Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
File:                     FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft (raw, json)
Hash identifier:          u22cLQeMy59xddIsB7QhObNhcB+Jnh4Jer4BsAzrpIQ=
Subject key identifier:   3C:E3:DF:61:7B:EA:5D:05:79:2A:F9:97:07:A7:FD:2C:2C:CD:91:72
Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43
Certificate issuer:       /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
Certificate serial:       1D56
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
Manifest number:          1CD8
Signing time:             Sun 10 Aug 2025 21:11:06 +0000
Manifest this update:     Sun 10 Aug 2025 21:11:06 +0000
Manifest next update:     Mon 11 Aug 2025 03:11:06 +0000
Files and hashes:         1: -FjQAAx8RqmGsuuWgV8GriaTqdA.cer (hash: z/XPYi8FOdw394vcNdauZxrYwnkHzJT7f6J9d4N8r54=)
                          2: -cYtwWoyWUFWZBQsknjF3cTYKZ0.cer (hash: QckMjUmjyrMulr198XvDVb91NhX/8SfaMGDDp9HzCsM=)
                          3: 0mTRm5gGAj5HbgOcBf3OE3asbDw.cer (hash: VGHpG07mo0cQYV64c5zxdifyJW3dU0vjxMSz/e24v5g=)
                          4: 2Wa1WQkyQYCoikXh9oPPTS7ZvKU.cer (hash: hP8Z3yJqSVTj0ed21mTZlDTcXgFeWmFtgIvrc67rMSk=)
                          5: 3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer (hash: 8ZRp/LDSu/Dy89wC9S7mO8QE2LMtigB+956PUJn9jxw=)
                          6: 3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer (hash: rBeDam6sRJ/bG4pjDBkLi0jRSHHrjk98zSE5oMpIBhc=)
                          7: 4hRiP9Epy5cnQNOR2vORlvKt8r0.cer (hash: bl13E5JJObrrRZI7mf6dDoWTtTmE2la6csPCj0KmbhQ=)
                          8: 6rJQ0Fj6y-s-oNFrU4ZQYTOQdLY.cer (hash: 7ixjjCQpyi2yR4ocv8wnaBPb66fReX5kMnyhrdYxEcs=)
                          9: 7hlBw3vR4s8SUS-YqzZsKdp5txg.cer (hash: 4gt4I2GT5TVOPo4V5ShJO6K6ZZUQWj4KXccwojfgnAI=)
                          10: 8zpyqveYEFuyd_CURY5GS0ZZ-AM.cer (hash: ISB4umo25qh/0iV++TUopfHsL1yURELN6s0VaAYV7VQ=)
                          11: Ay0zZk94CyxQHuYj57vx0iayYkg.cer (hash: Z2c1Un7MJOAwqTIzJ5IDeItdtpm8wNUPtP2fmXZ6rec=)
                          12: B-NqPSGaivyE-IswVT5jjObCzs4.cer (hash: 8EK2wgutI6Vb2p16N3bcecLwkWkocObPmu61avisjtA=)
                          13: B9PnPsXrPXBIY4ieIhhFt2ldQJw.cer (hash: 6WLm4oaRNkB+JDh/8It0WtSdLGPSR4YQVa3S192SvMc=)
                          14: Bq4UgM78XOCAKSl_TUnLyr1s4vI.cer (hash: MzHenGjoLUcNjoiVfdlbYk2J+bq8Saitp2yC91azKsU=)
                          15: C2fHjjXSNjKiVTKu_otKn8q-O00.cer (hash: FRQ8bWQC5DIuF99Ro0x8lj8/vXjcG1leUcME9dIo2mc=)
                          16: FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl (hash: PC/zFvLM4hlcopNPOgF1WsWJiyaUlzFMRbS4iCoKOFk=)
                          17: GBM8moK2QouL539igE0i4hikV0U.cer (hash: xoFq7QDQZEaUNlWh/Swb906QeqZ09ClkyzAt3N5dl0M=)
                          18: IKzKhxhQA3Ov93tBSyPcal8UdO4.cer (hash: plvYQIJXHpEmf8muHkvHECOHMpIERcr1ZgA2qvsXrTU=)
