Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
File:                     157D536924EE6C5A7711625C6906CB5139BE6605.mft (raw, json)
Hash identifier:          j8EVZ9+Wjh/rpUd1zx/jcByY46+G4U6e0wRFzH62NEo=
Subject key identifier:   06:AE:AB:77:92:D6:93:8D:C4:94:71:92:1C:68:38:F9:E4:FE:F0:C4
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       46D4C8002D0A583A85F8929CB55A5D3A7C2E7FCC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
Manifest number:          7E
Signing time:             Thu 23 Jul 2026 21:16:45 +0000
Manifest this update:     Thu 23 Jul 2026 21:11:45 +0000
Manifest next update:     Fri 24 Jul 2026 23:21:45 +0000
Files and hashes:         1: 36312e35362e38362e302f32342d3234203d3e2039323434.roa (hash: DZQdAc5OZiI1l50V9csTghB0Kp8yJsJBeM5CKzaxzH8=)
                          2: 36312e35362e36342e302f32312d3231203d3e2039323434.roa (hash: oYIVd+rx3myxoRGdVrCSUc7g08NdN5+NRwaA2ICa/fc=)
                          3: 36312e35362e36342e302f32302d3230203d3e2039323434.roa (hash: ZKLo/ilTfM+KDgM75kk/lKbUAkojHaOIgyc3I52X5q8=)
                          4: 3131332e32312e3137362e302f32312d3231203d3e2039323434.roa (hash: KJODPHzEc1hWKKBkKg9JUc5d7SVmqFSTdy72MVSqi9s=)
                          5: 3131332e32312e3138342e302f32322d3234203d3e2039353834.roa (hash: JffZ7xaMKxvRLXvyZwq6BE7sU1Ksg43YEW866OsFW/Y=)
                          6: 3131332e32312e3137332e302f32342d3234203d3e2039323434.roa (hash: zad3+2RXzsQ+kKuIVqMfSQyLlU7unW/aAqyPG/mguxY=)
                          7: 36312e3234372e3136382e302f32312d3231203d3e2039323434.roa (hash: yJYnyLxqCiz6yoVKYK54rTjzmF9VmGcpnqZIG+inTu0=)
                          8: 36312e3234372e3136302e302f32302d3230203d3e2039323434.roa (hash: SYEKqw4xhnIhxcOUCduJvhjRdzbef1covv+Qeem6MuM=)
                          9: 36312e35362e38342e302f32342d3234203d3e2039323434.roa (hash: GYR6FspSCdnkcSMZGwxPQmD5bQPvQNdvhgSJGhjts20=)
                          10: 3231302e36372e39362e302f32302d3230203d3e2039323434.roa (hash: C02rXsQ6Y93MLpg6oZMwS2YNlT8ftQ8gTIwWkyT1p/c=)
                          11: 3131332e32312e3137352e302f32342d3234203d3e2039323434.roa (hash: whesli0aowOeEwrokq13wIdP2tp0cw9ZGh1XLVuettA=)
                          12: 3131332e32312e3136302e302f31392d3234203d3e2039323434.roa (hash: Qo1J6GmDEF02G8LEyX3EsjEFHF0gh33rgqCIM17+ySY=)
                          13: 3231302e36372e39362e302f32302d3234203d3e2039323434.roa (hash: zHNjCezs8fFWlbXZ3/WOnM3QHIEAmgqdy+ijyA8rKKI=)
                          14: 36312e35362e36352e302f32342d3234203d3e2039323434.roa (hash: 58eBZJn8dVtEAJDGPa82sE+r7hzziamq/6j0Jux307s=)
                          15: 157D536924EE6C5A7711625C6906CB5139BE6605.crl (hash: xHGvDlJs1d2vpdznoJjgEVU3rUJCUFgOKVHLbiG8nfk=)
                          16: 36312e35362e38302e302f32302d3230203d3e2039323434.roa (hash: fY0JZskhhOlyqSdfMeP9akHRUU7aeJhuk2izFKgXPNQ=)
