Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft
File:                     390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft (raw, json)
Hash identifier:          k8hlBjQg4l5e3Qg7CRsx337RFQ5sSUrz7gAM9QFjzq0=
Subject key identifier:   25:C6:1A:3F:AA:BE:01:A3:89:16:1A:6D:A7:94:17:76:EB:1A:E4:F0
Authority key identifier: 39:01:37:F4:F0:6E:5F:34:38:EF:F9:5A:B8:C6:47:F7:D7:D6:D7:05
Certificate issuer:       /CN=390137F4F06E5F3438EFF95AB8C647F7D7D6D705
Certificate serial:       2B3EAFBE6BCC702CC6D9B17AA849F14A10E4C7CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft
Manifest number:          B9
Signing time:             Fri 25 Sep 2026 13:58:18 +0000
Manifest this update:     Fri 25 Sep 2026 13:53:18 +0000
Manifest next update:     Sat 26 Sep 2026 16:41:18 +0000
Files and hashes:         1: 390137F4F06E5F3438EFF95AB8C647F7D7D6D705.crl (hash: ZudCCiDNcAR2R5xgINsucwh9A4C6lBuxWAZfNU0tlfU=)
                          2: 3130332e3233372e34382e302f32332d3332203d3e20313331313439.roa (hash: jfPzdhlPSaVWUOyXk1OyVIn8kAk2JIHNsOorXtdv+L0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.crl
                          rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 15:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3e:af:be:6b:cc:70:2c:c6:d9:b1:7a:a8:49:f1:4a:10:e4:c7:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390137F4F06E5F3438EFF95AB8C647F7D7D6D705
        Validity
            Not Before: Sep 25 13:53:18 2026 GMT
            Not After : Sep 26 16:41:18 2026 GMT
        Subject: CN=25C61A3FAABE01A389161A6DA7941776EB1AE4F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:86:8a:3c:c1:c2:49:9e:07:1f:60:de:f0:53:
                    bb:a8:72:bb:cb:69:31:d0:dd:ac:e1:4f:b0:b7:f3:
                    7d:39:be:0a:c3:1d:bc:00:fa:68:56:1a:35:f2:e9:
                    c6:85:7d:07:10:fa:ee:90:79:3e:f7:f0:2f:23:ea:
                    d9:f4:b4:a6:72:9c:1a:bc:d7:52:5b:57:dd:6b:e5:
                    c8:76:18:5c:2f:15:a7:b5:85:f3:a8:40:2b:a3:d8:
                    7b:9a:ac:2d:43:63:ea:c8:4b:dc:b8:d6:a0:0f:f8:
                    87:a1:f1:a4:1f:70:a3:8d:18:5a:39:c8:02:b5:5d:
                    9c:90:88:09:94:8e:81:45:44:87:e7:da:a6:36:0e:
                    78:f4:3f:1b:0f:72:ea:a7:4c:53:68:ae:bd:e8:4a:
                    c0:64:f1:c9:de:98:15:5e:b7:61:37:65:67:55:95:
                    53:14:7d:e3:6e:9f:71:c8:66:19:4e:a8:61:e0:5b:
                    44:ab:cc:6f:96:44:b2:91:ed:4f:7a:8f:a7:20:a8:
                    a7:4a:1d:29:b8:e1:ad:a6:9c:21:10:b3:66:af:03:
                    c9:c1:ab:6b:4a:1f:d7:29:5f:61:01:a3:a1:54:3b:
                    3c:b2:83:a1:d0:ee:80:b1:59:6b:4e:4e:a0:b4:db:
                    b8:f2:d2:95:5d:8d:99:e2:96:a5:ef:09:84:2b:ca:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C6:1A:3F:AA:BE:01:A3:89:16:1A:6D:A7:94:17:76:EB:1A:E4:F0
            X509v3 Authority Key Identifier:
                keyid:39:01:37:F4:F0:6E:5F:34:38:EF:F9:5A:B8:C6:47:F7:D7:D6:D7:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LIBO/0/390137F4F06E5F3438EFF95AB8C647F7D7D6D705.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:60:d2:a0:a9:f0:cd:95:17:6a:f3:06:57:6d:9b:ec:43:80:
         3a:57:a5:0f:8f:ac:16:61:9b:b6:ea:e6:29:c6:2c:c9:a9:5c:
         23:3f:ab:f8:02:7e:fb:09:a7:54:e7:70:60:96:64:5b:11:5d:
         84:d3:bc:bc:90:11:59:8d:9c:6f:0b:82:aa:55:15:7a:a0:d8:
         31:e1:ee:bf:a2:fe:cd:9b:4e:46:dd:0b:84:5b:bd:65:60:4e:
         8c:1d:d9:35:56:6d:6d:5c:c5:d4:cb:58:dd:35:6b:ba:de:1e:
         c6:62:90:9a:3b:99:a0:51:4f:e7:c9:85:f9:ab:9f:62:ea:69:
         9b:be:7e:78:2e:b0:27:84:e6:18:7d:aa:1a:7a:d1:c8:43:e8:
         f7:d7:46:55:b3:00:0e:9a:61:29:48:ad:78:ef:d9:86:c2:b9:
         25:8a:31:76:b3:92:1a:bf:a7:37:d2:37:28:03:ec:26:b1:35:
         ed:cf:ce:de:24:be:56:04:d4:dd:a3:ce:7d:26:30:b7:9e:fc:
         87:5a:a6:19:e5:40:92:e0:7d:f3:bf:b8:0f:78:79:44:fb:7d:
         87:ce:ba:ed:45:23:44:b8:1c:7c:2f:50:38:47:8a:99:d6:91:
         2b:a3:5e:da:2d:a4:7d:56:4c:d1:eb:d1:7f:3c:56:68:fc:53:
         57:e1:f8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:03:50 2026 by rpki-client