Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
File:                     RXsQNypobj_3Nla-tc0968kyNxo.mft (raw, json)
Hash identifier:          iN2NcHzEaTHmMdivuG7Rr74mxe1GPG0oAlpR3vbgcWA=
Subject key identifier:   F4:AF:DC:44:CE:1F:43:D4:72:81:BB:30:6C:1F:7F:3C:E6:5F:E2:D2
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       102F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
Manifest number:          0E9F
Signing time:             Sun 19 Oct 2025 21:55:59 +0000
Manifest this update:     Sun 19 Oct 2025 21:55:59 +0000
Manifest next update:     Tue 21 Oct 2025 21:55:59 +0000
Files and hashes:         1: 07vcUggfOhRzdvP6je7M0VW6DSU.roa (hash: l73O/MfcK8gJef4ZyWkFYASOyaDhiWhoKdjFPMS6MHg=)
                          2: 124-dgujcSfZi9iFE7nrSwcZU1E.roa (hash: PTqkaLiD7JlVtDIsU1ySyDbrfGcLbb3p2bBV8kE3G2c=)
                          3: 37-lYtxharFPHhtQwqWHSe4JwTA.roa (hash: FtylxqbpWXvGaJsNJk+BBRV7NdkF0g4ITM8C46RrToo=)
                          4: 4Au0bOHNvYsK2lFyh1wM_NhbPVY.roa (hash: XnMd+o6nrZ5uKMH+8Xj4lCBg7e5oLMljN98FhV31eMw=)
                          5: 4ZquMrDim6vEbY5v354ZmXcA9ww.roa (hash: bZB0RcCSq1agYtANJAQPWHSgxv+HxLCxTBNORZaz4Gs=)
                          6: 4gSWxEaEes_CZu9oIvaptfbskxs.roa (hash: TDCx14q7U+WiMDo8buv597gY7Ww9SDeBGkEegSf1xPM=)
                          7: 4lA6qeEfiAsQPhE5QQ1KGP1XMPM.roa (hash: kvAEAwn0oPlHsLYESMFvTbF/3KcxnB1eOAuUaz77IvU=)
                          8: 6TA4FvrJBM_c7ymc-y0LwFb3OeU.roa (hash: Vtpqm4GH3fn0d+w/H5Se95gROwBG3DPy+boDkYCD4Xc=)
                          9: 6ZAnqa3O-kXxw0fa8okj7HcplHQ.roa (hash: Wz3Dq8YMxowyhHXJl/L+IhQkJjjWaYZvpQg9VouDtD0=)
                          10: 80lhrL1SGxFoAGNIUNqwq9U45-Q.roa (hash: O1kERfmBimG+47pZ08hI42/rnN+GiqN17/v8Mn3GN9M=)
                          11: 8AuZrWW_CDXH0eIbjSmrlQhnKaU.roa (hash: Zl1VDXziGuPBOTSctZBW3mIDi9q+9lwVM0+pMER0Z8Y=)
                          12: 8zXNS7EDQ_krZRYvp-RWXJ9BSVg.roa (hash: ksXJYKwa4dbT+L/pfMQ6hpWqvohAw3aAz5XjNMEeyTE=)
                          13: AaqI9dLMB5PCljrHn7_m7KKB76I.roa (hash: 8S3WL4tHeP0lGUCL4k8cGHAlLVnCHokakNLJ6Vedpqg=)
                          14: EQA-4XdfIndRiU4iGUybSR35gN4.roa (hash: n8tpDQg4agsYD6iJfoRPVCfRvAYkipOPVZYfqyhvTfE=)
                          15: G1A53IcjA4h3ALkwTKNj7y49MsQ.roa (hash: PstHa8drSDvmRBNIM7qaKd+iWEsp3+4H4ddmQdQtStE=)
                          16: Gnjc6b-HGqdLq697Zg__8aQQnh0.roa (hash: cvzGriPI9YxBHCvbNTY37A4PsLdMYw4BrOUHXqUiE7Q=)
                          17: M9zQyZuCA4Kb5sgFW282VKbEnO4.roa (hash: qZJ7HBPPcRlnosch01wWCGxhkFwgL+NKT2B5d7WrM7A=)
