Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
File:                     034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft (raw, json)
Hash identifier:          hN/ydAPrkpPGuqdWM3dOA0hEVwpWAwd+eT4y3ntnTgA=
Subject key identifier:   5B:47:AF:FC:11:F2:43:52:0D:3D:E0:A6:A6:B1:BA:41:F2:A9:46:70
Authority key identifier: 03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA
Certificate issuer:       /CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
Certificate serial:       561C3961891CE231CAC35A09F675534BDF72BDC6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
Manifest number:          FC
Signing time:             Sat 14 Nov 2026 16:44:13 +0000
Manifest this update:     Sat 14 Nov 2026 16:39:13 +0000
Manifest next update:     Sun 15 Nov 2026 20:28:13 +0000
Files and hashes:         1: 3130332e3137362e35302e302f32332d3234203d3e203138303436.roa (hash: nI0+2spKrN4Xv9D36qIey0CsWmeOODfk2dYZVrt7wH8=)
                          2: 034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl (hash: CahDYDbOjBwhp/pyDKEy1/6HdBpp5PcWE4qC2ZxH7H4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl
                          rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 15:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:1c:39:61:89:1c:e2:31:ca:c3:5a:09:f6:75:53:4b:df:72:bd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA
        Validity
            Not Before: Nov 14 16:39:13 2026 GMT
            Not After : Nov 15 20:28:13 2026 GMT
        Subject: CN=5B47AFFC11F243520D3DE0A6A6B1BA41F2A94670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:76:32:d2:1f:af:d7:17:8f:1f:82:41:d8:
                    fa:8d:3c:42:4a:07:71:ef:d2:a8:57:1d:06:a7:03:
                    3e:48:8c:43:96:03:d8:4c:4a:96:15:6c:f0:f1:10:
                    7e:8b:ae:6d:6c:f0:8d:1a:34:f5:f9:68:6a:39:a2:
                    53:3a:35:68:85:bd:4d:ac:e7:aa:b8:2d:ee:19:b4:
                    63:6a:e6:2c:fe:89:dd:93:43:48:9c:82:d3:da:29:
                    0d:cb:61:fb:c8:d0:3e:39:41:8d:d3:ad:00:1d:47:
                    34:ed:cd:41:5a:08:99:1a:8c:46:08:88:ae:11:06:
                    0f:81:ee:61:b7:ac:d7:5e:42:3c:b7:79:f2:66:42:
                    8b:40:e5:9b:62:19:c9:44:61:b5:a0:5f:58:33:35:
                    59:78:a3:b8:6d:e1:6e:29:e0:3c:d4:2f:71:b2:70:
                    0e:0d:30:19:0c:f0:ba:57:1a:3c:1a:c5:1a:e7:11:
                    b9:c2:88:e9:2d:74:2c:19:1a:a8:d9:47:3b:f5:0a:
                    03:46:a6:08:c2:08:51:99:f9:42:df:64:44:2d:9c:
                    7b:ad:36:dd:00:f6:2c:50:64:1d:e9:3c:f1:0c:f3:
                    32:dd:db:35:d7:96:8e:cb:04:26:66:bd:0e:b8:9c:
                    7c:45:85:5a:08:32:a1:eb:ff:e8:98:96:28:05:9d:
                    b6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:47:AF:FC:11:F2:43:52:0D:3D:E0:A6:A6:B1:BA:41:F2:A9:46:70
            X509v3 Authority Key Identifier:
                keyid:03:4B:41:A1:3A:BB:0D:61:A1:54:AB:31:89:C9:BF:D2:DA:ED:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LUOSI/0/034B41A13ABB0D61A154AB3189C9BFD2DAED4DEA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:1e:a7:c4:fc:03:c5:19:f3:38:5e:fd:ca:1d:fe:d5:92:ee:
         34:3a:80:3f:69:92:f3:55:e4:5d:38:3f:67:b7:e7:df:0f:73:
         a4:46:86:dd:e9:c8:d3:b7:2d:9b:86:f4:19:f0:02:3c:e6:f4:
         30:85:ba:d9:20:02:23:e8:fe:fb:5b:82:c4:0d:db:23:e8:35:
         46:2b:0e:4f:02:06:ff:5d:16:bf:78:17:c2:3b:6a:49:fc:56:
         2d:21:09:6a:98:15:6b:30:92:8b:a3:9d:f2:b2:58:a6:ad:78:
         1d:c7:39:3c:80:b5:c4:f4:ce:fb:4b:7e:f1:8f:1b:c0:ae:93:
         fb:29:44:00:79:a6:21:0f:f0:62:fe:50:85:1b:d1:c7:94:87:
         38:10:41:fb:e0:f8:49:63:6f:f5:68:e2:bd:39:05:54:83:97:
         67:30:24:e5:14:63:0d:eb:51:49:fb:7a:e8:41:9b:f0:f3:9f:
         a8:8d:a0:fc:f6:1b:a9:7b:8f:da:53:4c:6f:1e:8c:8b:08:4d:
         e0:79:55:c2:66:b4:b5:84:6e:b3:c0:5a:b8:fc:33:17:17:ad:
         21:a7:4e:60:4c:92:8f:4e:d1:5f:e0:59:d6:9c:05:1a:10:31:
         32:e8:85:67:4b:8d:b4:6f:88:1c:9d:96:4f:19:1c:04:8b:48:
         12:41:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:17:52 2026 by rpki-client