Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
File:                     7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft (raw, json)
Hash identifier:          EWVSMaiXFDtx97SUb6oiIuAZ0rUsthh2s2dhnImBYH0=
Subject key identifier:   54:FD:34:30:ED:F5:23:BD:4E:DC:7D:84:8E:66:AA:DB:DF:01:E9:E5
Authority key identifier: 7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76
Certificate issuer:       /CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
Certificate serial:       577BEB7170B84EADA2C77D1E30CCF4EAC5CDEBEB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
Manifest number:          6B
Signing time:             Tue 28 Jul 2026 13:14:00 +0000
Manifest this update:     Tue 28 Jul 2026 13:09:00 +0000
Manifest next update:     Wed 29 Jul 2026 15:20:00 +0000
Files and hashes:         1: 7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl (hash: lt2hST2qdET2sWkSoMPauYCnp6tSaCJgf7zKE2adwO8=)
                          2: 3130332e36392e34382e302f32332d3332203d3e20313331363432.roa (hash: o7B66t9SqLTxpoTquQyKEFqbdaVVWkZmLbtbMwzYiRQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl
                          rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:7b:eb:71:70:b8:4e:ad:a2:c7:7d:1e:30:cc:f4:ea:c5:cd:eb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
        Validity
            Not Before: Jul 28 13:09:00 2026 GMT
            Not After : Jul 29 15:20:00 2026 GMT
        Subject: CN=54FD3430EDF523BD4EDC7D848E66AADBDF01E9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:c1:51:e1:5e:18:e2:22:76:bd:b7:43:ad:
                    30:21:49:9f:f1:62:80:c7:d6:85:49:b7:ea:48:3a:
                    e6:75:14:33:2d:b1:52:9d:fa:d0:d7:f9:b7:37:4d:
                    59:4a:27:e9:45:50:f3:6d:56:b8:07:f2:c9:b5:5c:
                    4f:b9:4f:bc:5d:0e:72:c6:4a:c0:87:8f:20:74:3d:
                    08:8d:96:12:a7:0d:80:0a:f2:e3:08:4f:a0:4c:0a:
                    91:52:e3:75:de:ad:12:67:29:41:04:0c:25:ba:76:
                    34:4b:12:16:cc:9d:70:56:f8:79:00:6b:ab:28:ed:
                    2d:a3:b1:6c:8f:78:12:32:14:25:c4:72:b6:85:1d:
                    94:68:52:95:9d:50:01:e9:71:96:e9:aa:e1:f6:d7:
                    99:1f:2e:e4:ab:b4:1b:aa:18:b6:a0:e9:05:01:d2:
                    35:ae:31:af:6b:68:c5:f2:32:a9:d5:d6:08:f0:d9:
                    0d:5c:23:7c:dc:0d:87:c7:be:d1:14:83:fb:47:a9:
                    23:16:5c:3a:14:21:a0:a0:29:31:c9:ca:b7:af:8f:
                    f6:c8:18:53:8d:08:8d:77:8b:5c:8a:04:5d:41:17:
                    01:64:e4:d3:26:87:8e:96:07:51:18:6b:1e:19:a7:
                    32:81:88:ae:cf:dd:11:3a:37:f7:f4:5d:ec:be:fa:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FD:34:30:ED:F5:23:BD:4E:DC:7D:84:8E:66:AA:DB:DF:01:E9:E5
            X509v3 Authority Key Identifier:
                keyid:7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:06:df:f5:fe:09:4b:16:3a:d3:4e:9e:20:3a:2f:ec:22:79:
         36:a9:9c:47:ba:de:ae:b9:1b:5e:75:d5:67:37:a7:d1:47:16:
         e0:d1:65:04:d5:35:ab:39:d1:71:bd:cb:5f:b9:1a:98:31:c0:
         f0:df:a8:8e:2a:5e:95:eb:54:c9:2d:46:9b:d4:12:e8:cd:fc:
         25:45:a1:6d:47:93:5a:78:c7:43:43:85:3d:4b:e0:eb:ba:62:
         af:9b:70:89:ab:5a:22:56:1b:42:34:d1:7b:18:fb:3d:09:56:
         c3:d6:d8:fe:cd:05:7c:92:e6:8c:f4:24:5f:a2:6c:fa:89:85:
         89:3e:a9:e2:96:12:27:ba:93:90:d3:78:37:8e:b2:64:93:c5:
         d5:10:d4:e7:cf:33:65:55:69:e8:7f:39:36:74:73:31:4e:b3:
         48:35:ba:3d:21:2e:e6:8b:37:2d:ee:88:a0:1e:c5:b2:f7:d9:
         99:a4:a3:2f:69:af:5b:cf:b3:20:67:54:ce:c2:f8:f6:6c:59:
         83:13:a8:80:94:e2:c0:55:72:ef:8a:bf:15:86:18:8b:cd:59:
         6d:1f:2b:3c:a9:99:6e:85:f3:5d:79:4e:b6:dc:fe:e1:41:70:
         66:c0:20:86:af:79:19:a9:45:a1:a7:ea:f7:de:23:00:9b:92:
         c8:44:52:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:24:19 2026 by rpki-client