Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
File:                     39FBFF134ABD193CAEA4AAB003503031F998187D.mft (raw, json)
Hash identifier:          BWwfjOqbCM4T1n2ICruVnwBE5sD2mO7YJFPocT5S1aQ=
Subject key identifier:   9F:86:DF:A5:C3:DE:63:88:61:22:61:F3:27:04:2F:80:99:99:6F:E6
Authority key identifier: 39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D
Certificate issuer:       /CN=39FBFF134ABD193CAEA4AAB003503031F998187D
Certificate serial:       0F154F73DFAED746273457F3B75B72C342C18D79
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
Manifest number:          46
Signing time:             Tue 30 Jun 2026 07:13:17 +0000
Manifest this update:     Tue 30 Jun 2026 07:08:17 +0000
Manifest next update:     Wed 01 Jul 2026 09:28:17 +0000
Files and hashes:         1: 39FBFF134ABD193CAEA4AAB003503031F998187D.crl (hash: VgFIaz+J0ydx+ixo9QnYG3xXS4K5yK11Tetk4OSjdiE=)
                          2: 3130332e3235322e3139362e302f32322d3234203d3e20313331363031.roa (hash: H53goHHbIQsVYLSl4R7a2BLrNh+WubAvsiCMNEEPsmk=)
                          3: 3131342e32392e3234342e302f32322d3234203d3e20313331363031.roa (hash: UEZLGnP+f6dvuTFKx5co3CN+bp25mFinjEy0MFxQtNo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl
                          rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 09:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:15:4f:73:df:ae:d7:46:27:34:57:f3:b7:5b:72:c3:42:c1:8d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39FBFF134ABD193CAEA4AAB003503031F998187D
        Validity
            Not Before: Jun 30 07:08:17 2026 GMT
            Not After : Jul  1 09:28:17 2026 GMT
        Subject: CN=9F86DFA5C3DE6388612261F327042F8099996FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:01:40:09:90:62:c1:ab:a8:31:b6:21:8a:0c:
                    10:46:0d:af:04:39:f8:21:49:80:8a:73:81:c6:4f:
                    a9:29:18:27:bf:4e:24:65:78:82:80:74:33:57:4f:
                    97:e6:c6:16:e9:f4:80:b2:57:ae:5f:c8:23:92:04:
                    90:25:0c:06:58:c8:71:63:04:ca:61:e1:22:9d:c0:
                    5f:ab:54:54:2c:7d:20:9e:84:70:51:ea:0c:57:c5:
                    76:90:c7:ba:d6:f3:48:e5:57:c7:f3:6d:1f:f5:82:
                    95:70:1f:ee:a5:b9:3b:84:48:42:77:6f:59:ca:99:
                    6a:9b:89:82:21:96:83:90:b6:82:3d:3e:6e:30:df:
                    81:6a:f9:49:62:db:2a:ab:fe:c7:bf:20:3e:ae:20:
                    cc:3f:1d:e6:89:94:0c:0f:78:2f:87:da:f4:6d:ea:
                    4b:93:11:a8:8e:e2:26:36:a9:a2:b4:14:83:b2:ff:
                    b1:5f:a6:31:1f:31:40:a0:c0:4c:cd:b4:10:fb:ac:
                    40:04:27:80:9f:09:2b:15:d8:e4:ae:70:dd:0d:ac:
                    ab:7f:ed:a1:aa:99:6f:ba:0b:ff:52:8e:24:1d:39:
                    bb:6a:f5:9f:41:a9:13:ac:f3:9c:d6:2f:17:de:c6:
                    f0:31:fa:e1:40:60:c1:0c:7d:4a:03:f5:d6:65:c2:
