Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
File:                     39FBFF134ABD193CAEA4AAB003503031F998187D.mft (raw, json)
Hash identifier:          0KGgNlG1q4Xgj/fq5mNc0h302AzF2WLbe5DdNXGgcXo=
Subject key identifier:   26:C3:72:A9:BF:28:0A:3A:3F:44:A5:C2:FF:FD:AE:4C:EB:B4:7F:B2
Authority key identifier: 39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D
Certificate issuer:       /CN=39FBFF134ABD193CAEA4AAB003503031F998187D
Certificate serial:       0CB26856DE4196D97012A2DACAD1BD6F59EF2390
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
Manifest number:          C6
Signing time:             Sat 03 Oct 2026 21:17:14 +0000
Manifest this update:     Sat 03 Oct 2026 21:12:14 +0000
Manifest next update:     Sun 04 Oct 2026 23:03:14 +0000
Files and hashes:         1: 3130332e3235322e3139362e302f32322d3234203d3e20313331363031.roa (hash: H53goHHbIQsVYLSl4R7a2BLrNh+WubAvsiCMNEEPsmk=)
                          2: 3131342e32392e3234342e302f32322d3234203d3e20313331363031.roa (hash: UEZLGnP+f6dvuTFKx5co3CN+bp25mFinjEy0MFxQtNo=)
                          3: 39FBFF134ABD193CAEA4AAB003503031F998187D.crl (hash: fjs9RkbogYb7VIwpsPYUp3lX+lVFmilb+UEbDHSW0Fk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl
                          rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 22:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b2:68:56:de:41:96:d9:70:12:a2:da:ca:d1:bd:6f:59:ef:23:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39FBFF134ABD193CAEA4AAB003503031F998187D
        Validity
            Not Before: Oct  3 21:12:14 2026 GMT
            Not After : Oct  4 23:03:14 2026 GMT
        Subject: CN=26C372A9BF280A3A3F44A5C2FFFDAE4CEBB47FB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:d0:09:8e:9a:4c:d8:9c:cd:43:13:a4:10:
                    ae:ee:0e:8a:03:ac:84:10:9c:72:eb:c3:02:77:76:
                    27:81:80:45:73:e1:14:80:75:48:e7:73:ae:f1:86:
                    51:32:b8:bb:92:0b:b3:ea:17:c1:be:8b:23:b2:49:
                    fd:b2:ba:95:7d:be:87:b8:65:c5:ea:1b:24:95:36:
                    56:c4:48:9f:ca:ae:b8:f9:b7:15:08:8b:a2:24:45:
                    b3:35:07:2c:ff:e7:3d:66:9b:24:3a:b9:3a:d6:72:
                    1a:1a:29:c0:2c:42:f3:77:52:f6:e3:7e:61:b3:89:
                    e6:84:97:45:7d:fd:6f:01:91:81:d4:45:a9:2a:48:
                    8c:70:70:52:82:ea:2c:db:a3:9c:dd:c9:8b:dd:7f:
                    98:97:16:9b:ad:1f:29:48:96:6c:68:c1:9a:1d:d6:
                    b6:07:48:cd:90:da:c2:24:fd:71:38:c1:aa:15:ed:
                    31:18:b0:c2:8c:ec:12:da:b0:d2:a7:cb:b2:51:d6:
                    42:a5:12:67:d9:88:16:22:c6:19:19:8c:ca:83:67:
                    37:fd:f4:03:a2:e0:2b:b1:9a:32:3d:d2:55:45:e7:
                    c6:66:65:5e:18:e9:e6:b8:48:9b:01:d9:f2:4b:95:
                    48:49:b2:60:c7:42:1d:24:be:3b:27:ab:9b:64:c7:
                    a1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C3:72:A9:BF:28:0A:3A:3F:44:A5:C2:FF:FD:AE:4C:EB:B4:7F:B2
            X509v3 Authority Key Identifier:
                keyid:39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:44:23:ef:0b:9e:1b:a2:51:92:c7:15:d1:e5:8e:60:b0:d0:
         f9:b2:46:c6:c5:2b:23:02:23:ef:4e:17:39:4c:76:05:13:67:
         db:c8:4f:6f:9d:55:35:66:30:50:8f:fc:b8:34:a2:51:91:69:
         41:d5:5d:1b:42:19:0d:98:bc:50:9e:4a:b3:81:33:7c:86:0b:
         8f:08:84:2d:36:21:d9:8f:77:4c:bf:0f:b7:17:a7:9f:cb:c9:
         5b:d0:92:35:23:03:d1:4c:31:9b:31:be:27:ca:53:b0:b4:77:
         b6:14:54:fa:47:0f:51:33:b0:11:60:75:c7:f4:28:b5:ba:70:
         a7:2c:ca:82:40:45:b2:c5:ad:e8:6c:55:4c:b5:58:65:c5:12:
         fb:75:ab:a2:4b:c2:5f:7d:64:f9:2b:fc:e9:36:88:d0:9f:55:
         e3:23:e4:11:9a:88:3f:93:70:7a:4a:5c:f1:c3:db:4e:b2:0c:
         4f:97:22:bb:93:6f:8a:f8:68:b7:aa:d6:33:8e:43:d1:ab:a5:
         d9:b5:4c:7f:a2:23:ce:d9:6e:da:6b:3b:e3:3e:75:4a:47:d5:
         99:1a:dc:f0:22:ed:d9:45:e3:6b:d0:80:81:72:9f:1f:15:74:
         9a:71:c7:da:ee:3e:fc:5c:13:a8:00:0a:42:a5:f8:5e:3f:fd:
         77:c7:f8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:02:34 2026 by rpki-client