Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
File:                     R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft (raw, json)
Hash identifier:          XYWKDnooAX9P3kIoxrqd4Jdz9yzp/y/E74Z8ew8vC5A=
Subject key identifier:   94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Certificate issuer:       /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial:       0EBC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
Manifest number:          0D6E
Signing time:             Fri 16 May 2025 09:55:04 +0000
Manifest this update:     Fri 16 May 2025 09:55:04 +0000
Manifest next update:     Sun 18 May 2025 09:55:04 +0000
Files and hashes:         1: 04_hKA3FS7y4qIecu-jOU0hL6uU.roa (hash: RXYYDTETSDt2HL0g8FPUEPFcyHqYWz0f16k/4Ht1AXc=)
                          2: 33ttGQGMXoRoa3LelEQnUBrHuVM.roa (hash: rVP0fVDStlZkeBvhzPXsZhD7dyLFDwzDf/o6XnRGH4M=)
                          3: 3Jl7cHH5HYCQWHO_lzBS2bI2_-4.roa (hash: NIh27RBULowgY3run8fB1cAsNECPa+zXlgTqNLMzoc0=)
                          4: 3u-kwYKTCI_XjoHvpEnuP1uD4gU.roa (hash: aXVbrvngr6DUTBdN1gxQ0orLdpgLCQdBwJu7mqqTAQI=)
                          5: 49zp7Z_uY0HRPNKRQ3U077hIh28.roa (hash: OdG79AZ4SuTY5mbtWXLtdcGajwP774Udcb9DcfSFxEI=)
                          6: 5sXa6Z82ItvLcwIuv-wz57rB0rc.roa (hash: LSSPSRYxo12cstJF5zb5GYkunFFh/e4gdT9mmWR0060=)
                          7: 6-wrxF-98h4aAQUgBe7jorUSH8M.roa (hash: yw/fvxYQdzm6hMhnsNwQAwqeUeaOLmQp1fUZvJpDNuU=)
                          8: 7fd3UOIfktXxCeuBJ7ehkt2Ouac.roa (hash: lO0EaVTx9XqMcpdHfVDkZMp8N56c+Ca7RSJruVSEtKE=)
                          9: CLwtPe6dxpPdYZBnwzjMs3ix0zE.roa (hash: dg/9stOZnuTQLs8ru/+P7gpFJSLhaSSNzn0gg/eMIq0=)
                          10: FBey0vFHuk2-mYPcn76OZv1n4Ls.roa (hash: S19WM4ULb6ZYZ7HMjLweRLc3BXXRzIeABbaLB8rBCnA=)
                          11: G7ioUVEV7C23rYXKw6_CEPXRB_o.roa (hash: 4bsxg8Wj2fhFlTYW0BFq1jVczwS7MLY9kjWr8p7wU8M=)
                          12: G9sNDeYN9TSx2s50RAodEnMokaY.roa (hash: o37qvREc6bX3M1h30Bq2ZG2w4jTWzNRtI36r6wIGzy4=)
                          13: HE7KVt1bmO_KMuOR8yn-RRxof_w.roa (hash: qWI6B8H8a8NOL1GqqpuEqZB5R7wuflbjaEPfpRpPm5c=)
                          14: JYT-fH_XETR31fNjDJLAvfhJRPk.roa (hash: D99igODa0kJA/aIPekGKQ8NjGX9hlxiOxNgBY1yBeKY=)
                          15: LGiRxL7ekLY7Nyq3koPZJ47BrBY.roa (hash: lLoJum00f/cNgtaB7/aBXHFrdI4n5psxVomj57ATfZM=)
                          16: LL1RHCqIWo8TJ3ZyceT21bg1dh0.roa (hash: 8CnWf961CAc3sHLKlEJOn+kDOiQWv+DaGYxmTUWuGa8=)
                          17: LaGPn4NbRjzEZ1AAVtnPoAopk2s.roa (hash: ruvlFLoVIPs7VHSJ/AKmR99jaumjRjmzXG1U8eOePGY=)
                          18: NvdTY5M_fTiaqtfGwMR2dzVYm0k.roa (hash: MCy+jOJ9oK1UmCB3jM7rClfRYJqjTGptiyBN5GtoYr8=)
