Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
File:                     7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft (raw, json)
Hash identifier:          8jsFK8Ua1ysuyIqmqOvo1SNpZL0fYm64nz8Im16/rPE=
Subject key identifier:   4B:96:A9:30:F3:3D:39:B7:FD:C5:B0:E8:41:14:1A:03:3B:25:66:4C
Authority key identifier: 7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76
Certificate issuer:       /CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
Certificate serial:       DEDD9B2C24541C097AC72FE2D6351CDB212B65
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
Manifest number:          65
Signing time:             Thu 23 Jul 2026 20:51:44 +0000
Manifest this update:     Thu 23 Jul 2026 20:46:44 +0000
Manifest next update:     Fri 24 Jul 2026 23:21:44 +0000
Files and hashes:         1: 7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl (hash: 87Mv1AYqzP4KvgYphgReNzZ8+hBYUzzhYyVKf5CbO9w=)
                          2: 3130332e36392e34382e302f32332d3332203d3e20313331363432.roa (hash: o7B66t9SqLTxpoTquQyKEFqbdaVVWkZmLbtbMwzYiRQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl
                          rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 13:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            de:dd:9b:2c:24:54:1c:09:7a:c7:2f:e2:d6:35:1c:db:21:2b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
        Validity
            Not Before: Jul 23 20:46:44 2026 GMT
            Not After : Jul 24 23:21:44 2026 GMT
        Subject: CN=4B96A930F33D39B7FDC5B0E841141A033B25664C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9f:fa:a5:d7:1c:fa:5d:38:59:01:88:6c:9d:
                    15:dd:7f:f8:08:06:8c:ff:f3:8a:e2:95:ab:11:57:
                    af:5b:80:b8:2a:4e:f0:a3:79:50:fe:23:43:47:48:
                    6b:e9:a5:5d:25:56:fe:70:ec:01:81:4f:77:32:1f:
                    36:38:1f:ee:32:a5:1f:de:58:fb:c2:19:a8:3c:09:
                    b9:70:9b:05:e0:ea:74:df:e8:58:83:8d:86:1c:dd:
                    20:b5:52:1b:90:23:4c:d2:f6:a3:b5:4e:89:55:69:
                    ad:84:62:ea:c1:27:c4:dd:7c:ae:80:eb:19:9a:a3:
                    b9:83:58:5b:ea:aa:be:4b:aa:f2:35:b1:95:16:47:
                    c1:6f:07:34:48:97:25:e3:e8:a0:5f:cd:f6:1f:fb:
                    93:66:a8:29:67:bd:d0:06:77:ba:95:cc:56:fc:cc:
                    eb:57:f9:ad:bc:8e:78:ce:38:02:31:cb:ea:59:a9:
                    54:6a:df:eb:c0:3f:fd:6c:24:ab:56:b8:90:ef:f6:
                    59:fc:64:63:9f:52:8c:77:90:23:d3:07:44:e4:f3:
                    f1:66:be:07:d9:54:29:4d:c5:27:3c:04:91:ea:3e:
                    d5:b6:81:f6:fd:d2:c6:c9:6c:46:16:7c:c4:03:85:
                    a6:76:9e:bd:23:1e:0d:3d:74:b0:9c:65:e2:84:79:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:96:A9:30:F3:3D:39:B7:FD:C5:B0:E8:41:14:1A:03:3B:25:66:4C
            X509v3 Authority Key Identifier:
                keyid:7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:64:39:b1:fe:1c:28:e4:3f:42:43:0a:26:b0:0d:98:50:b4:
         54:f4:cf:b0:4a:3f:74:ca:13:ae:ed:c0:13:5b:1e:c0:c3:ae:
         6c:e9:93:6a:0c:d4:a5:dc:87:ec:75:90:a9:26:ff:e0:54:f2:
         a2:aa:c0:5f:c4:37:19:b9:57:b5:3a:8a:8b:2a:a7:78:eb:64:
         aa:63:86:73:cc:f3:25:0f:5c:fd:67:58:8a:21:c7:46:99:1c:
         64:c6:c9:b2:90:12:c4:fe:43:a3:ad:47:8f:ca:ab:db:db:d1:
         7f:46:1b:78:d7:49:22:53:80:61:a9:4c:62:53:cb:88:9a:75:
         14:5e:88:3a:38:08:a0:00:e9:6f:51:93:05:47:06:ef:5b:9c:
         80:10:ab:15:2d:ef:2f:95:7c:53:39:04:21:b0:e3:96:d8:c4:
         d9:ab:51:03:67:c1:79:fd:00:d1:6a:e6:e3:9b:f5:a0:3f:c8:
         0c:1c:90:7c:91:d4:59:da:6d:92:dc:35:e3:29:b6:8c:a5:2b:
         69:58:f4:98:50:29:8a:1b:af:44:b1:5f:12:38:ba:12:00:d4:
         d0:92:12:0a:aa:45:5e:49:8e:fd:5e:24:3b:dc:90:09:1d:d2:
         00:9f:72:3b:a7:bf:ad:a1:ea:fe:70:7b:d4:10:bb:99:02:a9:
         bc:cd:9d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:45:46 2026 by rpki-client