Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
File:                     157D536924EE6C5A7711625C6906CB5139BE6605.mft (raw, json)
Hash identifier:          ji8fJs+phEXQYlqGyUi88ooj9R7EB74s/dwMZ2kvzyU=
Subject key identifier:   BF:58:CB:42:60:9E:6E:A6:9A:6A:B9:8B:F1:A8:03:B3:29:55:24:55
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       6FC451C4FC1F451777343232E6CFE1CD5EDBBB0D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
Manifest number:          D9
Signing time:             Wed 30 Sep 2026 08:35:04 +0000
Manifest this update:     Wed 30 Sep 2026 08:30:04 +0000
Manifest next update:     Thu 01 Oct 2026 10:59:04 +0000
Files and hashes:         1: 3131332e32312e3138382e302f32322d3232203d3e2039323434.roa (hash: mj+jG0WgHPI9Z78w1rU1L8re5exbzzfP02Vd4ETlO4I=)
                          2: 323430333a656530303a3a2f33322d3536203d3e2039323434.roa (hash: 3xt+0tfS9ZpseLYoRn7kbI8U4wMAyjKAyApcX78rnyU=)
                          3: 36312e35362e38302e302f32302d3234203d3e2039323434.roa (hash: 6H/xsz0QA1bSR/X4dlktPQin25xpMQY3A5kPm3VjeZo=)
                          4: 3131332e32312e3136302e302f32302d3230203d3e2039323434.roa (hash: zNMmR5ncf64bpLQDMhE/zKkbuo5hWND/v72vA6wBXyc=)
                          5: 36312e35362e36342e302f32302d3230203d3e2039323434.roa (hash: ZKLo/ilTfM+KDgM75kk/lKbUAkojHaOIgyc3I52X5q8=)
                          6: 36312e35362e38302e302f32302d3230203d3e2039323434.roa (hash: fY0JZskhhOlyqSdfMeP9akHRUU7aeJhuk2izFKgXPNQ=)
                          7: 3231302e36372e39362e302f32302d3234203d3e2039323434.roa (hash: zHNjCezs8fFWlbXZ3/WOnM3QHIEAmgqdy+ijyA8rKKI=)
                          8: 36312e3234372e3136382e302f32312d3231203d3e2039323434.roa (hash: yJYnyLxqCiz6yoVKYK54rTjzmF9VmGcpnqZIG+inTu0=)
                          9: 36312e35362e38302e302f32312d3231203d3e2039323434.roa (hash: BtytB4ImCxwmDNMsYcsPUOT+c3DhbJMzf7Pj6Zu2TSA=)
                          10: 36312e3234372e3136302e302f32312d3231203d3e2039323434.roa (hash: nhV3EOJxiTmAffz4Z7cCPeuZbMUl+G2BM8SxTh0pjdM=)
                          11: 3131332e32312e3137332e302f32342d3234203d3e2039323434.roa (hash: zad3+2RXzsQ+kKuIVqMfSQyLlU7unW/aAqyPG/mguxY=)
                          12: 36312e35362e36352e302f32342d3234203d3e2039323434.roa (hash: 58eBZJn8dVtEAJDGPa82sE+r7hzziamq/6j0Jux307s=)
                          13: 3131332e32312e3138342e302f32322d3234203d3e2039353834.roa (hash: JffZ7xaMKxvRLXvyZwq6BE7sU1Ksg43YEW866OsFW/Y=)
                          14: 36312e35362e37322e302f32312d3231203d3e2039323434.roa (hash: neCogx7kiACRIuTdTb4mPlJDa/8XCuRztd8KmEyTXNk=)
                          15: 36312e35362e38362e302f32342d3234203d3e2039323434.roa (hash: DZQdAc5OZiI1l50V9csTghB0Kp8yJsJBeM5CKzaxzH8=)
                          16: 3131332e32312e3137352e302f32342d3234203d3e2039323434.roa (hash: whesli0aowOeEwrokq13wIdP2tp0cw9ZGh1XLVuettA=)
