Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
File:                     39FBFF134ABD193CAEA4AAB003503031F998187D.mft (raw, json)
Hash identifier:          eXFcuQhutJ9ACunms7BTGQZ7fD2zL147FXzMwXbBeR4=
Subject key identifier:   83:74:B4:87:3A:C4:2F:08:43:30:F3:24:A9:DC:CC:8B:65:20:B0:36
Authority key identifier: 39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D
Certificate issuer:       /CN=39FBFF134ABD193CAEA4AAB003503031F998187D
Certificate serial:       1C44AC6E3631A83E587B33AD4C5CC0B265DA315A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
Manifest number:          2F
Signing time:             Sat 13 Jun 2026 08:14:22 +0000
Manifest this update:     Sat 13 Jun 2026 08:09:22 +0000
Manifest next update:     Sun 14 Jun 2026 08:57:22 +0000
Files and hashes:         1: 3131342e32392e3234342e302f32322d3234203d3e20313331363031.roa (hash: UEZLGnP+f6dvuTFKx5co3CN+bp25mFinjEy0MFxQtNo=)
                          2: 39FBFF134ABD193CAEA4AAB003503031F998187D.crl (hash: rEj7UCOW9numrkUH74wCKHwSVEFxy8M8N6UfI+vQp8k=)
                          3: 3130332e3235322e3139362e302f32322d3234203d3e20313331363031.roa (hash: H53goHHbIQsVYLSl4R7a2BLrNh+WubAvsiCMNEEPsmk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl
                          rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:44:ac:6e:36:31:a8:3e:58:7b:33:ad:4c:5c:c0:b2:65:da:31:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39FBFF134ABD193CAEA4AAB003503031F998187D
        Validity
            Not Before: Jun 13 08:09:22 2026 GMT
            Not After : Jun 14 08:57:22 2026 GMT
        Subject: CN=8374B4873AC42F084330F324A9DCCC8B6520B036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7f:60:32:f8:d8:32:3d:0e:6e:0b:c8:d8:aa:
                    c1:ff:36:dc:0d:d4:21:8d:5c:e9:a7:0a:ba:97:b9:
                    9a:16:4e:e9:84:b2:27:19:05:66:00:a8:c5:bc:fd:
                    94:21:c6:f7:bb:18:f7:6d:34:0f:5a:db:7d:f5:17:
                    e7:03:59:82:78:84:13:18:e2:cb:96:5d:b8:d1:9c:
                    2e:05:a6:56:df:49:86:ed:f6:b9:4a:15:20:55:e4:
                    30:63:45:7d:09:96:17:e0:2b:fd:70:9c:5f:1d:54:
                    7d:1a:44:34:ee:5f:1e:dc:c5:11:c4:ff:b3:1d:34:
                    dd:9a:63:0c:0a:e0:1f:db:08:7f:c4:b2:c9:ef:66:
                    2a:83:66:b1:81:df:b0:90:40:e4:30:37:17:8f:2a:
                    fe:0a:dc:2b:f0:87:20:47:9c:8d:98:d8:13:5e:31:
                    7b:08:84:07:34:bd:70:58:b3:76:b5:fc:fb:13:49:
                    d4:42:94:29:1c:df:62:04:5c:bd:6c:d0:fe:72:9b:
                    f4:76:4f:ba:d5:e9:69:8a:ce:49:1d:b5:c9:f0:3f:
                    3c:00:b4:98:32:3d:51:8a:c6:6b:d6:81:a3:56:ad:
                    72:c6:d9:f8:de:94:49:89:f8:b9:4a:58:c1:fd:7d:
