Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
File:                     4aiMNNJG73wqfBrF_peyYrxIF44.mft (raw, json)
Hash identifier:          +doVAhYl0kh9jeyq4cveW8JUDA51v0ip5i2+fUD8bro=
Subject key identifier:   44:D5:A9:8A:82:2C:97:33:66:C1:97:E7:58:A7:44:F3:03:82:78:C5
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       105E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
Manifest number:          0E6E
Signing time:             Sat 09 Aug 2025 23:10:32 +0000
Manifest this update:     Sat 09 Aug 2025 23:10:32 +0000
Manifest next update:     Mon 11 Aug 2025 23:10:32 +0000
Files and hashes:         1: -PBdU9fofnyz-kR_5_pZmjbJWNQ.roa (hash: U3S0Fw81729lxdhqgOqN4hqvSDqNRD2N+ab7ArJELRs=)
                          2: 1tq8MGswr7ZxNPPpZh8xvPDqXtQ.roa (hash: 45jVSW0on/ii96nyz9rKqSoOsW2zIf0sNGCfqt8v3g0=)
                          3: 3EUX6Lwlwomx4r6BSauBeqNPeTc.roa (hash: yTDy2shZUlPnxvCCIwdxi+MFClr9/6wMZ5cxGOeKfNc=)
                          4: 3a71Td1-RZ8ptRMRy-tEmcTmFPs.roa (hash: BiRSqHRe0z8Pcffdvt8d2W0BeuYa6oM5GT0WlymvIwE=)
                          5: 3l_j3IgsdvXJIzhowIb3Kc47GR8.roa (hash: SXwRVcOSwUrO40EUKAZwmuBU7zagiM17+RGRyFjW3pI=)
                          6: 4aiMNNJG73wqfBrF_peyYrxIF44.crl (hash: ElxwVJ7VHq/qQYO/WCzeB1B9FmJOQMajJNdIt7Q0hUs=)
                          7: 5D2qfwB8pB2sd_UBIPc-dHvA-Zk.roa (hash: pqQPXpp09Ms67qUgiMxYn3CCM3mablGJ0Q8TEsEI/+8=)
                          8: 5JnyLjtF6IKfQJ93xn-Ojc2fgoc.roa (hash: SmVgxBr+A8wfLmGvRekvPHoNtYBDGQmysJZF4nYl8UI=)
                          9: 5kj3J5jOc61OP9Hesi0hVHRZskQ.roa (hash: CeiDWyQ8cZRPFG2ttnkXj2hkbnIysTmkZq7J38iqVQw=)
                          10: 9PHlfSjE2YvkH5T24PldPIJgc9k.roa (hash: P/WAjOCjoQP6wS7kRLEeZGnKMv0k364GnICY4X6DKCM=)
                          11: 9SqRpobI-GhH9oyyh_iW6f5nPIo.roa (hash: MNpFF9u9hCY4TShw3KxQIOPFvtHURLFgyeUX4+simpQ=)
                          12: 9a-z2A39NLe2pUVzU4tMRx6wujA.roa (hash: MfS5gzZw8yeMRD8+Hth4vlawOedk5UWwsAVIoR8d51I=)
                          13: A0I7_RQO-J2eEkKth8siF8-JA1M.roa (hash: IUEvkyKKFaaqXvqGp791FyMMWZEzgcvi7iOZ6UFGnLo=)
                          14: AK-tDM3Jj_DVxglhfVf0E-Tsmmw.roa (hash: iCzmuIorZbshiJG4irHmEoXIEW5AJ8Kf4OrAZQJKdFU=)
                          15: An6a5r2l8Bn6-PNDgl-z_-PkktU.roa (hash: M2wU8EHsE8zGmswpx5A+bcrdFkQjhz6g3cVc40sEQiU=)
                          16: B4w9IW-kZebClI-jto3pxg42wBE.roa (hash: 0Tp/+UslRyPRY1S7hrm0v91EH/8DUapnrRXKT0+tCEc=)