                          17: 36312e3234372e3136302e302f32302d3230203d3e2039323434.roa (hash: SYEKqw4xhnIhxcOUCduJvhjRdzbef1covv+Qeem6MuM=)
                          18: 36312e3234372e3136352e302f32342d3234203d3e2039323434.roa (hash: k4BvpqmiGcRTqeEDlHzCRia3WesXP5gUhCWBJ3J9XD0=)
                          19: 36312e35362e36342e302f32302d3234203d3e2039323434.roa (hash: ie+Yaj7K/OCtwgg9fHP4osRhiW67GSidm1dXNt6AjH0=)
                          20: 3231302e36372e39362e302f32302d3230203d3e2039323434.roa (hash: C02rXsQ6Y93MLpg6oZMwS2YNlT8ftQ8gTIwWkyT1p/c=)
                          21: 36312e35362e38342e302f32342d3234203d3e2039323434.roa (hash: GYR6FspSCdnkcSMZGwxPQmD5bQPvQNdvhgSJGhjts20=)
                          22: 3131332e32312e3137362e302f32312d3231203d3e2039323434.roa (hash: KJODPHzEc1hWKKBkKg9JUc5d7SVmqFSTdy72MVSqi9s=)
                          23: 36312e35362e38382e302f32312d3231203d3e2039323434.roa (hash: Yv9i1Wf6abh3HnSZnR0KOLnhp4lGY5xfo27UjbSYy+8=)
                          24: 36312e3234372e3136302e302f32302d3234203d3e2039323434.roa (hash: qxXWankg7oia3AZJcligt1FqlLwncBLZ3x0aR/n5a/M=)
                          25: 157D536924EE6C5A7711625C6906CB5139BE6605.crl (hash: l/dUJKKluL4djrjVu3L2G8rJms9ytg1vZOmtBJkvD1k=)
                          26: 36312e35362e36372e302f32342d3234203d3e2039323434.roa (hash: fIv1TMJeuFOvi9xY2TJoQcWHee5kMAwWsOnDU4no5V8=)
                          27: 3131332e32312e3136302e302f31392d3234203d3e2039323434.roa (hash: Qo1J6GmDEF02G8LEyX3EsjEFHF0gh33rgqCIM17+ySY=)
                          28: 36312e35362e36342e302f32312d3231203d3e2039323434.roa (hash: oYIVd+rx3myxoRGdVrCSUc7g08NdN5+NRwaA2ICa/fc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 10:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:c4:51:c4:fc:1f:45:17:77:34:32:32:e6:cf:e1:cd:5e:db:bb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: Sep 30 08:30:04 2026 GMT
            Not After : Oct  1 10:59:04 2026 GMT
        Subject: CN=BF58CB42609E6EA69A6AB98BF1A803B329552455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:2c:06:62:f5:2c:0c:93:ef:9f:f4:62:87:
                    61:33:93:01:59:fb:39:57:38:24:71:78:6c:85:7b:
                    53:41:0f:4e:0a:ca:45:b7:90:a4:42:aa:c5:df:1f:
                    c1:10:58:af:e6:d7:47:fa:ea:d7:b6:12:cd:2a:53:
                    a8:ab:07:1f:19:9f:07:22:21:a7:71:57:fd:43:61:
                    c9:c5:e0:be:42:33:ce:51:e9:c8:3c:71:56:58:51:
                    1a:1e:b8:ce:1f:d6:79:85:a3:12:de:93:68:4a:fc:
                    87:d0:55:30:da:37:32:03:8b:51:a7:b2:18:3d:c9:
                    2e:1e:15:f5:52:0e:cc:1d:fb:be:52:d5:f0:d8:a6:
                    92:57:ff:c7:88:16:05:a0:7f:ca:71:dd:3e:5d:d2:
                    cb:ac:48:66:48:f0:72:59:85:b9:e0:97:4a:7e:62:
                    1e:33:da:30:39:6b:ac:8f:c9:f7:fd:54:ba:9b:c0:
                    98:19:06:21:67:7f:a4:b8:4b:88:a4:81:28:a0:00:
