Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
File:                     R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft (raw, json)
Hash identifier:          Y/2Yx4QJdMpxYItX0/MLWLvgvTqMdp9ItIEfAEs+yCk=
Subject key identifier:   94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Certificate issuer:       /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial:       0EDC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
Manifest number:          0D8E
Signing time:             Thu 03 Jul 2025 10:04:48 +0000
Manifest this update:     Thu 03 Jul 2025 10:04:48 +0000
Manifest next update:     Sat 05 Jul 2025 10:04:48 +0000
Files and hashes:         1: 04_hKA3FS7y4qIecu-jOU0hL6uU.roa (hash: RXYYDTETSDt2HL0g8FPUEPFcyHqYWz0f16k/4Ht1AXc=)
                          2: 33ttGQGMXoRoa3LelEQnUBrHuVM.roa (hash: rVP0fVDStlZkeBvhzPXsZhD7dyLFDwzDf/o6XnRGH4M=)
                          3: 3Jl7cHH5HYCQWHO_lzBS2bI2_-4.roa (hash: NIh27RBULowgY3run8fB1cAsNECPa+zXlgTqNLMzoc0=)
                          4: 3u-kwYKTCI_XjoHvpEnuP1uD4gU.roa (hash: aXVbrvngr6DUTBdN1gxQ0orLdpgLCQdBwJu7mqqTAQI=)
                          5: 49zp7Z_uY0HRPNKRQ3U077hIh28.roa (hash: OdG79AZ4SuTY5mbtWXLtdcGajwP774Udcb9DcfSFxEI=)
                          6: 5sXa6Z82ItvLcwIuv-wz57rB0rc.roa (hash: LSSPSRYxo12cstJF5zb5GYkunFFh/e4gdT9mmWR0060=)
                          7: 6-wrxF-98h4aAQUgBe7jorUSH8M.roa (hash: yw/fvxYQdzm6hMhnsNwQAwqeUeaOLmQp1fUZvJpDNuU=)
                          8: 7fd3UOIfktXxCeuBJ7ehkt2Ouac.roa (hash: lO0EaVTx9XqMcpdHfVDkZMp8N56c+Ca7RSJruVSEtKE=)
                          9: CLwtPe6dxpPdYZBnwzjMs3ix0zE.roa (hash: dg/9stOZnuTQLs8ru/+P7gpFJSLhaSSNzn0gg/eMIq0=)
                          10: FBey0vFHuk2-mYPcn76OZv1n4Ls.roa (hash: S19WM4ULb6ZYZ7HMjLweRLc3BXXRzIeABbaLB8rBCnA=)
                          11: G7ioUVEV7C23rYXKw6_CEPXRB_o.roa (hash: 4bsxg8Wj2fhFlTYW0BFq1jVczwS7MLY9kjWr8p7wU8M=)
                          12: G9sNDeYN9TSx2s50RAodEnMokaY.roa (hash: o37qvREc6bX3M1h30Bq2ZG2w4jTWzNRtI36r6wIGzy4=)
                          13: HE7KVt1bmO_KMuOR8yn-RRxof_w.roa (hash: qWI6B8H8a8NOL1GqqpuEqZB5R7wuflbjaEPfpRpPm5c=)
                          14: JYT-fH_XETR31fNjDJLAvfhJRPk.roa (hash: D99igODa0kJA/aIPekGKQ8NjGX9hlxiOxNgBY1yBeKY=)
                          15: LGiRxL7ekLY7Nyq3koPZJ47BrBY.roa (hash: lLoJum00f/cNgtaB7/aBXHFrdI4n5psxVomj57ATfZM=)
                          16: LL1RHCqIWo8TJ3ZyceT21bg1dh0.roa (hash: 8CnWf961CAc3sHLKlEJOn+kDOiQWv+DaGYxmTUWuGa8=)
                          17: LaGPn4NbRjzEZ1AAVtnPoAopk2s.roa (hash: ruvlFLoVIPs7VHSJ/AKmR99jaumjRjmzXG1U8eOePGY=)
                          18: NvdTY5M_fTiaqtfGwMR2dzVYm0k.roa (hash: MCy+jOJ9oK1UmCB3jM7rClfRYJqjTGptiyBN5GtoYr8=)