                          17: 36312e35362e38302e302f32302d3234203d3e2039323434.roa (hash: 6H/xsz0QA1bSR/X4dlktPQin25xpMQY3A5kPm3VjeZo=)
                          18: 3131332e32312e3138382e302f32322d3232203d3e2039323434.roa (hash: mj+jG0WgHPI9Z78w1rU1L8re5exbzzfP02Vd4ETlO4I=)
                          19: 36312e3234372e3136302e302f32302d3234203d3e2039323434.roa (hash: qxXWankg7oia3AZJcligt1FqlLwncBLZ3x0aR/n5a/M=)
                          20: 36312e3234372e3136352e302f32342d3234203d3e2039323434.roa (hash: k4BvpqmiGcRTqeEDlHzCRia3WesXP5gUhCWBJ3J9XD0=)
                          21: 3131332e32312e3136302e302f32302d3230203d3e2039323434.roa (hash: zNMmR5ncf64bpLQDMhE/zKkbuo5hWND/v72vA6wBXyc=)
                          22: 323430333a656530303a3a2f33322d3536203d3e2039323434.roa (hash: 3xt+0tfS9ZpseLYoRn7kbI8U4wMAyjKAyApcX78rnyU=)
                          23: 36312e35362e38382e302f32312d3231203d3e2039323434.roa (hash: Yv9i1Wf6abh3HnSZnR0KOLnhp4lGY5xfo27UjbSYy+8=)
                          24: 36312e35362e36372e302f32342d3234203d3e2039323434.roa (hash: fIv1TMJeuFOvi9xY2TJoQcWHee5kMAwWsOnDU4no5V8=)
                          25: 36312e3234372e3136302e302f32312d3231203d3e2039323434.roa (hash: nhV3EOJxiTmAffz4Z7cCPeuZbMUl+G2BM8SxTh0pjdM=)
                          26: 36312e35362e37322e302f32312d3231203d3e2039323434.roa (hash: neCogx7kiACRIuTdTb4mPlJDa/8XCuRztd8KmEyTXNk=)
                          27: 36312e35362e38302e302f32312d3231203d3e2039323434.roa (hash: BtytB4ImCxwmDNMsYcsPUOT+c3DhbJMzf7Pj6Zu2TSA=)
                          28: 36312e35362e36342e302f32302d3234203d3e2039323434.roa (hash: ie+Yaj7K/OCtwgg9fHP4osRhiW67GSidm1dXNt6AjH0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d4:c8:00:2d:0a:58:3a:85:f8:92:9c:b5:5a:5d:3a:7c:2e:7f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: Jul 23 21:11:45 2026 GMT
            Not After : Jul 24 23:21:45 2026 GMT
        Subject: CN=06AEAB7792D6938DC49471921C6838F9E4FEF0C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:5d:53:d7:6f:b8:d4:fe:6e:4a:96:58:57:
                    2f:1a:0b:dc:bf:38:5f:cc:99:c4:13:f7:66:c7:8a:
                    f5:db:fe:6f:a4:28:bb:52:eb:d4:d3:53:18:41:e0:
                    f9:85:da:b5:5d:df:d7:52:6f:3b:50:45:72:be:e5:
                    d8:f7:f2:86:86:f4:14:3a:0f:f4:c0:2e:7d:20:b0:
                    f1:84:dd:ea:34:4c:86:74:8f:52:c4:6c:15:41:57:
                    f4:67:82:76:b5:98:71:9e:c3:5e:ae:b4:61:2a:96:
                    16:4f:0d:66:74:66:5b:5f:1c:58:7a:87:8d:cc:52:
                    24:d1:2c:2e:5d:3e:61:87:44:c7:ab:2c:43:58:ac:
                    08:9c:a5:dc:95:7a:50:e4:0d:8a:fb:52:8b:27:89:
                    be:0c:1d:e7:c8:fa:82:76:c3:15:90:36:6c:84:1f:
                    e2:61:4c:b7:a4:9b:8b:e5:8c:f8:d5:0d:9e:45:8d:
                    c5:2f:fd:01:5b:4e:08:9d:cb:5d:7a:e2:a3:99:5d:
                    4d:69:eb:f9:95:8d:9b:49:58:8e:8e:c3:67:3b:5f:
                    57:a3:e6:5f:3b:bb:80:1c:90:62:c9:1b:e6:52:46:
                    ed:a6:66:4e:77:3f:bf:db:0c:92:b4:fd:dd:44:a2:
                    84:85:38:c2:03:50:29:78:a5:ba:3e:52:46:74:52:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AE:AB:77:92:D6:93:8D:C4:94:71:92:1C:68:38:F9:E4:FE:F0:C4
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:23:d9:c5:f0:90:4c:48:ef:f6:ef:23:ab:96:2f:08:e2:51:
         7e:cc:9a:03:ab:7b:5f:92:0a:ca:35:10:1f:d4:70:04:93:cc:
         82:6d:9d:29:ad:84:9e:df:c9:ff:3f:21:1e:ae:fc:28:b6:04:
         a1:2d:79:ca:e8:a8:0a:e9:82:bc:1f:df:ae:25:67:6d:b5:bd:
         93:d1:af:e4:c2:49:39:01:5a:e8:ad:7d:6f:fa:6e:e5:b9:6b:
         e1:ee:73:c6:68:8d:61:ee:56:51:6d:17:fb:71:32:ed:37:25:
         6e:99:13:70:18:95:88:99:1c:55:7c:c5:b2:56:d5:b4:9e:0a:
         c2:b9:8d:51:f0:e5:66:59:c4:ae:53:ae:a4:a2:f1:dd:b7:21:
         96:3b:22:ca:1f:8d:ca:82:17:5f:5c:d3:9f:a2:3e:88:4c:07:
         47:0a:7c:69:d9:01:3a:bb:a2:8e:e5:57:f6:3a:49:66:93:11:
         ff:fd:a2:e5:27:b5:0e:2e:3a:8f:03:c5:e7:b5:c4:70:38:2d:
         88:d2:d8:3e:24:3c:eb:2c:23:c5:38:12:57:37:6b:32:20:df:
         d3:52:cb:01:13:8e:a0:b7:53:78:52:a6:1d:9e:44:5e:c0:c2:
         83:60:cb:f7:89:28:61:d4:80:ae:91:87:01:f2:f9:51:de:24:
         f4:b2:d2:3c
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIURtTIAC0KWDqF+JKctVpdOnwuf8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEz
OUJFNjYwNTAeFw0yNjA3MjMyMTExNDVaFw0yNjA3MjQyMzIxNDVaMDMxMTAvBgNV
BAMTKDA2QUVBQjc3OTJENjkzOERDNDk0NzE5MjFDNjgzOEY5RTRGRUYwQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiul1T12+41P5uSpZYVy8aC9y/
OF/MmcQT92bHivXb/m+kKLtS69TTUxhB4PmF2rVd39dSbztQRXK+5dj38oaG9BQ6
D/TALn0gsPGE3eo0TIZ0j1LEbBVBV/Rngna1mHGew16utGEqlhZPDWZ0ZltfHFh6
h43MUiTRLC5dPmGHRMerLENYrAicpdyVelDkDYr7Uosnib4MHefI+oJ2wxWQNmyE
H+JhTLekm4vljPjVDZ5FjcUv/QFbTgidy1164qOZXU1p6/mVjZtJWI6Ow2c7X1ej
5l87u4AckGLJG+ZSRu2mZk53P7/bDJK0/d1EooSFOMIDUCl4pbo+UkZ0UpE/AgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUBq6rd5LWk43ElHGSHGg4+eT+8MQwHwYDVR0j
BBgwFoAUFX1TaSTubFp3EWJcaQbLUTm+ZgUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVU
LzAvMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xNTdENTM2OTI0RUU2QzVBNzcxMTYyNUM2OTA2
Q0I1MTM5QkU2NjA1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVULzAvMTU3RDUzNjkyNEVF
NkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACIj2cXwkExI
7/bvI6uWLwjiUX7MmgOre1+SCso1EB/UcASTzIJtnSmthJ7fyf8/IR6u/Ci2BKEt
ecroqArpgrwf364lZ221vZPRr+TCSTkBWuitfW/6buW5a+Huc8ZojWHuVlFtF/tx
Mu03JW6ZE3AYlYiZHFV8xbJW1bSeCsK5jVHw5WZZxK5TrqSi8d23IZY7IsofjcqC
F19c05+iPohMB0cKfGnZATq7oo7lV/Y6SWaTEf/9ouUntQ4uOo8Dxee1xHA4LYjS
2D4kPOssI8U4Elc3azIg39NSywETjqC3U3hSph2eRF7AwoNgy/eJKGHUgK6RhwHy
+VHeJPSy0jw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:57:56 2026 by rpki-client