Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
File:                     157D536924EE6C5A7711625C6906CB5139BE6605.mft (raw, json)
Hash identifier:          ZRYCi6iA9kUZbdkkaQj30s2Y5eL9ptBROQRQxGFNVHQ=
Subject key identifier:   B4:56:0F:53:1A:0D:2F:5D:8F:FB:51:A4:07:E0:C7:C5:44:B6:D7:13
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       766DADE73F0CFDAE98A614EAF50CAB514C60050D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
Manifest number:          D4
Signing time:             Sat 26 Sep 2026 11:31:06 +0000
Manifest this update:     Sat 26 Sep 2026 11:26:06 +0000
Manifest next update:     Sun 27 Sep 2026 15:30:06 +0000
Files and hashes:         1: 36312e35362e36372e302f32342d3234203d3e2039323434.roa (hash: fIv1TMJeuFOvi9xY2TJoQcWHee5kMAwWsOnDU4no5V8=)
                          2: 36312e35362e38342e302f32342d3234203d3e2039323434.roa (hash: GYR6FspSCdnkcSMZGwxPQmD5bQPvQNdvhgSJGhjts20=)
                          3: 157D536924EE6C5A7711625C6906CB5139BE6605.crl (hash: /jZblgKYVpcndXiyJLQXhEK8eF/2nevwi9Q5bcLusy8=)
                          4: 3231302e36372e39362e302f32302d3230203d3e2039323434.roa (hash: C02rXsQ6Y93MLpg6oZMwS2YNlT8ftQ8gTIwWkyT1p/c=)
                          5: 36312e3234372e3136302e302f32312d3231203d3e2039323434.roa (hash: nhV3EOJxiTmAffz4Z7cCPeuZbMUl+G2BM8SxTh0pjdM=)
                          6: 3131332e32312e3138382e302f32322d3232203d3e2039323434.roa (hash: mj+jG0WgHPI9Z78w1rU1L8re5exbzzfP02Vd4ETlO4I=)
                          7: 3131332e32312e3136302e302f31392d3234203d3e2039323434.roa (hash: Qo1J6GmDEF02G8LEyX3EsjEFHF0gh33rgqCIM17+ySY=)
                          8: 3231302e36372e39362e302f32302d3234203d3e2039323434.roa (hash: zHNjCezs8fFWlbXZ3/WOnM3QHIEAmgqdy+ijyA8rKKI=)
                          9: 36312e35362e38302e302f32312d3231203d3e2039323434.roa (hash: BtytB4ImCxwmDNMsYcsPUOT+c3DhbJMzf7Pj6Zu2TSA=)
                          10: 3131332e32312e3137332e302f32342d3234203d3e2039323434.roa (hash: zad3+2RXzsQ+kKuIVqMfSQyLlU7unW/aAqyPG/mguxY=)
                          11: 36312e35362e36342e302f32302d3230203d3e2039323434.roa (hash: ZKLo/ilTfM+KDgM75kk/lKbUAkojHaOIgyc3I52X5q8=)
                          12: 36312e3234372e3136382e302f32312d3231203d3e2039323434.roa (hash: yJYnyLxqCiz6yoVKYK54rTjzmF9VmGcpnqZIG+inTu0=)
                          13: 36312e3234372e3136302e302f32302d3234203d3e2039323434.roa (hash: qxXWankg7oia3AZJcligt1FqlLwncBLZ3x0aR/n5a/M=)
                          14: 36312e35362e38362e302f32342d3234203d3e2039323434.roa (hash: DZQdAc5OZiI1l50V9csTghB0Kp8yJsJBeM5CKzaxzH8=)
                          15: 36312e35362e38382e302f32312d3231203d3e2039323434.roa (hash: Yv9i1Wf6abh3HnSZnR0KOLnhp4lGY5xfo27UjbSYy+8=)
                          16: 36312e35362e38302e302f32302d3230203d3e2039323434.roa (hash: fY0JZskhhOlyqSdfMeP9akHRUU7aeJhuk2izFKgXPNQ=)
