Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft
File:                     28110DE86B5C0A286A9B3545A4369B11A7480010.mft (raw, json)
Hash identifier:          Npw0AfccIU7xWdM7Thy8bjdV3i8g9TWOqgHyXeaRNes=
Subject key identifier:   52:8F:21:F5:59:A5:46:22:86:57:2C:45:0E:8E:EF:63:5C:3B:D6:CB
Authority key identifier: 28:11:0D:E8:6B:5C:0A:28:6A:9B:35:45:A4:36:9B:11:A7:48:00:10
Certificate issuer:       /CN=28110DE86B5C0A286A9B3545A4369B11A7480010
Certificate serial:       04B74BFC3804F925969EF976FA6D452129FDB7A4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft
Manifest number:          63
Signing time:             Fri 24 Jul 2026 00:57:10 +0000
Manifest this update:     Fri 24 Jul 2026 00:52:10 +0000
Manifest next update:     Sat 25 Jul 2026 03:19:10 +0000
Files and hashes:         1: 28110DE86B5C0A286A9B3545A4369B11A7480010.crl (hash: g9Elscc7hCObQQsxNW3mktrQ33ByN4sl4hSaQeURN8M=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.crl
                          rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b7:4b:fc:38:04:f9:25:96:9e:f9:76:fa:6d:45:21:29:fd:b7:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28110DE86B5C0A286A9B3545A4369B11A7480010
        Validity
            Not Before: Jul 24 00:52:10 2026 GMT
            Not After : Jul 25 03:19:10 2026 GMT
        Subject: CN=528F21F559A5462286572C450E8EEF635C3BD6CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:0e:3a:fa:8b:fd:0c:94:30:6e:96:64:a2:
                    39:28:44:66:14:2f:d0:99:22:ba:f1:10:5d:70:d5:
                    23:7c:1d:98:3e:50:02:32:cf:33:1d:ea:86:23:32:
                    8a:a9:6c:18:2f:f4:aa:63:35:3f:41:45:3f:ca:c1:
                    ab:c9:13:44:17:dd:41:fe:89:8d:3a:d1:b5:7d:b8:
                    ac:ba:c5:b0:97:37:1c:82:16:d8:2c:8b:05:c6:69:
                    f8:90:8c:32:cb:b9:ee:ac:9d:fb:e6:64:86:b1:51:
                    e6:30:34:03:16:08:2c:5a:92:ec:3b:9f:f1:4e:e5:
                    14:ec:01:7d:c3:f2:6d:c0:0b:22:9e:b0:cb:a2:eb:
                    6e:8d:89:fd:d6:d8:ef:36:30:a3:00:ba:a2:2f:0e:
                    44:c6:98:2f:0f:a9:52:b0:9d:1b:8c:73:b7:5b:b9:
                    07:1a:5a:05:0a:21:44:87:af:23:27:0d:7c:a2:9c:
                    22:07:27:67:bb:f9:aa:e2:64:b1:9d:98:24:61:5c:
                    33:8f:3e:23:40:a6:96:d9:4a:40:fa:99:e2:da:3c:
                    01:d9:4a:be:09:17:c8:a2:bf:1d:a8:1d:29:cf:c7:
                    e9:3b:58:d3:f2:82:cf:08:4f:3e:26:d6:cd:2b:66:
                    38:d0:16:46:03:49:7f:13:e7:ee:1d:08:81:32:6c:
                    94:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8F:21:F5:59:A5:46:22:86:57:2C:45:0E:8E:EF:63:5C:3B:D6:CB
            X509v3 Authority Key Identifier:
                keyid:28:11:0D:E8:6B:5C:0A:28:6A:9B:35:45:A4:36:9B:11:A7:48:00:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28110DE86B5C0A286A9B3545A4369B11A7480010.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STWN/0/28110DE86B5C0A286A9B3545A4369B11A7480010.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:af:60:78:36:1a:ae:80:25:93:76:5f:76:56:f0:9e:45:2e:
         54:93:62:dd:b4:d7:6a:c9:e9:31:d1:93:4d:9c:ae:e2:9f:e2:
         d7:47:05:5a:20:16:3f:82:e9:df:0e:c1:cd:6f:ea:79:5d:00:
         c2:8b:bf:08:e6:1a:71:97:7e:86:03:c8:3d:91:c1:0d:a8:5e:
         46:75:2d:1a:ae:7f:5e:49:3a:da:66:4e:34:d4:30:da:1d:d6:
         1d:e7:96:71:75:65:0e:33:5d:1a:bc:1d:83:33:98:7b:fc:6f:
         bb:6c:0b:7e:fe:73:f6:4b:4d:ce:d0:c9:14:dc:76:ef:41:ca:
         70:2f:33:8a:75:e1:eb:66:9d:2f:46:e2:3d:93:af:f3:2c:51:
         a1:20:8e:50:f1:35:73:90:fd:77:3b:26:cb:aa:2c:2f:07:e3:
         ea:a9:f9:cc:a6:5e:12:fb:f4:17:a6:50:3c:50:76:69:65:d4:
         e7:46:1d:76:4c:0d:71:91:e3:c5:96:82:c0:3e:5d:d2:43:7e:
         16:d1:f4:90:63:67:cc:27:bc:52:44:31:bb:84:9d:24:a2:a3:
         0c:07:84:9b:b9:fa:6e:a1:ca:52:82:60:25:74:0a:f7:02:4f:
         70:f2:01:7f:b1:e3:46:93:31:ab:29:ae:ed:0a:13:06:84:c2:
         ce:c8:d6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:36 2026 by rpki-client