                          19: R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl (hash: uzUBFBda6rKbm5nZxFGDc2IgoQ3CepyCyG3uqsx1aAM=)
                          20: Rhb4eOvngnzLv3yMBVdKidq0WQM.roa (hash: 3zzwfiaKejxc4zUJ6iiilkNDaFTCtauaN4zX0rbEGOI=)
                          21: SGhBx3pu8ZaxuYR3nAKtqbGsywE.roa (hash: rPGZIo8f+X+08R8LNuF/SuD6PkVfMCYOiDhIn80whZU=)
                          22: TVi5ek_Ib3iqKwihbA9tQWR8EQI.roa (hash: RpuspKVhYAeoY0UDWAM3nI0p2Avdugl6ICrRlTlJuDM=)
                          23: TvvBBfl8ZtNoUbv-mRJkQDgGg4c.roa (hash: lrPccr3kbBFF4wFQJGdKQQGHgmvVCjMIPfa2T6nsRbc=)
                          24: W_BMnNsGL-KukyJJuRFybVheSyw.roa (hash: dSKFBnv5oyelWPDenIyUAmTnzH+MZrbVxIKUczwAUEs=)
                          25: XgOuxdFbAws6qbF8KMVYFAPYBVg.roa (hash: THgtnTHH1Aej0HtodUVAxTCvcsAODT2NTGS30dI9P1Y=)
                          26: XvDp09Ny8NK_FLZpWjS5Wm6USmg.roa (hash: FK81LqXIaFQDyGLikfEHRTrRAB59sSqyzfuCXDql+WU=)
                          27: _V6LoM_-PR8kO-9THX4sYwemMuw.roa (hash: YW+JivyED/fd9EZDBynxHWLRE77M0KTdIbd6ysuR0Zg=)
                          28: cS-04cQPLephKphOnVfz1geMx0o.roa (hash: IU4f9lpN9NvvQKMAweGLxBVPgLMy1JssOAa/e+tvQHI=)
                          29: d1dcHy2uo326hL4SMGV1RiCU1eg.roa (hash: GR2B9HkwmPEe4Z/QLjcdL9ULRS207aYryQ4Z3mmoi9Y=)
                          30: ftqJzZ8kD7q0RFepI1X1stIrCa4.roa (hash: cY28HA7DaBTxRjrxz71YTBTqDbigC4n5L17tkFC9uv8=)
                          31: fvMzsSyVYVhhqHclb_LGnYdxbIo.roa (hash: J+/LKYaTlh/SAfapTTUdFxez43X6jZG6jN8Fbm8BsQw=)
                          32: hi4e1zVzsRGKmbhSESfPV2tM-58.roa (hash: e1cHrs7TQFemHN8c/Uwo/nwqAH2mbP76IyN086CTtio=)
                          33: jDkazVUaVpNbOx6OHfw6Hph_IiI.roa (hash: RrKezydskRUoKILFHYFwFFWYspz35EmxY6nAnZY6G6U=)
                          34: n9BtrnEBR9zav2fTdgnJ4uhIQWM.roa (hash: uFxSbw1hOOLIV1YK3Fm8IwOopaM8maIlIpGrsjePQ5Y=)
                          35: nz2fbQeeIdVzqOPgIzLkk6MePu8.roa (hash: UlQnEhwyaezD1bLteRcGxOe9TW27N5Tf5IUSWgqCHfU=)
                          36: qE8gDIpuNyGK75y6UnB2gb2EtYg.roa (hash: ZAOrm0VQkad5s9+AzOUIWkQ16rxvE7zvJDTFL9m1V9g=)
                          37: qQk_E-QgP62JFZ53EZCxiXa4SOE.roa (hash: pSjoWU4WOTCTrbJmdbck9eHdrgnHfMRwnSEX8KQDlkA=)
                          38: tngoaW5JK2WDKwgVwlaltwvNJOw.roa (hash: op1GiOfoEQNnHUKrEO6BzoAcoOxDUX0AxLC47f/6m8o=)
                          39: vnQUub5MGeWj5-E1uKMpkeuw_Bw.roa (hash: iqmBhhgfmbNJFygGxNo2WISrfzzd7wyB/7vMGysjYiw=)
                          40: xRQPFBwu-gjKVoAgocMVNz-60BI.roa (hash: 9B/mGGQv4u8s5lKgfWdd5cuX4df7cbeme3ehFibb+MU=)
                          41: xqUO64Yhjxvnxp68bsdSDgI1hCc.roa (hash: fWTbsfazDrklyI7rkW/wNb5j/5lt8xlGmvhmb9zPe5A=)
                          42: xw5_GaOg57nda4hcEHKSmjccjjQ.roa (hash: tgL9BwerYw9rnWSehN60aC5obrMZ2uz4ubLgrR8KIGQ=)
                          43: yFln9FJcU5QAoqJuY7gN6gAiaEc.roa (hash: SSJ2fK40/h8DTM4X4rrCEU36uY5lJHxE2iQnR1vgY20=)
