Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
File:                     157D536924EE6C5A7711625C6906CB5139BE6605.mft (raw, json)
Hash identifier:          eJoJIHyyOGdgP3/Lln/WyS3VrTYf0vEJvMz4hZwDyZ4=
Subject key identifier:   D2:90:36:95:28:E1:2D:EC:52:6E:F3:79:AF:73:1E:75:8D:89:B4:69
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       6AB6D4B48413733BDA32BA2E78C9871315DCB19D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
Manifest number:          5F
Signing time:             Tue 30 Jun 2026 15:54:14 +0000
Manifest this update:     Tue 30 Jun 2026 15:49:14 +0000
Manifest next update:     Wed 01 Jul 2026 19:00:14 +0000
Files and hashes:         1: 3131332e32312e3136302e302f31392d3234203d3e2039323434.roa (hash: Qo1J6GmDEF02G8LEyX3EsjEFHF0gh33rgqCIM17+ySY=)
                          2: 36312e3234372e3136352e302f32342d3234203d3e2039323434.roa (hash: k4BvpqmiGcRTqeEDlHzCRia3WesXP5gUhCWBJ3J9XD0=)
                          3: 3131332e32312e3137332e302f32342d3234203d3e2039323434.roa (hash: zad3+2RXzsQ+kKuIVqMfSQyLlU7unW/aAqyPG/mguxY=)
                          4: 36312e35362e36372e302f32342d3234203d3e2039323434.roa (hash: fIv1TMJeuFOvi9xY2TJoQcWHee5kMAwWsOnDU4no5V8=)
                          5: 36312e3234372e3136382e302f32312d3231203d3e2039323434.roa (hash: yJYnyLxqCiz6yoVKYK54rTjzmF9VmGcpnqZIG+inTu0=)
                          6: 3231302e36372e39362e302f32302d3230203d3e2039323434.roa (hash: C02rXsQ6Y93MLpg6oZMwS2YNlT8ftQ8gTIwWkyT1p/c=)
                          7: 36312e35362e37322e302f32312d3231203d3e2039323434.roa (hash: neCogx7kiACRIuTdTb4mPlJDa/8XCuRztd8KmEyTXNk=)
                          8: 157D536924EE6C5A7711625C6906CB5139BE6605.crl (hash: cIlMFOpqcmH5LP41r4e3BOBX4fgNCXts5v2eyOV1r8I=)
                          9: 3131332e32312e3138342e302f32322d3234203d3e2039353834.roa (hash: JffZ7xaMKxvRLXvyZwq6BE7sU1Ksg43YEW866OsFW/Y=)
                          10: 3231302e36372e39362e302f32302d3234203d3e2039323434.roa (hash: zHNjCezs8fFWlbXZ3/WOnM3QHIEAmgqdy+ijyA8rKKI=)
                          11: 3131332e32312e3137352e302f32342d3234203d3e2039323434.roa (hash: whesli0aowOeEwrokq13wIdP2tp0cw9ZGh1XLVuettA=)
                          12: 36312e35362e38302e302f32302d3234203d3e2039323434.roa (hash: 6H/xsz0QA1bSR/X4dlktPQin25xpMQY3A5kPm3VjeZo=)
                          13: 36312e35362e36342e302f32302d3230203d3e2039323434.roa (hash: ZKLo/ilTfM+KDgM75kk/lKbUAkojHaOIgyc3I52X5q8=)
                          14: 36312e35362e38302e302f32312d3231203d3e2039323434.roa (hash: BtytB4ImCxwmDNMsYcsPUOT+c3DhbJMzf7Pj6Zu2TSA=)
                          15: 36312e35362e38302e302f32302d3230203d3e2039323434.roa (hash: fY0JZskhhOlyqSdfMeP9akHRUU7aeJhuk2izFKgXPNQ=)
                          16: 36312e35362e36342e302f32302d3234203d3e2039323434.roa (hash: ie+Yaj7K/OCtwgg9fHP4osRhiW67GSidm1dXNt6AjH0=)