                          17: CLp1aw9XNH4aqP-IbV66ODPesgU.roa (hash: hYjpaz5HD5xqshB1wsqDWeEiGFaTh8SCLdumFu085vA=)
                          18: Fzy5ZcCIQYy6f6lA6oebnObyTe4.roa (hash: gQyxZclXD43SXzVO2Tj+iHZYE/Sm307UI+DvcRcRISA=)
                          19: HckYPpVNzl15mv5OEbnTgr0zY3g.roa (hash: ZKKu7bXulj9P800La9JsBgooFN48D6t4v0E710GuAlI=)
                          20: IDVVxx8U8CSfE0VnxZJSZwOtZWM.roa (hash: AsEgLMsmQ4/a/DTbTpGUVRth+NrCQgLvJs3doR8ng3g=)
                          21: KB55XmwyA-SohPZ7Qz-wCOCJfGw.roa (hash: mLy6kz4C8/dZpZ2v96PEJiO+6vj/Hp1tJ2AILgwoVcM=)
                          22: MCGoJcjQPZMk_1A0M2w75UsEYJU.roa (hash: tiONKFQFsKLEW/1UovnGnS7T1Z4inM/YmD3YAcXLxVY=)
                          23: MEBnrCIBYERMhMPKh0QCiK6yJx4.roa (hash: OKOf44iTZ/KGleaZfWEzDHvwUjgQGvHtTbxkiJ65pVE=)
                          24: MP1KhUj5eJUX5RUdPERCimyA6dU.roa (hash: Dzbl+8aASQGco+4uyXQh9OdKaiGShbUbwqbNpsAZV8I=)
                          25: OECv0SKQp4Scu3VGlAGq5ezu47I.roa (hash: IpYIckjpktkKRl2WhAvnt5a2BlrL2zV07g6E6iWpuLE=)
                          26: OvDHEVzrNPLmKookGT5ACgPKIO4.roa (hash: /m/1GKZYA18JkViIEcLJRFokk7fsTKDOdRV6f4veaXA=)
                          27: RSvtvP0TchFIRVlUjyfOcm2s7dw.roa (hash: oyK5IhB4Lf3F/1GUU3ftADPfhmuUsNZ/TmZ2sJSZxYY=)
                          28: SNu-xiqg_Zio6yyTGhp-eNR5P_0.roa (hash: F2hIyD2nRNsFupTwATmx8hKNBeKjqJdU4w9Q+uIbOZ4=)
                          29: TI3UKkgKNhlPTHdpMAbOusbxI0A.roa (hash: NM/7R6qVlbjHqzlUsmsUORl618ol64YxCmmC2oRo2Aw=)
                          30: URO6KF4Mmo4XMrheZNzRJUrUIng.roa (hash: PzGIZ0wKW6AweJxQibXMjSP1ziqXS0tMyrCMUYWTrHU=)
                          31: _ILCxvG60CiCOap_Bn3VLGuCdr0.roa (hash: sR5q13RgLhE3GArsuDUpJWgiwy9ZhQidOM0po+VWD+w=)
                          32: a_gsB71XrTzw8UGhko0-Vfi7MIM.roa (hash: 7t7mCgC+OzLJnXojg8sT/2jt7JAI7LCqc2mpEUcEFqM=)
                          33: d7l5cB4yBVgvq5-1J2nDB3ZXv-c.roa (hash: 0NYixBwUhtgI4YmAWVKAHlkx1kTkOB+IkASJRNKhwqM=)
                          34: g8U2PvvZ0iz4Mfd8aSguHLL6Z_4.roa (hash: LrjR7WI19o+U7Wspxts/iUtiMx11bFgUKssoOTTttA4=)
                          35: gD5X77Z549QweS7og66H9Jo3Ph8.roa (hash: S6xdjNLO52Aclu5M42zVXQFFCDmQqHa7ec3Tvs0oc/g=)
                          36: gFGmyiV2VDAG4OISYDC6F01F034.roa (hash: s71g+pyJEK+StblvqYFJDsLJm2wIHy/XEB5/qLw0Ino=)
                          37: gkL3iPwUvRJdFOuH5h_esEYOv1g.roa (hash: D5sAaYrXC1iNIJEWzZH50ED8PYgdqHVtXy1apR/w+ts=)
