0d:de:
         55:23:7d:c0:23:35:ef:58:03:3a:b7:b7:11:80:57:09:92:82:
         be:51:6f:ce:fb:1c:19:f6:5d:6b:39:79:68:0a:19:1d:49:d1:
         a4:f3:a4:7e:64:df:42:2a:7b:36:63:81:df:3f:d5:22:87:5a:
         b3:5b:25:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:37:53 2026 by rpki-client