Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
File:                     809590BEFB516AA616A45FA21C8495BBB968261F.mft (raw, json)
Hash identifier:          LPLrYoaFwQq3evWu7rwt4yL8JNfRWVQPjKCdzv3NlQ8=
Subject key identifier:   04:C8:A8:A4:2E:BA:AB:8E:D7:32:AC:CA:AC:54:11:05:EC:84:C1:6E
Authority key identifier: 80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F
Certificate issuer:       /CN=809590BEFB516AA616A45FA21C8495BBB968261F
Certificate serial:       50592C486B4CA0921D65D09BD8F5A8040D1D13FD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
Manifest number:          D2
Signing time:             Tue 06 Oct 2026 07:57:06 +0000
Manifest this update:     Tue 06 Oct 2026 07:52:06 +0000
Manifest next update:     Wed 07 Oct 2026 11:08:06 +0000
Files and hashes:         1: 3130332e3132332e3234322e302f32332d3234203d3e20313331313439.roa (hash: d1WrKaYXHT6iXDQdIpLrQF3QTy7zcOI+MfmzwYnjw0w=)
                          2: 809590BEFB516AA616A45FA21C8495BBB968261F.crl (hash: yq67FsH2UVXTswZtP4ogLhn6/YROVM/OE51cFZACaxw=)
                          3: 3232332e32362e362e302f32332d3332203d3e20313331313439.roa (hash: Y12xlfekLvwP4G1mkzxyGAzt03PMoPVC/Sf7L4IaSl0=)
                          4: 3130332e312e3232302e302f32322d3332203d3e20313331313439.roa (hash: rg3bnNQteoXQwroi6JW6o3A+bYuPDATWwHnIMd8oF1Y=)
                          5: 3130332e3132332e3139362e302f32322d3332203d3e20313331313439.roa (hash: TKYc7P8/LAkMHNgfW1aqA8h0faddx7IdhI2cquOgiQs=)
                          6: 323430373a373130303a3a2f33322d3438203d3e20313331313439.roa (hash: ir+6BuRP4ipyEjzb583mBr5bzQkTrQiq6mOB7prVUOY=)
                          7: 34332e3235342e31362e302f32322d3332203d3e20313331313439.roa (hash: dbJE/Gdn4JhQH0dnbyKF/th0Px9Dxj1VCZJpdchA0ms=)
                          8: 3130332e3132332e3234322e302f32332d3234203d3e203231383539.roa (hash: 8mzMixfzYIVmtJF1WfXduAuFjPjSvfM1GtN9oUTn6Eg=)
                          9: 3130332e3132332e3234322e302f32332d3234203d3e203632363130.roa (hash: Ajq6f+rGK5WhdyWIcDvtsuWObY+oUuRhaAfiAZcQHfM=)
                          10: 3230322e31322e37362e302f32322d3332203d3e20313331313439.roa (hash: HAvwmN0LL6mrAImekQpqdmqpo1QKT3FkXOpjWBPVCgI=)
                          11: 3130332e3132332e3139322e302f32322d3332203d3e20313331313439.roa (hash: mu1FL+p54AOJZDEfjzd+G1kFrify3MZy0r9So4AMpZA=)
                          12: 3130332e31372e382e302f32322d3332203d3e20313331313439.roa (hash: hZUaWratCjgaQsx8PmP6kA2splqJpSDGrjxSvKb8z+g=)
                          13: 3130332e3132392e3136382e302f32322d3332203d3e20313331313439.roa (hash: Xk6yS2TWJMWZBOwo932s8w+km5Lrk4mU07mh2X5Q+zc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl
                          rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 02:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:59:2c:48:6b:4c:a0:92:1d:65:d0:9b:d8:f5:a8:04:0d:1d:13:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809590BEFB516AA616A45FA21C8495BBB968261F