                    ff:22:50:bd:ba:10:b7:94:5c:71:96:c3:e8:01:1b:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:74:B4:87:3A:C4:2F:08:43:30:F3:24:A9:DC:CC:8B:65:20:B0:36
            X509v3 Authority Key Identifier:
                keyid:39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5b:69:a8:70:0d:90:eb:88:3d:a8:06:6a:d3:f0:7f:0f:fe:
         d0:1d:50:40:35:ab:8c:55:66:66:9a:49:f2:15:a9:87:d1:dc:
         b3:82:ba:3a:88:45:98:82:f8:dd:a9:75:bb:88:cb:43:4d:96:
         bf:57:20:ab:64:7e:86:bd:9f:95:2a:c3:d5:c9:e2:ce:91:99:
         eb:fd:7c:15:dd:2f:e0:9f:9c:ff:9a:91:b7:2f:6c:9c:4b:a7:
         bc:76:d5:48:d7:a5:65:12:2d:07:b1:8c:8d:5a:26:07:28:b4:
         ca:b5:b3:52:65:71:0e:47:31:6a:33:33:98:ca:66:e5:d1:8a:
         60:e9:80:70:2e:8b:32:9d:0e:45:a4:bd:53:a5:01:a8:df:8d:
         61:13:74:65:75:bd:37:82:07:dd:08:6c:95:d9:88:ae:eb:eb:
         30:a5:b4:ce:2d:04:fa:74:e3:cf:bb:8c:61:dc:07:7b:6d:3e:
         61:79:22:a5:5d:8e:cb:fc:04:56:39:08:b0:2a:d9:84:eb:d2:
         7e:6e:20:a7:ad:6f:b4:62:92:89:2e:8d:8d:c0:7c:07:22:0b:
         e0:a3:90:39:19:a4:64:ab:96:5d:82:30:c0:be:54:d6:b8:78:
         a9:16:c5:7c:43:b3:44:02:7b:57:3b:ba:8e:33:cf:b5:f4:a8:
         c5:31:36:dc
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUHESsbjYxqD5YezOtTFzAsmXaMVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzlGQkZGMTM0QUJEMTkzQ0FFQTRBQUIwMDM1MDMwMzFG
OTk4MTg3RDAeFw0yNjA2MTMwODA5MjJaFw0yNjA2MTQwODU3MjJaMDMxMTAvBgNV
BAMTKDgzNzRCNDg3M0FDNDJGMDg0MzMwRjMyNEE5RENDQzhCNjUyMEIwMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZf2Ay+NgyPQ5uC8jYqsH/NtwN
1CGNXOmnCrqXuZoWTumEsicZBWYAqMW8/ZQhxve7GPdtNA9a2331F+cDWYJ4hBMY
4suWXbjRnC4FplbfSYbt9rlKFSBV5DBjRX0JlhfgK/1wnF8dVH0aRDTuXx7cxRHE
/7MdNN2aYwwK4B/bCH/EssnvZiqDZrGB37CQQOQwNxePKv4K3CvwhyBHnI2Y2BNe
MXsIhAc0vXBYs3a1/PsTSdRClCkc32IEXL1s0P5ym/R2T7rV6WmKzkkdtcnwPzwA
tJgyPVGKxmvWgaNWrXLG2fjelEmJ+LlKWMH9ff8iUL26ELeUXHGWw+gBGyGtAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUg3S0hzrELwhDMPMkqdzMi2UgsDYwHwYDVR0j
BBgwFoAUOfv/E0q9GTyupKqwA1AwMfmYGH0wDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENULzAv
MzlGQkZGMTM0QUJEMTkzQ0FFQTRBQUIwMDM1MDMwMzFGOTk4MTg3RC5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS8zOUZCRkYxMzRBQkQxOTNDQUVBNEFBQjAwMzUwMzAz
MUY5OTgxODdELmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRENULzAvMzlGQkZGMTM0QUJEMTkzQ0FF
QTRBQUIwMDM1MDMwMzFGOTk4MTg3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJxbaahwDZDriD2oBmrT
8H8P/tAdUEA1q4xVZmaaSfIVqYfR3LOCujqIRZiC+N2pdbuIy0NNlr9XIKtkfoa9
n5Uqw9XJ4s6Rmev9fBXdL+CfnP+akbcvbJxLp7x21UjXpWUSLQexjI1aJgcotMq1
s1JlcQ5HMWozM5jKZuXRimDpgHAuizKdDkWkvVOlAajfjWETdGV1vTeCB90IbJXZ
iK7r6zCltM4tBPp048+7jGHcB3ttPmF5IqVdjsv8BFY5CLAq2YTr0n5uIKetb7Ri
kokujY3AfAciC+CjkDkZpGSrll2CMMC+VNa4eKkWxXxDs0QCe1c7uo4zz7X0qMUx
Ntw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:39 2026 by rpki-client