                          18: O5xTCgFJC-eQnd3PKv33c2PUecU.roa (hash: I8ngLyb+KeMNu+RicCYR/STTAaBKzz/2oCx5OOH4MB8=)
                          19: RXsQNypobj_3Nla-tc0968kyNxo.crl (hash: aehztDhLbq4DaNCvlCKipyYfjJSyE90ZFfgeaorvgpw=)
                          20: Rc4KGG_kj9e26YHrFLFiB4TSdjM.roa (hash: PAfzDFhiteLKMnsbuZmz5PPVca9REQo8S9PbmLKKWiI=)
                          21: T8grVSgCOVd9RlLOquTWnWZteWM.roa (hash: JdFJgdgJ3bH0879cnOADFivV54HW8aRE/2pH2wTgGnE=)
                          22: TBqHuahGb-yyswk33rZtWuf0R8w.roa (hash: nRpJ1s4jCyMiAaF0o59T2gpgjYq5nck+zW4oyUCorBw=)
                          23: U8PSOlHnj11iCtdWThsHPXy3NKQ.roa (hash: D1fOwuW6ap84NF8yh8KX+AqzrWrx7VnhS2TJzePzJzQ=)
                          24: V5G1e2ZF_6a71ikGHtCbI1HI2qc.roa (hash: wT7Iff+cp2WAm2lhXkBmJsE16yuudWbwAy/o+l5b1Cg=)
                          25: XdGou_W_p_3tHGn8K9kxDcaryOA.roa (hash: +Q1w6WHibwNrTlmgh2O9esMWPGaMomx1w1zKZhWIEuE=)
                          26: YMW9ZoePgAT8By822yn9Vo4cpxU.roa (hash: iZm/HStqt8+oRfagB9EUFyL1009RD3aX35KFby/pGJ4=)
                          27: ZBoD3voBPD6qPW_WBinDNbCdt2w.roa (hash: JqJZPt3JM9dwTIFTqDZ2EY3ExGuilfFuqC1asU6JlNs=)
                          28: ZmmuqSue9GzkbQyrve25xeyRRs0.roa (hash: PZwl3ODRhRitrbtWU7QCfSTVYNkXb8vJIX7X6I3Vpgc=)
                          29: _CZpU9Pa62g2IEWy1B_ZjsPiMdo.roa (hash: 1bDHPlvQrQ/gIImzobRjtEGxBIX0Rd+/voSs/Mncw/U=)
                          30: a_2YjzwzMKrJSxHOuqvqTl_ZHZ8.roa (hash: siDZyijVWW04qYXlz1B0ZejhJRSDshfSYJCU8YmhJGM=)
                          31: bATQpIqR0bbFj0vAfhjTqa8N_e4.roa (hash: YuVwDAqUTVHBgbS2qqVfxsPbFPD8mnquowZlFbOxOBQ=)
                          32: dhYV4Dq67AmzgTEfsVFvGZh6iY8.roa (hash: NALE21HugR2GyqyzbCTTKWgbvN82Fy8LeXax3d6+OrU=)
                          33: e9ztbKn32n0ypGfjgeEb0Ry-LK0.roa (hash: OR7ByThYT9j9dGf3uFwmStcD5zJsBhmGvc9Edog0E6c=)
                          34: fNiXZxDiBMEiKWsX4ylbbkQVO3Y.roa (hash: BOmglLNARwgsCN3WF4kB0yBfjRsddgxsc/2R54WShPM=)
                          35: hduL-GcwBEv-zE3cfjsU3pZFokE.roa (hash: TtVcyTISWTBLcvyGUxlMoAzMqlUsRL9yBdZKYSYMfWE=)
                          36: i3sqQPMLPXwMXiYiexg6awg8cQQ.roa (hash: BqZIrfo7IHps0NnuIytI3jd+kxNHcNbJsFGuazoK0Tg=)
                          37: ijieom_c1p0KsAAIxWeZaW7VIfk.roa (hash: p1vK+ZK7gZCYypb9EP3mk4lpcQ5GRL+CqqmdlriPLBI=)
                          38: iwW5LVmMj3k1cMpWLeLAQl7HxeM.roa (hash: nHKO6HQR2W7bF++PHDoslu69H8d2Ngr+YXouvidjk3k=)
