Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
File:                     90CC65194573D100A9A5ECAD83FF235C91E49F84.mft (raw, json)
Hash identifier:          h2n3ogI46tps2vOrDuAcbSjkTf4NRg+QeZNO/wT94q8=
Subject key identifier:   64:1A:A9:80:E9:D4:67:82:92:86:59:58:4C:C1:1D:42:A0:3A:74:A5
Authority key identifier: 90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84
Certificate issuer:       /CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
Certificate serial:       7C496349AC66EE772FEC0E8BF67C46DEA6401495
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
Manifest number:          05
Signing time:             Wed 13 May 2026 08:42:49 +0000
Manifest this update:     Wed 13 May 2026 08:37:49 +0000
Manifest next update:     Thu 14 May 2026 09:56:49 +0000
Files and hashes:         1: 3230332e3137352e3130342e302f32332d3234203d3e20313530373535.roa (hash: YbtbNsPkQYRd3JYxoqhXztojoklcb1dDBNFr1Ga338o=)
                          2: 90CC65194573D100A9A5ECAD83FF235C91E49F84.crl (hash: 8beD/S7zAUox6nMxaD89KTtqfv3etfV91uKzc/vFLyc=)
                          3: 323430313a346536303a3a2f33322d3438203d3e20313530373535.roa (hash: wDLEMecsHR0Z6XE3oU5zld/TCGNqqJB7doxlMS3kCag=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl
                          rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:56:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:49:63:49:ac:66:ee:77:2f:ec:0e:8b:f6:7c:46:de:a6:40:14:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
        Validity
            Not Before: May 13 08:37:49 2026 GMT
            Not After : May 14 09:56:49 2026 GMT
        Subject: CN=641AA980E9D46782928659584CC11D42A03A74A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:89:35:b1:34:ba:b8:a5:4d:e9:65:50:1d:9a:
                    40:de:ec:e1:58:00:10:6d:ed:b3:f3:91:d7:3b:2f:
                    a0:d1:3b:93:45:68:10:a3:ae:a4:ef:ef:4a:fd:98:
                    26:08:c1:a1:49:a2:90:bb:e6:fb:da:cb:7e:05:3c:
                    ed:ff:d3:f6:bd:b9:26:f5:eb:c2:86:7e:b6:be:37:
                    f1:11:63:0d:b3:a2:2a:5f:34:07:2c:10:f4:c1:a5:
                    65:1a:a6:7c:39:4e:08:b0:50:75:58:40:3a:5d:c6:
                    a7:44:a6:fb:d5:db:b4:d4:d1:f5:b8:72:f0:78:c7:
                    1d:04:9e:64:84:d1:17:00:61:6b:68:06:6f:5e:4e:
                    02:52:56:5b:1e:ab:4e:cb:6b:07:cb:06:53:10:5a:
                    1b:8f:0a:5f:11:3f:e5:49:12:48:2c:96:37:b9:02:
                    b5:53:75:01:ea:65:5c:6a:48:c4:90:d9:a5:04:5d:
                    cb:a9:75:e6:9d:3b:3d:46:14:bd:2b:db:e2:2c:42:
                    51:32:37:3f:c2:57:e6:0e:51:db:d7:5d:39:28:e9:
                    5c:c1:36:8a:c2:a8:6a:12:50:e6:df:65:aa:69:85:
                    fb:2c:1d:f9:52:d6:05:c9:86:de:75:a5:a4:f8:ca:
                    31:f9:a0:ae:51:4f:83:f8:54:6c:4a:3b:fc:da:33:
                    c7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1A:A9:80:E9:D4:67:82:92:86:59:58:4C:C1:1D:42:A0:3A:74:A5
            X509v3 Authority Key Identifier:
                keyid:90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f3:14:bb:5b:4f:72:47:87:3c:65:5c:cd:ca:64:b7:33:b5:
         0b:e8:40:92:c0:e3:db:52:72:73:3e:8c:a1:01:93:7a:33:f5:
         05:95:4b:ca:16:1e:6d:85:85:3f:40:a5:d5:98:b5:86:8f:23:
         c0:cf:16:44:cd:80:7b:8a:fe:fa:76:ca:c6:42:b3:f7:49:6f:
         f5:a1:26:f2:2d:84:9d:c9:f6:8a:40:a1:28:04:3f:51:10:24:
         d7:1d:46:fa:a6:f0:49:1b:ef:e2:89:07:fe:b1:1b:94:8f:a0:
         cb:28:0b:b7:53:fb:42:8f:22:d5:fb:5f:70:10:8a:d2:b8:6a:
         44:6b:45:13:75:08:9a:b2:37:8d:fa:2b:77:07:0e:21:ea:49:
         b9:dc:2f:0e:66:e8:6f:97:dd:c5:a6:f2:46:93:4b:be:98:68:
         02:04:46:cc:57:40:6a:b6:0d:22:bb:a4:08:05:95:d2:44:19:
         85:47:c4:69:c0:07:0e:52:4f:17:ab:23:d1:45:97:c4:e5:7c:
         7e:d1:73:49:51:a4:b9:6a:e7:40:ec:2e:c8:68:2f:37:d9:06:
         eb:18:a8:41:55:13:d6:7b:29:8e:6c:4c:fe:d6:70:9f:e2:f0:
         a0:9c:7e:6c:78:07:1b:09:0c:ae:0e:d9:5a:42:db:52:86:79:
         eb:1d:a8:8f
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUfEljSaxm7ncv7A6L9nxG3qZAFJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBDQzY1MTk0NTczRDEwMEE5QTVFQ0FEODNGRjIzNUM5
MUU0OUY4NDAeFw0yNjA1MTMwODM3NDlaFw0yNjA1MTQwOTU2NDlaMDMxMTAvBgNV
BAMTKDY0MUFBOTgwRTlENDY3ODI5Mjg2NTk1ODRDQzExRDQyQTAzQTc0QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiiTWxNLq4pU3pZVAdmkDe7OFY
ABBt7bPzkdc7L6DRO5NFaBCjrqTv70r9mCYIwaFJopC75vvay34FPO3/0/a9uSb1
68KGfra+N/ERYw2zoipfNAcsEPTBpWUapnw5TgiwUHVYQDpdxqdEpvvV27TU0fW4
cvB4xx0EnmSE0RcAYWtoBm9eTgJSVlseq07LawfLBlMQWhuPCl8RP+VJEkgslje5
ArVTdQHqZVxqSMSQ2aUEXcupdeadOz1GFL0r2+IsQlEyNz/CV+YOUdvXXTko6VzB
NorCqGoSUObfZapphfssHflS1gXJht51paT4yjH5oK5RT4P4VGxKO/zaM8frAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUZBqpgOnUZ4KShllYTMEdQqA6dKUwHwYDVR0j
BBgwFoAUkMxlGUVz0QCppeytg/8jXJHkn4QwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlVOTElO
RS8wLzkwQ0M2NTE5NDU3M0QxMDBBOUE1RUNBRDgzRkYyMzVDOTFFNDlGODQuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvOTBDQzY1MTk0NTczRDEwMEE5QTVFQ0FEODNG
RjIzNUM5MUU0OUY4NC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05VTkxJTkUvMC85MENDNjUxOTQ1
NzNEMTAwQTlBNUVDQUQ4M0ZGMjM1QzkxRTQ5Rjg0Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPMUu1tP
ckeHPGVczcpktzO1C+hAksDj21Jycz6MoQGTejP1BZVLyhYebYWFP0Cl1Zi1ho8j
wM8WRM2Ae4r++nbKxkKz90lv9aEm8i2Encn2ikChKAQ/URAk1x1G+qbwSRvv4okH
/rEblI+gyygLt1P7Qo8i1ftfcBCK0rhqRGtFE3UImrI3jfordwcOIepJudwvDmbo
b5fdxabyRpNLvphoAgRGzFdAarYNIrukCAWV0kQZhUfEacAHDlJPF6sj0UWXxOV8
ftFzSVGkuWrnQOwuyGgvN9kG6xioQVUT1nspjmxM/tZwn+LwoJx+bHgHGwkMrg7Z
WkLbUoZ56x2ojw==
-----END CERTIFICATE-----
Generated at Wed May 13 20:33:28 2026 by rpki-client