                          17: 3131332e32312e3138342e302f32322d3234203d3e2039353834.roa (hash: JffZ7xaMKxvRLXvyZwq6BE7sU1Ksg43YEW866OsFW/Y=)
                          18: 36312e3234372e3136302e302f32302d3230203d3e2039323434.roa (hash: SYEKqw4xhnIhxcOUCduJvhjRdzbef1covv+Qeem6MuM=)
                          19: 3131332e32312e3137352e302f32342d3234203d3e2039323434.roa (hash: whesli0aowOeEwrokq13wIdP2tp0cw9ZGh1XLVuettA=)
                          20: 36312e35362e38302e302f32302d3234203d3e2039323434.roa (hash: 6H/xsz0QA1bSR/X4dlktPQin25xpMQY3A5kPm3VjeZo=)
                          21: 36312e35362e37322e302f32312d3231203d3e2039323434.roa (hash: neCogx7kiACRIuTdTb4mPlJDa/8XCuRztd8KmEyTXNk=)
                          22: 3131332e32312e3136302e302f32302d3230203d3e2039323434.roa (hash: zNMmR5ncf64bpLQDMhE/zKkbuo5hWND/v72vA6wBXyc=)
                          23: 323430333a656530303a3a2f33322d3536203d3e2039323434.roa (hash: 3xt+0tfS9ZpseLYoRn7kbI8U4wMAyjKAyApcX78rnyU=)
                          24: 36312e35362e36352e302f32342d3234203d3e2039323434.roa (hash: 58eBZJn8dVtEAJDGPa82sE+r7hzziamq/6j0Jux307s=)
                          25: 36312e3234372e3136352e302f32342d3234203d3e2039323434.roa (hash: k4BvpqmiGcRTqeEDlHzCRia3WesXP5gUhCWBJ3J9XD0=)
                          26: 3131332e32312e3137362e302f32312d3231203d3e2039323434.roa (hash: KJODPHzEc1hWKKBkKg9JUc5d7SVmqFSTdy72MVSqi9s=)
                          27: 36312e35362e36342e302f32312d3231203d3e2039323434.roa (hash: oYIVd+rx3myxoRGdVrCSUc7g08NdN5+NRwaA2ICa/fc=)
                          28: 36312e35362e36342e302f32302d3234203d3e2039323434.roa (hash: ie+Yaj7K/OCtwgg9fHP4osRhiW67GSidm1dXNt6AjH0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 15:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6d:ad:e7:3f:0c:fd:ae:98:a6:14:ea:f5:0c:ab:51:4c:60:05:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: Sep 26 11:26:06 2026 GMT
            Not After : Sep 27 15:30:06 2026 GMT
        Subject: CN=B4560F531A0D2F5D8FFB51A407E0C7C544B6D713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f0:02:b6:6e:1b:86:db:83:93:80:92:03:9c:
                    c9:0e:45:2d:08:9a:93:29:f6:86:8e:f3:b2:25:dd:
                    26:5c:63:3f:7d:d1:f3:07:c5:3c:40:ee:bf:18:36:
                    d2:71:37:57:f3:94:a2:0a:7a:96:33:36:08:a7:c3:
                    c1:2d:2c:9a:e0:b6:25:67:aa:91:8e:14:30:a7:70:
                    c9:c9:4b:39:79:c6:be:d5:e3:d8:75:a4:54:5f:a5:
                    4c:ed:f0:f7:ec:c7:6f:42:32:52:d0:f9:08:63:6b:
                    6b:dd:51:d5:38:e8:eb:fe:df:ca:2f:cc:ba:76:d0:
                    30:54:73:35:8d:2c:87:34:6c:a5:08:cc:bc:2d:46:
                    fd:b4:49:49:9c:5d:dc:a2:b1:df:28:b0:a6:ca:a2:
                    32:5c:f8:6b:ff:08:20:6e:0e:37:4f:b3:39:9d:ee:
                    3f:b1:aa:8e:d6:1b:40:bf:2d:1d:6e:52:c2:d5:73:
                    48:7a:2c:e7:30:e8:ec:6b:8c:4b:ee:11:ce:97:50:
