Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
File:                     157D536924EE6C5A7711625C6906CB5139BE6605.mft (raw, json)
Hash identifier:          86LAntST51INoNqg8o9x7ypbwSWntMlPH7/029Mx6fA=
Subject key identifier:   A6:E8:FC:CE:3B:10:44:D5:92:B0:74:7C:66:68:B9:7E:CF:55:6B:B9
Authority key identifier: 15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05
Certificate issuer:       /CN=157D536924EE6C5A7711625C6906CB5139BE6605
Certificate serial:       3B699D1937DB9BD2FCA68FD7C81FF3E171BB44B7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
Manifest number:          DE
Signing time:             Sun 04 Oct 2026 01:28:35 +0000
Manifest this update:     Sun 04 Oct 2026 01:23:35 +0000
Manifest next update:     Mon 05 Oct 2026 03:05:35 +0000
Files and hashes:         1: 3131332e32312e3136302e302f31392d3234203d3e2039323434.roa (hash: Qo1J6GmDEF02G8LEyX3EsjEFHF0gh33rgqCIM17+ySY=)
                          2: 36312e35362e38382e302f32312d3231203d3e2039323434.roa (hash: Yv9i1Wf6abh3HnSZnR0KOLnhp4lGY5xfo27UjbSYy+8=)
                          3: 3131332e32312e3136302e302f32302d3230203d3e2039323434.roa (hash: zNMmR5ncf64bpLQDMhE/zKkbuo5hWND/v72vA6wBXyc=)
                          4: 3131332e32312e3137332e302f32342d3234203d3e2039323434.roa (hash: zad3+2RXzsQ+kKuIVqMfSQyLlU7unW/aAqyPG/mguxY=)
                          5: 36312e3234372e3136302e302f32302d3234203d3e2039323434.roa (hash: qxXWankg7oia3AZJcligt1FqlLwncBLZ3x0aR/n5a/M=)
                          6: 36312e35362e38302e302f32302d3230203d3e2039323434.roa (hash: fY0JZskhhOlyqSdfMeP9akHRUU7aeJhuk2izFKgXPNQ=)
                          7: 36312e35362e38302e302f32302d3234203d3e2039323434.roa (hash: 6H/xsz0QA1bSR/X4dlktPQin25xpMQY3A5kPm3VjeZo=)
                          8: 36312e35362e36342e302f32302d3230203d3e2039323434.roa (hash: ZKLo/ilTfM+KDgM75kk/lKbUAkojHaOIgyc3I52X5q8=)
                          9: 3131332e32312e3138382e302f32322d3232203d3e2039323434.roa (hash: mj+jG0WgHPI9Z78w1rU1L8re5exbzzfP02Vd4ETlO4I=)
                          10: 36312e3234372e3136302e302f32312d3231203d3e2039323434.roa (hash: nhV3EOJxiTmAffz4Z7cCPeuZbMUl+G2BM8SxTh0pjdM=)
                          11: 36312e35362e37322e302f32312d3231203d3e2039323434.roa (hash: neCogx7kiACRIuTdTb4mPlJDa/8XCuRztd8KmEyTXNk=)
                          12: 3131332e32312e3137352e302f32342d3234203d3e2039323434.roa (hash: whesli0aowOeEwrokq13wIdP2tp0cw9ZGh1XLVuettA=)
                          13: 36312e35362e36342e302f32312d3231203d3e2039323434.roa (hash: oYIVd+rx3myxoRGdVrCSUc7g08NdN5+NRwaA2ICa/fc=)
                          14: 3231302e36372e39362e302f32302d3234203d3e2039323434.roa (hash: zHNjCezs8fFWlbXZ3/WOnM3QHIEAmgqdy+ijyA8rKKI=)
                          15: 157D536924EE6C5A7711625C6906CB5139BE6605.crl (hash: rl7hqVOtvOAs70Hc4ks6nbAMu9xCTe3RvkwjSDRlqIA=)
                          16: 3131332e32312e3138342e302f32322d3234203d3e2039353834.roa (hash: JffZ7xaMKxvRLXvyZwq6BE7sU1Ksg43YEW866OsFW/Y=)
                          17: 323430333a656530303a3a2f33322d3536203d3e2039323434.roa (hash: 3xt+0tfS9ZpseLYoRn7kbI8U4wMAyjKAyApcX78rnyU=)