        Validity
            Not Before: Oct  6 07:52:06 2026 GMT
            Not After : Oct  7 11:08:06 2026 GMT
        Subject: CN=04C8A8A42EBAAB8ED732ACCAAC541105EC84C16E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bb:1a:4c:36:62:36:ee:1c:31:07:23:90:e9:
                    9c:3f:15:17:0d:f1:eb:bc:29:1b:c2:1d:3b:31:86:
                    6c:73:c1:c3:97:19:e6:8c:57:21:de:08:24:f1:08:
                    e1:73:c3:f8:ce:4d:37:2f:54:c3:67:f8:d3:65:bb:
                    b7:35:89:ef:f3:d5:bf:68:e4:55:b9:ed:9b:28:20:
                    9d:ab:b9:49:77:f7:1c:db:fb:11:c0:46:5f:fc:7b:
                    04:61:61:7a:d1:8d:61:18:3f:51:80:6f:14:de:b8:
                    72:be:2b:e4:a2:b0:34:94:67:24:00:7b:e3:31:b7:
                    01:d7:04:a3:25:e5:52:88:03:30:8d:36:47:8f:ae:
                    71:4d:20:ff:77:98:29:5e:a1:09:08:10:6c:bb:15:
                    e7:da:45:1c:85:4f:6b:3d:79:c1:f2:ba:87:bd:93:
                    2e:2b:4d:6c:64:93:f3:f1:2c:14:db:ad:e6:9f:7b:
                    a2:4a:a2:28:2a:0d:66:2c:74:17:bf:a7:4d:8d:e6:
                    2e:62:ee:09:a0:c2:49:8f:fa:4e:d2:12:24:a2:c8:
                    5c:b8:f2:50:dc:e1:7e:04:38:c9:f6:8e:e9:71:d7:
                    a6:68:dc:2d:9b:19:dc:77:1e:8c:33:c6:c5:76:cd:
                    95:36:8f:f4:f1:13:2a:3f:3c:c3:0f:fa:09:9e:12:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C8:A8:A4:2E:BA:AB:8E:D7:32:AC:CA:AC:54:11:05:EC:84:C1:6E
            X509v3 Authority Key Identifier:
                keyid:80:95:90:BE:FB:51:6A:A6:16:A4:5F:A2:1C:84:95:BB:B9:68:26:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/809590BEFB516AA616A45FA21C8495BBB968261F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUANJHEN/0/809590BEFB516AA616A45FA21C8495BBB968261F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c6:ca:3d:c6:6a:3f:6e:a3:90:45:5d:57:de:63:cb:e8:54:
         59:2e:3d:02:bb:da:ec:b9:5d:f9:e8:5c:e2:62:a8:58:bc:84:
         73:4b:91:7e:c7:f7:a2:e2:d8:c7:64:5a:fe:54:61:e9:3a:81:
         39:93:de:33:19:dc:f8:09:9f:41:02:8a:73:e2:7d:20:c5:a2:
         8e:19:cf:a5:51:a9:a0:32:74:0e:4b:df:fc:bf:c4:88:3f:c6:
         53:5e:5e:72:7e:4a:2d:03:55:1d:5b:10:1b:39:5e:e6:60:e3:
         14:04:dc:e5:6a:54:74:52:c1:a0:b8:aa:08:86:ba:aa:bd:fc:
         9a:96:17:05:72:0d:d5:fa:a5:49:2e:9f:e3:09:2d:32:17:89:
         ae:f6:f3:b2:95:01:3d:c1:14:3f:75:b9:ab:65:22:59:6d:12:
         e1:b4:e6:64:04:b2:f3:d8:f5:9c:48:f1:61:d7:2c:0a:35:92:
         b0:e4:cc:2e:54:10:cd:51:8b:59:fa:52:11:32:4e:02:36:1d:
         13:1b:22:8a:e1:13:b3:73:a8:e3:87:97:54:09:97:32:ff:f3:
         84:af:5b:e7:b6:53:45:ae:a0:cc:92:33:7e:f4:8c:9c:71:25:
         28:e8:1a:7a:6c:8d:d7:a4:65:06:40:a4:07:70:2c:7e:b3:f1:
         26:5d:d9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:51:55 2026 by rpki-client