                          19: R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl (hash: koJxHOW89isQ8gkuOO5HvfJSyLBNDSg0av2IdDR1TGc=)
                          20: Rhb4eOvngnzLv3yMBVdKidq0WQM.roa (hash: 3zzwfiaKejxc4zUJ6iiilkNDaFTCtauaN4zX0rbEGOI=)
                          21: SGhBx3pu8ZaxuYR3nAKtqbGsywE.roa (hash: rPGZIo8f+X+08R8LNuF/SuD6PkVfMCYOiDhIn80whZU=)
                          22: TVi5ek_Ib3iqKwihbA9tQWR8EQI.roa (hash: RpuspKVhYAeoY0UDWAM3nI0p2Avdugl6ICrRlTlJuDM=)
                          23: TvvBBfl8ZtNoUbv-mRJkQDgGg4c.roa (hash: lrPccr3kbBFF4wFQJGdKQQGHgmvVCjMIPfa2T6nsRbc=)
                          24: W_BMnNsGL-KukyJJuRFybVheSyw.roa (hash: dSKFBnv5oyelWPDenIyUAmTnzH+MZrbVxIKUczwAUEs=)
                          25: XgOuxdFbAws6qbF8KMVYFAPYBVg.roa (hash: THgtnTHH1Aej0HtodUVAxTCvcsAODT2NTGS30dI9P1Y=)
                          26: XvDp09Ny8NK_FLZpWjS5Wm6USmg.roa (hash: FK81LqXIaFQDyGLikfEHRTrRAB59sSqyzfuCXDql+WU=)
                          27: _V6LoM_-PR8kO-9THX4sYwemMuw.roa (hash: YW+JivyED/fd9EZDBynxHWLRE77M0KTdIbd6ysuR0Zg=)
                          28: cS-04cQPLephKphOnVfz1geMx0o.roa (hash: IU4f9lpN9NvvQKMAweGLxBVPgLMy1JssOAa/e+tvQHI=)
                          29: d1dcHy2uo326hL4SMGV1RiCU1eg.roa (hash: GR2B9HkwmPEe4Z/QLjcdL9ULRS207aYryQ4Z3mmoi9Y=)
                          30: ftqJzZ8kD7q0RFepI1X1stIrCa4.roa (hash: cY28HA7DaBTxRjrxz71YTBTqDbigC4n5L17tkFC9uv8=)
                          31: fvMzsSyVYVhhqHclb_LGnYdxbIo.roa (hash: J+/LKYaTlh/SAfapTTUdFxez43X6jZG6jN8Fbm8BsQw=)
                          32: hi4e1zVzsRGKmbhSESfPV2tM-58.roa (hash: e1cHrs7TQFemHN8c/Uwo/nwqAH2mbP76IyN086CTtio=)
                          33: jDkazVUaVpNbOx6OHfw6Hph_IiI.roa (hash: RrKezydskRUoKILFHYFwFFWYspz35EmxY6nAnZY6G6U=)
                          34: n9BtrnEBR9zav2fTdgnJ4uhIQWM.roa (hash: uFxSbw1hOOLIV1YK3Fm8IwOopaM8maIlIpGrsjePQ5Y=)
                          35: nz2fbQeeIdVzqOPgIzLkk6MePu8.roa (hash: UlQnEhwyaezD1bLteRcGxOe9TW27N5Tf5IUSWgqCHfU=)
                          36: qE8gDIpuNyGK75y6UnB2gb2EtYg.roa (hash: ZAOrm0VQkad5s9+AzOUIWkQ16rxvE7zvJDTFL9m1V9g=)
                          37: qQk_E-QgP62JFZ53EZCxiXa4SOE.roa (hash: pSjoWU4WOTCTrbJmdbck9eHdrgnHfMRwnSEX8KQDlkA=)
                          38: tngoaW5JK2WDKwgVwlaltwvNJOw.roa (hash: op1GiOfoEQNnHUKrEO6BzoAcoOxDUX0AxLC47f/6m8o=)
                          39: vnQUub5MGeWj5-E1uKMpkeuw_Bw.roa (hash: iqmBhhgfmbNJFygGxNo2WISrfzzd7wyB/7vMGysjYiw=)
                          40: xRQPFBwu-gjKVoAgocMVNz-60BI.roa (hash: 9B/mGGQv4u8s5lKgfWdd5cuX4df7cbeme3ehFibb+MU=)
                          41: xqUO64Yhjxvnxp68bsdSDgI1hCc.roa (hash: fWTbsfazDrklyI7rkW/wNb5j/5lt8xlGmvhmb9zPe5A=)
                          42: xw5_GaOg57nda4hcEHKSmjccjjQ.roa (hash: tgL9BwerYw9rnWSehN60aC5obrMZ2uz4ubLgrR8KIGQ=)
                          43: yFln9FJcU5QAoqJuY7gN6gAiaEc.roa (hash: SSJ2fK40/h8DTM4X4rrCEU36uY5lJHxE2iQnR1vgY20=)
