Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
File:                     39FBFF134ABD193CAEA4AAB003503031F998187D.mft (raw, json)
Hash identifier:          JKsa1d35lMA7wVWhqBnRJNBHtNt+edmr6ObB2gy623Y=
Subject key identifier:   63:1D:6E:59:5F:82:3B:73:90:45:F7:54:E3:B3:DF:E7:1D:7E:69:08
Authority key identifier: 39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D
Certificate issuer:       /CN=39FBFF134ABD193CAEA4AAB003503031F998187D
Certificate serial:       6618F325162548C0F20F853080D38035A408210A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
Manifest number:          05
Signing time:             Wed 13 May 2026 04:36:48 +0000
Manifest this update:     Wed 13 May 2026 04:31:48 +0000
Manifest next update:     Thu 14 May 2026 06:06:48 +0000
Files and hashes:         1: 3131342e32392e3234342e302f32322d3234203d3e20313331363031.roa (hash: UEZLGnP+f6dvuTFKx5co3CN+bp25mFinjEy0MFxQtNo=)
                          2: 3130332e3235322e3139362e302f32322d3234203d3e20313331363031.roa (hash: H53goHHbIQsVYLSl4R7a2BLrNh+WubAvsiCMNEEPsmk=)
                          3: 39FBFF134ABD193CAEA4AAB003503031F998187D.crl (hash: VuHHSMbVTrho6cEMk7G7IH2X5To2B9Hh8za3eQdEcMc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl
                          rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:18:f3:25:16:25:48:c0:f2:0f:85:30:80:d3:80:35:a4:08:21:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39FBFF134ABD193CAEA4AAB003503031F998187D
        Validity
            Not Before: May 13 04:31:48 2026 GMT
            Not After : May 14 06:06:48 2026 GMT
        Subject: CN=631D6E595F823B739045F754E3B3DFE71D7E6908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:72:13:7d:4c:39:e3:d0:a9:70:f6:26:f1:
                    3a:e3:c7:08:a8:f5:e6:6d:53:67:f9:83:54:e2:7d:
                    12:c9:07:64:38:71:40:93:b9:99:d0:c8:ac:ee:6d:
                    42:53:7e:bc:f0:07:43:f8:17:6a:94:a0:28:42:8a:
                    b3:08:d6:db:2d:5e:e8:65:37:f8:58:92:7d:1c:cc:
                    b1:1e:8e:3e:f5:82:a5:0b:41:04:1e:a0:6e:5f:3d:
                    33:2d:58:71:4d:12:a5:b1:b5:c6:08:19:3f:d4:d4:
                    c2:d1:8a:7a:5d:f2:4b:27:4d:6d:9d:e3:ba:bf:f6:
                    c6:51:2a:3b:61:a0:25:e4:dd:b5:a5:68:4a:74:39:
                    3b:33:7d:03:49:5c:dd:cb:12:6c:fd:ec:dd:01:dd:
                    41:17:cf:24:e7:8d:c1:a1:dc:a5:1d:4a:14:27:c3:
                    65:6b:30:0a:5c:79:7d:4a:c9:9f:cd:b7:21:8a:12:
                    f8:6c:1f:3b:90:50:76:48:d0:84:56:b7:37:50:0d:
                    f3:31:e1:c4:74:0b:2c:1e:2f:0b:e1:5c:ca:ee:d5:
                    3f:55:87:ba:88:19:31:33:6c:18:a1:c0:d8:47:9f:
                    cc:c9:44:e8:90:c5:a2:be:4e:51:17:b5:a0:1c:f8:
                    7c:50:62:ea:47:b4:33:27:db:f0:44:9e:29:8d:bb:
                    6e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1D:6E:59:5F:82:3B:73:90:45:F7:54:E3:B3:DF:E7:1D:7E:69:08
            X509v3 Authority Key Identifier:
                keyid:39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:66:75:ec:3d:19:db:60:88:d9:43:cf:a3:3b:1c:bf:55:e5:
         57:6b:9f:48:c6:14:78:69:46:86:d1:ab:f4:be:8d:f9:37:a9:
         68:d2:1d:30:b2:93:ea:e7:29:5b:34:8f:67:48:fb:d4:c9:85:
         e2:61:79:c6:8b:8f:43:cf:f7:23:93:99:2a:bd:98:8a:2d:d5:
         c5:5c:18:bf:cb:0a:b6:86:52:42:78:35:1d:50:a5:e9:c0:05:
         fb:9f:63:aa:b2:bf:f6:be:0a:9a:bf:4f:9b:40:00:d7:56:ee:
         9d:9b:75:49:6b:4e:a7:5f:bd:90:56:65:50:39:9c:8e:5f:3e:
         52:9f:29:20:7d:de:83:9c:78:32:81:db:f4:77:86:1d:7c:bd:
         c3:1a:06:4a:0d:55:ec:94:46:4b:e1:5e:34:fd:0f:5b:a9:94:
         3b:d4:f3:62:a3:c5:b2:2b:bc:5b:d7:0d:c8:79:9c:bc:3a:e4:
         fe:34:40:cf:d7:23:e0:16:b1:59:12:e1:67:ee:26:dc:96:d4:
         c9:8d:94:a1:72:f4:28:4c:bf:28:32:75:70:3d:4f:4e:77:73:
         b9:00:23:e5:f3:bc:98:b8:0b:6c:7a:12:b4:25:c6:46:f1:a2:
         1c:8c:46:59:7f:e2:61:62:74:06:95:ea:1b:7d:74:83:ac:be:
         0d:fd:13:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:40 2026 by rpki-client