Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
File:                     JX23uZGZdWlzZrcBT4z-KO82TnM.mft (raw, json)
Hash identifier:          1ji0EPtQdF2OQZ/UhWC+L0frNu0Cg25K1vj9XDN2AGQ=
Subject key identifier:   A6:7B:B6:01:33:0E:55:E0:31:8C:07:90:16:ED:DD:96:F6:71:B4:76
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       0879
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
Manifest number:          0778
Signing time:             Thu 03 Jul 2025 09:03:32 +0000
Manifest this update:     Thu 03 Jul 2025 09:03:32 +0000
Manifest next update:     Sat 05 Jul 2025 09:03:32 +0000
Files and hashes:         1: 1PbSh-akEpBWdwH8TxknKcGI2Qc.roa (hash: FlgYEhUB8Co5VEc6Z95U4RQMMdUsfTUC/n0BNBCQcvg=)
                          2: 1ThVdaoJkKialZuUyfjyCbVUT40.roa (hash: 4GX4AQlfS9XnCO1N5KZiRFmFN22cuAbxziJrcPm8Tvg=)
                          3: 2sIaEJO1lhXuygM5MBnBSqJ5Aoo.roa (hash: TJAKclQ7FC09EEWSaWV6Qf1HFoJkjkv9SJZoHhGKv88=)
                          4: 3yk8VYoeX4Y7BnxIJ4KdKyT4Ecg.roa (hash: s6a1PQDI/GRBdfP/rD2j14GE7v1QJ19cO7gwim5PSC8=)
                          5: 5a10hckju7Nb5Kau56UJrSBWN5Q.roa (hash: awi/nxAzZr7t3CsVjTuOvQ6wFJBfXTjxb7CVtwpvkLY=)
                          6: 6jhCAVsAEif59XJSp_ByCGkHif0.roa (hash: JBCJUwCEJoTzqzXFwB3jcso5poNs54vMmjiJ3l5Rhb8=)
                          7: 7960XTulI_UNCe1Wq7ZQucTOstM.roa (hash: /erIHRyxwTMyiE/VijPMsxZAyvxY8miiCtIYkZNbbCA=)
                          8: BNeBC2Je2cjrrv9Wfz4YiDiYCfQ.roa (hash: TE/F7HiF/MCtF+uAnGZXif5QdZGyP7CP6EvGLrJ+eOU=)
                          9: Fg9x59aFjlliWMuBAeWelnaQmz0.roa (hash: C3Kw0ZgDnizcx8UwZPCULryh8/vJToOHSqeOiCBRdCY=)
                          10: IKnwvUPvQgSALLsx-t_OHZQxVYc.roa (hash: gdavrcrM9WdqVkRav9a9A0TtaO2ZdbQE7gza++k7kLU=)
                          11: JX23uZGZdWlzZrcBT4z-KO82TnM.crl (hash: ubkQZ4u1H/tnMiFV0YFlU1yUeLJPz+XyPPkzIMyDErM=)
                          12: L-94wboaaVgPHVkRYvI7gZfD_9s.roa (hash: bXAn+Hu3fjVuxA6uW5fP3em0sJ+rJeQr42FQ06boVqw=)
                          13: MfszGtR2dwxcf143HKZ-Nbv_CWM.roa (hash: PJHyAN9AlzKr7wDiemfzd/ffYEe9JFaQJp7WgCubBOg=)
                          14: OCddZIEAz9W0-xmwDu3UXvMDvUQ.roa (hash: TvSuEV/9esgoUgWn2N42+OsQd8vML6tPdgY6Seutg2c=)
                          15: QEGy_JiOeWDlHFmOphaeWrhRPAM.roa (hash: VhLV0o43S+zeWqNhE5w8LJgrosGBqBdZCFMsVjk+/A4=)
                          16: R0X2ZZGXnipKb8tfawtpurjWMXE.roa (hash: rQlhAl0JoXasmldHCGizLJJtW3x1AHuacxKVKycm6rM=)
                          17: SChvRI6t8GVgNAHnlDZb_arOi4k.roa (hash: VcqybCs0QaK3EwDmEOV3MsYoFzcizsdmVw0OJyVRW/M=)
                          18: Smzr0oI9Mt0W4OD3NV_GfCeHH48.roa (hash: Q5QWELqviUcbXJMCcbEgLw1YNwi9oA39cGEAIV89pYE=)
                          19: UeSxuH9_5rhS8rVwFfuqUpcd0AE.roa (hash: T3KOLIrvulruedCKBPKf1W8sFJYYXTPR0de+NvGNMdY=)
                          20: XAgJp8wGygf2F1yjeLhm7LwdpVk.roa (hash: cyzeS2Aak4vSvsXPe1t2lgED2mhPz6MsE4RPAUSyTFA=)
                          21: Xsx9JVvgAZPb-IvejCLYA-BwxgE.roa (hash: Dc+jgZV6FbEHEx+1c6V4rkSFYf0Dir0CqHxCngR7Gbg=)
                          22: dtozVWTr4k6wqE2pmiWIXc-jtvQ.roa (hash: 4tTx/wvOcFfn4EJ5rSIHG1LpnvDzWkXttKMlZaOJMEI=)
                          23: eYvkALsA4MvgoEHrjYFSqOUQea4.roa (hash: LYCOdo9I1ggYG0GO18ZtJ72cD52GucHntu+MfcFEdgU=)
                          24: earjNJ22xSAf0h3LLM7zM53oSu4.roa (hash: FkFFZspIIy4AomQwl+A1qCP3G6CllbRW2n8EML6mOBY=)
                          25: jzDMpnJqMdWwDz5gxf1UUhMSZaM.roa (hash: mfIQs2/7k8EAC7Bet3PUcJCVRTVc78KFbu3H/35vm2Q=)
                          26: kogDtg33wQ4lcjRGa0cxGa3_m8w.roa (hash: 6TcKfkoWFdPeqH7VfELr2mQb01e675VS0FQhvWS7jts=)
