Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.mft
File:                     93A2D191271D101C8105C5AE462CDE7AD3DAC755.mft (raw, json)
Hash identifier:          SzVb1a0kMDx/0O6UMnrMisMNNtdHoSCqgEwneHC1ZnQ=
Subject key identifier:   48:5D:8D:83:F2:53:DD:29:AB:73:64:FD:1A:0A:7D:1D:65:6D:19:9F
Authority key identifier: 93:A2:D1:91:27:1D:10:1C:81:05:C5:AE:46:2C:DE:7A:D3:DA:C7:55
Certificate issuer:       /CN=93A2D191271D101C8105C5AE462CDE7AD3DAC755
Certificate serial:       1DED5D1D8B8BA1F4D3589EF5861A07DBB4187678
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/93A2D191271D101C8105C5AE462CDE7AD3DAC755.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.mft
Manifest number:          64
Signing time:             Fri 24 Jul 2026 02:07:18 +0000
Manifest this update:     Fri 24 Jul 2026 02:02:18 +0000
Manifest next update:     Sat 25 Jul 2026 02:09:18 +0000
Files and hashes:         1: 93A2D191271D101C8105C5AE462CDE7AD3DAC755.crl (hash: PhKYr1PJZEnCkWMd6+I7T//4j+L+rFbRpeEywNTVby8=)
                          2: 3130332e3131372e3232342e302f32322d3234203d3e20313331363237.roa (hash: 0KbglY0GHr9S6rCumvfC0BaXiJdDx41/gDWuUxEFBJs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.crl
                          rsync://rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/93A2D191271D101C8105C5AE462CDE7AD3DAC755.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 02:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ed:5d:1d:8b:8b:a1:f4:d3:58:9e:f5:86:1a:07:db:b4:18:76:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93A2D191271D101C8105C5AE462CDE7AD3DAC755
        Validity
            Not Before: Jul 24 02:02:18 2026 GMT
            Not After : Jul 25 02:09:18 2026 GMT
        Subject: CN=485D8D83F253DD29AB7364FD1A0A7D1D656D199F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:d5:ae:a0:1b:a1:21:88:d5:63:d1:55:24:
                    c0:6b:de:fe:13:ff:0d:e6:37:a3:e6:1e:78:0b:f9:
                    f2:0b:31:74:0d:54:45:6b:30:4f:c6:17:12:f3:ab:
                    ab:8f:30:bc:8a:bf:2e:11:b1:7b:cf:fd:89:5c:27:
                    68:a0:02:c1:51:be:92:b7:4c:8c:d8:20:6e:f6:ca:
                    e9:9d:d6:e5:46:22:de:91:32:44:0a:bd:62:c5:d1:
                    08:45:6c:88:b1:9d:74:ed:36:18:f6:81:3d:bf:72:
                    e4:3f:d7:ef:96:5d:e7:29:bc:20:87:71:0c:95:1f:
                    e7:a5:02:33:bc:ff:28:14:86:50:fd:a7:42:b3:36:
                    3f:a7:b5:d0:58:1a:ff:4a:95:e8:77:fb:9f:08:5b:
                    e4:8d:b1:68:4a:56:58:67:ba:85:8d:5e:59:0a:9a:
                    16:7d:d4:8e:d8:5e:f2:69:b9:14:3d:a7:a8:4e:1a:
                    62:94:ed:20:7b:38:17:95:30:1b:da:aa:71:72:94:
                    9e:f5:db:62:bf:2f:80:c4:5e:7d:d3:90:df:fb:25:
                    02:68:23:f1:de:c0:2f:a2:d3:e1:03:e0:bd:dd:b4:
                    6e:0c:86:67:ae:75:93:d8:a7:b1:c4:64:c2:33:1d:
                    64:47:eb:4b:b6:9e:78:80:06:ab:e1:bf:80:63:91:
                    67:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5D:8D:83:F2:53:DD:29:AB:73:64:FD:1A:0A:7D:1D:65:6D:19:9F
            X509v3 Authority Key Identifier:
                keyid:93:A2:D1:91:27:1D:10:1C:81:05:C5:AE:46:2C:DE:7A:D3:DA:C7:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/93A2D191271D101C8105C5AE462CDE7AD3DAC755.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PEICITY260/0/93A2D191271D101C8105C5AE462CDE7AD3DAC755.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:c9:1c:ed:f8:a0:a5:b0:29:b6:c8:45:63:68:49:ab:7c:c0:
         37:80:05:e1:17:b9:13:d1:c0:e0:73:3c:16:41:91:59:b5:38:
         94:fe:4a:f8:32:81:8d:11:0b:c7:30:99:30:9f:da:98:6c:6b:
         24:be:d0:56:13:4a:1e:64:17:d3:49:6b:97:58:2f:ae:2b:d3:
         3b:a3:cc:5d:3d:36:6c:67:bf:12:e4:a5:9d:af:54:5f:75:34:
         56:b5:c5:0f:3c:3f:f6:00:44:6b:ff:3a:6f:74:8f:84:87:86:
         f3:ce:bb:f9:a5:de:4f:bb:d5:9e:6e:73:8d:ee:f7:34:1a:89:
         37:79:d6:23:46:d7:94:26:18:de:dd:85:15:24:d0:ae:3f:3c:
         6f:7e:01:6d:22:a2:1b:57:3c:6c:36:9c:39:16:47:b6:67:b2:
         f9:8e:bd:e8:f8:54:2d:29:e7:45:77:a6:fa:ac:6c:49:e0:a4:
         61:5e:37:74:87:55:a9:78:37:ef:18:53:e5:27:3c:7b:31:7f:
         15:33:74:7a:35:6e:78:22:80:e3:78:a5:74:f2:3f:4f:21:a1:
         d2:7e:bf:98:ea:85:b4:de:8a:8c:32:9b:58:46:d3:0a:0d:10:
         57:57:2a:c0:1b:c9:76:82:f7:9f:3d:4b:b7:f1:0c:88:16:73:
         15:6d:c8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:12 2026 by rpki-client