Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
File:                     157D536924EE6C5A7711625C6906CB5139BE6605.mft (raw, json)
Hash identifier:          X7NE8WqL78RdBw7vucR594Pa8iXymXvW7xspxa+gnVE=
Subject key identifier:   1C:6D:22:93:CB:0D:FE:82:7D:00:44:85:02:3F:74:7D:20:77:0E:39
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       18005AF139230F6BEE6C600E2F764C0F8FAB50CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
Manifest number:          CF
Signing time:             Tue 22 Sep 2026 17:11:06 +0000
Manifest this update:     Tue 22 Sep 2026 17:06:06 +0000
Manifest next update:     Wed 23 Sep 2026 19:26:06 +0000
Files and hashes:         1: 3131332e32312e3138382e302f32322d3232203d3e2039323434.roa (hash: mj+jG0WgHPI9Z78w1rU1L8re5exbzzfP02Vd4ETlO4I=)
                          2: 36312e3234372e3136382e302f32312d3231203d3e2039323434.roa (hash: yJYnyLxqCiz6yoVKYK54rTjzmF9VmGcpnqZIG+inTu0=)
                          3: 36312e35362e38342e302f32342d3234203d3e2039323434.roa (hash: GYR6FspSCdnkcSMZGwxPQmD5bQPvQNdvhgSJGhjts20=)
                          4: 3131332e32312e3137332e302f32342d3234203d3e2039323434.roa (hash: zad3+2RXzsQ+kKuIVqMfSQyLlU7unW/aAqyPG/mguxY=)
                          5: 36312e35362e36342e302f32312d3231203d3e2039323434.roa (hash: oYIVd+rx3myxoRGdVrCSUc7g08NdN5+NRwaA2ICa/fc=)
                          6: 36312e3234372e3136302e302f32302d3234203d3e2039323434.roa (hash: qxXWankg7oia3AZJcligt1FqlLwncBLZ3x0aR/n5a/M=)
                          7: 3231302e36372e39362e302f32302d3234203d3e2039323434.roa (hash: zHNjCezs8fFWlbXZ3/WOnM3QHIEAmgqdy+ijyA8rKKI=)
                          8: 36312e35362e38362e302f32342d3234203d3e2039323434.roa (hash: DZQdAc5OZiI1l50V9csTghB0Kp8yJsJBeM5CKzaxzH8=)
                          9: 36312e3234372e3136302e302f32312d3231203d3e2039323434.roa (hash: nhV3EOJxiTmAffz4Z7cCPeuZbMUl+G2BM8SxTh0pjdM=)
                          10: 3131332e32312e3136302e302f31392d3234203d3e2039323434.roa (hash: Qo1J6GmDEF02G8LEyX3EsjEFHF0gh33rgqCIM17+ySY=)
                          11: 36312e35362e38302e302f32302d3230203d3e2039323434.roa (hash: fY0JZskhhOlyqSdfMeP9akHRUU7aeJhuk2izFKgXPNQ=)
                          12: 36312e35362e38302e302f32302d3234203d3e2039323434.roa (hash: 6H/xsz0QA1bSR/X4dlktPQin25xpMQY3A5kPm3VjeZo=)
                          13: 3131332e32312e3136302e302f32302d3230203d3e2039323434.roa (hash: zNMmR5ncf64bpLQDMhE/zKkbuo5hWND/v72vA6wBXyc=)
                          14: 36312e3234372e3136352e302f32342d3234203d3e2039323434.roa (hash: k4BvpqmiGcRTqeEDlHzCRia3WesXP5gUhCWBJ3J9XD0=)
                          15: 36312e35362e36372e302f32342d3234203d3e2039323434.roa (hash: fIv1TMJeuFOvi9xY2TJoQcWHee5kMAwWsOnDU4no5V8=)
                          16: 3131332e32312e3137362e302f32312d3231203d3e2039323434.roa (hash: KJODPHzEc1hWKKBkKg9JUc5d7SVmqFSTdy72MVSqi9s=)
                          17: 36312e3234372e3136302e302f32302d3230203d3e2039323434.roa (hash: SYEKqw4xhnIhxcOUCduJvhjRdzbef1covv+Qeem6MuM=)
                          18: 36312e35362e36352e302f32342d3234203d3e2039323434.roa (hash: 58eBZJn8dVtEAJDGPa82sE+r7hzziamq/6j0Jux307s=)
                          19: 3131332e32312e3138342e302f32322d3234203d3e2039353834.roa (hash: JffZ7xaMKxvRLXvyZwq6BE7sU1Ksg43YEW866OsFW/Y=)
                          20: 3231302e36372e39362e302f32302d3230203d3e2039323434.roa (hash: C02rXsQ6Y93MLpg6oZMwS2YNlT8ftQ8gTIwWkyT1p/c=)
                          21: 36312e35362e38302e302f32312d3231203d3e2039323434.roa (hash: BtytB4ImCxwmDNMsYcsPUOT+c3DhbJMzf7Pj6Zu2TSA=)
