Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft
File:                     gycg6wvqAFw-3ldOMcCrdWP6DMc.mft (raw, json)
Hash identifier:          gHbKBPM3BTYs1iRpnomBNDnPc5RmSR2IHTXvcT8JlRE=
Subject key identifier:   D5:0E:33:A0:75:3C:45:A7:3A:48:40:3E:61:BB:59:77:C8:90:FC:5C
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Certificate issuer:       /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial:       0E3B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft
Manifest number:          0D71
Signing time:             Fri 04 Jul 2025 22:03:56 +0000
Manifest this update:     Fri 04 Jul 2025 22:03:56 +0000
Manifest next update:     Sun 06 Jul 2025 22:03:56 +0000
Files and hashes:         1: 0I8Z5OK7kcMFLvqAm_GuRrjq9Co.roa (hash: b/wXCHIYDDlWv9EFqk1bQUIbOb17PE4pGzX95Atyjek=)
                          2: 1aYcfAcNLwgui-N2n8M3DSBTVc8.roa (hash: VDm+H/fJyntt5kDa1r6/bPB/8ivGjrUVug56cxBqe/o=)
                          3: 2hSF_tSTX6o_hA2GZa69uSr7aYw.roa (hash: 0xknZb1nBEpcxkczaNUmnA6PAHuKCYYJg2j36YRP5+Q=)
                          4: 3S_Wg0Wwe4wOBPgIyxz_matljRo.roa (hash: RwoqadB7SccFCKH4W664FNOOvNBYL50kkTDujjQfEz8=)
                          5: 3aLbZG2Y1RSVO7u0W0hr4S9qUY8.roa (hash: jRyl4WeeeWP98fPFMqRBdVRyuKcIkaU8RhSWHO1TefI=)
                          6: 5P8Iu6qzJrhSwHbjLxz10nouHIU.roa (hash: 2dfrqoOnOnCT2TIwoNpFKqeUidXHK9N7jnYiTE80oNg=)
                          7: 8BknVL_JZq9EMf0SPwoNjMwXPc4.roa (hash: NAHVsiphkdN3glcsiwhrQ+mW3MMwmiXrrDapeqWRE8g=)
                          8: 9LNbBTGKkWhZIAFZefop1k8xGYc.roa (hash: Lc2NSLg9tzioJQhrpinsLwIfYjJ0aG1uR7NsG8oBzYI=)
                          9: Dd0pmsWqtDA6TmIglHrQEIWOXwM.roa (hash: z/SOYGL3Io5NxgC2bwd1hJ4jVXcPUjv+sRshbeMYoZE=)
                          10: GdMiKceMFJcEGsOX7v8JvvfeuK0.roa (hash: PeIUMFRwKo99vQiyahzZ3lcGyUanjj4p1KLRs8OizcU=)
                          11: HLxDLhmdHKkZg38vs4lKIUO1uGw.roa (hash: ba0TYIxxAqvWYpSyUzPahMyOJjYKRcLdw/7fcGVerLk=)
                          12: KFWXAlZ3CqJzTnK7DGSYBBdfdT8.roa (hash: y1TeEWAuGDo2ULut3IisdkE4pt3kC1CDTOV5ullTfm0=)
                          13: LRFAtIgSxA2dhA3JozBenD8Ae-Q.roa (hash: xnCRZHvlNMCo4zw8mTD4wMlBhDLk3wLbKjjo3VEk4Lo=)
                          14: N4zTMLr_TdZu5ErHrChE76sUc5E.roa (hash: 01gsXsqHIpNaP0Xi8ecTMIElifmFbVuPD4B4RSJYtbk=)
                          15: RYKudM5ng4YAEw8SOt5VIttRPFM.roa (hash: IIEniaW1uCybS3xEGSMWNy3xeKQxrLL2dKDvFkgmHj8=)
                          16: SodZISI9CTwnIRrBalQcBC1d6Xo.roa (hash: kHabac7o2JdKCfK8gTJpMMwwp0oczA3U2wKk1ADHWNk=)
                          17: V20FQeMvJK1-T0La1dmmNHJ0-Zs.roa (hash: 2JjeoZtgoRaY8PKoqjC4QEQfG62pfk0NhfUwAP7HkNQ=)
                          18: VE9LWoK3JP5BV-xnNCMwXruNJf0.roa (hash: MqGU7zCdDPc9gUcakaqgTfhtv5T5BXRfkTkOV3YKz2k=)
                          19: ZwVr2caNFUw7KbzkNKqxxcvKiuo.roa (hash: GRw7IoQYyQsB+bQUgyj9ZZhSx7qtaIv00dZ62o1wf/E=)
                          20: _a5_rsTZQmTRFEQX8zb9fFZL-HE.roa (hash: lkleLGg/Pwlvcxxncw2jks3Mp2GuaCsZ2LE4yKQf5Ws=)
                          21: cG0rp8sU5YPI2enpTCgZ7mnL-oE.roa (hash: Dj1i/1AdRA13RqX/WNcmJpj3+Me1MKHAw1Uy9nuNGQc=)
                          22: ciru1rpoutQlXOtJdiM27oK93fs.roa (hash: WMIxprQ2XFLPzgvC22DVbXoBQnCPjO96rJoPA3pdlPk=)
                          23: g5lqS9gh2jdNy4-gBlkXqkNlb20.roa (hash: 64WxhEbotKoRJOtgxVyQWdTtLid8/n3q0EeTEMYuEnA=)
                          24: gycg6wvqAFw-3ldOMcCrdWP6DMc.crl (hash: A98Ut80Wa8Yh3hMhz6Qkd89AgE52WDidKRy5OMnCbMM=)
                          25: hYyepMDIpBY-JHorYEhIMB-ANW4.roa (hash: 3WB6jlJPGMPg7wIcwtP7oU3R9Bwxw/9ND8vEnS2H624=)
