Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
File:                     39FBFF134ABD193CAEA4AAB003503031F998187D.mft (raw, json)
Hash identifier:          /xOMV34xdXDgmihR7IEunxGy4YJR3Dde3c3JKKJdu0g=
Subject key identifier:   E6:75:55:A3:A9:CE:B4:CB:A1:B4:08:3F:3A:33:71:E8:67:8A:CE:97
Authority key identifier: 39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D
Certificate issuer:       /CN=39FBFF134ABD193CAEA4AAB003503031F998187D
Certificate serial:       3351998216BD4C847FF56328307A7F5FA5CF71AE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
Manifest number:          66
Signing time:             Fri 24 Jul 2026 02:02:18 +0000
Manifest this update:     Fri 24 Jul 2026 01:57:18 +0000
Manifest next update:     Sat 25 Jul 2026 04:53:18 +0000
Files and hashes:         1: 39FBFF134ABD193CAEA4AAB003503031F998187D.crl (hash: odfxaZ72yavUmGESuxaAnIEKx0khHZ0M/7KmKC4DZuI=)
                          2: 3131342e32392e3234342e302f32322d3234203d3e20313331363031.roa (hash: UEZLGnP+f6dvuTFKx5co3CN+bp25mFinjEy0MFxQtNo=)
                          3: 3130332e3235322e3139362e302f32322d3234203d3e20313331363031.roa (hash: H53goHHbIQsVYLSl4R7a2BLrNh+WubAvsiCMNEEPsmk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl
                          rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:51:99:82:16:bd:4c:84:7f:f5:63:28:30:7a:7f:5f:a5:cf:71:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39FBFF134ABD193CAEA4AAB003503031F998187D
        Validity
            Not Before: Jul 24 01:57:18 2026 GMT
            Not After : Jul 25 04:53:18 2026 GMT
        Subject: CN=E67555A3A9CEB4CBA1B4083F3A3371E8678ACE97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:28:91:79:4d:c0:dd:df:3c:29:fc:11:af:ff:
                    04:71:56:a0:31:ef:4b:f4:36:a6:3c:59:8f:04:1d:
                    ef:35:23:fc:9f:3f:a6:00:99:0a:74:e4:4d:ce:ab:
                    91:0b:c2:38:80:f3:13:91:a1:04:12:97:85:25:de:
                    7d:ac:0b:7f:8f:dc:21:e7:29:e4:22:cb:82:8b:f8:
                    be:75:42:9e:3c:b6:ec:fd:ea:1f:2a:7a:ba:8c:cb:
                    e5:62:9a:ce:f8:9f:b2:af:20:65:76:56:b2:ae:06:
                    5c:de:bd:69:d3:f6:92:6a:6f:ce:84:9b:53:91:9f:
                    7e:d4:ec:c2:72:73:c9:b5:dd:49:1a:7f:55:b6:93:
                    95:42:07:99:16:c4:75:c2:05:c0:cf:8b:54:f9:d7:
                    b9:6f:ae:58:52:b0:16:e0:a3:84:04:1b:d1:fd:8c:
                    86:5c:b9:96:d5:54:25:af:62:51:ad:55:fc:9c:c6:
                    eb:49:af:2f:83:28:20:f7:7a:ce:37:fc:67:4b:aa:
                    58:39:a4:a6:d1:e9:f0:24:b7:64:db:f9:b3:b8:87:
                    68:4b:3c:3d:b7:0f:47:85:c9:cd:26:95:8c:de:1c:
                    22:9e:d8:3a:90:67:3e:87:fd:17:88:b5:2e:a4:f8:
                    ab:c9:3a:71:01:77:fc:c3:c6:0f:d9:38:28:5a:4b:
                    b5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:75:55:A3:A9:CE:B4:CB:A1:B4:08:3F:3A:33:71:E8:67:8A:CE:97
            X509v3 Authority Key Identifier:
                keyid:39:FB:FF:13:4A:BD:19:3C:AE:A4:AA:B0:03:50:30:31:F9:98:18:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/39FBFF134ABD193CAEA4AAB003503031F998187D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DCT/0/39FBFF134ABD193CAEA4AAB003503031F998187D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:be:98:3a:87:a5:2a:c4:90:1f:57:d1:83:a7:13:28:93:95:
         17:93:ae:82:6d:4c:3c:79:21:ab:27:f3:f6:c4:2f:3e:fe:30:
         d8:b7:2f:e9:11:d1:b0:65:5f:b9:09:0f:ab:f4:f9:53:91:9b:
         9f:60:3e:10:20:38:c1:bb:42:b4:f6:ed:09:46:cb:ec:50:81:
         e5:d5:de:7f:e1:3a:28:98:e8:1e:14:1e:da:1a:43:7c:21:f4:
         7f:06:82:12:c1:c8:28:9b:9c:18:cf:de:ef:a2:8e:5f:22:cb:
         ec:93:ba:e9:01:86:0f:52:9d:6d:53:5e:2e:d7:53:e4:33:b4:
         86:e0:f1:26:d0:22:fe:76:3b:61:f2:fd:65:77:dc:bc:a6:3c:
         a1:bd:3f:ef:32:bd:71:25:96:ca:a5:df:6d:56:76:bb:a8:d9:
         2f:1f:54:86:be:3a:9a:a4:6d:ba:7c:4a:3b:67:90:43:a0:c3:
         7b:91:64:53:23:ab:d8:be:98:99:25:c8:7a:0f:54:67:81:ad:
         06:b2:08:7d:06:83:e9:46:cb:2b:12:9f:2a:27:a1:b0:e4:1d:
         65:b9:aa:9d:39:4a:84:e2:71:2a:d8:cf:e8:a4:30:cd:86:44:
         8d:cd:fe:7d:fa:9a:6e:fc:1d:ee:75:b2:65:75:8b:89:94:74:
         a0:86:b6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:37 2026 by rpki-client