Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
File:                     90CC65194573D100A9A5ECAD83FF235C91E49F84.mft (raw, json)
Hash identifier:          lzOp8u0VgihQ2j4/XpmQ/RyjyZCYXqYYrdNSiWdC8s0=
Subject key identifier:   67:66:FA:5E:32:FD:22:5D:F2:C1:2F:16:4E:48:E4:77:23:52:67:F2
Authority key identifier: 90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84
Certificate issuer:       /CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
Certificate serial:       5C8D75708392724F1EB7D0D232B060B7FC4F3A26
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
Manifest number:          C3
Signing time:             Sat 03 Oct 2026 14:15:16 +0000
Manifest this update:     Sat 03 Oct 2026 14:10:16 +0000
Manifest next update:     Sun 04 Oct 2026 16:21:16 +0000
Files and hashes:         1: 323430313a346536303a3a2f33322d3438203d3e20313530373535.roa (hash: wDLEMecsHR0Z6XE3oU5zld/TCGNqqJB7doxlMS3kCag=)
                          2: 3230332e3137352e3130342e302f32332d3234203d3e20313530373535.roa (hash: YbtbNsPkQYRd3JYxoqhXztojoklcb1dDBNFr1Ga338o=)
                          3: 90CC65194573D100A9A5ECAD83FF235C91E49F84.crl (hash: EiSNQgAmOExTghBzaORkSahATLQfdFKMnQr+MTAUU7w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl
                          rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 16:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8d:75:70:83:92:72:4f:1e:b7:d0:d2:32:b0:60:b7:fc:4f:3a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
        Validity
            Not Before: Oct  3 14:10:16 2026 GMT
            Not After : Oct  4 16:21:16 2026 GMT
        Subject: CN=6766FA5E32FD225DF2C12F164E48E477235267F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:99:3d:2b:6b:6a:52:fe:78:c2:dd:3c:d6:
                    52:68:21:64:8e:17:ce:bb:81:0e:9c:65:0b:20:20:
                    6c:c7:de:76:d5:32:62:55:d6:77:61:5c:31:7a:2a:
                    ee:50:cc:ba:f4:61:11:01:eb:d4:00:d0:fc:2f:1e:
                    73:3f:ac:41:4f:00:91:97:c5:46:3e:a5:6b:64:fa:
                    40:fd:f1:18:9f:d3:4f:25:af:cf:b9:10:9c:c4:c2:
                    97:aa:88:7d:34:5f:e1:64:ab:60:0f:fa:b6:53:7c:
                    c3:39:78:fe:4e:3b:e1:48:47:12:9b:06:ed:b3:50:
                    3a:6e:0d:63:e1:64:93:b0:3e:d8:ad:f5:be:27:30:
                    1c:13:4c:40:a5:13:7c:fc:1a:8a:06:a8:a0:d4:db:
                    18:ad:2c:a6:b9:83:af:d3:61:59:1b:55:ce:fa:72:
                    ca:a9:40:bd:ff:7b:d5:dd:65:0e:0e:b5:71:78:95:
                    47:fa:3d:2b:40:bd:8b:39:2d:ea:7b:35:f2:58:c9:
                    52:0c:07:69:3b:85:dc:d1:31:e9:6d:6e:fc:1e:b9:
                    c0:c9:a1:b7:2e:0f:2e:77:c9:59:75:08:15:ee:c2:
                    2b:82:65:a8:31:7e:45:23:91:1c:c6:40:33:92:17:
                    b5:86:89:fa:3f:87:25:b2:00:af:08:d5:7e:90:05:
                    47:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:66:FA:5E:32:FD:22:5D:F2:C1:2F:16:4E:48:E4:77:23:52:67:F2
            X509v3 Authority Key Identifier:
                keyid:90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:27:6c:2d:15:b8:ff:b8:4a:67:4c:43:28:cf:b1:16:14:11:
         37:2d:b6:18:52:5b:a4:7a:f1:ec:7e:d6:09:8c:cd:b1:f2:c6:
         71:2a:73:ef:6b:de:f4:0d:2c:9c:e0:f6:5b:80:e1:95:f1:37:
         b5:69:3a:da:bc:88:b7:f2:15:6f:18:32:3b:a7:41:44:4a:70:
         a9:96:0b:de:78:da:ed:63:fc:55:e7:82:b4:15:6a:6d:0b:56:
         a3:08:05:65:43:95:23:50:4a:00:ed:2f:4f:bf:7a:0c:12:ce:
         52:8f:68:2c:0c:89:3f:bf:5a:c9:42:1d:8a:ad:3b:1c:d6:65:
         30:45:b4:e1:44:cb:b5:ee:ff:3a:c7:61:e4:aa:30:e5:9b:b4:
         b2:ec:11:58:03:84:cf:fd:95:33:f1:4a:d9:3e:9e:74:dd:87:
         3e:23:b6:4d:b0:49:62:77:20:a3:de:3d:e7:c0:d1:4f:38:f9:
         75:80:3d:98:71:24:8e:8c:43:6a:f7:06:2c:16:6e:b9:c7:a4:
         74:e0:e6:7e:46:5d:0b:ae:a6:a0:9f:42:dd:1f:fa:c5:2e:92:
         c9:b1:68:65:b5:9d:85:de:f4:0e:00:7f:e9:59:61:69:e7:2e:
         40:3a:a0:a0:e5:ba:64:21:cd:29:4c:d9:15:c0:57:03:45:18:
         c3:02:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 09:04:07 2026 by rpki-client