                          38: hrHQwh3jFDDGSj_ooXRWRDLgDps.roa (hash: esnMboxmjKkkbYr0P9B0Y/e356Wg6P8mHlKkgi73sdk=)
                          39: hwhro3ukb2tVsrOp24DQIVP_9Io.roa (hash: /3CaOaLCU4Qdb5c8X3967ezBiaPcU1rspaozCcmaGdM=)
                          40: if44tGaUHf0ZPxa9pQzi6llZakw.roa (hash: 52p2Hd9BpRFvDzBoyHNqUaQOCmT0X98Kul4QMpwYTmw=)
                          41: js3KmPpJE18X1Z6ulmDj6bphGTE.roa (hash: 72NPAal/Ki4QecF4QWaFUuvgti4IDyUrsdggOyQR3mY=)
                          42: kUhTX3SG71N9NI7EZi8r7CYZXyA.roa (hash: ZlQn5p/dhTUwH6kIg8lDOPz/7mRsnrGYoC0w2KtRxO4=)
                          43: m8JZKVJM60J2i6s6B1gIoWi1AY8.roa (hash: 5TKfUkvaH9or1AZnkMeIjidMlv7V6PAJCBMWBj5WFAs=)
                          44: nDTizWNduxTTG0hVLtZext4ufa0.roa (hash: o4sq6lTmX192xTeloxGYa2ggWwUb49rapbjbSF84VPw=)
                          45: qjYhCz6ueLqJUawoGvKN4rdlEFw.roa (hash: mDLn1g+IUQQbe6e2DLelxuUz9GrvH4rZmmL31Tc/71c=)
                          46: qunzVS5tB_Cy8DRv15CfgcT_89c.roa (hash: HWjsSutf83HwkBWESI9eEZa0oFN5x9AufmM+0T2q5/g=)
                          47: t1jSSZI5r1cbfuWooSYwkGfrx1k.roa (hash: YhhwImZ7Eye+Cd0mkwgJyO/vrHSqQm4/pigdKF62+5Y=)
                          48: t7G5aL6DBA9OzI4he23v2P_yY5s.roa (hash: OaEUBPyYC18/YKHKIupoL7d9vHoJ7zgKWy46MTwky6Y=)
                          49: tdTA8GWKN249A61iP7qLq3-LMLQ.roa (hash: +VcngFzr/CYXFu7EAmp7039fb4218jFlyVzttQ+6Go8=)
                          50: uVkhVqA46iOFnAsF8pJTL4Cwsj8.roa (hash: UT3zAiJwazKkgUn4sGEkAh+iXiMt73Jz2LgBWR6eB54=)
                          51: v8BpW71yUlg4wLI1NjuQQ_DljEM.roa (hash: rVW4v27WPAaz4IhlRFm+rOmX0ie1e6p8xWY0KDJ1TbA=)
                          52: v8oeKp7bRuuQ8tvr8GPO32KKHPY.roa (hash: 9OxkLT/8AGddj4U4ldWh5bB00oXsm5jpq8Oa9mLJsKk=)
                          53: vHDn8D38-GTGg23dt5lfwMr08yc.roa (hash: o+1YJ97GD93efmsGzbTEPg2yTqAr5UCXtUE29LtP3T4=)
                          54: vK6lZVwwFrrGosRR3Cb0QmYGMe8.roa (hash: cv2XkTceg5X5AwGrrfbtgS4K4/3cYC/kUDi7E+IBH3c=)
                          55: yZCiF6eDj-Pd22afZSdL8w7P_sk.roa (hash: ZkUtXEyj460p+bz66NWxkLzZ24pM9HTfJ7UUKQlSGE0=)
                          56: zH5KQHECPQcURrUZSIHiZwwqGQ0.roa (hash: QvCdVoPQ7qNgVbAGA/mMS7wyvcdF0lsXJDQ2M0thL5o=)
                          57: zKC-KBAigjxqNf76MZUYxkL71dI.roa (hash: CoJNMKbGXUpkmp+6Oc3WlDU+f6gzNa47GaYcy5sGZjA=)