                    44:0d:0a:c4:13:0a:d0:bf:4b:a2:9c:b2:d8:c8:f4:
                    21:fc:11:2d:85:f1:b5:b7:e5:33:4e:d1:cd:88:b3:
                    c0:da:d7:bb:fb:fa:55:f6:7e:08:7f:0a:70:3f:36:
                    a1:1b:57:74:47:73:bb:a7:fc:7f:5b:fe:5b:7e:0f:
                    58:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:56:0F:53:1A:0D:2F:5D:8F:FB:51:A4:07:E0:C7:C5:44:B6:D7:13
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:15:b2:83:10:34:e9:f9:6c:bb:df:cf:80:04:a3:44:cf:2e:
         31:31:ac:5c:58:bf:63:79:5f:bc:c0:34:8a:0a:a5:7c:2c:36:
         32:23:71:cd:3f:7f:41:9b:32:72:e5:29:96:90:44:61:75:02:
         3b:7b:9b:d5:d7:9c:ea:47:e7:d5:45:df:2d:cd:8c:eb:d2:9d:
         76:bc:30:5a:4b:0a:3f:9a:2b:0d:a1:89:06:9a:27:b6:2e:f0:
         a4:b5:f0:cc:e7:7a:40:9c:09:26:a7:20:e1:9f:69:ca:07:56:
         76:07:7b:da:28:0f:03:a6:18:30:9c:2b:08:6d:23:9e:86:fc:
         14:4d:10:53:b0:63:fe:e8:e2:ff:d6:00:72:7e:21:eb:5b:89:
         7f:89:88:d4:0f:43:7f:a6:7a:42:b3:e0:9d:c3:ad:b7:0d:55:
         5e:bb:35:93:00:6c:49:a2:0f:91:28:45:04:2e:cd:21:d0:fe:
         5b:44:39:d4:61:95:75:41:26:41:79:9d:f5:80:da:8b:ac:f8:
         7a:1a:34:9d:56:0f:5f:5f:88:55:0e:ea:81:61:ae:92:1e:d5:
         d2:db:d2:14:6f:ed:84:de:57:f2:8c:63:47:4d:45:58:5f:99:
         1f:7c:fc:23:cf:ae:f4:25:29:e9:c9:68:b1:ea:3e:83:4f:69:
         fc:66:6b:0c
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUdm2t5z8M/a6YphTq9QyrUUxgBQ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEz
OUJFNjYwNTAeFw0yNjA5MjYxMTI2MDZaFw0yNjA5MjcxNTMwMDZaMDMxMTAvBgNV
BAMTKEI0NTYwRjUzMUEwRDJGNUQ4RkZCNTFBNDA3RTBDN0M1NDRCNkQ3MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg8AK2bhuG24OTgJIDnMkORS0I
mpMp9oaO87Il3SZcYz990fMHxTxA7r8YNtJxN1fzlKIKepYzNginw8EtLJrgtiVn
qpGOFDCncMnJSzl5xr7V49h1pFRfpUzt8Pfsx29CMlLQ+Qhja2vdUdU46Ov+38ov
zLp20DBUczWNLIc0bKUIzLwtRv20SUmcXdyisd8osKbKojJc+Gv/CCBuDjdPszmd
7j+xqo7WG0C/LR1uUsLVc0h6LOcw6OxrjEvuEc6XUEQNCsQTCtC/S6KcstjI9CH8
ES2F8bW35TNO0c2Is8Da17v7+lX2fgh/CnA/NqEbV3RHc7un/H9b/lt+D1j9AgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUtFYPUxoNL12P+1GkB+DHxUS21xMwHwYDVR0j
BBgwFoAUFX1TaSTubFp3EWJcaQbLUTm+ZgUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVU
LzAvMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xNTdENTM2OTI0RUU2QzVBNzcxMTYyNUM2OTA2
Q0I1MTM5QkU2NjA1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVULzAvMTU3RDUzNjkyNEVF
NkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGoVsoMQNOn5
bLvfz4AEo0TPLjExrFxYv2N5X7zANIoKpXwsNjIjcc0/f0GbMnLlKZaQRGF1Ajt7
m9XXnOpH59VF3y3NjOvSnXa8MFpLCj+aKw2hiQaaJ7Yu8KS18MznekCcCSanIOGf
acoHVnYHe9ooDwOmGDCcKwhtI56G/BRNEFOwY/7o4v/WAHJ+IetbiX+JiNQPQ3+m
ekKz4J3DrbcNVV67NZMAbEmiD5EoRQQuzSHQ/ltEOdRhlXVBJkF5nfWA2ous+Hoa
NJ1WD19fiFUO6oFhrpIe1dLb0hRv7YTeV/KMY0dNRVhfmR98/CPPrvQlKenJaLHq
PoNPafxmaww=
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:08:34 2026 by rpki-client