Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
File:                     157D536924EE6C5A7711625C6906CB5139BE6605.mft (raw, json)
Hash identifier:          LkvBRkUbeu5b4jy9ZiPxGQsIEXjq8v/yiXKa4hG7GN8=
Subject key identifier:   22:DC:32:45:72:D9:F1:3F:D8:E1:F0:C3:05:54:F6:10:96:11:E7:8E
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       77EA9A488704943DA2316BBD3B499EFFE78C2284
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
Manifest number:          84
Signing time:             Tue 28 Jul 2026 10:23:10 +0000
Manifest this update:     Tue 28 Jul 2026 10:18:10 +0000
Manifest next update:     Wed 29 Jul 2026 10:33:10 +0000
Files and hashes:         1: 3231302e36372e39362e302f32302d3230203d3e2039323434.roa (hash: C02rXsQ6Y93MLpg6oZMwS2YNlT8ftQ8gTIwWkyT1p/c=)
                          2: 3131332e32312e3138342e302f32322d3234203d3e2039353834.roa (hash: JffZ7xaMKxvRLXvyZwq6BE7sU1Ksg43YEW866OsFW/Y=)
                          3: 36312e35362e38342e302f32342d3234203d3e2039323434.roa (hash: GYR6FspSCdnkcSMZGwxPQmD5bQPvQNdvhgSJGhjts20=)
                          4: 36312e3234372e3136352e302f32342d3234203d3e2039323434.roa (hash: k4BvpqmiGcRTqeEDlHzCRia3WesXP5gUhCWBJ3J9XD0=)
                          5: 36312e35362e36342e302f32302d3234203d3e2039323434.roa (hash: ie+Yaj7K/OCtwgg9fHP4osRhiW67GSidm1dXNt6AjH0=)
                          6: 36312e35362e36372e302f32342d3234203d3e2039323434.roa (hash: fIv1TMJeuFOvi9xY2TJoQcWHee5kMAwWsOnDU4no5V8=)
                          7: 36312e3234372e3136302e302f32302d3234203d3e2039323434.roa (hash: qxXWankg7oia3AZJcligt1FqlLwncBLZ3x0aR/n5a/M=)
                          8: 36312e35362e36342e302f32312d3231203d3e2039323434.roa (hash: oYIVd+rx3myxoRGdVrCSUc7g08NdN5+NRwaA2ICa/fc=)
                          9: 3131332e32312e3136302e302f32302d3230203d3e2039323434.roa (hash: zNMmR5ncf64bpLQDMhE/zKkbuo5hWND/v72vA6wBXyc=)
                          10: 36312e35362e38302e302f32312d3231203d3e2039323434.roa (hash: BtytB4ImCxwmDNMsYcsPUOT+c3DhbJMzf7Pj6Zu2TSA=)
                          11: 36312e35362e38382e302f32312d3231203d3e2039323434.roa (hash: Yv9i1Wf6abh3HnSZnR0KOLnhp4lGY5xfo27UjbSYy+8=)
                          12: 36312e35362e37322e302f32312d3231203d3e2039323434.roa (hash: neCogx7kiACRIuTdTb4mPlJDa/8XCuRztd8KmEyTXNk=)
                          13: 323430333a656530303a3a2f33322d3536203d3e2039323434.roa (hash: 3xt+0tfS9ZpseLYoRn7kbI8U4wMAyjKAyApcX78rnyU=)
                          14: 3131332e32312e3137332e302f32342d3234203d3e2039323434.roa (hash: zad3+2RXzsQ+kKuIVqMfSQyLlU7unW/aAqyPG/mguxY=)
                          15: 36312e35362e38362e302f32342d3234203d3e2039323434.roa (hash: DZQdAc5OZiI1l50V9csTghB0Kp8yJsJBeM5CKzaxzH8=)
                          16: 36312e3234372e3136302e302f32302d3230203d3e2039323434.roa (hash: SYEKqw4xhnIhxcOUCduJvhjRdzbef1covv+Qeem6MuM=)
                          17: 3231302e36372e39362e302f32302d3234203d3e2039323434.roa (hash: zHNjCezs8fFWlbXZ3/WOnM3QHIEAmgqdy+ijyA8rKKI=)
                          18: 3131332e32312e3137362e302f32312d3231203d3e2039323434.roa (hash: KJODPHzEc1hWKKBkKg9JUc5d7SVmqFSTdy72MVSqi9s=)
                          19: 3131332e32312e3136302e302f31392d3234203d3e2039323434.roa (hash: Qo1J6GmDEF02G8LEyX3EsjEFHF0gh33rgqCIM17+ySY=)
                          20: 157D536924EE6C5A7711625C6906CB5139BE6605.crl (hash: Tgtcr/UVzOVk6XTPHeAXt3AW3++5E7Q6yi7yUaso0NQ=)
                          21: 36312e3234372e3136302e302f32312d3231203d3e2039323434.roa (hash: nhV3EOJxiTmAffz4Z7cCPeuZbMUl+G2BM8SxTh0pjdM=)