                    4b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:86:DF:A5:C3:DE:63:88:61:22:61:F3:27:04:2F:80:99:99:6F:E6
            X509v3 Authority Key Identifier:
                keyid:39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:67:4c:a4:fb:48:af:b0:c2:36:ee:a7:bc:2e:e5:0f:8e:a6:
         50:b1:c2:fd:87:18:8b:1e:fd:5d:14:88:cf:a4:51:cd:8a:31:
         1c:66:4b:3a:a8:3d:1f:45:58:50:25:66:61:e8:43:24:b7:f0:
         e3:e3:4f:73:88:09:bf:9a:03:b1:42:10:a4:a4:47:d2:32:23:
         f5:c7:3a:ec:ff:33:58:6e:d6:24:c4:55:71:23:1e:99:2a:17:
         20:3b:1b:d9:b1:8f:e5:33:ab:be:0a:5a:50:08:31:9c:60:fe:
         60:5e:6e:6a:8a:f5:e9:bf:10:b3:40:8c:ed:b8:f6:c9:c1:9b:
         e3:c9:c8:57:06:6e:a4:56:d9:85:b2:06:cb:d3:b1:c0:cc:bd:
         fd:d9:97:9a:ec:10:75:07:ca:82:ff:ea:f1:52:db:98:77:d1:
         cb:6e:de:19:3f:01:0b:3d:e5:04:71:d7:7f:58:85:77:42:47:
         9d:a2:a8:45:c8:12:aa:fe:fb:9a:bb:25:73:cd:5d:82:df:47:
         c7:0c:62:92:ed:1e:7b:bd:de:93:31:28:9f:4f:d3:0d:89:85:
         ec:22:52:a8:d6:04:9c:cc:6d:4c:a6:de:9c:dc:13:df:c8:d8:
         b5:ae:27:a3:37:c1:d2:71:b4:d6:10:13:2b:0b:88:9a:79:b5:
         5c:43:ba:b7
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUDxVPc9+u10YnNFfzt1tyw0LBjXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlGQkZGMTM0QUJEMTkzQ0FFQTRBQUIwMDM1MDMwMzFG
OTk4MTg3RDAeFw0yNjA2MzAwNzA4MTdaFw0yNjA3MDEwOTI4MTdaMDMxMTAvBgNV
BAMTKDlGODZERkE1QzNERTYzODg2MTIyNjFGMzI3MDQyRjgwOTk5OTZGRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAUAJkGLBq6gxtiGKDBBGDa8E
OfghSYCKc4HGT6kpGCe/TiRleIKAdDNXT5fmxhbp9ICyV65fyCOSBJAlDAZYyHFj
BMph4SKdwF+rVFQsfSCehHBR6gxXxXaQx7rW80jlV8fzbR/1gpVwH+6luTuESEJ3
b1nKmWqbiYIhloOQtoI9Pm4w34Fq+Uli2yqr/se/ID6uIMw/HeaJlAwPeC+H2vRt
6kuTEaiO4iY2qaK0FIOy/7FfpjEfMUCgwEzNtBD7rEAEJ4CfCSsV2OSucN0NrKt/
7aGqmW+6C/9SjiQdObtq9Z9BqROs85zWLxfexvAx+uFAYMEMfUoD9dZlwkuvAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUn4bfpcPeY4hhImHzJwQvgJmZb+YwHwYDVR0j
BBgwFoAUOfv/E0q9GTyupKqwA1AwMfmYGH0wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENULzAv
MzlGQkZGMTM0QUJEMTkzQ0FFQTRBQUIwMDM1MDMwMzFGOTk4MTg3RC5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS8zOUZCRkYxMzRBQkQxOTNDQUVBNEFBQjAwMzUwMzAz
MUY5OTgxODdELmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENULzAvMzlGQkZGMTM0QUJEMTkzQ0FF
QTRBQUIwMDM1MDMwMzFGOTk4MTg3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJhnTKT7SK+wwjbup7wu
5Q+OplCxwv2HGIse/V0UiM+kUc2KMRxmSzqoPR9FWFAlZmHoQyS38OPjT3OICb+a
A7FCEKSkR9IyI/XHOuz/M1hu1iTEVXEjHpkqFyA7G9mxj+Uzq74KWlAIMZxg/mBe
bmqK9em/ELNAjO249snBm+PJyFcGbqRW2YWyBsvTscDMvf3Zl5rsEHUHyoL/6vFS
25h30ctu3hk/AQs95QRx139YhXdCR52iqEXIEqr++5q7JXPNXYLfR8cMYpLtHnu9
3pMxKJ9P0w2JhewiUqjWBJzMbUym3pzcE9/I2LWuJ6M3wdJxtNYQEysLiJp5tVxD
urc=
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:57 2026 by rpki-client