                          22: 323430333a656530303a3a2f33322d3536203d3e2039323434.roa (hash: 3xt+0tfS9ZpseLYoRn7kbI8U4wMAyjKAyApcX78rnyU=)
                          23: 36312e35362e37322e302f32312d3231203d3e2039323434.roa (hash: neCogx7kiACRIuTdTb4mPlJDa/8XCuRztd8KmEyTXNk=)
                          24: 157D536924EE6C5A7711625C6906CB5139BE6605.crl (hash: QUjKutQTN8C3XFL60L3CZ+dNR1igOx5kuKf/V7t3MmE=)
                          25: 36312e35362e36342e302f32302d3230203d3e2039323434.roa (hash: ZKLo/ilTfM+KDgM75kk/lKbUAkojHaOIgyc3I52X5q8=)
                          26: 3131332e32312e3137352e302f32342d3234203d3e2039323434.roa (hash: whesli0aowOeEwrokq13wIdP2tp0cw9ZGh1XLVuettA=)
                          27: 36312e35362e36342e302f32302d3234203d3e2039323434.roa (hash: ie+Yaj7K/OCtwgg9fHP4osRhiW67GSidm1dXNt6AjH0=)
                          28: 36312e35362e38382e302f32312d3231203d3e2039323434.roa (hash: Yv9i1Wf6abh3HnSZnR0KOLnhp4lGY5xfo27UjbSYy+8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 12:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:00:5a:f1:39:23:0f:6b:ee:6c:60:0e:2f:76:4c:0f:8f:ab:50:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: Sep 22 17:06:06 2026 GMT
            Not After : Sep 23 19:26:06 2026 GMT
        Subject: CN=1C6D2293CB0DFE827D004485023F747D20770E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9e:3f:b8:f4:ab:58:2e:d6:06:99:3b:0d:77:
                    a6:f5:e7:db:22:db:52:7d:d5:97:a4:6e:62:68:c3:
                    57:50:21:ea:2c:a3:24:ba:42:54:66:70:04:9d:ee:
                    79:de:1a:fa:c6:1d:0c:ce:bc:09:e5:6f:a3:56:0c:
                    04:19:9d:f2:a3:9e:ce:24:75:33:57:66:b6:9c:ed:
                    be:60:ae:74:8e:e4:a5:e8:92:10:01:f2:7a:a5:5b:
                    09:41:a5:cf:09:7b:e6:84:24:9a:bd:50:01:83:8b:
                    12:3c:1c:28:c2:35:68:89:11:90:91:da:23:97:11:
                    ae:c1:ab:a6:46:04:05:37:05:af:fe:91:4b:01:aa:
                    82:9e:c9:42:a0:eb:bb:de:0d:3c:de:3e:1a:77:60:
                    6b:51:97:94:58:4e:ef:a1:03:e5:26:5b:d6:b9:73:
                    e1:ee:b3:7a:2a:df:88:8f:00:08:59:71:d2:b7:f4:
                    2a:db:8a:b2:75:5d:56:07:42:a2:8f:b0:d0:ee:a7:
                    bd:36:eb:10:d4:93:d7:3b:16:6e:2a:48:f1:65:56:
                    f9:e0:b7:56:39:09:e7:c8:39:b4:95:7c:23:ec:d8:
                    03:2f:1c:65:98:75:09:5d:5b:60:5c:8e:ab:dd:1f:
                    ac:32:d2:1f:6b:96:6a:6d:f1:e6:f3:ba:c3:a5:e5:
                    35:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6D:22:93:CB:0D:FE:82:7D:00:44:85:02:3F:74:7D:20:77:0E:39
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4b:c5:3a:ab:d8:64:69:d9:35:61:aa:0c:03:f2:9f:28:a1:
         78:dc:fe:e9:69:3c:26:6c:09:47:bc:6d:a0:4c:86:57:46:8c:
         ab:a0:e4:3e:0e:fa:99:91:66:03:ac:22:71:8a:05:e6:4e:ad:
         6b:9a:d3:04:88:21:c6:d3:73:b2:2a:3b:e9:93:fc:fb:20:76:
         d5:85:34:ba:61:d1:c4:41:4f:03:5b:4a:25:f4:bc:5d:fa:c5:
         fd:31:44:36:be:9f:33:69:01:b5:18:10:7c:15:81:b8:27:72:
         98:24:ab:8f:e1:b4:49:75:c8:73:79:07:6f:23:0b:b6:bd:ef:
         f6:b6:63:fa:06:ef:d6:35:73:6b:53:f2:08:1b:77:36:65:c1:
         67:a2:b4:b4:9f:52:21:44:a0:f8:d9:d4:85:4c:6d:bb:35:78:
         bd:7c:2c:94:44:a3:a5:c3:ee:b7:24:40:a4:f5:b2:4c:84:66:
         4f:36:6d:ea:31:b6:68:d2:ce:ec:ef:7a:73:ff:46:e8:ff:94:
         b4:37:ad:e3:0c:46:6e:30:1e:88:04:b6:0a:e0:7f:d4:41:23:
         9f:ea:17:20:c9:5f:d9:72:38:99:c3:da:5e:ae:c7:83:21:1f:
         3a:3b:30:50:1d:02:f1:6f:f0:65:2b:03:a6:d9:76:20:3c:7a:
         94:01:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:42:36 2026 by rpki-client