                          58: z_0tDqcaxg4icyKASdhj4TUR3hY.roa (hash: 3/RIxb0xmdF9HN16jg6D4PitJc9dZuzYQFsrVH08Uhs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 14:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4190 (0x105e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Aug  9 23:10:32 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=44D5A98A822C973366C197E758A744F3038278C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:b6:95:b6:4c:61:91:69:75:17:90:97:b1:
                    45:51:4c:eb:c2:b5:b7:40:78:d2:78:42:f3:1f:50:
                    89:fe:af:a3:07:52:ba:2a:a1:95:6b:05:f7:4a:34:
                    88:bf:d0:67:32:e5:fb:c5:60:85:5e:f3:32:a9:4f:
                    9a:17:c4:c0:fa:52:9c:1c:b0:c8:dd:6e:25:32:3a:
                    fa:59:28:1b:16:4c:e1:56:52:a6:d9:c2:00:39:3d:
                    a0:73:68:d6:a6:ac:1d:e5:b3:21:e7:84:61:67:f7:
                    57:ff:1e:d8:d6:88:c1:66:39:60:8a:92:cc:3c:c3:
                    ed:a8:42:28:01:ac:be:af:aa:82:54:11:e8:a9:39:
                    b3:80:33:94:18:22:ee:a6:b1:0d:8b:bf:77:eb:38:
                    e5:a5:d4:a8:79:79:e7:22:b7:d7:ca:81:03:95:05:
                    e1:b3:f3:57:81:a8:c1:bf:b0:cd:e7:62:43:2e:72:
                    6a:d0:00:95:54:1f:53:69:e2:2f:b2:6b:49:52:37:
                    86:8e:e9:a6:1f:b3:ef:a4:29:a1:0a:43:34:a4:99:
                    f1:90:32:a0:b2:a4:f7:65:0a:5e:91:70:8d:6d:ab:
                    a5:b8:38:d5:f0:5d:9a:bf:57:a5:c6:a3:85:7e:19:
                    15:f1:cc:ce:fe:72:9b:57:f3:05:5f:b3:24:bb:74:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D5:A9:8A:82:2C:97:33:66:C1:97:E7:58:A7:44:F3:03:82:78:C5
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f4:cf:bc:6f:c4:d9:cb:e7:02:2b:80:fd:10:54:6a:8a:e7:
         bb:03:93:3b:25:21:44:f1:d3:0f:46:19:3f:8e:22:7e:6b:29:
         17:e0:02:0a:47:4c:e2:6d:79:07:23:ad:43:08:d4:a2:e9:de:
         28:fb:1c:d0:aa:e8:9e:34:ec:e6:7f:7c:f9:37:2f:67:f7:23:
         1d:b9:7e:5e:c8:00:11:b9:c6:6f:2f:da:f5:a4:73:d5:5a:f7:
         6b:84:e1:b2:2f:66:1d:7a:d8:91:d0:20:17:a0:58:92:6e:a2:
         30:60:fe:4b:32:f4:07:a1:ec:bb:e6:7f:da:62:bb:e7:66:ff:
         8c:44:dd:21:70:e1:ff:4d:c9:6c:01:c9:f7:f2:d3:f4:23:04:
         7f:c6:61:09:a7:e0:30:7a:cb:43:35:fc:f8:e8:de:eb:fc:26:
         73:ff:3f:df:34:b8:17:d9:bc:ad:91:1a:1c:dc:67:2e:a0:fe:
         20:27:f8:1f:a1:e6:be:7e:a9:88:d1:d2:d4:26:ee:26:41:76:
         8c:e1:98:f2:cd:80:d3:b0:03:15:d1:eb:4a:22:17:42:6f:ef:
         54:27:02:f2:ab:0b:b3:10:a9:01:f0:7e:ba:48:d1:87:0f:01:
         b2:5f:7e:ca:51:b7:07:b8:8e:32:ab:6a:71:f1:c1:e8:14:4b:
         88:d8:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----