                    6e:7e:33:ac:03:5d:b9:14:85:ef:9e:63:ab:61:8d:
                    10:76:59:aa:74:4f:96:09:6d:a3:a3:e3:ff:40:18:
                    fe:45:6e:08:8c:c5:43:5c:d5:44:e0:eb:e1:d5:ab:
                    f3:e7:57:c7:7f:af:85:95:65:62:e8:54:4b:29:c0:
                    09:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:58:CB:42:60:9E:6E:A6:9A:6A:B9:8B:F1:A8:03:B3:29:55:24:55
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:af:f3:ac:af:b8:f8:1f:a8:93:87:99:b5:b0:34:81:07:c6:
         d2:9b:cc:d3:f3:ab:af:63:5e:e5:17:79:60:9b:40:01:8d:f2:
         73:84:12:56:f9:bf:2e:92:1f:cd:05:6c:34:09:37:e5:64:16:
         c7:f5:89:90:c6:59:bc:15:5d:85:c3:dd:43:b2:34:03:a5:ef:
         d8:22:62:20:c4:c1:78:4a:51:14:db:0b:bd:a5:c8:e9:06:69:
         0e:ba:f5:1d:a0:96:95:b9:50:ce:df:24:8c:c6:5d:c8:fc:db:
         e2:49:15:ab:04:65:f8:36:ac:b2:dc:3b:12:b3:5d:14:85:3e:
         fa:c4:ed:21:32:10:17:e9:0b:54:0d:59:59:a2:ed:ca:43:3c:
         c2:d9:d6:da:0f:e1:27:69:9f:f7:0b:e4:6d:f6:6f:9e:ea:23:
         fd:4e:df:64:95:e8:f3:1f:93:43:d0:5b:ae:6a:02:41:8d:c2:
         d9:7d:06:3d:bf:19:91:14:83:f1:e6:e6:c9:b2:5b:1c:af:56:
         bb:2c:77:83:b7:27:df:e0:36:ca:ac:ef:4c:85:16:7d:a1:b1:
         94:e9:6d:32:43:82:0d:bd:90:77:87:ad:33:6c:fb:23:5b:b7:
         bc:88:d2:27:9d:29:dc:9a:a1:84:81:d0:1c:36:8d:8d:48:40:
         bd:b0:7d:e0
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUb8RRxPwfRRd3NDIy5s/hzV7buw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEz
OUJFNjYwNTAeFw0yNjA5MzAwODMwMDRaFw0yNjEwMDExMDU5MDRaMDMxMTAvBgNV
BAMTKEJGNThDQjQyNjA5RTZFQTY5QTZBQjk4QkYxQTgwM0IzMjk1NTI0NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnlywGYvUsDJPvn/Rih2EzkwFZ
+zlXOCRxeGyFe1NBD04KykW3kKRCqsXfH8EQWK/m10f66te2Es0qU6irBx8Znwci
IadxV/1DYcnF4L5CM85R6cg8cVZYURoeuM4f1nmFoxLek2hK/IfQVTDaNzIDi1Gn
shg9yS4eFfVSDswd+75S1fDYppJX/8eIFgWgf8px3T5d0susSGZI8HJZhbngl0p+
Yh4z2jA5a6yPyff9VLqbwJgZBiFnf6S4S4ikgSigAG5+M6wDXbkUhe+eY6thjRB2
Wap0T5YJbaOj4/9AGP5FbgiMxUNc1UTg6+HVq/PnV8d/r4WVZWLoVEspwAlNAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUv1jLQmCebqaaarmL8agDsylVJFUwHwYDVR0j
BBgwFoAUFX1TaSTubFp3EWJcaQbLUTm+ZgUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVU
LzAvMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xNTdENTM2OTI0RUU2QzVBNzcxMTYyNUM2OTA2
Q0I1MTM5QkU2NjA1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVULzAvMTU3RDUzNjkyNEVF
NkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI6v86yvuPgf
qJOHmbWwNIEHxtKbzNPzq69jXuUXeWCbQAGN8nOEElb5vy6SH80FbDQJN+VkFsf1
iZDGWbwVXYXD3UOyNAOl79giYiDEwXhKURTbC72lyOkGaQ669R2glpW5UM7fJIzG
Xcj82+JJFasEZfg2rLLcOxKzXRSFPvrE7SEyEBfpC1QNWVmi7cpDPMLZ1toP4Sdp
n/cL5G32b57qI/1O32SV6PMfk0PQW65qAkGNwtl9Bj2/GZEUg/Hm5smyWxyvVrss
d4O3J9/gNsqs70yFFn2hsZTpbTJDgg29kHeHrTNs+yNbt7yI0iedKdyaoYSB0Bw2
jY1IQL2wfeA=
-----END CERTIFICATE-----
Generated at Thu Oct 1 09:56:12 2026 by rpki-client