Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft
File:                     zLVFQVOszs6FINM5B9VOVsXKmks.mft (raw, json)
Hash identifier:          ofhYkCBdmPrbGzCEoyyChFb+vyCTvSvOtxm0dc2sIzQ=
Subject key identifier:   9F:76:E0:19:DB:14:62:7E:DD:F8:6F:6D:2E:AA:E9:BD:0E:B9:D8:8C
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Certificate issuer:       /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial:       0DC6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft
Manifest number:          0D43
Signing time:             Sat 17 May 2025 21:52:30 +0000
Manifest this update:     Sat 17 May 2025 21:52:30 +0000
Manifest next update:     Mon 19 May 2025 21:52:30 +0000
Files and hashes:         1: -9vGmeeNefwndf0Q0x8_kteaypg.roa (hash: up6xWUJHdV8qrNym8bM0KEnsJ0dOWDa8t/NW2uUCVLk=)
                          2: -Rd4V0z7RlwN07cKvn6NEOfdjwc.roa (hash: 4Epb75+fuR5FXLC+ZcDjsj6KQf48N2Gl2xjwF+PDGK0=)
                          3: 1UxhNGMmFgbjoQaVjCjMQYdjBYE.roa (hash: Pnwt/0AUvScTQsmZ5xT4Q741teN+n9ewYhy8oteAKQA=)
                          4: 6kbiqvrYxUogDnQnZMUvinRP7L8.roa (hash: 0Dz+quZWiEOug0Y9QbCvDZ+r7vqIZ0ivxnA3815GG/0=)
                          5: B3GjKJE5AhmntybizLFgxZ_Bi3M.roa (hash: 4oCMGhxaQEjkIRHxNa3zupIixqOqo4oRg7PbvAQp0y4=)
                          6: DcYI8ZmW1CxsHAxy75pwx3S1cSU.roa (hash: TQC8N28nCNGyA7IfnnCNvinZsBDe/CyFjWZXwdlqIbQ=)
                          7: EbUgtp4aNF6BaBdDvQkD8VnhAeM.roa (hash: 0e0jm5o5TQOYXswIy8UIf0jAUGWSP0Q4b3zLzt2G6Cs=)
                          8: H7qYF6C8jVnB7SaqOAbuJSK_E6k.roa (hash: jxynmVc0Q2m6rTeAA3MnMkMSqev4FeT2BHYyAOXsPR4=)
                          9: O1NjRs3K4AAlX_Fhr8nGXrlfwew.roa (hash: jni2dHhHRKS9DRpcXUElX3TsdO5mNzs7tobvLPTz9f8=)
                          10: O9CSpgTWnkI9wZDqdyS0VAH_UZQ.roa (hash: k3SeCE8mNkmJm6OqQbfxH3OvHU8yhgSVc7lBM87vtps=)
                          11: O9rIUW2j-iTzzHYEAijZry7OZts.roa (hash: VFvisbotMqdFyIi+krSLGb9KsqUkmSXozEV0sG11wac=)
                          12: OeQl39Pnm2bAGUR-6yCw28ZxhfI.roa (hash: 5Tob5UPFLKFP3rD7LWYlzJbgJ6u+uFE7ybttQ6TO0iY=)
                          13: S0k8PtJ9J6XkLIUF45vLx6-bMmo.roa (hash: 8IReq7H2i46QG+ucAJHY+ioiy/kieOw1z868CXHP6/Q=)
                          14: Vjdc9nbqWAYl1xJTPGI-odXFcgw.roa (hash: w0FzivTeHOkQhju4cV70BF/rtkGwMBmlVyTdVxvFplk=)
                          15: XsJ0qIf386p-ntEcBzAbyjl0vuE.roa (hash: wnhayTVHwyNH7eJrY/lkbbpgLDyHL0iaeOYkwuARY28=)
                          16: eJzLNLjQ6DxAzr2rQtEOHBKsms8.roa (hash: ypTmrfGZfByBMN9isAPlTCJEeF0kVzPQ8dme6ieuoGU=)
                          17: eL_Wyl7GGWxGSGGyL8PKZGhHteU.roa (hash: f2p7cwTC3/GVzfLMoKPhHBCBFuChEDYtCchgetGy/NY=)
                          18: i46ldYhHdWHXzdZIpvg49yWwJLA.roa (hash: lyTT2mO5fpbZnoSVWhmKQSYykjt5qgbAr94dP2/CGHo=)
                          19: mgJrv8mZitz_bDQJylHrfyYmubY.roa (hash: HMnXmGPnBHBDvtSyqPWLvSYQxDm0zIVXqJlaLnBziT4=)
                          20: n0z-7gw9P02Q1_udeWLPVppNBt0.roa (hash: TO7npdkWXVhjIRYg2GRj4OkY0OpzW8h6N0e9LezxyBY=)