                          39: jh3goPFnjTaJwwQgzURw22Ny1-0.roa (hash: uo5LDrgO+knr9j2+VwrN5K678mUacyITKVK9tqdXhyo=)
                          40: lPkzuUS7XQ-2ZVfgaUt8dnRvguw.roa (hash: y5VtucSA8cGGt8TuFgBbyce34HB6E68APILUVFLY6f8=)
                          41: mJBqscIg4eG8Tbz9Q0XWgAJHXNY.roa (hash: EA//zl5leG6otj907ssyAICblIvwjou/tnOlIfpFTRk=)
                          42: mUTuj6ZTgtgpXQazsdQQTTE3uqs.roa (hash: 6by9gqrr+X2+H9UUv+XFpSIysiRVFV3KjuytLCfrC2w=)
                          43: nkbmGfe7JcJRmB3RWPPtmVIxVTg.roa (hash: YuChHZZqzXgkLcfSkmIaAgxllyIATVQ40+DC45Hg+Y4=)
                          44: o_ILGP7QEWQWHooK5VhpU06V9rA.roa (hash: 6fFnrqS49hNGX0Ra5UJvKsm/ePi4y60mzY1qYm4NqDw=)
                          45: pePjoLg8fASsPdpaASipK35XmjM.roa (hash: 8h1l/GfP5gxnbkcTvV2FayKulM6DNoKQW/2YQlAtrQs=)
                          46: tiTZ7ris6dqYoo38VoHN72mEYac.roa (hash: dM/WvZFdtig7QlMjVZ+v0b9Y2p4wgEAkagzJz4eGORI=)
                          47: tlqCQ5KxB-mpvox50MiGbeYTdv0.roa (hash: ejbkUYBgRIPIiw+aGJylEV7qQK3PhCSlLHTZO4V+aQ4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 03:26:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4143 (0x102f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Oct 19 21:55:59 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F4AFDC44CE1F43D47281BB306C1F7F3CE65FE2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:24:c4:78:01:25:42:66:e7:d5:e3:1a:12:b0:
                    28:a1:50:89:96:c6:c9:77:17:36:f3:4d:67:43:7f:
                    14:cc:30:28:70:2e:da:86:85:df:1d:58:19:bd:6f:
                    ca:9b:57:b0:5c:db:4c:93:0b:2c:5b:a0:1b:25:2e:
                    e6:b5:2d:cf:5a:bf:0b:64:7e:b3:8d:24:40:98:96:
                    58:34:02:06:8a:c1:c8:e1:c9:ad:1a:c0:e4:fc:dc:
                    87:67:b3:11:dd:92:db:42:3c:97:85:f0:b4:b7:ca:
                    64:78:d2:ac:e4:dd:c6:be:b0:5b:d4:fd:7b:14:4a:
                    a0:d7:be:f2:2c:3d:fc:51:fc:bb:28:b2:18:9f:f2:
                    bb:dc:11:b8:14:35:ba:8f:78:0f:34:37:fd:46:fa:
                    e6:32:21:02:0d:2e:40:42:e5:0c:14:60:a3:06:23:
                    e2:49:45:3f:7f:8e:9e:9e:95:c8:da:2e:86:7c:4c:
                    be:15:b8:f1:64:9e:68:d9:01:19:c6:d2:eb:dd:01:
                    28:96:84:fd:63:d6:f4:33:db:76:ee:35:7e:a3:c1:
                    87:42:f1:a7:d3:41:48:38:80:a1:b1:8a:a8:36:8e:
                    61:70:f2:e1:e0:aa:77:57:3f:23:83:c7:70:6c:a9:
                    f5:f2:00:0e:b8:ce:fb:d9:04:41:7b:29:3b:18:29:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AF:DC:44:CE:1F:43:D4:72:81:BB:30:6C:1F:7F:3C:E6:5F:E2:D2