                          18: 36312e35362e38302e302f32312d3231203d3e2039323434.roa (hash: BtytB4ImCxwmDNMsYcsPUOT+c3DhbJMzf7Pj6Zu2TSA=)
                          19: 36312e35362e36342e302f32302d3234203d3e2039323434.roa (hash: ie+Yaj7K/OCtwgg9fHP4osRhiW67GSidm1dXNt6AjH0=)
                          20: 36312e35362e36372e302f32342d3234203d3e2039323434.roa (hash: fIv1TMJeuFOvi9xY2TJoQcWHee5kMAwWsOnDU4no5V8=)
                          21: 36312e35362e38342e302f32342d3234203d3e2039323434.roa (hash: GYR6FspSCdnkcSMZGwxPQmD5bQPvQNdvhgSJGhjts20=)
                          22: 3231302e36372e39362e302f32302d3230203d3e2039323434.roa (hash: C02rXsQ6Y93MLpg6oZMwS2YNlT8ftQ8gTIwWkyT1p/c=)
                          23: 36312e3234372e3136352e302f32342d3234203d3e2039323434.roa (hash: k4BvpqmiGcRTqeEDlHzCRia3WesXP5gUhCWBJ3J9XD0=)
                          24: 36312e3234372e3136382e302f32312d3231203d3e2039323434.roa (hash: yJYnyLxqCiz6yoVKYK54rTjzmF9VmGcpnqZIG+inTu0=)
                          25: 3131332e32312e3137362e302f32312d3231203d3e2039323434.roa (hash: KJODPHzEc1hWKKBkKg9JUc5d7SVmqFSTdy72MVSqi9s=)
                          26: 36312e35362e38362e302f32342d3234203d3e2039323434.roa (hash: DZQdAc5OZiI1l50V9csTghB0Kp8yJsJBeM5CKzaxzH8=)
                          27: 36312e35362e36352e302f32342d3234203d3e2039323434.roa (hash: 58eBZJn8dVtEAJDGPa82sE+r7hzziamq/6j0Jux307s=)
                          28: 36312e3234372e3136302e302f32302d3230203d3e2039323434.roa (hash: SYEKqw4xhnIhxcOUCduJvhjRdzbef1covv+Qeem6MuM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl
                          rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 03:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:69:9d:19:37:db:9b:d2:fc:a6:8f:d7:c8:1f:f3:e1:71:bb:44:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D536924EE6C5A7711625C6906CB5139BE6605
        Validity
            Not Before: Oct  4 01:23:35 2026 GMT
            Not After : Oct  5 03:05:35 2026 GMT
        Subject: CN=A6E8FCCE3B1044D592B0747C6668B97ECF556BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5a:a8:ef:01:be:43:57:49:a2:cc:8f:42:b7:
                    5e:e7:c0:c6:3a:39:5f:72:71:b8:34:48:a4:3f:52:
                    8f:da:c1:de:a5:f5:74:65:91:5a:50:43:95:af:b2:
                    ea:50:3a:29:f5:c7:f9:04:1c:e9:c1:59:23:c4:f1:
                    83:db:04:2c:a9:5f:5f:31:61:b7:4f:ef:47:64:92:
                    0f:d4:c8:45:1b:c5:f0:f5:97:dc:76:fb:08:df:eb:
                    e1:9a:39:06:8e:4f:f3:ac:0d:02:17:02:93:fc:04:
                    b7:82:df:16:a6:0c:bc:23:b0:ca:b8:a9:57:b2:6d:
                    0c:aa:c4:66:cb:ec:b1:d3:9d:05:33:6a:fe:f2:d1:
                    49:3f:65:a8:7e:7e:bd:90:cb:03:05:b4:cf:d6:65:
                    d9:16:78:ba:30:79:cd:69:80:1e:94:94:e5:1a:32:
                    8a:ac:18:0a:81:ec:0b:6b:d9:30:ab:1a:b9:56:be:
                    55:36:6c:4a:2f:c9:26:b7:fa:a6:99:30:63:2b:a9:
                    25:8b:b2:8a:2b:df:d0:96:b2:75:ed:94:df:bb:0d:
                    f4:18:3a:00:73:2d:43:80:ec:11:58:5b:c9:64:93:
