Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
File:                     7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft (raw, json)
Hash identifier:          ssU6mkFuKgYUVtE7jdE/mHd0V97Idj/dHHYtzdXOr7I=
Subject key identifier:   3A:01:B1:17:68:94:5B:B2:38:B4:1C:C6:9C:17:B5:8D:BA:DE:BA:11
Authority key identifier: 7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76
Certificate issuer:       /CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
Certificate serial:       5A40E6A3445E8CC7B6469252D8055C86AF4C22BD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
Manifest number:          B7
Signing time:             Thu 24 Sep 2026 05:32:39 +0000
Manifest this update:     Thu 24 Sep 2026 05:27:39 +0000
Manifest next update:     Fri 25 Sep 2026 08:08:39 +0000
Files and hashes:         1: 7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl (hash: O40LUNiFdhaCE7Gr4KekrgXjPVSnk2IYTxc2cY/k8o4=)
                          2: 3130332e36392e34382e302f32332d3332203d3e20313331363432.roa (hash: o7B66t9SqLTxpoTquQyKEFqbdaVVWkZmLbtbMwzYiRQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl
                          rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 08:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:40:e6:a3:44:5e:8c:c7:b6:46:92:52:d8:05:5c:86:af:4c:22:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
        Validity
            Not Before: Sep 24 05:27:39 2026 GMT
            Not After : Sep 25 08:08:39 2026 GMT
        Subject: CN=3A01B11768945BB238B41CC69C17B58DBADEBA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:3f:1c:31:30:8e:ac:d6:f2:60:2d:07:9b:
                    bd:60:ea:c4:ef:ce:e2:e0:13:4d:50:dd:2f:25:bb:
                    cd:eb:80:79:81:db:1a:5b:f0:9c:31:58:7c:6d:b3:
                    de:d2:9b:a2:61:2a:1a:d6:83:7f:f5:17:30:0c:c8:
                    d0:47:49:f1:96:d7:03:37:4e:03:ed:78:fb:59:57:
                    a8:25:7c:25:bf:71:f4:ed:c6:1a:22:2d:b2:bc:70:
                    2d:55:c4:f8:dd:2d:8c:4a:b0:d9:31:dd:43:eb:95:
                    57:c2:ca:83:30:68:86:35:a9:2c:a4:d0:a7:12:62:
                    6b:b3:75:67:12:b4:ef:c1:87:97:7d:28:a5:e8:45:
                    19:fe:1f:15:6f:12:6d:d6:8d:38:bd:e7:a1:f7:e3:
                    45:31:d5:3f:3b:65:20:d6:7b:d6:f9:0b:69:ca:45:
                    df:b4:14:92:89:40:b3:1c:60:da:ff:cc:ac:f3:d9:
                    cc:e7:21:d1:e2:83:6b:32:fb:bd:a1:46:86:a3:54:
                    89:80:5f:2e:a6:85:fa:01:cb:7e:df:25:be:c0:41:
                    c3:fb:8a:bb:1e:90:1c:1b:7f:93:ac:79:7b:5e:ec:
                    19:56:92:67:c9:d4:57:df:ec:da:6d:20:f3:68:8a:
                    ad:58:e4:b9:9c:32:29:59:cf:3b:0c:70:5e:ce:45:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:01:B1:17:68:94:5B:B2:38:B4:1C:C6:9C:17:B5:8D:BA:DE:BA:11
            X509v3 Authority Key Identifier:
                keyid:7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fb:39:7f:b6:a1:bc:7d:f3:a1:37:61:8a:82:cf:51:37:88:
         1d:b7:d8:16:8c:5b:25:63:d2:10:b0:a0:c6:92:cf:88:38:17:
         8a:a5:fb:58:96:f9:ab:ac:c6:65:4c:64:bf:ba:50:6f:8f:88:
         20:2b:42:fb:2b:01:4a:fc:32:ff:86:29:86:1b:a2:61:3a:5c:
         10:af:96:76:88:a2:31:0c:02:9f:1a:2f:d6:7f:a6:08:12:bc:
         98:5f:10:6f:ff:57:06:81:65:e7:9c:c3:e5:c1:69:b9:47:ff:
         39:d4:ca:3e:b0:e4:07:75:95:cc:b0:27:2f:31:2d:23:7a:6d:
         c4:6a:51:2a:82:97:a2:54:d1:3c:83:e9:76:19:ff:e3:4f:8f:
         9f:c6:4b:f7:1b:bd:67:44:63:76:c6:29:6e:9d:88:a6:f4:ba:
         e8:2d:c7:5a:83:23:16:54:72:64:9b:74:37:2f:28:f0:be:1d:
         f5:86:63:00:19:84:db:29:3a:9a:c5:71:03:b4:86:de:48:ff:
         b9:33:af:a3:2a:81:ab:f9:02:a0:8f:62:fe:23:e7:e1:bc:1f:
         57:7d:5a:a8:ae:4a:e0:56:80:3f:8e:4f:c3:2d:aa:bc:c6:52:
         49:8e:86:d8:78:42:14:65:bb:18:56:64:7a:72:37:d1:10:a3:
         93:d9:08:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:45:29 2026 by rpki-client