                          44: zAfILLQGdMn9_H3daB3YDMYuvvc.roa (hash: G1CyC21mffFPH4Sd/OyY/uj22wQjVxjdQJwfemFe6mc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 02:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3804 (0xedc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
        Validity
            Not Before: Jul  3 10:04:48 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=941718ED009CDF242900C7D17EB829A06CF0F8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:aa:68:d2:a2:4b:a1:33:fc:28:bc:7a:32:
                    4d:ed:93:dd:5e:89:7d:49:0c:77:fc:63:35:e6:eb:
                    4e:d6:92:b7:0e:03:43:f9:99:3b:c6:2e:92:e2:06:
                    d1:7b:98:61:1b:af:e3:c9:e7:8b:ee:cc:32:db:52:
                    4a:5d:eb:ff:5c:f2:ae:84:aa:63:ce:6b:cd:1e:65:
                    05:50:8b:7d:90:d5:a4:5c:25:a6:66:02:0e:28:9f:
                    2c:c5:ae:14:c4:ae:84:e1:f7:ee:c0:88:8a:a7:2e:
                    7e:f9:ee:0a:37:1e:d6:07:df:ac:16:bc:91:4c:8d:
                    c8:06:32:c3:e0:ce:2d:76:1f:65:1d:e3:37:4f:0d:
                    92:18:d5:76:08:0d:4a:0a:58:50:e8:ac:53:59:ef:
                    89:83:17:ed:b4:49:32:62:5f:5f:e9:85:1a:54:ff:
                    5b:a3:35:43:db:12:e3:2a:3f:db:18:ef:9f:2e:b5:
                    27:82:76:d1:5e:dd:fe:cd:98:c1:e6:9c:0d:21:24:
                    ff:5c:06:b0:24:c0:af:d8:5f:00:83:6c:99:98:21:
                    35:e1:68:5b:33:b3:0f:0f:42:9d:29:c0:ba:85:6b:
                    97:e0:98:a0:99:cf:71:85:b2:fc:20:2d:a0:f5:d2:
                    6e:7d:b2:3f:5c:f3:71:79:d4:3c:c5:98:2a:64:64:
                    b7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
            X509v3 Authority Key Identifier:
                keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:be:c4:1b:c5:bd:c6:51:40:99:f7:5b:cb:4f:5f:87:05:22:
         3a:a8:91:1b:9b:42:d2:38:d0:fd:21:80:c4:d6:86:83:a1:f5:
         95:00:c3:43:52:8e:52:be:86:04:b7:7b:c1:37:a8:b4:4b:4c:
         ad:bd:b1:85:22:23:30:70:3c:e4:f5:41:cf:7f:f3:aa:df:bd:
         ed:b6:01:33:1e:9c:ce:e7:19:86:e0:18:40:7f:25:2e:c3:42:
         d0:f2:4c:04:c8:84:15:64:ca:57:6a:5c:4a:1c:f0:92:c1:8e:
         94:49:65:ae:87:3a:df:cb:59:48:82:82:23:21:e9:0b:d3:f6:
         8f:03:8a:20:f6:1f:e6:4a:5d:1d:3d:31:b4:71:9b:b2:5c:f4:
         4e:61:45:c9:94:b6:63:ba:12:d7:2c:bc:d9:7d:0d:5d:c9:10:
         a4:26:c0:23:7b:a3:f5:67:53:bc:5d:b1:71:ff:7f:94:c6:0d:
         a3:75:19:9b:bf:f8:61:0d:f9:e8:db:7f:08:49:a3:f4:0c:30:
         66:a3:17:92:76:6b:a5:88:64:df:af:ba:b5:50:d0:99:24:a4:
         b2:77:b9:fe:eb:39:36:10:2c:0e:6e:d8:b5:15:76:43:d3:3f:
         f8:7d:ce:b5:63:b2:cb:33:7e:90:06:16:55:65:e6:c5:90:e1:
         bc:8b:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----