Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
File:                     R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft (raw, json)
Hash identifier:          pdGtYke2MgWSn2RHHGaObp490NSNYRunrU6DbLDp8Fs=
Subject key identifier:   94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Certificate issuer:       /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial:       0F2D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
Manifest number:          0DB2
Signing time:             Sat 23 Aug 2025 21:17:08 +0000
Manifest this update:     Sat 23 Aug 2025 21:17:08 +0000
Manifest next update:     Mon 25 Aug 2025 21:17:08 +0000
Files and hashes:         1: 60MplO-3i832Wu2FKvEH27sq9yc.roa (hash: y1dQY+vEX+Lg0/gUWYWnecnHn8JlFZrWTYu1hbECfoM=)
                          2: 62mjHZmcdW9Kz_DhYWWeTz8volU.roa (hash: EBzCwCAOPHQjKkms2cwH36EBJ/GR8ad8Xtw0fPYamsQ=)
                          3: 78_UBtJDIdbXJXorh8l5IQ0hdmc.roa (hash: tzQKF3bJVjzNQZunwaJ3inKF3Pc/j9VVpTGXQNldhCI=)
                          4: 8ZwLnbGFvwZp4bJQHkrdSvMQCkk.roa (hash: 5aD1vQ3sYRonF0S/8d7uhkH6loh/DOw4zlka1dFmQuw=)
                          5: ACIHOXOTOsU0PpfOzoTKcTk64hA.roa (hash: 5xD5NNvoM+PzAW3mPx55xaWUDVSJsqYPXdNMKFAZAV4=)
                          6: CRO-f0LFpIWdQTkTSKZmKAkiXLA.roa (hash: CXxRuYxp2EZPdGSoXLPmLIxRKWegHNmrNHhXDo9noVE=)
                          7: DAvLBbZ8da59Z15sMIq73IrVP1E.roa (hash: 5iVp9biqv5cg42gMwVw5cGdeAU11TuUS5rFhYRG5Lpc=)
                          8: H74xX_NsmXccxs6sRwY8WlTNDLA.roa (hash: ABjfYjhAyvcy+GyW+rNYwLN7yypCOoNaWZm5x6N4V4k=)
                          9: HTw-3BTHl7LkRGP1KxPu0-9rV6Y.roa (hash: oEb497+tWtIPwFmv5wMNPXzoX/MpTF0oC+IYc1ZU/GY=)
                          10: HiE-9ThQjRXK6DzFG_dSzKow22c.roa (hash: NioTyB4ltZ4DWlndYuTAvBd+fLU2JoBa1jNn4vs8/Fw=)
                          11: I5R4TTcm7f26jPEdF0HqHXR1Lyk.roa (hash: mdhFxWCuocLfxucU6IuYc3kj0B5bWfS7kIQIyoyZF5w=)
                          12: J5oQ4o5Y6VLZKKkg8btXlQzuJi0.roa (hash: ghhwCWhBcqgnmk9S8xzKMSNpXI8LquEGN1Uq/QRa56Y=)
                          13: K5qlq6iNGXb53_WZLHJLmHcTCzs.roa (hash: ty8BZuCbjKMP6sDkJhJfTk58xMONzCNbx/bOZyNEglU=)
                          14: LtCGvhlAV15oG0-YguU-i4SEbes.roa (hash: r65Hh+xoNRA4IdQvHcGHt9L5KZNaAC91AO/9JvSPjZ8=)
                          15: OmMxJ_knV12AJLEqdfgHeKsbEpI.roa (hash: xAWBjUUdeDlClzW34UZTkMgSCdLpJpX0amMDm1jg/CI=)
                          16: QqLVesZJmPlei-s3EWTmlwAOcZA.roa (hash: xlmET2pbKWe7n5bS4uZZ1pWJjkbgaL3Ft1wdrBL/TA4=)
                          17: R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl (hash: 6oQxxM0t5HT6p0MlXe1myxuhyYoAtUMWhsJpkYQY5lo=)
                          18: Sabq8rTxhQaLTvQLsSdwjqssAiM.roa (hash: diekZ04OVKpDpLajD/bJjmDFgYfNZPQJD4wHw3cIHwU=)
                          19: U6zNYny9zV13nOW0bA9hcujPKX0.roa (hash: Iuxk4EaUxevmmK1e901viQbe32eBGDzvD5x8KAexubo=)
