Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
File:                     90CC65194573D100A9A5ECAD83FF235C91E49F84.mft (raw, json)
Hash identifier:          DTnMeRentkegDPKWMkWLa8NzGSes43Twy/vb9vUbazc=
Subject key identifier:   C6:03:37:7C:4C:E1:95:BE:E6:ED:DE:09:30:1D:D7:68:3D:00:C4:F1
Authority key identifier: 90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84
Certificate issuer:       /CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
Certificate serial:       5566F7A1A8D62A33C0A144823AC96F0271C56F1D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
Manifest number:          B7
Signing time:             Thu 24 Sep 2026 09:04:17 +0000
Manifest this update:     Thu 24 Sep 2026 08:59:17 +0000
Manifest next update:     Fri 25 Sep 2026 10:28:17 +0000
Files and hashes:         1: 3230332e3137352e3130342e302f32332d3234203d3e20313530373535.roa (hash: YbtbNsPkQYRd3JYxoqhXztojoklcb1dDBNFr1Ga338o=)
                          2: 90CC65194573D100A9A5ECAD83FF235C91E49F84.crl (hash: ftIrE04KC5dETezMIh2osng+/eUFydrmJfQpcSSrvp8=)
                          3: 323430313a346536303a3a2f33322d3438203d3e20313530373535.roa (hash: wDLEMecsHR0Z6XE3oU5zld/TCGNqqJB7doxlMS3kCag=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl
                          rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 10:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:66:f7:a1:a8:d6:2a:33:c0:a1:44:82:3a:c9:6f:02:71:c5:6f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90CC65194573D100A9A5ECAD83FF235C91E49F84
        Validity
            Not Before: Sep 24 08:59:17 2026 GMT
            Not After : Sep 25 10:28:17 2026 GMT
        Subject: CN=C603377C4CE195BEE6EDDE09301DD7683D00C4F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:8e:1e:2c:66:2f:c5:41:9f:c0:f2:32:bb:
                    df:2d:e9:ee:f1:d2:10:80:71:d9:fc:3a:3c:d2:c1:
                    81:10:c9:5b:05:d2:b7:80:cd:d3:08:51:37:2a:b3:
                    2f:ab:d5:b5:84:9b:d0:f5:92:83:11:aa:ff:a0:45:
                    9b:5d:43:95:a4:21:5e:d7:b7:f5:0d:d9:4d:c3:e6:
                    1a:b4:af:a7:a5:b1:25:5e:02:65:26:78:c9:8f:8a:
                    a2:61:6e:4d:8d:10:79:1b:fc:c6:36:c4:46:23:f9:
                    eb:40:3a:1a:a9:bf:a2:d7:22:22:2f:eb:34:9e:c6:
                    16:81:4c:9b:63:52:58:58:ab:e3:51:78:2c:de:a6:
                    93:90:b4:04:cb:f2:8b:7f:31:0b:5b:cb:f3:b1:79:
                    cb:2e:03:cc:f0:56:c8:45:5e:8c:93:5f:dc:2b:1a:
                    67:47:0f:c5:65:78:0a:a2:55:55:0f:46:32:e5:a3:
                    7b:1d:d7:3b:87:0f:d7:79:7d:7c:fe:da:17:96:d6:
                    0a:33:d0:55:6c:e4:0d:01:db:5d:ea:0b:c8:f1:a1:
                    18:ff:50:fc:2b:6b:21:b3:23:f5:7a:79:56:73:a5:
                    71:ad:ea:8c:da:1d:85:cd:85:57:d8:e1:05:36:44:
                    e9:b3:11:47:4c:f1:42:b7:1a:62:cf:e2:7a:68:49:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:03:37:7C:4C:E1:95:BE:E6:ED:DE:09:30:1D:D7:68:3D:00:C4:F1
            X509v3 Authority Key Identifier:
                keyid:90:CC:65:19:45:73:D1:00:A9:A5:EC:AD:83:FF:23:5C:91:E4:9F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/90CC65194573D100A9A5ECAD83FF235C91E49F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NUNLINE/0/90CC65194573D100A9A5ECAD83FF235C91E49F84.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:95:90:40:4f:b2:61:ed:7e:39:3d:b7:c7:b2:a3:63:30:02:
         d0:d7:28:5f:c5:bf:f8:c8:f3:93:7d:f9:ec:4a:53:6b:b9:6e:
         ab:cc:af:f3:82:9d:53:21:25:4f:dc:55:61:57:0b:29:fb:99:
         c9:78:e2:71:e7:af:90:5f:4a:f7:5c:48:7b:17:11:73:c8:78:
         ce:3d:c9:ad:26:1d:fe:fe:ab:40:d0:de:84:22:98:b3:a9:a4:
         74:17:f4:27:11:eb:dc:20:74:26:55:e7:95:0d:ed:17:81:74:
         25:e5:54:57:8b:c5:ac:46:f5:ba:a6:d5:93:a2:a7:94:7e:85:
         23:78:ba:10:70:37:b7:e7:41:e7:80:72:cf:a6:79:3c:c3:33:
         29:0a:24:c7:5c:ce:ae:92:59:5f:a4:cb:f3:e0:ac:08:ca:d2:
         ee:63:47:59:72:3e:5b:1a:25:7c:16:73:43:a0:cb:2b:08:82:
         d5:91:f6:6b:04:b6:16:1b:7d:61:9a:34:d5:f9:79:99:61:1b:
         a1:45:e8:04:60:16:8e:7d:44:7f:16:61:f6:67:d8:84:01:06:
         a6:4c:e3:68:d2:fa:3d:be:76:bb:88:2b:9e:6b:f5:00:53:7c:
         72:b4:ba:28:c4:a5:b8:3c:c9:4c:03:0b:07:81:09:57:26:91:
         af:e8:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:57:04 2026 by rpki-client