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:0d:42:24:9a:15:17:f3:84:0e:6f:11:df:47:2d:46:6e:6e:
         71:f5:0d:e9:61:6e:52:28:21:c9:de:c0:2c:3e:3f:4d:25:5b:
         0a:f0:f0:6a:85:84:18:ed:29:64:64:bf:83:53:42:42:cf:c2:
         a0:75:35:80:d2:cd:c6:84:ca:00:32:75:d0:ab:78:79:8c:dd:
         1a:5e:ab:a8:f0:45:ab:88:4a:23:55:24:5e:6b:cc:6b:b0:53:
         91:ed:a7:4d:65:a8:06:25:df:19:cc:eb:5c:1d:c2:1e:37:f9:
         79:c8:20:4b:29:f8:d7:f7:98:7c:6c:05:08:52:92:8f:5b:d0:
         d8:49:49:7a:c6:47:7a:78:d4:0c:94:8c:4c:37:1b:81:3d:98:
         26:c0:b6:ca:b0:e6:99:11:1e:43:ee:88:2b:0c:04:c9:3d:34:
         70:7f:e0:97:4b:7d:f4:6d:68:f5:03:26:58:4d:15:a1:84:0c:
         41:25:1f:aa:33:7a:8e:67:a3:12:56:af:61:05:84:c5:7f:5a:
         8b:c7:8c:5a:29:32:6e:32:db:b1:99:1a:9b:6b:50:a6:da:68:
         e3:35:96:2f:1b:9c:d7:72:bd:d1:9e:ff:7c:66:8f:ca:95:3c:
         7e:23:d7:17:82:56:c8:f7:bb:a7:14:c8:d6:5a:43:46:d0:51:
         c9:52:ed:d5
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICEC8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDU3
QjEwMzcyQTY4NkUzRkY3MzY1NkJFQjVDRDNERUJDOTMyMzcxQTAeFw0yNTEwMTky
MTU1NTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY0QUZEQzQ0Q0UxRjQz
RDQ3MjgxQkIzMDZDMUY3RjNDRTY1RkUyRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvJMR4ASVCZufV4xoSsCihUImWxsl3FzbzTWdDfxTMMChwLtqG
hd8dWBm9b8qbV7Bc20yTCyxboBslLua1Lc9avwtkfrONJECYllg0AgaKwcjhya0a
wOT83IdnsxHdkttCPJeF8LS3ymR40qzk3ca+sFvU/XsUSqDXvvIsPfxR/Lsoshif
8rvcEbgUNbqPeA80N/1G+uYyIQINLkBC5QwUYKMGI+JJRT9/jp6elcjaLoZ8TL4V
uPFknmjZARnG0uvdASiWhP1j1vQz23buNX6jwYdC8afTQUg4gKGxiqg2jmFw8uHg
qndXPyODx3BsqfXyAA64zvvZBEF7KTsYKVqlAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQU9K/cRM4fQ9RygbswbB9/POZf4tIwHwYDVR0jBBgwFoAURXsQNypobj/3Nla+
tc0968kyNxowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
UlhzUU55cG9ial8zTmxhLXRjMDk2OGt5TnhvLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9SWHNRTnlwb2JqXzNObGEtdGMwOTY4a3lOeG8uY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC9SWHNRTnlwb2JqXzNObGEtdGMw
OTY4a3lOeG8ubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQ1C
JJoVF/OEDm8R30ctRm5ucfUN6WFuUighyd7ALD4/TSVbCvDwaoWEGO0pZGS/g1NC
Qs/CoHU1gNLNxoTKADJ10Kt4eYzdGl6rqPBFq4hKI1UkXmvMa7BTke2nTWWoBiXf
GczrXB3CHjf5ecggSyn41/eYfGwFCFKSj1vQ2ElJesZHenjUDJSMTDcbgT2YJsC2
yrDmmREeQ+6IKwwEyT00cH/gl0t99G1o9QMmWE0VoYQMQSUfqjN6jmejElavYQWE
xX9ai8eMWikybjLbsZkam2tQptpo4zWWLxuc13K90Z7/fGaPypU8fiPXF4JWyPe7
pxTI1lpDRtBRyVLt1Q==
-----END CERTIFICATE-----