Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
File:                     90CC65194573D100A9A5ECAD83FF235C91E49F84.mft (raw, json)
Hash identifier:          kAmhmvL4LJkEqEBLkdbcogah2ysUeRjLGwjgcTE3838=
Subject key identifier:   1A:98:A9:5C:83:71:D1:86:0A:A8:F1:44:3D:54:F2:7C:27:B1:CD:CC
Authority key identifier: 90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84
Certificate issuer:       /CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
Certificate serial:       585C53B9AD49EFAEA3A195EFAA408D62C3978F78
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
Manifest number:          2D
Signing time:             Fri 12 Jun 2026 16:07:14 +0000
Manifest this update:     Fri 12 Jun 2026 16:02:14 +0000
Manifest next update:     Sat 13 Jun 2026 18:45:14 +0000
Files and hashes:         1: 90CC65194573D100A9A5ECAD83FF235C91E49F84.crl (hash: 3piLgj8uz6NnOZL3UviO7sc3XLtSlOIIYl5mDMqPk1A=)
                          2: 3230332e3137352e3130342e302f32332d3234203d3e20313530373535.roa (hash: YbtbNsPkQYRd3JYxoqhXztojoklcb1dDBNFr1Ga338o=)
                          3: 323430313a346536303a3a2f33322d3438203d3e20313530373535.roa (hash: wDLEMecsHR0Z6XE3oU5zld/TCGNqqJB7doxlMS3kCag=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl
                          rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 18:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:5c:53:b9:ad:49:ef:ae:a3:a1:95:ef:aa:40:8d:62:c3:97:8f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
        Validity
            Not Before: Jun 12 16:02:14 2026 GMT
            Not After : Jun 13 18:45:14 2026 GMT
        Subject: CN=1A98A95C8371D1860AA8F1443D54F27C27B1CDCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:78:f6:d1:c5:d8:ed:98:88:6e:31:0d:02:e9:
                    26:ca:c2:b7:c2:e0:f2:d6:f1:4f:65:26:b5:d9:b8:
                    d5:35:8d:ae:67:9f:35:c1:55:a7:73:fe:13:62:77:
                    42:8b:28:89:e6:77:05:80:eb:ca:43:30:3e:fe:18:
                    fe:ba:32:40:24:fd:d4:42:23:bc:0d:e0:ea:18:14:
                    7c:7f:51:18:26:68:0e:ab:2a:3c:8b:f8:f4:ff:88:
                    37:3b:24:68:28:01:cd:59:07:fb:d4:17:3e:46:2c:
                    36:bd:f9:8c:47:21:ea:61:79:9a:0c:14:72:fb:aa:
                    85:94:c0:eb:18:ba:ad:9b:4c:ab:7a:9a:86:ff:8c:
                    cd:7d:9f:f3:91:13:70:ba:fc:dc:6d:ba:32:a1:b0:
                    a8:4f:ef:d1:65:c1:d6:ba:a3:77:47:cd:bb:a8:08:
                    fd:5c:36:b2:a9:2b:1a:73:df:8b:f0:2d:dd:b5:c3:
                    4a:2f:73:26:79:19:44:97:12:90:1c:8f:0d:91:20:
                    9b:44:32:c7:f7:0c:56:5c:4d:88:09:13:6b:3a:00:
                    00:d8:17:dd:06:83:ae:64:c3:7f:78:29:10:ce:7e:
                    db:40:db:f4:0b:31:c2:ad:0c:d3:73:3b:63:58:09:
