Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
File:                     809590BEFB516AA616A45FA21C8495BBB968261F.mft (raw, json)
Hash identifier:          ylvw3Gjyv1+s0OsKOVJoRuO252Oi+4ofRu4ARvX0sFw=
Subject key identifier:   5F:2A:F1:2B:2A:9A:95:32:0F:75:E1:A7:21:01:E3:8E:E4:52:3B:B5
Authority key identifier: 80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F
Certificate issuer:       /CN=809590BEFB516AA616A45FA21C8495BBB968261F
Certificate serial:       117E7C42EAD19C33A73C1D647E8A69EBFBA095A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
Manifest number:          C7
Signing time:             Mon 28 Sep 2026 03:52:24 +0000
Manifest this update:     Mon 28 Sep 2026 03:47:24 +0000
Manifest next update:     Tue 29 Sep 2026 03:53:24 +0000
Files and hashes:         1: 3232332e32362e362e302f32332d3332203d3e20313331313439.roa (hash: Y12xlfekLvwP4G1mkzxyGAzt03PMoPVC/Sf7L4IaSl0=)
                          2: 3130332e312e3232302e302f32322d3332203d3e20313331313439.roa (hash: rg3bnNQteoXQwroi6JW6o3A+bYuPDATWwHnIMd8oF1Y=)
                          3: 3130332e3132332e3234322e302f32332d3234203d3e20313331313439.roa (hash: d1WrKaYXHT6iXDQdIpLrQF3QTy7zcOI+MfmzwYnjw0w=)
                          4: 323430373a373130303a3a2f33322d3438203d3e20313331313439.roa (hash: ir+6BuRP4ipyEjzb583mBr5bzQkTrQiq6mOB7prVUOY=)
                          5: 809590BEFB516AA616A45FA21C8495BBB968261F.crl (hash: rlzqmJu0Ntg8zvU4zDBvOPf9RdevmVB/o/4TmZF40kQ=)
                          6: 3130332e3132392e3136382e302f32322d3332203d3e20313331313439.roa (hash: Xk6yS2TWJMWZBOwo932s8w+km5Lrk4mU07mh2X5Q+zc=)
                          7: 3130332e3132332e3234322e302f32332d3234203d3e203632363130.roa (hash: Ajq6f+rGK5WhdyWIcDvtsuWObY+oUuRhaAfiAZcQHfM=)
                          8: 34332e3235342e31362e302f32322d3332203d3e20313331313439.roa (hash: dbJE/Gdn4JhQH0dnbyKF/th0Px9Dxj1VCZJpdchA0ms=)
                          9: 3230322e31322e37362e302f32322d3332203d3e20313331313439.roa (hash: HAvwmN0LL6mrAImekQpqdmqpo1QKT3FkXOpjWBPVCgI=)
                          10: 3130332e3132332e3234322e302f32332d3234203d3e203231383539.roa (hash: 8mzMixfzYIVmtJF1WfXduAuFjPjSvfM1GtN9oUTn6Eg=)
                          11: 3130332e31372e382e302f32322d3332203d3e20313331313439.roa (hash: hZUaWratCjgaQsx8PmP6kA2splqJpSDGrjxSvKb8z+g=)
                          12: 3130332e3132332e3139322e302f32322d3332203d3e20313331313439.roa (hash: mu1FL+p54AOJZDEfjzd+G1kFrify3MZy0r9So4AMpZA=)
                          13: 3130332e3132332e3139362e302f32322d3332203d3e20313331313439.roa (hash: TKYc7P8/LAkMHNgfW1aqA8h0faddx7IdhI2cquOgiQs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl
