Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
File:                     8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft (raw, json)
Hash identifier:          2QGp5OI2w67p5ustftTEMCHCpJzpX2mM7ahNDb2wPXU=
Subject key identifier:   31:46:AE:7C:27:90:30:85:27:0C:3E:1F:B6:51:77:03:78:69:E7:47
Authority key identifier: 8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF
Certificate issuer:       /CN=8E72F95D12197A83EB3E4E8DDB385B148EAA04FF
Certificate serial:       71470D1E86C842AEF162D7ACC1FDF95663FB1BE4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
Manifest number:          63
Signing time:             Thu 23 Jul 2026 15:38:07 +0000
Manifest this update:     Thu 23 Jul 2026 15:33:07 +0000
Manifest next update:     Fri 24 Jul 2026 18:38:07 +0000
Files and hashes:         1: 8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl (hash: lv+ayDDs2AHfkJCuPVEWNe5gKoHjY7lpsMzl7HWd1LA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl
                          rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 18:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:47:0d:1e:86:c8:42:ae:f1:62:d7:ac:c1:fd:f9:56:63:fb:1b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E72F95D12197A83EB3E4E8DDB385B148EAA04FF
        Validity
            Not Before: Jul 23 15:33:07 2026 GMT
            Not After : Jul 24 18:38:07 2026 GMT
        Subject: CN=3146AE7C27903085270C3E1FB65177037869E747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a1:de:b1:3b:c2:93:78:d4:83:a0:f2:ab:7d:
                    1c:29:d7:a6:2f:06:6d:41:71:12:3e:97:8c:0b:31:
                    c0:c1:9e:63:a3:cf:1e:ef:c0:23:1a:6c:37:1b:ec:
                    3a:3f:3b:54:3e:c2:5f:5e:ce:e3:3e:3c:c5:59:d1:
                    22:5f:32:b1:4a:1d:e7:f2:d6:14:ee:62:f0:8a:8f:
                    d3:fd:c3:c0:e1:d9:7c:15:7b:c8:03:51:b4:9e:28:
                    2a:eb:0c:4f:ce:39:c4:d0:b0:f8:69:71:f2:3f:b8:
                    67:b1:a0:9c:a3:c5:81:b5:91:b7:d8:0d:83:5a:9a:
                    71:3b:ac:95:16:0e:34:00:5d:7f:81:38:4a:f3:56:
                    6b:98:a3:00:39:66:1d:29:d2:0b:fc:9f:7d:1a:84:
                    11:e7:26:eb:ca:23:18:8f:93:ba:ff:89:b0:c1:17:
                    e8:9f:92:93:bb:53:97:44:39:c3:7e:fe:09:07:48:
                    17:b0:da:d8:a4:59:2d:2e:52:dc:c5:26:3e:da:b4:
                    69:a0:7f:69:83:9a:14:f5:00:0c:19:1a:0c:f3:71:
                    4c:fa:74:e8:cf:5e:d2:18:96:b4:dd:95:d0:cd:11:
                    e5:28:cf:9d:b6:71:a9:df:82:ca:59:ce:ec:da:38:
                    f3:2b:9d:76:c2:7e:4e:2b:19:25:69:0f:d7:b7:43:
                    a6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:46:AE:7C:27:90:30:85:27:0C:3E:1F:B6:51:77:03:78:69:E7:47
            X509v3 Authority Key Identifier:
                keyid:8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:8a:8b:98:ae:55:bf:b4:40:3f:be:6c:64:0e:92:35:a1:84:
         37:22:37:a8:9e:d0:6d:ae:e7:a8:3f:bc:9b:ef:71:31:c3:49:
         22:1f:e1:ea:1c:ce:03:fc:e9:21:19:eb:a0:b4:c0:f0:2d:52:
         db:76:aa:37:0c:28:32:db:93:ad:c1:cc:bb:da:21:4f:79:cc:
         4b:c3:ef:75:83:35:0f:12:51:9a:7a:28:15:60:f6:59:42:d4:
         0e:c7:a9:06:80:07:70:40:02:dd:af:73:47:25:9f:29:72:35:
         dd:66:6e:db:aa:c8:e1:15:b2:61:8b:21:03:8b:32:50:9c:81:
         f6:f4:c5:ea:13:b4:c9:aa:b9:4d:5b:01:ab:af:2a:a8:f1:a2:
         f6:95:fa:76:7b:1a:4f:97:8e:aa:68:43:0c:44:fe:e5:5e:5b:
         9c:45:24:88:78:59:c6:5e:d9:a8:08:6e:5a:9f:4d:65:1b:7e:
         c1:82:7f:a5:9d:ff:1c:11:b2:d5:6f:33:ac:d2:81:75:e6:9d:
         07:b3:d3:92:90:f4:9e:66:97:c1:8a:21:c7:97:5c:d4:9d:3e:
         35:c3:88:5a:79:f8:9e:0a:37:42:18:2e:4e:f9:8e:4c:5a:78:
         f6:1d:c6:9c:78:ef:e7:e9:19:ac:6e:f6:67:0c:ae:1d:63:12:
         c3:e8:80:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:56:29 2026 by rpki-client