                          44: zAfILLQGdMn9_H3daB3YDMYuvvc.roa (hash: G1CyC21mffFPH4Sd/OyY/uj22wQjVxjdQJwfemFe6mc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 06:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3772 (0xebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
        Validity
            Not Before: May 16 09:55:04 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=941718ED009CDF242900C7D17EB829A06CF0F8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:aa:68:d2:a2:4b:a1:33:fc:28:bc:7a:32:
                    4d:ed:93:dd:5e:89:7d:49:0c:77:fc:63:35:e6:eb:
                    4e:d6:92:b7:0e:03:43:f9:99:3b:c6:2e:92:e2:06:
                    d1:7b:98:61:1b:af:e3:c9:e7:8b:ee:cc:32:db:52:
                    4a:5d:eb:ff:5c:f2:ae:84:aa:63:ce:6b:cd:1e:65:
                    05:50:8b:7d:90:d5:a4:5c:25:a6:66:02:0e:28:9f:
                    2c:c5:ae:14:c4:ae:84:e1:f7:ee:c0:88:8a:a7:2e:
                    7e:f9:ee:0a:37:1e:d6:07:df:ac:16:bc:91:4c:8d:
                    c8:06:32:c3:e0:ce:2d:76:1f:65:1d:e3:37:4f:0d:
                    92:18:d5:76:08:0d:4a:0a:58:50:e8:ac:53:59:ef:
                    89:83:17:ed:b4:49:32:62:5f:5f:e9:85:1a:54:ff:
                    5b:a3:35:43:db:12:e3:2a:3f:db:18:ef:9f:2e:b5:
                    27:82:76:d1:5e:dd:fe:cd:98:c1:e6:9c:0d:21:24:
                    ff:5c:06:b0:24:c0:af:d8:5f:00:83:6c:99:98:21:
                    35:e1:68:5b:33:b3:0f:0f:42:9d:29:c0:ba:85:6b:
                    97:e0:98:a0:99:cf:71:85:b2:fc:20:2d:a0:f5:d2:
                    6e:7d:b2:3f:5c:f3:71:79:d4:3c:c5:98:2a:64:64:
                    b7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
            X509v3 Authority Key Identifier:
                keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6f:5b:c1:53:09:a2:4a:82:8f:77:45:37:21:c4:68:16:bf:
         b4:2e:55:25:b3:7e:4e:3a:d0:4f:7b:25:5a:88:6b:a3:98:3d:
         b0:e9:8a:a4:ef:dc:99:d6:2a:5f:48:3a:64:01:55:3b:3f:32:
         df:68:e5:5e:be:fd:22:e4:6e:90:69:50:71:01:35:88:53:c4:
         40:ff:ce:14:c2:e1:84:29:0d:7d:9b:c2:ad:04:56:a7:75:46:
         ed:71:2d:3e:02:c1:8c:ac:b5:b9:e2:6f:44:c1:d9:19:46:8d:
         e0:08:63:2a:cc:6d:92:af:d3:97:aa:42:d5:de:39:41:0b:9e:
         93:8c:d6:16:91:ca:d3:3a:c4:6b:11:91:70:14:90:19:26:92:
         24:2e:0e:ab:89:ba:e5:e9:f7:a0:69:d3:07:25:a1:60:e5:c3:
         4e:e4:20:ef:e1:6c:27:1b:97:09:39:6a:e3:a8:58:fd:21:27:
         2d:83:57:2e:ed:c9:28:9f:a8:7e:81:72:05:f9:3a:c4:99:62:
         db:be:c1:a2:ee:42:6d:ff:67:97:02:8f:67:28:89:d3:26:65:
         73:fc:52:89:71:48:14:3b:eb:39:66:93:d8:6b:8c:3b:7e:93:
         f2:06:2f:20:9d:a5:70:30:08:c7:fa:21:57:4d:58:b8:c3:38:
         34:0d:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----