                          19: NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer (hash: UjZTOIWXU1rMa/a9zSSs8eyBYkf2wSmzDVHfqvQXghw=)
                          20: Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.cer (hash: TxLAZJEsULvWWV5fbxMcmj/c75QVP8UXsxbtISBWWKE=)
                          21: Qi58ldh96a7rISoMTMsBdOZcpdA.cer (hash: y3gnmAD4VUlr6VReqxjug8ksetmNNHg4KIjmIOzTCS4=)
                          22: RPjc9msltxkFbR7WXBbqklflVT0.cer (hash: 4nZyVnsKigzOeKNZkLbr0fg1aK6Le997hfoMs1Trqpg=)
                          23: RUwtAMcuK1O0J_30WpO8Vn5AQOI.cer (hash: yXP2j3NxnXnLIcAtMe8ErkqStZhJIzuXPdKYl4BTGBI=)
                          24: RXsQNypobj_3Nla-tc0968kyNxo.cer (hash: lmkUnPXMaEfnmvWkomNi7etpg3fdzs/nRTzqtYv+C/M=)
                          25: RhvA5RYCLDwnj8iSQgcF_rhWaNk.cer (hash: X3gtjBjiEepUHs7hrIgwbWrlQTRCQI6dS6immRp6Eu0=)
                          26: S0bOj4AxurdTZNpb2YHoiFBPtBE.cer (hash: bAbCax9pqLiy5UMLdc5Ql09dbj/qRAvtPGmGfy4WOvY=)
                          27: Sf2Bm9rAFmK3PqyQBQiM1qO4h2I.cer (hash: KdaRJ5oieDN94yuS0BaWJrpfd5Own4lD3vqelyaxdxo=)
                          28: TwAMtt3TdIem3h9-rb2hJwjrLBk.cer (hash: jQyd3tLuTzN1WEW8IRfu+mzrq/V1j8zAABy3flW4uPc=)
                          29: UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer (hash: sQ/NtQJnkNXgJT1XfwGj9GaRiOrcwHiFzlE8icL4cqU=)
                          30: V01f1FnQ0BwzjvAjYSLHYuyDKDw.cer (hash: gtenGDnbZaNDKW6m5z5nRNbyGuLsPhXJO8v+CEIT3qY=)
                          31: WHbkuN-qIkwBnSRpMfw816T-7So.cer (hash: eGy1+i19e12YvZKPUQZlwg/0exNYuNgY7QOiBXoLmN8=)
                          32: Yl2EXXlTUZ1xnr3MksF2MhdwIs8.cer (hash: cF22nYKtUVYFjRuiaji7jiPXkxu9vk9lu1rF82NLCjc=)
                          33: ZgKWWn0_f_vztR7fFOO7zC3ztpo.cer (hash: QMwPIGqlcLA78vxclt43G/yxfct1JvjNHr21r8tZKhc=)
                          34: aisTlsFC2mcRUYh16QxK7JCw9cQ.cer (hash: zxpz/hmX6Ya/ZhyZHaM81xty9U07CEZcnRVMCUQvvMU=)
                          35: b-yuhG9BvMOyThMnuiHCMFPhHAM.cer (hash: V4BBxCAIdgK8r6INC90qTnG4LaU6cJe/zYjhY7tFpPo=)
                          36: b3TD3W1kKUsRIHLPHPZnFCh1pF8.cer (hash: wZyATMeX8sGUif+KkyCrI7q1q6Wk+cJWPedg4m52ntg=)
                          37: fpzvJ8je0TUGszmdmS7P9ia1eVE.cer (hash: I98MEeQC1Jbr03BWKzFcgcrkHcX7dDxsjuJumwSJ2v4=)
                          38: ftgwlnECe35vya4nucaMnE4pxXU.cer (hash: v5aBHR9/Z8sIZj9FQBwI4FWoDOpi6rjPGOD1EYVOOGY=)
                          39: mgzAu2MdFRMQI4SQg9lBotvN-mU.cer (hash: x0WT8eObVlmm4GTSYKJ31won1GAcUy8soWov4ATFFtM=)
                          40: tKZaDrhmkhnEGFRC1J_J1vgltmU.cer (hash: BvrtjnvMRwfR+SqjsWmrP6hMHAKtWuNWbOYldsw8mWA=)
                          41: u_jlNSJAlxeHgGo-U6iQSFmp8Oc.cer (hash: o3u8naqefIUdWiR1vOpT8DGZB65vd44bsBSv1lSZmUg=)