                          20: UCLfHrfMxJAjUZWVG6emfe5JxQk.roa (hash: T7aTPmZtxLYGun8lCLXcpsVJ+OqGCVSdvYNmubxEAOA=)
                          21: UKPzSO2bDuVShn6HSj5edcSLHIM.roa (hash: ZU5Ll5HQwPJYalNc3FCu7DybxJb0TxJsJUQGIi+WP+U=)
                          22: WCnRQAZ5YYPyvuZsp6M-5JfRGRY.roa (hash: A4XuyqypZ0TzhYd8qMg6y8OrZhyrVx7AhNYozYmqhQg=)
                          23: Wc-SGKnE9skvnLLCk-GCzOXxPPw.roa (hash: 5YDuPF5G+CLHxJmZ/pClJuvLeJCV3LQmrEYwCXlSo9o=)
                          24: XIHi8vCZs2OrGtd0SoNibgybuug.roa (hash: I4v+HkMrenc4hjPs1/RBjg7dQl0WiPDhgdHLi/plci8=)
                          25: aTWPPzAxEgrRAWP65Qmy_f41mME.roa (hash: Q3QluCfp52P+gNZJF0oJncslbjpsjg6omBCxxGa5u1M=)
                          26: aiTjnE1YXzMts3gvgOM3Hk8FIz0.roa (hash: 2bNMTW0AevRUaXvbhoq+oG+n3vHI2bHeiXMMJmfpPjo=)
                          27: ayxKbbxXsw8y2Hb3H82kA6Xx1Vc.roa (hash: 7p4tc1Lwr4nkYVtJ+Q6yK1mrE+lzZteFTCP/miMeHR8=)
                          28: dIHdnEdMkm5ppbp2CZlnDYIAmaI.roa (hash: TpCBdo6NU32N4YbrNJf7uYPbbkY1CxwCVQl67QIX/YA=)
                          29: dKNb6BgHPbGXAr2zD9vl7ihJnbg.roa (hash: EURJTRUePW4GNQc4W1PAvqd5XEtjifoMSFo4nD4EIhU=)
                          30: eVoNxRXOyNLE1Wq0_qKrmliCTdE.roa (hash: R7Y6IUVZJ/K9SVaakvxclpsSgmlDEhMN9fV1snb4YlA=)
                          31: jYIcgCr4YL87GoXXiBIkvQpozBk.roa (hash: IEKUuDH4wRGMOLqoB2RttH1qIOWv393PnDg5k5Nuh4U=)
                          32: jml1W8V-JWrUMYEfD4LoD6fnLyk.roa (hash: vEFrklYGbdqTvx5INNvsxRaXYYoWxyPGw3wOeOwNVws=)
                          33: l-jmjw1EpkjL8DflVuEKsISqvd0.roa (hash: MaCODn1SgJg1Q+iLspwZF7NMAdTAfUFORdvLffiZSdw=)
                          34: ox50FLZUQO3vBaRb5YjHlHTANYE.roa (hash: agU1k6uUQs3obX02EZlw31Vw/Ind/3zhVqfxcP0ZKCM=)
                          35: pYZi2Jq6ZEeZiAVFwbRrmePdx9s.roa (hash: o/KiHRySzK5V9zsXRCrdN5a2U/aZyapm0ak7SDVAVvQ=)
                          36: rD6_AxHaJoGdKOLp8AoeAwfZcgE.roa (hash: lVrS0WV2y77upNxuwxrNN4tsfnNhxRCJJE/O2tsbtp4=)
                          37: s4m62x9fbH36PBwYlxUd6nfDUso.roa (hash: HPWPGsRqBklg8wpx4A8Tx3z4kAhB8PEewyxxpU3B37Y=)
                          38: s6ErXl-J3txucuDJhgDQVokBV50.roa (hash: o40QoKtRm7P+B/kIUz0Q4dv/ng0eEaefe70HpbPmkPc=)
                          39: sExMhWKJRd0CG1flgUIIIMHgxmU.roa (hash: W+fgTFxqK8Cf9AGdt7PgoOHQE6inkBs6jl8uPYqAFZU=)
                          40: sKor8KxNCRwreiqJDrNzhzGRVmM.roa (hash: w5pWSKU9vvBRdEdMA5vzf9o91xglDiRkmDZnuFto+ao=)
                          41: tSs09ZuNNjhcaUhNKw_f-1dr9B4.roa (hash: /flT2vOyrWd2XhZBD9PtpgXKoVRzpNY65qds0LUaxcM=)
                          42: txPZ6Dh72oaVkL2IJbsqbRYKm-g.roa (hash: 3o532nBcczyPCsN5nSnHLPCkK6e98JO0U28Et6OpmBc=)
                          43: vCZLyDwO-Sw0GXLUn-M6MbOcUTE.roa (hash: MhpHWH4FmQE7LYutWeYmONEBtCjk65Fpc1NtWAK8YOM=)