                          rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 20:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7e:7c:42:ea:d1:9c:33:a7:3c:1d:64:7e:8a:69:eb:fb:a0:95:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809590BEFB516AA616A45FA21C8495BBB968261F
        Validity
            Not Before: Sep 28 03:47:24 2026 GMT
            Not After : Sep 29 03:53:24 2026 GMT
        Subject: CN=5F2AF12B2A9A95320F75E1A72101E38EE4523BB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:1f:08:b3:71:d6:8a:8a:18:c6:6b:4c:79:
                    9e:3e:89:e6:a4:32:9b:53:ef:97:60:26:1a:c3:ae:
                    1e:a4:d5:3b:14:36:5f:62:ae:2e:a8:97:59:ce:87:
                    bc:aa:58:75:72:e5:92:99:56:b2:06:ee:5c:9a:27:
                    64:35:f8:f1:0b:60:a5:2e:34:95:be:9a:c2:ba:77:
                    5f:10:14:73:07:cc:79:29:b3:a1:43:93:26:d7:f3:
                    83:83:32:6a:c5:17:b9:3e:59:4d:e4:95:54:2e:fb:
                    86:f4:bf:d6:26:e1:60:cb:ae:f5:f1:1d:4c:ed:a0:
                    d8:dc:b7:b3:82:6a:28:b8:71:b9:c9:b2:40:aa:80:
                    6b:d8:87:56:74:55:80:01:0d:80:fd:61:35:1f:d6:
                    64:91:b3:ac:94:9d:b1:7f:c2:cc:e9:24:ad:91:08:
                    78:1e:64:b4:c8:70:3a:f1:8d:1c:61:fc:31:3b:7d:
                    43:34:50:5d:e1:70:58:f4:b7:38:23:37:3a:2d:60:
                    1e:f6:e0:01:57:ee:3b:0c:2e:cf:f8:77:50:15:d8:
                    92:f1:9f:44:9f:0f:a7:e3:50:91:33:00:59:9a:8f:
                    e4:dc:22:ea:43:44:03:fc:cd:91:ce:bf:c6:fa:0c:
                    92:ac:d9:7d:b4:9f:61:dd:29:2f:3b:11:54:9c:63:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2A:F1:2B:2A:9A:95:32:0F:75:E1:A7:21:01:E3:8E:E4:52:3B:B5
            X509v3 Authority Key Identifier:
                keyid:80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:df:c2:37:a1:36:50:16:b1:4c:bf:38:fc:e0:ef:c7:da:87:
         08:c0:71:9e:a0:da:3a:47:86:7b:36:07:71:64:9b:c5:e0:ff:
         08:01:54:8e:5a:70:21:66:2c:14:51:9e:5c:ba:ad:bc:ed:27:
         4f:51:c4:ae:b1:54:d2:cb:85:4d:2a:3d:31:dc:66:59:d7:ce:
         c8:6e:a6:40:f0:3d:73:ab:f3:b5:4a:12:1c:3f:9b:06:a1:de:
         2e:e5:d3:cc:80:d7:a4:e4:c7:c5:32:2e:93:52:ba:69:78:6f:
         86:2f:ce:24:15:8e:b8:8d:d3:17:c1:6b:cb:8f:8e:11:fa:7f:
         87:2f:ae:a3:6f:50:46:ec:99:8f:7f:12:c3:c2:3a:ec:f1:22:
         d4:86:56:4f:9b:7f:6a:b1:49:67:f7:db:ab:3c:ae:c7:0b:4e:
         1e:87:60:4a:9e:2f:a1:25:a8:6e:24:25:42:46:29:e9:6e:42:
         e4:86:46:c7:e3:3b:94:d3:f3:a3:bb:90:df:58:4d:0c:b9:9f:
         e6:e8:33:29:c0:98:44:57:e4:48:6f:8c:a1:18:60:6b:a2:57:
         fc:39:7c:9f:91:6a:a0:d6:01:a1:43:26:ab:6b:30:73:74:b9:
         28:9d:d4:be:55:e5:c9:33:b5:c2:ee:24:1f:03:4c:3a:41:17:
         2a:d6:cb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:26:13 2026 by rpki-client