Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
File:                     7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft (raw, json)
Hash identifier:          O6SzKCGpVNRp6Zo+nG9E5hxSUbPC66OA9kDPg32bgFE=
Subject key identifier:   84:A1:A4:80:41:49:BB:1C:39:84:A7:2F:BF:9D:C0:EE:EB:97:85:84
Authority key identifier: 7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76
Certificate issuer:       /CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
Certificate serial:       36B408AC3D9EFB06F4ADF2F8E3B6852254A7E4E2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
Manifest number:          C3
Signing time:             Sat 03 Oct 2026 05:38:06 +0000
Manifest this update:     Sat 03 Oct 2026 05:33:06 +0000
Manifest next update:     Sun 04 Oct 2026 08:29:06 +0000
Files and hashes:         1: 7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl (hash: BX8tZyW2/JstruCiunaLvMUgEIW6xshH1j+oICDf2/A=)
                          2: 3130332e36392e34382e302f32332d3332203d3e20313331363432.roa (hash: o7B66t9SqLTxpoTquQyKEFqbdaVVWkZmLbtbMwzYiRQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl
                          rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:17:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b4:08:ac:3d:9e:fb:06:f4:ad:f2:f8:e3:b6:85:22:54:a7:e4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
        Validity
            Not Before: Oct  3 05:33:06 2026 GMT
            Not After : Oct  4 08:29:06 2026 GMT
        Subject: CN=84A1A4804149BB1C3984A72FBF9DC0EEEB978584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4e:25:63:cf:3a:8f:af:3a:a1:36:00:b0:62:
                    66:09:e6:45:7a:0c:d5:fd:77:71:d1:ee:a1:0d:ae:
                    35:02:91:77:82:b7:a8:1b:ab:cc:4d:77:43:5b:ec:
                    11:01:a7:2e:ca:24:9c:08:a2:95:e0:bb:3f:ca:c2:
                    03:52:4b:42:f8:9b:de:fd:eb:13:34:a9:bd:e4:37:
                    d4:c2:a5:b3:9c:f4:a0:a5:c9:d3:e4:d3:62:17:e4:
                    92:91:25:91:a6:d2:4c:b4:cc:d3:3a:36:eb:8c:92:
                    c1:dd:17:11:85:a7:96:64:97:19:ac:c6:92:b1:95:
                    5f:e8:2c:c4:89:df:41:b3:0c:5c:66:60:81:54:ad:
                    f6:73:43:66:c4:96:22:6f:83:a3:f3:4c:9b:17:36:
                    87:b5:f3:21:b2:c6:c7:89:9f:57:f1:8c:3b:3e:94:
                    c7:f9:5f:7b:5f:83:dc:18:65:11:c5:e0:a5:34:f7:
                    4c:65:89:0e:b4:fa:5a:af:09:e9:74:d7:86:12:81:
                    18:ce:b7:8c:ea:d8:3d:60:24:61:b1:2a:d7:11:89:
                    22:58:38:13:03:c7:17:47:fb:ff:61:86:aa:7a:c5:
                    f7:24:92:24:8a:d8:6c:03:40:04:29:c9:1d:22:9d:
                    02:86:f1:d0:25:58:c8:65:43:85:73:c5:25:3e:7d:
