Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft
File:                     390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft (raw, json)
Hash identifier:          3iZCL90LM6FxGxdBVl/zVRfwJWUBrBQBNgQBJlNe2zo=
Subject key identifier:   B9:5C:7B:C6:3D:41:6A:7E:77:2D:11:19:72:BF:B9:D0:6D:E5:AF:1B
Authority key identifier: 39:01:37:F4:F0:6E:5F:34:38:EF:F9:5A:B8:C6:47:F7:D7:D6:D7:05
Certificate issuer:       /CN=390137F4F06E5F3438EFF95AB8C647F7D7D6D705
Certificate serial:       3083F52E278AFE4F2A9BF7ADA67E1D9BC95FD2C9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft
Manifest number:          B4
Signing time:             Mon 21 Sep 2026 22:32:58 +0000
Manifest this update:     Mon 21 Sep 2026 22:27:58 +0000
Manifest next update:     Wed 23 Sep 2026 00:26:58 +0000
Files and hashes:         1: 3130332e3233372e34382e302f32332d3332203d3e20313331313439.roa (hash: jfPzdhlPSaVWUOyXk1OyVIn8kAk2JIHNsOorXtdv+L0=)
                          2: 390137F4F06E5F3438EFF95AB8C647F7D7D6D705.crl (hash: vjYoeNYDJQoTFxgnQjcTf/nvcJ+gvyynCQhELEuS878=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.crl
                          rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 22:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:83:f5:2e:27:8a:fe:4f:2a:9b:f7:ad:a6:7e:1d:9b:c9:5f:d2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390137F4F06E5F3438EFF95AB8C647F7D7D6D705
        Validity
            Not Before: Sep 21 22:27:58 2026 GMT
            Not After : Sep 23 00:26:58 2026 GMT
        Subject: CN=B95C7BC63D416A7E772D111972BFB9D06DE5AF1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:ad:17:d4:d0:80:3e:21:2c:52:1f:98:b9:
                    b2:94:74:d5:4c:4c:9a:31:fe:1b:67:b9:2d:7d:6b:
                    69:56:2b:5b:37:c1:24:b2:c1:27:20:82:50:cd:58:
                    17:52:68:a9:12:96:45:72:c9:90:7a:bc:d8:04:e0:
                    7d:62:25:72:ca:34:97:af:a1:78:bf:0a:e2:77:c1:
                    0d:3a:71:65:cd:da:eb:d5:00:65:6f:9a:05:bf:ec:
                    89:54:1e:f9:d9:45:b4:e5:21:01:e0:09:ac:eb:31:
                    69:83:8c:65:db:09:28:de:71:19:71:f6:a1:96:c9:
                    df:3b:6a:34:93:e3:f5:41:d7:a5:46:61:81:e6:b4:
                    e1:64:e0:11:94:ae:39:42:07:e5:33:ee:4e:ba:88:
                    ce:10:22:78:0c:83:96:4f:28:eb:07:01:6a:ca:12:
                    22:8f:b1:f6:48:89:54:74:52:0a:2c:81:c5:63:f5:
                    21:82:6b:42:93:7e:c0:0a:cd:ac:97:23:16:c5:e9:
                    da:48:51:a5:f7:b3:76:67:16:5f:ea:7c:be:90:5e:
                    a7:fa:56:d0:06:9c:0a:78:c5:64:1d:08:fe:ad:ec:
                    49:54:3f:e4:ea:cc:fc:e2:97:dd:1e:15:a2:d4:f1:
                    f6:39:a0:6c:3d:43:c4:f6:d7:4b:90:b4:d3:64:49:
                    96:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5C:7B:C6:3D:41:6A:7E:77:2D:11:19:72:BF:B9:D0:6D:E5:AF:1B
            X509v3 Authority Key Identifier:
                keyid:39:01:37:F4:F0:6E:5F:34:38:EF:F9:5A:B8:C6:47:F7:D7:D6:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:be:0c:20:49:73:83:85:ff:bb:1f:35:1a:52:2f:b7:a0:a2:
         38:59:80:80:63:a3:e1:1e:ce:b9:7e:e3:2a:3d:6f:08:f5:f5:
         2b:a9:e6:14:d6:6d:ed:4b:2d:48:0e:5b:34:f7:7d:f4:0e:3d:
         70:53:07:73:8d:e3:6c:f7:77:73:f8:34:62:c2:7f:c4:d4:fc:
         fe:c7:6a:a5:a1:ce:3d:9a:78:33:69:10:ae:12:a8:94:49:4b:
         12:29:b4:b6:79:0e:eb:01:ea:23:5c:5a:ce:1b:ab:5d:b0:a6:
         06:34:73:9f:64:b0:8f:6d:5d:01:57:32:ea:85:e4:73:8f:2d:
         ff:89:d0:60:f3:ce:6c:57:b4:7a:65:c3:a8:6d:2a:7d:7a:9c:
         4f:c9:1b:96:8c:84:74:e3:2c:31:b1:51:ce:71:f3:1f:0d:72:
         4c:d7:2b:14:25:85:12:35:ce:44:26:d4:fb:2d:01:9b:48:a3:
         5f:d1:86:38:2c:e7:92:6d:7b:5b:0b:5f:4d:af:67:f1:fe:39:
         d4:67:90:b9:be:14:7b:75:ed:81:96:49:ef:69:c0:24:6f:bb:
         fd:d1:ce:dd:00:ba:36:a3:47:41:66:e5:a6:85:78:96:d1:eb:
         48:e2:6a:23:c5:a9:b6:ea:56:67:bb:6a:78:83:28:60:89:1a:
         be:91:80:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:10:11 2026 by rpki-client