Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
File:                     39FBFF134ABD193CAEA4AAB003503031F998187D.mft (raw, json)
Hash identifier:          ptjcg0uDjKRNT2AvfbfYuI73WbKt1LRCoKMB2tB9TCE=
Subject key identifier:   5F:E0:8D:B8:DE:13:3F:48:5A:9D:A9:4D:81:0C:58:71:0A:D4:CB:24
Authority key identifier: 39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D
Certificate issuer:       /CN=39FBFF134ABD193CAEA4AAB003503031F998187D
Certificate serial:       610AC16A65D3278C06138230BE770E493257DEF5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
Manifest number:          B5
Signing time:             Mon 21 Sep 2026 14:17:21 +0000
Manifest this update:     Mon 21 Sep 2026 14:12:21 +0000
Manifest next update:     Tue 22 Sep 2026 16:30:21 +0000
Files and hashes:         1: 39FBFF134ABD193CAEA4AAB003503031F998187D.crl (hash: Jp9aMW5XFgJCNNRfa3o1rDUbULFSYwQdLmnTqFV7AWg=)
                          2: 3131342e32392e3234342e302f32322d3234203d3e20313331363031.roa (hash: UEZLGnP+f6dvuTFKx5co3CN+bp25mFinjEy0MFxQtNo=)
                          3: 3130332e3235322e3139362e302f32322d3234203d3e20313331363031.roa (hash: H53goHHbIQsVYLSl4R7a2BLrNh+WubAvsiCMNEEPsmk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl
                          rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 16:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0a:c1:6a:65:d3:27:8c:06:13:82:30:be:77:0e:49:32:57:de:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39FBFF134ABD193CAEA4AAB003503031F998187D
        Validity
            Not Before: Sep 21 14:12:21 2026 GMT
            Not After : Sep 22 16:30:21 2026 GMT
        Subject: CN=5FE08DB8DE133F485A9DA94D810C58710AD4CB24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b7:64:49:7c:48:f7:bb:8b:63:22:78:f0:2a:
                    a6:85:b3:96:33:7d:8b:80:25:3b:f2:2d:7d:41:d0:
                    f4:58:5a:12:5c:4e:a8:ca:35:dc:e3:f4:15:4a:39:
                    21:3e:7a:23:52:2d:cb:d9:ca:d4:b9:97:e2:57:a6:
                    a7:13:ba:a7:da:ef:ac:e4:c6:c2:f3:3c:1b:fe:48:
                    99:f5:c4:0d:10:1b:30:01:e6:ad:4e:6d:f2:52:03:
                    e6:e1:a8:87:6a:54:09:81:ef:03:63:56:47:91:0e:
                    71:40:f0:90:3b:72:69:14:c9:43:82:d6:2d:be:9d:
                    34:ce:ff:44:94:5f:1a:53:b4:b8:9f:e2:4d:7e:b5:
                    63:2c:b4:8b:2c:96:15:6c:9f:e0:67:ec:8a:30:b2:
                    78:8a:30:96:41:1d:2e:47:8e:df:b1:2c:92:23:c5:
                    80:3e:e2:ee:c7:fb:ba:94:6e:d3:c6:35:d1:75:ed:
                    c2:3c:6c:a4:3f:a7:39:a3:fe:1c:86:4c:b4:98:36:
                    8d:de:87:54:e2:47:7c:6f:04:a1:91:f0:30:52:06:
                    10:3c:5c:6c:76:e9:b0:5a:9d:c4:c5:95:7c:a1:c8:
                    7f:8f:fa:1e:8c:4f:c0:ad:a5:0a:a5:4d:d8:81:b3:
                    98:fa:59:07:bd:59:cb:91:83:37:9f:08:ef:69:80:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E0:8D:B8:DE:13:3F:48:5A:9D:A9:4D:81:0C:58:71:0A:D4:CB:24
            X509v3 Authority Key Identifier:
                keyid:39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6d:b0:40:2b:a4:62:1d:4e:25:c6:0b:03:63:77:51:2e:e4:
         7b:b8:7d:08:2c:3a:76:96:a8:62:03:34:f5:4e:92:53:d0:93:
         49:9a:00:b9:1d:21:c9:67:73:b4:de:bb:ae:ff:17:ef:53:7b:
         40:57:00:b5:39:e8:e3:0c:a9:3b:77:c1:38:ec:5f:80:00:4b:
         9e:3f:0a:d5:a7:c3:49:41:bd:f4:c8:e4:5b:26:c9:3c:89:35:
         cd:d6:47:62:43:ee:f5:79:90:66:7f:ad:b7:a5:21:a5:11:8e:
         a1:bb:0f:8a:71:40:bd:29:ce:ed:d2:d1:3b:39:ec:68:8c:02:
         09:c4:34:f1:aa:67:d2:fa:2e:72:4f:70:51:21:ae:70:28:71:
         f3:26:bd:3d:8a:30:56:f7:86:51:c1:a8:a9:ab:5c:51:b7:ad:
         30:52:2e:6d:04:f2:79:aa:a5:78:c4:d8:c1:95:80:60:2e:3f:
         98:a1:b1:8c:fd:5d:e4:89:35:f2:5a:39:00:b0:a2:6d:14:3d:
         c6:4d:4e:a8:e2:e6:a9:cc:a3:64:39:00:74:8b:05:e1:79:62:
         9d:a1:f9:46:50:68:2c:97:19:4d:4c:fd:06:a9:5a:30:99:ce:
         cf:96:08:d4:f6:13:e3:88:0d:1e:8e:76:71:1d:bb:f7:11:fb:
         9d:1c:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:33:17 2026 by rpki-client