                          42: x1hCDPdi5IrXyqYOs53NYisftPY.cer (hash: vaoThMPKg7pmpFLt5kEyU6aYDpnN/ULpjhahAgQJM44=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 03:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7510 (0x1d56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB290000, serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743
        Validity
            Not Before: Aug 10 21:11:06 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=3CE3DF617BEA5D05792AF99707A7FD2C2CCD9172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:ee:25:61:32:a6:5d:0e:04:37:32:5f:d6:
                    12:41:14:61:6d:c2:98:d3:de:c8:01:8e:72:15:6a:
                    91:83:f2:e4:91:ef:94:48:d8:2b:66:18:29:ae:e4:
                    2d:05:bc:86:8b:5f:b9:cb:3c:e4:bc:9e:6b:6c:b4:
                    b7:92:23:a6:28:14:98:44:9e:1b:b1:2a:4f:e3:09:
                    8a:83:ad:04:cd:6d:01:d6:95:3e:e4:d8:bf:db:86:
                    13:70:fe:8b:db:c8:29:57:61:29:fb:10:13:c4:18:
                    59:68:50:fb:a1:ec:df:0d:33:46:92:90:9d:9b:7e:
                    c9:db:02:06:a8:73:4f:d9:fb:13:6a:b7:c3:c2:0f:
                    ae:b1:4f:fa:37:fd:a8:59:2d:13:62:b3:52:de:b9:
                    3a:9f:48:6a:ac:f2:e4:77:83:38:83:2d:6b:c2:0a:
                    b7:e4:63:c9:33:82:fb:1c:06:6d:4c:2b:c8:09:12:
                    a4:ba:fa:3a:59:36:b1:c4:46:a3:92:e2:64:33:c9:
                    6c:9f:aa:cb:1f:da:86:13:ea:b7:fc:0b:30:c1:3f:
                    a0:4a:9b:cc:66:93:da:86:20:96:ec:20:78:e0:10:
                    1e:3f:82:b4:61:c9:8e:f0:93:19:61:f9:a4:d7:ae:
                    f7:e4:a6:db:39:65:3f:43:e5:b0:cc:30:bb:4d:aa:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E3:DF:61:7B:EA:5D:05:79:2A:F9:97:07:A7:FD:2C:2C:CD:91:72
            X509v3 Authority Key Identifier:
                keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f3:33:18:f1:ff:fb:72:bc:24:27:b8:9d:d5:a3:be:19:4e:
         2c:a4:c0:51:5c:a1:22:78:13:55:81:ed:09:00:c8:03:f7:b0:
         5a:d1:ac:0a:d9:e5:01:6d:38:6a:e9:28:17:15:1d:80:0d:c2:
         72:08:8f:d7:41:8d:d1:b0:33:ba:e4:82:0b:ba:14:a6:93:22:
         f8:e2:d7:dc:64:ab:01:32:94:73:2d:81:72:ed:82:5a:85:64:
         96:38:4b:6d:44:0f:3a:d3:0b:a9:8a:8e:c3:fe:ea:b2:51:cf:
         96:8c:99:78:1d:5e:d6:ba:c3:9e:0c:9b:28:ba:07:d2:5c:05:
         32:58:0b:63:02:3e:a4:85:90:d6:c8:27:a9:77:83:7a:df:ad:
         87:80:d2:90:3b:49:66:91:c1:82:5d:46:a4:14:c3:dc:17:cc:
         1c:8d:ac:68:c3:5f:44:e9:be:43:01:85:1d:9a:9c:23:dd:0e:
         73:95:87:ce:b7:c6:0d:93:73:44:80:45:f5:a7:64:ce:c1:1e:
         05:31:f5:4e:5c:d8:c9:e3:1b:67:69:5b:ea:38:3a:a3:81:9b:
         9f:6d:95:f5:e7:64:6b:96:d6:35:9f:8a:2c:68:ce:83:dd:1c:
         65:c9:e4:7c:c1:93:c1:33:de:50:7d:ad:e5:d6:c9:34:1c:07:
         3b:54:be:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:19:58 2025 by rpki-client