                    35:4c:ae:a0:2c:f8:5f:1a:4b:39:a1:75:e9:7a:ff:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:98:A9:5C:83:71:D1:86:0A:A8:F1:44:3D:54:F2:7C:27:B1:CD:CC
            X509v3 Authority Key Identifier:
                keyid:90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0c:e7:40:59:45:48:d9:03:1c:7d:a8:37:e7:d6:16:18:d1:
         4f:2d:1f:fa:38:a1:01:c2:87:98:57:9e:c0:d3:d1:c7:88:54:
         a1:f9:c6:82:86:81:46:c9:70:71:69:ea:ee:6e:3a:2c:65:4f:
         9e:81:79:e3:e1:a2:64:bd:5c:c3:46:b2:03:cc:7f:1b:d3:46:
         ca:98:30:bf:28:2b:5f:1e:82:22:b4:11:79:e7:51:8a:3d:69:
         53:16:1e:11:48:15:1e:5a:ac:26:4d:6c:da:6a:5b:3c:94:fb:
         97:24:8b:52:b8:3d:9f:d0:03:31:93:d0:e8:1c:48:50:a3:7e:
         a7:de:8c:eb:17:dd:f8:f9:14:f7:29:dd:df:32:b2:86:8f:77:
         8e:b4:3f:36:96:89:8d:7c:2a:d4:fe:19:91:1f:ac:6b:75:6b:
         6d:b2:3d:92:ba:43:70:d8:a0:1c:9a:be:ca:56:9d:de:ac:33:
         49:41:71:61:5d:33:73:16:6f:b4:e3:d6:ac:fb:63:c0:05:d9:
         d9:b6:4c:33:68:6c:00:1c:bd:49:9d:11:40:9c:77:96:66:36:
         a8:4d:67:dc:62:84:e4:d8:f1:ea:d8:b8:35:c3:41:34:01:72:
         18:f6:7b:d3:16:83:4d:6d:34:77:ec:0c:9a:7a:bd:a4:cb:47:
         f2:97:91:1d
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUWFxTua1J766joZXvqkCNYsOXj3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBDQzY1MTk0NTczRDEwMEE5QTVFQ0FEODNGRjIzNUM5
MUU0OUY4NDAeFw0yNjA2MTIxNjAyMTRaFw0yNjA2MTMxODQ1MTRaMDMxMTAvBgNV
BAMTKDFBOThBOTVDODM3MUQxODYwQUE4RjE0NDNENTRGMjdDMjdCMUNEQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ePbRxdjtmIhuMQ0C6SbKwrfC
4PLW8U9lJrXZuNU1ja5nnzXBVadz/hNid0KLKInmdwWA68pDMD7+GP66MkAk/dRC
I7wN4OoYFHx/URgmaA6rKjyL+PT/iDc7JGgoAc1ZB/vUFz5GLDa9+YxHIepheZoM
FHL7qoWUwOsYuq2bTKt6mob/jM19n/ORE3C6/NxtujKhsKhP79Flwda6o3dHzbuo
CP1cNrKpKxpz34vwLd21w0ovcyZ5GUSXEpAcjw2RIJtEMsf3DFZcTYgJE2s6AADY
F90Gg65kw394KRDOfttA2/QLMcKtDNNzO2NYCTVMrqAs+F8aSzmhdel6/4XVAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUGpipXINx0YYKqPFEPVTyfCexzcwwHwYDVR0j
BBgwFoAUkMxlGUVz0QCppeytg/8jXJHkn4QwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTlVOTElO
RS8wLzkwQ0M2NTE5NDU3M0QxMDBBOUE1RUNBRDgzRkYyMzVDOTFFNDlGODQuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvOTBDQzY1MTk0NTczRDEwMEE5QTVFQ0FEODNG
RjIzNUM5MUU0OUY4NC5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05VTkxJTkUvMC85MENDNjUxOTQ1
NzNEMTAwQTlBNUVDQUQ4M0ZGMjM1QzkxRTQ5Rjg0Lm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgznQFlF
SNkDHH2oN+fWFhjRTy0f+jihAcKHmFeewNPRx4hUofnGgoaBRslwcWnq7m46LGVP
noF54+GiZL1cw0ayA8x/G9NGypgwvygrXx6CIrQReedRij1pUxYeEUgVHlqsJk1s
2mpbPJT7lySLUrg9n9ADMZPQ6BxIUKN+p96M6xfd+PkU9ynd3zKyho93jrQ/NpaJ
jXwq1P4ZkR+sa3VrbbI9krpDcNigHJq+ylad3qwzSUFxYV0zcxZvtOPWrPtjwAXZ
2bZMM2hsABy9SZ0RQJx3lmY2qE1n3GKE5Njx6ti4NcNBNAFyGPZ70xaDTW00d+wM
mnq9pMtH8peRHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:10 2026 by rpki-client