                    73:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A1:A4:80:41:49:BB:1C:39:84:A7:2F:BF:9D:C0:EE:EB:97:85:84
            X509v3 Authority Key Identifier:
                keyid:7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8f:dd:b6:f6:7e:61:a8:e9:9e:5b:68:ec:7c:f9:0c:22:21:
         1b:e4:d9:02:6a:12:e1:48:87:69:a4:c5:23:c7:c3:97:95:18:
         f0:fb:69:82:a4:53:c9:d9:57:26:95:81:6a:4e:9b:8c:b3:65:
         d7:ff:ba:4d:37:d9:d2:1e:c8:0f:c4:d3:a7:d1:5b:ff:9d:ed:
         a6:2e:85:e8:37:8c:90:04:27:e9:4b:f2:0d:23:25:63:bb:3f:
         85:9f:e6:0a:b5:14:f5:01:02:d7:fd:2c:a5:7c:32:04:a1:c3:
         85:05:5c:f7:87:83:34:a7:36:97:4d:e3:32:a0:38:e9:1a:9f:
         b4:44:74:fe:bd:5c:fa:79:be:46:6f:8e:5b:a7:84:8a:00:4b:
         18:d7:ae:39:82:b5:e2:24:8b:01:48:63:5a:a7:21:e6:40:0e:
         a4:2c:04:16:a4:0f:68:b4:90:7e:96:6e:52:4e:61:7f:dd:71:
         c7:8b:89:81:3d:2b:e7:13:80:a6:2d:ee:8a:c9:07:38:a5:02:
         95:fc:5e:2c:00:68:df:6c:b3:68:0b:d6:35:63:5a:a9:9f:82:
         ae:0b:f7:99:92:0f:85:64:c5:e3:55:a8:fa:1e:11:cb:fc:32:
         d9:85:fc:35:7f:22:87:45:83:2a:28:ea:ed:0e:3b:20:94:07:
         bb:8a:91:6c
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUNrQIrD2e+wb0rfL447aFIlSn5OIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NEODVEMEREQTc1RjQ5MkQ5NTQ0MDJCRkVBODE5RUQ2
MUZENUI3NjAeFw0yNjEwMDMwNTMzMDZaFw0yNjEwMDQwODI5MDZaMDMxMTAvBgNV
BAMTKDg0QTFBNDgwNDE0OUJCMUMzOTg0QTcyRkJGOURDMEVFRUI5Nzg1ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTiVjzzqPrzqhNgCwYmYJ5kV6
DNX9d3HR7qENrjUCkXeCt6gbq8xNd0Nb7BEBpy7KJJwIopXguz/KwgNSS0L4m979
6xM0qb3kN9TCpbOc9KClydPk02IX5JKRJZGm0ky0zNM6NuuMksHdFxGFp5Zklxms
xpKxlV/oLMSJ30GzDFxmYIFUrfZzQ2bEliJvg6PzTJsXNoe18yGyxseJn1fxjDs+
lMf5X3tfg9wYZRHF4KU090xliQ60+lqvCel014YSgRjOt4zq2D1gJGGxKtcRiSJY
OBMDxxdH+/9hhqp6xfckkiSK2GwDQAQpyR0inQKG8dAlWMhlQ4VzxSU+fXNRAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUhKGkgEFJuxw5hKcvv53A7uuXhYQwHwYDVR0j
BBgwFoAUfNhdDdp19JLZVEAr/qgZ7WH9W3YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUkVOUkVO
LzAvN0NEODVEMEREQTc1RjQ5MkQ5NTQ0MDJCRkVBODE5RUQ2MUZENUI3Ni5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS83Q0Q4NUQwRERBNzVGNDkyRDk1NDQwMkJGRUE4
MTlFRDYxRkQ1Qjc2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUkVOUkVOLzAvN0NEODVEMEREQTc1
RjQ5MkQ5NTQ0MDJCRkVBODE5RUQ2MUZENUI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAyP3bb2fmGo
6Z5baOx8+QwiIRvk2QJqEuFIh2mkxSPHw5eVGPD7aYKkU8nZVyaVgWpOm4yzZdf/
uk032dIeyA/E06fRW/+d7aYuheg3jJAEJ+lL8g0jJWO7P4Wf5gq1FPUBAtf9LKV8
MgShw4UFXPeHgzSnNpdN4zKgOOkan7REdP69XPp5vkZvjlunhIoASxjXrjmCteIk
iwFIY1qnIeZADqQsBBakD2i0kH6WblJOYX/dcceLiYE9K+cTgKYt7orJBzilApX8
XiwAaN9ss2gL1jVjWqmfgq4L95mSD4VkxeNVqPoeEcv8MtmF/DV/IodFgyoo6u0O
OyCUB7uKkWw=
-----END CERTIFICATE-----
Generated at Sat Oct 3 20:10:50 2026 by rpki-client