                          17: 36312e35362e38382e302f32312d3231203d3e2039323434.roa (hash: Yv9i1Wf6abh3HnSZnR0KOLnhp4lGY5xfo27UjbSYy+8=)
                          18: 36312e35362e36342e302f32312d3231203d3e2039323434.roa (hash: oYIVd+rx3myxoRGdVrCSUc7g08NdN5+NRwaA2ICa/fc=)
                          19: 36312e35362e36352e302f32342d3234203d3e2039323434.roa (hash: 58eBZJn8dVtEAJDGPa82sE+r7hzziamq/6j0Jux307s=)
                          20: 3131332e32312e3137362e302f32312d3231203d3e2039323434.roa (hash: KJODPHzEc1hWKKBkKg9JUc5d7SVmqFSTdy72MVSqi9s=)
                          21: 323430333a656530303a3a2f33322d3536203d3e2039323434.roa (hash: 3xt+0tfS9ZpseLYoRn7kbI8U4wMAyjKAyApcX78rnyU=)
                          22: 3131332e32312e3138382e302f32322d3232203d3e2039323434.roa (hash: mj+jG0WgHPI9Z78w1rU1L8re5exbzzfP02Vd4ETlO4I=)
                          23: 36312e3234372e3136302e302f32302d3234203d3e2039323434.roa (hash: qxXWankg7oia3AZJcligt1FqlLwncBLZ3x0aR/n5a/M=)
                          24: 36312e35362e38362e302f32342d3234203d3e2039323434.roa (hash: DZQdAc5OZiI1l50V9csTghB0Kp8yJsJBeM5CKzaxzH8=)
                          25: 36312e3234372e3136302e302f32302d3230203d3e2039323434.roa (hash: SYEKqw4xhnIhxcOUCduJvhjRdzbef1covv+Qeem6MuM=)
                          26: 3131332e32312e3136302e302f32302d3230203d3e2039323434.roa (hash: zNMmR5ncf64bpLQDMhE/zKkbuo5hWND/v72vA6wBXyc=)
                          27: 36312e3234372e3136302e302f32312d3231203d3e2039323434.roa (hash: nhV3EOJxiTmAffz4Z7cCPeuZbMUl+G2BM8SxTh0pjdM=)
                          28: 36312e35362e38342e302f32342d3234203d3e2039323434.roa (hash: GYR6FspSCdnkcSMZGwxPQmD5bQPvQNdvhgSJGhjts20=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 14:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b6:d4:b4:84:13:73:3b:da:32:ba:2e:78:c9:87:13:15:dc:b1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: Jun 30 15:49:14 2026 GMT
            Not After : Jul  1 19:00:14 2026 GMT
        Subject: CN=D290369528E12DEC526EF379AF731E758D89B469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:3d:bf:88:22:11:c3:a6:4a:a7:31:3e:f8:
                    f2:33:69:18:d9:44:6c:14:53:ba:b6:b2:94:3c:cb:
                    d3:a4:cc:f6:fb:f7:7c:02:51:62:22:77:bc:07:86:
                    28:0d:b1:9c:5f:e0:e4:70:b2:03:48:71:46:93:04:
                    9a:ab:88:e9:09:47:c2:ab:53:a1:83:82:a1:75:87:
                    20:25:da:27:77:32:54:5d:9b:d8:1e:52:b6:57:6a:
                    9a:35:4f:f5:f0:8a:b6:67:e1:71:f4:9d:0e:40:c0:
                    b2:9d:4f:15:11:5d:7e:ec:49:85:b4:eb:04:f2:8d:
                    c8:a1:a5:5c:88:32:1e:de:d1:77:a9:15:5b:9a:41:
                    18:34:38:6b:78:3b:86:1c:d8:9c:f9:08:b8:50:3c:
                    c1:14:4d:e5:43:d5:47:f9:e7:3f:26:bc:b4:65:25:
                    cd:83:16:72:4b:5e:f6:fe:5c:d1:7d:a9:ff:13:1a:
                    19:1b:61:c5:3f:db:8e:de:a9:91:f9:4e:38:3d:cc:
                    ad:ba:0e:f5:cc:bf:ab:65:19:f3:f8:8c:e1:c3:cc:
                    69:87:cb:d2:45:25:ee:0b:66:07:a7:5d:21:38:c2:
                    ae:99:40:df:51:0c:da:ac:d1:9b:f6:8b:80:05:b6:
                    17:1b:8f:54:ce:f9:cf:a7:cd:9e:c2:3e:b3:6a:2b:
                    50:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:90:36:95:28:E1:2D:EC:52:6E:F3:79:AF:73:1E:75:8D:89:B4:69
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e9:7f:39:5a:62:f8:b2:e7:4d:79:a0:c6:6c:58:e9:f3:5c:
         07:32:85:e2:a7:db:eb:b3:97:3c:d8:a5:ce:a4:66:4f:95:35:
         ae:be:ca:6c:d9:69:9e:0f:de:7c:fd:8c:2d:06:c6:5a:8d:76:
         29:9a:4e:8c:64:ec:28:d6:ca:d9:03:4d:cc:5f:be:61:31:27:
         2e:25:4e:ec:de:ca:3c:ac:a1:8e:be:f8:fa:a9:51:af:e6:b4:
         fc:cf:cd:7c:23:23:1a:81:22:dd:43:1b:c6:4b:de:ca:c4:97:
         36:9c:ae:4d:46:04:7f:a8:89:3e:73:c1:1b:7e:b4:f3:14:a4:
         3e:1e:71:92:7c:8e:29:c9:06:cf:8e:fb:ad:bb:30:4a:a1:97:
         c6:1d:20:9d:a0:2f:54:8d:81:ad:29:73:0e:99:0a:8d:8d:10:
         bd:db:40:44:b1:be:5f:69:67:b6:80:d0:7b:a2:23:34:84:1f:
         80:a3:ed:cb:3a:75:17:03:72:37:b1:26:0c:d6:98:c2:31:11:
         fc:2f:f9:fe:9c:1c:94:cb:ce:a9:1f:89:87:be:3a:0f:97:92:
         b7:c9:9c:1a:c0:f9:52:6b:09:1b:c0:34:6a:d9:62:5e:52:a3:
         cb:1a:d4:6e:48:ba:40:93:b4:cc:f1:7c:a2:49:df:f8:27:ec:
         00:79:99:4e
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUarbUtIQTczvaMroueMmHExXcsZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEz
OUJFNjYwNTAeFw0yNjA2MzAxNTQ5MTRaFw0yNjA3MDExOTAwMTRaMDMxMTAvBgNV
BAMTKEQyOTAzNjk1MjhFMTJERUM1MjZFRjM3OUFGNzMxRTc1OEQ4OUI0NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUYz2/iCIRw6ZKpzE++PIzaRjZ
RGwUU7q2spQ8y9OkzPb793wCUWIid7wHhigNsZxf4ORwsgNIcUaTBJqriOkJR8Kr
U6GDgqF1hyAl2id3MlRdm9geUrZXapo1T/XwirZn4XH0nQ5AwLKdTxURXX7sSYW0
6wTyjcihpVyIMh7e0XepFVuaQRg0OGt4O4Yc2Jz5CLhQPMEUTeVD1Uf55z8mvLRl
Jc2DFnJLXvb+XNF9qf8TGhkbYcU/247eqZH5Tjg9zK26DvXMv6tlGfP4jOHDzGmH
y9JFJe4LZgenXSE4wq6ZQN9RDNqs0Zv2i4AFthcbj1TO+c+nzZ7CPrNqK1CBAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQU0pA2lSjhLexSbvN5r3MedY2JtGkwHwYDVR0j
BBgwFoAUFX1TaSTubFp3EWJcaQbLUTm+ZgUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVU
LzAvMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xNTdENTM2OTI0RUU2QzVBNzcxMTYyNUM2OTA2
Q0I1MTM5QkU2NjA1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVULzAvMTU3RDUzNjkyNEVF
NkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHHpfzlaYviy
5015oMZsWOnzXAcyheKn2+uzlzzYpc6kZk+VNa6+ymzZaZ4P3nz9jC0GxlqNdima
Toxk7CjWytkDTcxfvmExJy4lTuzeyjysoY6++PqpUa/mtPzPzXwjIxqBIt1DG8ZL
3srElzacrk1GBH+oiT5zwRt+tPMUpD4ecZJ8jinJBs+O+627MEqhl8YdIJ2gL1SN
ga0pcw6ZCo2NEL3bQESxvl9pZ7aA0HuiIzSEH4Cj7cs6dRcDcjexJgzWmMIxEfwv
+f6cHJTLzqkfiYe+Og+XkrfJnBrA+VJrCRvANGrZYl5So8sa1G5IukCTtMzxfKJJ
3/gn7AB5mU4=
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:08:16 2026 by rpki-client