                          44: vwN9FhstA2Ve7WMoKu5D2tnanwc.roa (hash: gboj2HhAOdAis39rRzkwmEzjedlx9i0tl/QoqbV94ew=)
                          45: wcuBHAIaVIxSSVreHae8hx_AbXk.roa (hash: JlVT0u8XgZXQpJe9K/TaLWNYsFd3Obu9tQRHSj2Taxg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 04:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3885 (0xf2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
        Validity
            Not Before: Aug 23 21:17:08 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=941718ED009CDF242900C7D17EB829A06CF0F8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:aa:68:d2:a2:4b:a1:33:fc:28:bc:7a:32:
                    4d:ed:93:dd:5e:89:7d:49:0c:77:fc:63:35:e6:eb:
                    4e:d6:92:b7:0e:03:43:f9:99:3b:c6:2e:92:e2:06:
                    d1:7b:98:61:1b:af:e3:c9:e7:8b:ee:cc:32:db:52:
                    4a:5d:eb:ff:5c:f2:ae:84:aa:63:ce:6b:cd:1e:65:
                    05:50:8b:7d:90:d5:a4:5c:25:a6:66:02:0e:28:9f:
                    2c:c5:ae:14:c4:ae:84:e1:f7:ee:c0:88:8a:a7:2e:
                    7e:f9:ee:0a:37:1e:d6:07:df:ac:16:bc:91:4c:8d:
                    c8:06:32:c3:e0:ce:2d:76:1f:65:1d:e3:37:4f:0d:
                    92:18:d5:76:08:0d:4a:0a:58:50:e8:ac:53:59:ef:
                    89:83:17:ed:b4:49:32:62:5f:5f:e9:85:1a:54:ff:
                    5b:a3:35:43:db:12:e3:2a:3f:db:18:ef:9f:2e:b5:
                    27:82:76:d1:5e:dd:fe:cd:98:c1:e6:9c:0d:21:24:
                    ff:5c:06:b0:24:c0:af:d8:5f:00:83:6c:99:98:21:
                    35:e1:68:5b:33:b3:0f:0f:42:9d:29:c0:ba:85:6b:
                    97:e0:98:a0:99:cf:71:85:b2:fc:20:2d:a0:f5:d2:
                    6e:7d:b2:3f:5c:f3:71:79:d4:3c:c5:98:2a:64:64:
                    b7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
            X509v3 Authority Key Identifier:
                keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:0a:2a:b2:67:27:47:c3:e7:19:14:43:36:2b:5f:e2:92:52:
         bb:f4:34:92:3c:55:cc:25:6e:44:de:8c:9b:ae:47:b7:5b:a7:
         7d:df:63:4b:da:67:ab:67:9b:bb:f8:76:a7:e3:6e:e1:26:0e:
         08:81:3a:86:82:37:83:3a:3b:99:25:ae:9b:8e:b0:b3:8f:b0:
         68:69:33:e2:fa:8c:83:f2:49:f3:83:bd:e7:a3:89:14:e9:46:
         52:bb:30:15:5e:25:43:b1:b0:4e:ab:17:d1:f6:a6:bc:ce:d7:
         7e:f6:ee:4b:42:f8:2a:50:b4:e4:da:c4:5f:b5:5c:e3:86:bb:
         bd:22:0c:bf:c9:d2:e4:ac:16:f7:83:81:d4:ed:cb:9d:ea:98:
         71:0c:9a:28:7d:0b:5b:4a:f7:2d:e5:1f:be:c0:7a:ac:9b:64:
         f1:97:3e:b9:af:74:e2:87:4d:a3:32:a2:f7:08:49:1f:83:a3:
         e9:e1:b0:b0:6c:6b:59:de:84:4f:e9:9e:65:03:08:8c:27:51:
         84:ce:f8:f7:cb:98:f4:23:8a:ce:3c:59:a0:32:db:f8:44:3e:
         63:a3:96:49:8c:0c:7d:34:96:ae:8a:13:a7:bb:1a:dc:f2:9e:
         27:e9:e0:4a:55:13:ef:e6:df:5b:e0:47:70:7f:21:65:2d:f3:
         25:fe:a5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----