                          27: mc0NGujw0NZIMQfezcA2d3SkdWY.roa (hash: /TBDiUPmxqn0+zmC2hr8koGEyWJia6MfZb7ZlHOCy1w=)
                          28: oW2b6Frim7BzpjWh0yoMjeG6EaI.roa (hash: KoM7TKJ0noVcKeixxHKVWbb06GYncGp37mrPoHQc/zU=)
                          29: p9s6eNnU_cxDhgUCZ31ripJkHSY.roa (hash: pGxIHlm0F0bAixiPB4I0ToccTbAPeEheYpEfnmJgLCg=)
                          30: uaPCbKZq15NVbtweJv7WtywLv48.roa (hash: 0l94X004grw0dIoTIwVSKLYrGx8DsDRZHZu033I4/e4=)
                          31: vYvorumRfYYlkH-5546E8rUu0Gc.roa (hash: DNQqRM29eKz3sH6M6Zi5Bsse3MHx+oMmQRfSuiGQ0BI=)
                          32: wRyUW2ckM9N3imr8vpl7s-4pLuM.roa (hash: 5v9UK90jSzR88IFUBZZdHdJJA/IlSpXpEu9/2CmMj6o=)
                          33: xwv6W-sSPbkSMnZ17nEzZZKHtQQ.roa (hash: 0GiClcAnjYe5aGWPDtZm2ee46UCEppI0cNRqKGiDdro=)
                          34: zU3YWZyStlpE4HJAmVRL-a8PZnA.roa (hash: Ju978NYbKQWyYohWneIrqjr9OFZSneCb3ZOEyykXteQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 15:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2169 (0x879)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Jul  3 09:03:32 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A67BB601330E55E0318C079016EDDD96F671B476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:ef:4c:a4:e8:ff:a9:11:bb:d1:ba:46:bf:
                    22:5d:54:4e:fe:f5:0e:75:88:c5:c2:8a:ba:53:ca:
                    7a:73:1b:b3:23:f2:39:96:e2:ee:e8:c0:9e:57:52:
                    3c:3c:4d:60:f9:e8:e6:2d:e1:49:41:56:6a:6d:38:
                    76:59:5c:12:e2:93:37:31:e9:5b:b9:aa:9f:fd:80:
                    e4:45:44:3a:1a:70:73:a5:48:66:6a:c7:9e:94:a1:
                    5f:99:e9:ca:16:10:8d:5d:27:7c:ad:82:5f:9d:75:
                    70:c2:37:02:05:f2:86:1e:3a:74:26:76:e3:f2:c2:
                    ba:1c:ea:fe:51:c0:b2:8b:ae:c2:58:bb:14:6c:ac:
                    f8:61:95:6d:05:0b:21:15:61:48:bc:45:77:ab:b8:
                    1d:7f:67:69:df:39:0c:b5:87:1c:5d:58:8a:db:b5:
                    bb:8c:a6:27:4f:07:b6:00:aa:9a:1d:9a:c0:98:8e:
                    0d:f9:20:36:21:43:87:ea:c4:fb:cd:b8:9a:9d:14:
                    1e:bf:5b:4d:56:b2:f7:73:0d:62:e8:8d:78:c3:11:
                    66:b8:a3:ae:93:45:9e:0a:db:62:e6:e3:ec:bf:d6:
                    9e:e2:5e:48:7f:5a:09:c1:01:28:92:eb:65:9b:8c:
                    62:ea:19:09:15:d8:30:82:ec:0d:1b:39:9f:ee:06:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7B:B6:01:33:0E:55:E0:31:8C:07:90:16:ED:DD:96:F6:71:B4:76
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:aa:7a:14:75:93:f9:0a:f9:b2:19:af:4a:80:a7:d9:03:38:
         18:b5:7a:fd:f5:41:a9:42:3e:46:8b:49:63:51:c3:89:5b:99:
         fb:26:46:c6:a1:27:94:23:15:85:a1:96:ed:f0:74:40:a1:95:
         c8:2c:c5:54:e8:c9:2c:8e:c2:bd:e6:37:af:01:c4:51:29:0c:
         c1:1f:1c:c3:70:c4:29:7e:3d:5e:b4:26:50:7c:96:d9:e9:08:
         e5:93:17:83:d1:ab:a3:a6:a0:cd:15:8d:a3:de:2f:a4:d4:50:
         a6:b3:71:1e:eb:35:e0:fa:07:90:18:ee:e5:11:7a:d6:18:3c:
         20:f8:aa:34:b5:88:18:a0:d2:4f:54:40:da:31:07:11:93:60:
         16:f8:17:1e:3e:e5:3b:85:ab:ae:7d:5e:59:8c:3c:d5:08:09:
         cd:e2:6f:79:ca:66:d7:c1:3e:9a:6f:81:b9:80:ee:99:d9:ba:
         2e:9f:70:cd:c9:26:ab:61:4b:cd:e3:a9:1d:55:9d:6d:9d:cb:
         3d:a6:ea:7d:58:41:08:2d:b9:3e:b0:6b:0e:b4:aa:05:f1:be:
         f2:c6:1c:6d:78:e5:c4:1c:8f:2a:17:35:1e:ca:6a:07:0b:84:
         79:8d:be:27:11:60:6f:0e:db:67:02:99:c4:79:1e:dc:07:df:
         0c:48:ee:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:08:34 2025 by rpki-client