                          26: icJfYpIQH2DbBMM4UrAQ9cGoOhA.roa (hash: CDsd8sCsUoopPDwo6FQuvBqfiV3V9errSwsfa30pSyw=)
                          27: ixbMn-cB0RySdpn3AhNWw7OrVS8.roa (hash: Dy3msUluRFSYGGOa551tQkuUTUvvjpMzPyxHAwx/Z6E=)
                          28: mSTL50iIgvS692ofhwIVFRbv-14.roa (hash: 8ZOkULwx6k2NokqJ+pQE3L5fiuF1dtpuPmtAVBatI5I=)
                          29: q9tQ-jxNkGfoVAFwFVLi41xkgvM.roa (hash: 9yLHoxIPXahVXXJ8Fq+h0Ykk4ONrpDHU2IV4s9jMl+g=)
                          30: sIB1YfG9KJwlSa7L_HKqR1uKapg.roa (hash: j2w2tl9RXyWKvCyO0ipDhK9OPLKNEPRR6gP+rOlQ8Fc=)
                          31: tqbxU1vAja7QeseNFY_9hEUO4q8.roa (hash: 2QOrwYiBWBafR6qXAnc1EhdLVO9vSwce00JY4UHzNb0=)
                          32: uUtDEQh2i-X9AoE1gVqnL5Sszmw.roa (hash: dxLIcgK0A7a9fn+Aob8yBRSXqWBU9XFVGD28LWsncXk=)
                          33: urrFJWzReN7Zl4rTxMF9DwnMTr0.roa (hash: 9r7smf2QkYfXGKNv5qNfEAWEojBQkT1wsP34ypO7oYA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 10:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3643 (0xe3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
        Validity
            Not Before: Jul  4 22:03:56 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=D50E33A0753C45A73A48403E61BB5977C890FC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f2:3d:04:37:8d:ae:2d:d7:c8:3d:8f:38:55:
                    81:4a:b6:1e:0a:48:99:01:e3:57:1a:a3:4e:9d:40:
                    82:73:f5:9b:53:e9:9e:d1:d5:e3:34:d8:75:e5:68:
                    66:7c:ec:00:f7:73:57:64:af:61:23:74:2f:41:1f:
                    8e:84:bc:6d:2b:a3:22:a4:a3:3d:a5:e0:35:f0:84:
                    0b:41:32:05:09:41:2e:17:30:38:69:17:15:84:46:
                    08:cd:52:bb:49:a4:2a:0f:82:03:47:c0:8a:a4:63:
                    17:d1:da:b7:01:8d:cf:62:c3:f5:70:83:68:5c:00:
                    71:25:60:a9:3c:60:50:76:65:a2:1e:b0:33:38:b1:
                    67:06:3d:aa:3e:ce:dd:8b:cf:ed:57:92:cb:1e:f7:
                    25:69:ee:e2:e5:97:36:ac:74:77:4f:7b:22:3e:ba:
                    99:38:e9:bf:82:b6:d4:2c:da:8a:6e:27:d4:5c:f2:
                    1a:e4:3d:bd:5c:f0:a6:53:f1:b7:19:3f:66:25:94:
                    ab:4b:80:d0:a6:09:31:64:2b:5c:55:09:2f:c6:3a:
                    15:bf:14:91:20:a5:97:dc:91:34:9d:1f:6d:df:a6:
                    7c:ed:e2:a9:4c:b5:dd:3b:ab:e8:6f:3f:a8:54:53:
                    d8:04:39:cc:c8:cf:ff:04:0e:57:e8:af:d6:04:e6:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0E:33:A0:75:3C:45:A7:3A:48:40:3E:61:BB:59:77:C8:90:FC:5C
            X509v3 Authority Key Identifier:
                keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:5d:18:9c:7b:75:2f:46:97:37:22:8b:03:5a:44:c5:5d:84:
         b2:d0:ca:fa:41:49:9c:89:39:6b:4d:da:15:d4:95:1c:26:7e:
         e2:0c:7b:e5:a4:6a:b0:0d:a8:35:fa:1b:74:14:7c:9d:02:83:
         db:99:0d:91:64:cb:74:af:08:f7:bb:a6:9f:f9:ef:1e:54:62:
         cf:c4:f9:c2:5e:45:d7:03:55:2a:0c:35:79:59:84:19:2e:0c:
         80:d8:3d:03:d8:03:7d:75:10:c2:1b:50:ee:0b:4b:51:8b:b6:
         7c:74:9a:10:19:a3:30:43:e1:31:27:21:c0:d6:81:bf:2b:92:
         c2:5e:c5:f7:51:7b:6b:79:1b:3c:23:2c:2e:3f:21:eb:f6:fa:
         2a:a5:f5:ca:b4:84:c4:ba:c1:b9:fb:3d:2e:26:23:c1:fe:e6:
         1d:7d:f3:5a:67:b2:cd:cd:d6:7b:0e:cb:26:70:b5:e2:4e:ff:
         1f:30:82:dc:7d:57:68:68:1e:f1:e6:c2:d5:1f:f0:3c:8f:ac:
         f3:96:cc:a0:5d:09:99:84:5e:10:7a:12:2c:77:9e:3c:f1:20:
         8e:f8:53:e0:1d:e0:a1:bf:93:84:7e:4d:e4:0a:76:5c:8b:04:
         ed:1e:22:a3:de:b4:6a:c2:ae:6f:c0:92:d6:a0:42:57:26:13:
         3f:d3:c0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:54:33 2025 by rpki-client