                    4f:53:25:f1:fd:27:bb:f1:08:7a:5f:0f:7f:8a:7a:
                    71:9b:ef:2f:6c:3b:c3:ce:ca:c0:62:8a:2d:8c:70:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E8:FC:CE:3B:10:44:D5:92:B0:74:7C:66:68:B9:7E:CF:55:6B:B9
            X509v3 Authority Key Identifier:
                keyid:15:7D:53:69:24:EE:6C:5A:77:11:62:5C:69:06:CB:51:39:BE:66:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/157D536924EE6C5A7711625C6906CB5139BE6605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DYXNET/0/157D536924EE6C5A7711625C6906CB5139BE6605.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:f3:c4:bb:06:b9:cb:1b:cb:9a:4b:e7:b7:54:66:2c:7b:
         e9:d3:26:39:50:72:b8:41:a2:9e:aa:17:c6:88:ad:af:53:9d:
         4c:d8:6c:58:51:87:2f:8a:e8:48:2e:f5:0c:9e:7d:5e:2f:e3:
         14:da:17:a3:b7:7a:13:18:db:d8:82:45:12:f3:92:c5:df:16:
         50:82:63:33:db:bf:5b:c8:50:25:55:f1:50:bb:52:06:87:66:
         c0:df:dc:4d:25:94:5c:ba:27:db:89:3d:eb:2f:d5:24:7a:44:
         32:e9:a0:cd:0a:b1:be:7e:0e:c6:e6:28:9a:2a:5f:d7:d2:70:
         7c:ce:02:25:71:3a:96:21:53:93:e5:3f:15:65:7e:fc:31:77:
         9a:dd:c2:79:8c:fd:b4:ac:dd:b4:28:00:ab:80:67:1e:fb:93:
         8b:4f:10:af:23:f9:6e:bd:94:8d:e4:e3:e6:4d:d6:0c:81:04:
         b3:19:40:c7:94:9a:06:5e:2d:a5:ee:eb:01:e0:52:b5:8d:88:
         c9:1a:67:bc:c8:b4:02:10:f6:52:f1:e4:cb:d2:b4:d4:14:18:
         10:ac:8d:58:1b:d7:cd:e3:f0:07:ba:b2:f7:ff:42:f6:89:13:
         61:10:1f:b4:90:da:48:86:c5:a8:16:44:b4:3c:77:6b:53:bd:
         dd:8d:28:64
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUO2mdGTfbm9L8po/XyB/z4XG7RLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEz
OUJFNjYwNTAeFw0yNjEwMDQwMTIzMzVaFw0yNjEwMDUwMzA1MzVaMDMxMTAvBgNV
BAMTKEE2RThGQ0NFM0IxMDQ0RDU5MkIwNzQ3QzY2NjhCOTdFQ0Y1NTZCQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrWqjvAb5DV0mizI9Ct17nwMY6
OV9ycbg0SKQ/Uo/awd6l9XRlkVpQQ5WvsupQOin1x/kEHOnBWSPE8YPbBCypX18x
YbdP70dkkg/UyEUbxfD1l9x2+wjf6+GaOQaOT/OsDQIXApP8BLeC3xamDLwjsMq4
qVeybQyqxGbL7LHTnQUzav7y0Uk/Zah+fr2QywMFtM/WZdkWeLowec1pgB6UlOUa
MoqsGAqB7Atr2TCrGrlWvlU2bEovySa3+qaZMGMrqSWLsoor39CWsnXtlN+7DfQY
OgBzLUOA7BFYW8lkk09TJfH9J7vxCHpfD3+KenGb7y9sO8POysBiii2McG2RAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUpuj8zjsQRNWSsHR8Zmi5fs9Va7kwHwYDVR0j
BBgwFoAUFX1TaSTubFp3EWJcaQbLUTm+ZgUwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVU
LzAvMTU3RDUzNjkyNEVFNkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS8xNTdENTM2OTI0RUU2QzVBNzcxMTYyNUM2OTA2
Q0I1MTM5QkU2NjA1LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRFlYTkVULzAvMTU3RDUzNjkyNEVF
NkM1QTc3MTE2MjVDNjkwNkNCNTEzOUJFNjYwNS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACMM88S7BrnL
G8uaS+e3VGYse+nTJjlQcrhBop6qF8aIra9TnUzYbFhRhy+K6Egu9QyefV4v4xTa
F6O3ehMY29iCRRLzksXfFlCCYzPbv1vIUCVV8VC7UgaHZsDf3E0llFy6J9uJPesv
1SR6RDLpoM0Ksb5+DsbmKJoqX9fScHzOAiVxOpYhU5PlPxVlfvwxd5rdwnmM/bSs
3bQoAKuAZx77k4tPEK8j+W69lI3k4+ZN1gyBBLMZQMeUmgZeLaXu6wHgUrWNiMka
Z7zItAIQ9lLx5MvStNQUGBCsjVgb183j8Ae6svf/QvaJE2EQH7SQ2kiGxagWRLQ8
d2tTvd2NKGQ=
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:00:13 2026 by rpki-client