Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
File:                     90CC65194573D100A9A5ECAD83FF235C91E49F84.mft (raw, json)
Hash identifier:          PBmqjW8m7TJHrtkjA3E74RsIJA+ommqQczxP5ZIY1vc=
Subject key identifier:   1C:34:2A:27:8B:BB:8E:13:A9:4C:54:74:D0:BD:09:A1:77:6D:41:74
Authority key identifier: 90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84
Certificate issuer:       /CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
Certificate serial:       15ED66647489F5A05FF3B0228144B34680A2FEC8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
Manifest number:          B3
Signing time:             Mon 21 Sep 2026 09:31:48 +0000
Manifest this update:     Mon 21 Sep 2026 09:26:48 +0000
Manifest next update:     Tue 22 Sep 2026 10:39:48 +0000
Files and hashes:         1: 323430313a346536303a3a2f33322d3438203d3e20313530373535.roa (hash: wDLEMecsHR0Z6XE3oU5zld/TCGNqqJB7doxlMS3kCag=)
                          2: 3230332e3137352e3130342e302f32332d3234203d3e20313530373535.roa (hash: YbtbNsPkQYRd3JYxoqhXztojoklcb1dDBNFr1Ga338o=)
                          3: 90CC65194573D100A9A5ECAD83FF235C91E49F84.crl (hash: 32LHq2hkmDYHcfl+E1tKsy8PiBlx8q41YehEDNx+AtA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl
                          rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 10:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ed:66:64:74:89:f5:a0:5f:f3:b0:22:81:44:b3:46:80:a2:fe:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
        Validity
            Not Before: Sep 21 09:26:48 2026 GMT
            Not After : Sep 22 10:39:48 2026 GMT
        Subject: CN=1C342A278BBB8E13A94C5474D0BD09A1776D4174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:c6:0b:91:9f:14:bf:fb:d4:02:9f:2b:47:
                    97:d5:e5:09:18:10:d5:69:47:10:5e:20:3f:26:0a:
                    88:38:15:97:f1:10:af:0f:ad:03:ea:31:2a:f0:77:
                    ee:2d:b4:da:9b:7c:f1:98:a8:6c:89:9e:8f:13:55:
                    c3:45:c2:3f:04:6c:15:48:2d:ec:10:f0:28:e9:76:
                    34:77:95:29:af:07:1b:c5:0a:1f:7e:2b:00:f2:da:
                    93:45:04:e8:b4:b3:04:8b:67:8a:e1:47:97:c9:3a:
                    ea:06:34:29:6f:96:cc:16:d9:44:48:2b:3f:f9:71:
                    01:38:d3:9f:06:42:48:0a:7c:0f:57:65:57:49:d4:
                    8e:5d:7d:65:0a:18:b4:af:13:9c:a0:3a:77:05:aa:
                    6a:62:0b:7d:84:90:e1:8a:ea:70:64:5d:65:f9:6c:
                    28:15:47:c6:f5:c3:15:71:0d:f6:75:65:ce:b2:53:
                    16:57:b0:56:1f:4e:07:9a:90:f3:d9:31:c3:2e:f3:
                    97:eb:5b:03:83:e3:d9:d5:8f:4b:88:15:37:b7:3b:
                    a2:34:21:10:b7:ff:86:c0:fc:a6:74:4c:7d:f9:d7:
                    53:c7:3d:26:2e:5f:e3:03:19:35:90:39:06:a2:1c:
                    fe:ee:f7:cd:a3:7a:23:f6:5b:63:de:08:27:cc:c4:
                    5c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:34:2A:27:8B:BB:8E:13:A9:4C:54:74:D0:BD:09:A1:77:6D:41:74
            X509v3 Authority Key Identifier:
                keyid:90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:37:98:d5:5e:3a:ef:ea:ca:9a:67:8a:00:a6:03:07:1d:56:
         3a:62:14:15:bc:f3:fd:61:81:80:80:94:a6:2a:23:13:86:16:
         b3:42:73:2a:c2:51:85:c6:b7:b3:d6:aa:67:fa:42:3e:9b:59:
         09:02:96:34:7f:7c:c5:2c:3a:21:b3:c9:bc:5b:de:5c:34:93:
         e2:b9:87:b1:2d:f2:01:34:13:13:84:c7:6a:2a:6a:c3:82:f3:
         66:ec:1c:20:39:95:db:7e:c2:3f:51:de:28:22:0d:df:b8:17:
         fd:7c:97:bc:49:88:64:17:d3:58:8e:83:bb:4f:9c:ae:f5:97:
         66:65:14:f6:cb:e7:a8:94:23:93:a8:c7:66:91:73:62:2e:b7:
         82:f9:ea:8a:53:16:08:13:9a:22:df:5d:35:23:51:c9:6c:9a:
         da:17:05:23:0c:dc:6a:03:55:e8:47:4a:d7:75:2a:a0:02:20:
         f5:1d:63:a9:96:33:e3:82:a2:cd:a3:ce:a1:cc:0c:29:09:45:
         b5:08:82:f2:f2:5e:02:b4:df:f4:58:6f:76:cb:1d:c2:2f:ee:
         96:12:53:6e:bf:b7:63:16:4e:2a:dd:b5:5f:ad:ca:ec:3c:3e:
         94:c8:8b:54:06:9e:cf:55:88:5e:2d:ba:6f:28:69:1a:70:93:
         f8:fb:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:07:41 2026 by rpki-client