                          22: 36312e35362e38302e302f32302d3230203d3e2039323434.roa (hash: fY0JZskhhOlyqSdfMeP9akHRUU7aeJhuk2izFKgXPNQ=)
                          23: 36312e3234372e3136382e302f32312d3231203d3e2039323434.roa (hash: yJYnyLxqCiz6yoVKYK54rTjzmF9VmGcpnqZIG+inTu0=)
                          24: 36312e35362e36342e302f32302d3230203d3e2039323434.roa (hash: ZKLo/ilTfM+KDgM75kk/lKbUAkojHaOIgyc3I52X5q8=)
                          25: 36312e35362e36352e302f32342d3234203d3e2039323434.roa (hash: 58eBZJn8dVtEAJDGPa82sE+r7hzziamq/6j0Jux307s=)
                          26: 3131332e32312e3137352e302f32342d3234203d3e2039323434.roa (hash: whesli0aowOeEwrokq13wIdP2tp0cw9ZGh1XLVuettA=)
                          27: 3131332e32312e3138382e302f32322d3232203d3e2039323434.roa (hash: mj+jG0WgHPI9Z78w1rU1L8re5exbzzfP02Vd4ETlO4I=)
                          28: 36312e35362e38302e302f32302d3234203d3e2039323434.roa (hash: 6H/xsz0QA1bSR/X4dlktPQin25xpMQY3A5kPm3VjeZo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ea:9a:48:87:04:94:3d:a2:31:6b:bd:3b:49:9e:ff:e7:8c:22:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: Jul 28 10:18:10 2026 GMT
            Not After : Jul 29 10:33:10 2026 GMT
        Subject: CN=22DC324572D9F13FD8E1F0C30554F6109611E78E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:17:2c:a2:1c:5d:e1:77:68:74:eb:4c:72:b6:
                    f1:d6:a3:0e:9c:9f:cf:36:00:34:68:2b:1d:ff:fe:
                    8c:83:c3:83:8f:11:bc:bd:96:8d:e9:45:35:13:60:
                    ed:a9:3f:33:a2:c9:85:fa:87:09:4e:95:a2:d5:33:
                    7e:e5:ba:cd:3e:65:74:28:b1:1b:98:e1:d3:51:f2:
                    c6:91:83:00:a0:e5:23:a5:69:0f:db:37:63:e7:c8:
                    53:b6:e4:b4:3b:c4:61:f3:1e:7b:9a:74:c3:fa:b9:
                    33:38:4b:af:f0:d5:b9:6d:89:01:66:1d:06:74:25:
                    a1:cc:cc:c7:7b:1c:1a:48:ef:75:1f:ad:41:c4:17:
                    71:3d:1a:0a:30:d7:7e:f1:37:77:ad:1c:af:d5:ae:
                    70:23:01:95:11:d6:4b:54:07:47:d3:ae:65:1a:94:
                    17:73:a0:27:ad:8b:c1:7f:5d:0d:a1:f2:9e:25:27:
                    a1:7c:d6:b0:9f:71:4c:15:c1:c5:8d:f9:42:5a:72:
                    26:49:e7:5c:12:43:c0:12:15:33:9f:88:e6:a6:bd:
                    8d:e4:95:fe:c6:c0:7e:83:03:9e:fe:7a:ca:36:19:
                    d8:48:fb:ea:02:1f:32:49:ac:c9:81:55:69:cb:ab:
                    a3:1b:31:60:fe:c0:97:36:a2:3b:12:e9:d5:d0:17:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DC:32:45:72:D9:F1:3F:D8:E1:F0:C3:05:54:F6:10:96:11:E7:8E
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c4:a9:af:ea:b8:c6:5f:2f:99:d8:18:c8:d5:bb:3c:08:d9:
         b5:30:43:b7:94:2d:dc:98:e8:d7:68:fd:c3:67:5e:fa:f7:25:
         0c:e8:5f:d4:8f:c9:d2:3a:e6:bf:fd:9e:45:8c:bf:d2:ab:15:
         df:ba:dc:3f:e3:bd:6e:eb:d0:ff:77:85:73:ec:3c:62:61:8a:
         04:f5:15:15:ab:52:82:1e:da:4b:74:61:e1:69:70:4c:ee:2d:
         6c:82:8b:c9:90:ac:04:b1:74:92:d1:55:71:0f:b7:0c:1e:68:
         64:47:a7:6d:ee:c8:ac:a4:98:b5:c2:3b:c3:a2:50:81:f8:9e:
         9d:b9:c2:0e:55:37:5e:cd:39:52:b8:31:d2:3f:8d:a7:d0:8e:
         ae:6e:3e:f0:c6:64:35:fc:32:16:16:b7:a6:fd:2a:44:14:03:
         9c:ad:a3:5b:4e:5f:a6:61:f7:30:9a:19:18:78:82:80:ef:83:
         00:17:8a:70:0c:ce:99:85:b3:00:ee:3b:e8:16:f1:b3:84:83:
         fa:6f:8a:fd:13:d6:44:96:30:50:9f:9b:d6:b7:49:9b:2a:65:
         15:c2:ad:e9:76:18:d6:d9:44:3d:8d:37:bf:04:c5:03:d0:4d:
         20:c7:d7:50:df:aa:84:a6:42:84:6d:27:a6:81:0d:e7:27:7b:
         d7:6e:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:06 2026 by rpki-client