Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft
File:                     390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft (raw, json)
Hash identifier:          ZroGWghA88hmCZVgWK9rNFVZoGaj0guWuZ4OSTQHzLk=
Subject key identifier:   E7:0A:D6:EB:49:38:C2:D7:B7:E1:04:3D:32:D0:F1:55:A0:A1:8C:8B
Authority key identifier: 39:01:37:F4:F0:6E:5F:34:38:EF:F9:5A:B8:C6:47:F7:D7:D6:D7:05
Certificate issuer:       /CN=390137F4F06E5F3438EFF95AB8C647F7D7D6D705
Certificate serial:       66E70524A143DF7C6F714109D66A7A22BC09BFA9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft
Manifest number:          C3
Signing time:             Sat 03 Oct 2026 03:22:45 +0000
Manifest this update:     Sat 03 Oct 2026 03:17:45 +0000
Manifest next update:     Sun 04 Oct 2026 05:08:45 +0000
Files and hashes:         1: 390137F4F06E5F3438EFF95AB8C647F7D7D6D705.crl (hash: kfh8YLXKyCZqLMfTOSdpmjrs3964pI0f2BOe5sq905E=)
                          2: 3130332e3233372e34382e302f32332d3332203d3e20313331313439.roa (hash: jfPzdhlPSaVWUOyXk1OyVIn8kAk2JIHNsOorXtdv+L0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.crl
                          rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e7:05:24:a1:43:df:7c:6f:71:41:09:d6:6a:7a:22:bc:09:bf:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390137F4F06E5F3438EFF95AB8C647F7D7D6D705
        Validity
            Not Before: Oct  3 03:17:45 2026 GMT
            Not After : Oct  4 05:08:45 2026 GMT
        Subject: CN=E70AD6EB4938C2D7B7E1043D32D0F155A0A18C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cc:e8:9e:8f:30:a9:00:67:b3:b1:df:6e:ca:
                    02:e0:18:e4:2b:3a:a7:e4:cd:3c:f3:cb:28:c1:0c:
                    2a:ed:8a:2c:ef:5f:72:95:e4:38:15:8a:f7:b3:9e:
                    18:d7:5a:11:13:0d:81:a9:88:43:ea:7e:94:a6:64:
                    e2:1e:bd:e0:c7:12:24:4f:36:fb:2d:90:45:a6:ff:
                    e1:12:d9:a9:f6:6b:92:a6:67:8e:28:05:92:cd:a2:
                    49:de:eb:40:fd:46:08:d7:66:02:fd:ea:70:24:cf:
                    4c:c7:c3:43:c1:9d:f5:40:45:92:c5:62:fe:9d:d7:
                    16:f5:ea:b3:ef:ce:33:09:dc:70:ee:21:2d:c3:88:
                    2f:b7:7d:d5:14:fd:7f:eb:3f:1a:3f:d2:04:38:8b:
                    d4:e9:ea:3f:b1:05:c8:27:ef:b8:a9:92:51:83:96:
                    f6:f6:0d:cf:ec:86:60:39:e3:68:f0:a2:46:62:92:
                    3f:85:a4:5b:cd:44:3b:32:db:d9:85:6a:f9:d8:90:
                    b6:08:11:04:a3:c3:b6:92:0e:5e:c7:85:36:15:59:
                    fe:b4:5d:c6:3f:6e:87:bd:48:5d:44:f9:0d:3c:52:
                    81:3f:63:95:36:64:b2:ea:d7:ea:20:1d:f9:ec:b0:
                    0b:8a:e0:76:df:8a:71:76:a2:e5:72:62:0a:01:82:
                    a8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0A:D6:EB:49:38:C2:D7:B7:E1:04:3D:32:D0:F1:55:A0:A1:8C:8B
            X509v3 Authority Key Identifier:
                keyid:39:01:37:F4:F0:6E:5F:34:38:EF:F9:5A:B8:C6:47:F7:D7:D6:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:73:e4:64:d7:81:99:ae:02:ee:d2:36:ee:a0:98:eb:59:19:
         1b:31:26:0e:92:f2:ae:a2:99:09:07:1c:6b:45:b1:85:6d:1a:
         f1:56:ce:63:54:b4:d6:e9:bb:94:f9:9e:7e:cd:a9:da:07:00:
         e1:31:98:b6:88:bd:8f:0f:93:3e:6f:16:2b:39:b5:4f:2c:bf:
         9d:24:58:96:a0:2e:8b:56:e5:4f:29:f3:1a:34:81:05:c6:28:
         f4:75:cd:13:61:45:43:5a:ec:2c:04:af:55:5f:12:71:dd:46:
         0a:a8:8c:4f:3e:01:e0:42:20:f8:5d:c2:d2:d6:3e:22:1d:7b:
         1e:26:2e:df:b5:06:ae:d6:19:9b:9c:dc:e9:4f:f4:c6:4c:ae:
         a6:5c:8d:1b:00:6d:84:a8:ba:e3:2c:d3:a3:56:82:89:00:7f:
         7c:52:7a:3e:0c:60:c7:37:98:60:f8:dd:13:9a:42:e3:4f:a3:
         f3:3b:c7:d0:f2:65:ff:9e:6f:ad:71:84:f9:2f:02:5b:44:24:
         3e:ac:f1:ac:04:9d:60:cb:c0:2c:16:2d:ac:e2:fa:07:47:f3:
         00:42:b9:04:f3:85:20:77:6d:a1:c7:6e:3a:87:79:74:40:0c:
         f3:e2:ef:68:6b:57:8b:fd:a6:d0:cd:da:65:6a:d2:bf:61:c6:
         60:8f:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:05:14 2026 by rpki-client