Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
File:                     7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft (raw, json)
Hash identifier:          bypnb8EH5VrMX+DkjIF6uyWMfbmn5oP/N/IKMmyvBFA=
Subject key identifier:   D6:DD:5A:6B:DE:69:7A:3F:65:68:71:0C:1F:A4:AB:EC:51:50:D4:17
Authority key identifier: 7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76
Certificate issuer:       /CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
Certificate serial:       618C3747B3134B8FBCF3D30F426CEA1BA4F1BFF4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
Manifest number:          B2
Signing time:             Sun 20 Sep 2026 11:34:19 +0000
Manifest this update:     Sun 20 Sep 2026 11:29:19 +0000
Manifest next update:     Mon 21 Sep 2026 12:16:19 +0000
Files and hashes:         1: 7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl (hash: lknKSPoM3QpLt+E/lhttVWFT9tsjNm3tmet7uw8ExJ8=)
                          2: 3130332e36392e34382e302f32332d3332203d3e20313331363432.roa (hash: o7B66t9SqLTxpoTquQyKEFqbdaVVWkZmLbtbMwzYiRQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl
                          rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 08:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8c:37:47:b3:13:4b:8f:bc:f3:d3:0f:42:6c:ea:1b:a4:f1:bf:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
        Validity
            Not Before: Sep 20 11:29:19 2026 GMT
            Not After : Sep 21 12:16:19 2026 GMT
        Subject: CN=D6DD5A6BDE697A3F6568710C1FA4ABEC5150D417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:71:20:67:62:8e:2d:d4:79:a1:db:3a:07:
                    41:04:5e:90:80:0f:95:17:53:51:2b:68:9a:40:9f:
                    d0:3a:20:17:7b:77:32:fa:69:d3:9b:07:2c:50:9d:
                    71:42:3a:4a:7e:16:f1:6c:ce:c4:2e:82:eb:76:f9:
                    03:5a:ce:90:fa:72:51:b9:f3:d3:77:cf:90:79:e6:
                    39:68:27:d9:70:fb:56:1c:9a:c3:a4:12:18:79:ec:
                    78:49:fe:10:8d:9b:8c:52:9f:72:77:dd:e9:99:49:
                    8f:44:a5:ba:80:cf:bc:59:2d:83:4d:b8:7c:aa:d9:
                    2a:da:de:f6:b9:d3:59:6d:67:49:e9:7d:58:b8:a0:
                    29:10:01:4f:d4:8c:24:f3:91:66:5d:2c:8c:35:25:
                    92:f2:a4:de:83:33:94:80:e7:90:dd:bf:e5:03:4d:
                    fe:c7:f9:dc:92:74:37:79:26:3d:7b:ee:b0:4b:d9:
                    97:c0:79:40:77:a2:ae:6e:82:99:45:99:1f:66:e7:
                    cb:66:ab:c7:88:1f:cc:ad:79:05:ce:44:ce:1f:a5:
                    35:d4:43:6a:7e:e6:24:71:f0:82:ea:81:2d:6c:68:
                    bc:5e:9b:1d:8a:7b:bb:0a:64:02:77:85:41:ce:39:
                    6c:c4:9e:66:c8:01:21:97:e2:84:9c:ad:37:52:27:
                    4d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DD:5A:6B:DE:69:7A:3F:65:68:71:0C:1F:A4:AB:EC:51:50:D4:17
            X509v3 Authority Key Identifier:
                keyid:7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:69:f9:1d:e2:c6:bf:59:d4:c6:4a:6c:29:34:82:20:d8:4a:
         24:97:de:2d:82:4c:c1:49:a5:2d:b8:a4:20:9f:f6:fc:c0:00:
         5e:63:ed:ec:85:ce:0d:09:83:86:3a:5f:79:d6:3e:4a:17:cf:
         ad:46:27:99:f9:93:fa:63:1f:83:67:f3:32:aa:c9:78:46:66:
         4d:e1:b6:40:e3:41:89:b7:ed:ca:5f:b0:e4:a4:6a:d7:27:a5:
         b5:ba:dc:d2:d6:43:88:8d:f1:ff:31:88:1d:0b:85:09:31:68:
         6c:bf:1f:14:02:07:73:65:2d:bf:21:17:f4:5a:83:a8:1f:ed:
         1c:d5:c4:e3:b9:20:6e:d3:3a:1a:fa:a0:10:f8:6f:73:4b:4b:
         14:ec:cb:fe:ec:fc:99:ff:4e:ed:32:6d:37:30:67:15:b9:df:
         c4:30:74:a3:4d:8e:d1:e8:af:87:da:52:90:04:dc:29:d5:70:
         e3:08:95:04:bc:10:22:86:4c:b0:04:74:51:82:66:3d:15:99:
         ab:67:7a:5f:d4:b5:0f:dc:1f:d0:b4:24:5d:9d:ef:fc:48:14:
         6e:a1:e7:90:79:53:47:2f:0f:78:6d:45:a9:66:6a:9e:dd:1d:
         a6:ad:cb:93:fe:36:21:e4:32:df:0b:75:8b:b3:1d:48:24:34:
         60:32:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:25:02 2026 by rpki-client