                          21: niyGTm_HncgZQl8eznfbE9h-FF8.roa (hash: Dnrp1sco/YFm86a+9EyLYrnPOeydObPrXqa1wKu7pd8=)
                          22: rk9UUd2KbIG9cE72lihL7qRvT8o.roa (hash: nX02OfpJ48UMomu9p7buOmcpiGzoK977mUt1QPhjeA8=)
                          23: zLVFQVOszs6FINM5B9VOVsXKmks.crl (hash: jENAhDNMNnGFg0KQa1T46/qT8TD+0AmM8rfgtwdAg+k=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 19:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3526 (0xdc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
        Validity
            Not Before: May 17 21:52:30 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=9F76E019DB14627EDDF86F6D2EAAE9BD0EB9D88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:36:6f:0a:b2:8a:95:22:aa:15:c7:66:54:
                    03:8e:a7:06:b5:49:08:1a:f1:47:9b:e2:3e:df:65:
                    7f:3f:12:ea:c3:84:47:3f:b2:41:b6:1a:22:66:66:
                    20:59:5d:7f:10:f7:ec:9a:6d:9b:c0:10:fd:4a:a1:
                    bc:cd:f3:8f:a1:5e:44:69:3b:26:1f:80:e7:c8:19:
                    db:d2:03:dd:8f:9b:cf:6d:f8:d9:a3:2b:7c:ff:bc:
                    6d:cb:12:89:93:28:33:34:8f:ed:4f:7b:6c:53:24:
                    38:0b:30:1f:b1:13:5b:a8:a5:13:c2:20:43:98:e6:
                    12:b1:17:e1:9b:19:93:c0:45:86:36:fb:cb:f6:07:
                    b2:c7:82:6a:08:7e:71:4b:da:ba:c6:e7:af:18:e9:
                    d7:b9:4f:33:f9:93:9e:98:76:9d:b6:ba:a8:49:41:
                    bb:41:98:28:b0:90:c4:a3:c2:dd:2d:92:34:b1:6f:
                    b4:93:f5:11:a2:12:e1:86:3e:27:6c:6b:93:d1:00:
                    90:69:fa:2f:a9:a5:2c:be:88:9c:ed:28:fc:28:85:
                    a1:8e:ab:45:36:3f:d5:50:57:00:d9:52:03:04:c6:
                    95:c2:76:a8:a6:a4:1a:49:bd:44:f2:e2:a9:6a:3c:
                    ac:ab:81:aa:3f:f3:48:b7:e6:e8:a8:ee:f9:9d:03:
                    d7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:76:E0:19:DB:14:62:7E:DD:F8:6F:6D:2E:AA:E9:BD:0E:B9:D8:8C
            X509v3 Authority Key Identifier:
                keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:39:a6:1c:ad:53:17:6b:9f:f2:e5:12:42:86:a9:5c:5d:dd:
         ca:1c:bd:46:0b:9e:dd:f3:da:22:2c:bb:b0:3f:cb:54:b9:fd:
         1f:34:9e:ea:95:f4:e1:6d:c2:87:04:23:c6:d4:98:ed:c3:bc:
         4c:1e:e9:9c:59:11:2d:40:d7:98:15:fa:7e:2a:d9:0c:f7:78:
         c0:45:e9:e3:5c:81:86:3f:63:24:6c:21:06:3f:a9:d4:51:be:
         26:f8:9f:7b:5a:27:4f:94:a2:87:52:67:1f:2d:f5:26:b1:03:
         f7:e4:0a:7e:79:f8:75:f6:1d:0b:c0:8d:bf:33:ee:d7:19:25:
         07:d9:53:5e:e1:8e:57:ab:f0:98:78:96:81:e0:76:46:d9:01:
         45:81:30:c6:6d:50:9e:c7:61:97:ab:6f:48:93:ef:c5:53:74:
         eb:80:40:20:19:4d:b4:38:5d:ef:1c:7b:fb:90:6b:ac:fe:0d:
         7b:e7:ae:44:cd:19:75:a6:e7:f8:0e:be:1c:11:84:14:1c:47:
         66:73:14:12:f6:a9:e7:d1:07:4d:98:34:5a:42:ff:3e:b6:f2:
         f9:60:5c:e3:ea:3f:bc:af:31:25:98:fa:6b:72:bb:8f:1a:2d:
         e3:01:a9:e5:66:6a:2f:72:eb:61:da:86:e6:2e:9c:4d:f4:ae:
         6f:f9:a6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 16:53:52 2025 by rpki-client