Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
File:                     4aiMNNJG73wqfBrF_peyYrxIF44.mft (raw, json)
Hash identifier:          jNoUXM1tEZAb0YJywcmFsHhj1+nn/ZHiz3l2cBfXiGU=
Subject key identifier:   44:D5:A9:8A:82:2C:97:33:66:C1:97:E7:58:A7:44:F3:03:82:78:C5
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       101E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
Manifest number:          0E2E
Signing time:             Fri 09 May 2025 01:53:30 +0000
Manifest this update:     Fri 09 May 2025 01:53:30 +0000
Manifest next update:     Sun 11 May 2025 01:53:30 +0000
Files and hashes:         1: -PBdU9fofnyz-kR_5_pZmjbJWNQ.roa (hash: U3S0Fw81729lxdhqgOqN4hqvSDqNRD2N+ab7ArJELRs=)
                          2: 1tq8MGswr7ZxNPPpZh8xvPDqXtQ.roa (hash: 45jVSW0on/ii96nyz9rKqSoOsW2zIf0sNGCfqt8v3g0=)
                          3: 3EUX6Lwlwomx4r6BSauBeqNPeTc.roa (hash: yTDy2shZUlPnxvCCIwdxi+MFClr9/6wMZ5cxGOeKfNc=)
                          4: 3a71Td1-RZ8ptRMRy-tEmcTmFPs.roa (hash: BiRSqHRe0z8Pcffdvt8d2W0BeuYa6oM5GT0WlymvIwE=)
                          5: 3l_j3IgsdvXJIzhowIb3Kc47GR8.roa (hash: SXwRVcOSwUrO40EUKAZwmuBU7zagiM17+RGRyFjW3pI=)
                          6: 4aiMNNJG73wqfBrF_peyYrxIF44.crl (hash: ce/JJrrkGxVtiI4/XQbfwSaK0zoyS8b0wvUySnmx7zU=)
                          7: 5D2qfwB8pB2sd_UBIPc-dHvA-Zk.roa (hash: pqQPXpp09Ms67qUgiMxYn3CCM3mablGJ0Q8TEsEI/+8=)
                          8: 5JnyLjtF6IKfQJ93xn-Ojc2fgoc.roa (hash: SmVgxBr+A8wfLmGvRekvPHoNtYBDGQmysJZF4nYl8UI=)
                          9: 5kj3J5jOc61OP9Hesi0hVHRZskQ.roa (hash: CeiDWyQ8cZRPFG2ttnkXj2hkbnIysTmkZq7J38iqVQw=)
                          10: 9PHlfSjE2YvkH5T24PldPIJgc9k.roa (hash: P/WAjOCjoQP6wS7kRLEeZGnKMv0k364GnICY4X6DKCM=)
                          11: 9SqRpobI-GhH9oyyh_iW6f5nPIo.roa (hash: MNpFF9u9hCY4TShw3KxQIOPFvtHURLFgyeUX4+simpQ=)
                          12: 9a-z2A39NLe2pUVzU4tMRx6wujA.roa (hash: MfS5gzZw8yeMRD8+Hth4vlawOedk5UWwsAVIoR8d51I=)
                          13: A0I7_RQO-J2eEkKth8siF8-JA1M.roa (hash: IUEvkyKKFaaqXvqGp791FyMMWZEzgcvi7iOZ6UFGnLo=)
                          14: AK-tDM3Jj_DVxglhfVf0E-Tsmmw.roa (hash: iCzmuIorZbshiJG4irHmEoXIEW5AJ8Kf4OrAZQJKdFU=)
                          15: An6a5r2l8Bn6-PNDgl-z_-PkktU.roa (hash: M2wU8EHsE8zGmswpx5A+bcrdFkQjhz6g3cVc40sEQiU=)
                          16: B4w9IW-kZebClI-jto3pxg42wBE.roa (hash: 0Tp/+UslRyPRY1S7hrm0v91EH/8DUapnrRXKT0+tCEc=)
                          17: CLp1aw9XNH4aqP-IbV66ODPesgU.roa (hash: hYjpaz5HD5xqshB1wsqDWeEiGFaTh8SCLdumFu085vA=)
                          18: Fzy5ZcCIQYy6f6lA6oebnObyTe4.roa (hash: gQyxZclXD43SXzVO2Tj+iHZYE/Sm307UI+DvcRcRISA=)
                          19: HckYPpVNzl15mv5OEbnTgr0zY3g.roa (hash: ZKKu7bXulj9P800La9JsBgooFN48D6t4v0E710GuAlI=)
                          20: IDVVxx8U8CSfE0VnxZJSZwOtZWM.roa (hash: AsEgLMsmQ4/a/DTbTpGUVRth+NrCQgLvJs3doR8ng3g=)
                          21: KB55XmwyA-SohPZ7Qz-wCOCJfGw.roa (hash: mLy6kz4C8/dZpZ2v96PEJiO+6vj/Hp1tJ2AILgwoVcM=)
                          22: MCGoJcjQPZMk_1A0M2w75UsEYJU.roa (hash: tiONKFQFsKLEW/1UovnGnS7T1Z4inM/YmD3YAcXLxVY=)
                          23: MEBnrCIBYERMhMPKh0QCiK6yJx4.roa (hash: OKOf44iTZ/KGleaZfWEzDHvwUjgQGvHtTbxkiJ65pVE=)
                          24: MP1KhUj5eJUX5RUdPERCimyA6dU.roa (hash: Dzbl+8aASQGco+4uyXQh9OdKaiGShbUbwqbNpsAZV8I=)
                          25: OECv0SKQp4Scu3VGlAGq5ezu47I.roa (hash: IpYIckjpktkKRl2WhAvnt5a2BlrL2zV07g6E6iWpuLE=)
                          26: OvDHEVzrNPLmKookGT5ACgPKIO4.roa (hash: /m/1GKZYA18JkViIEcLJRFokk7fsTKDOdRV6f4veaXA=)
                          27: RSvtvP0TchFIRVlUjyfOcm2s7dw.roa (hash: oyK5IhB4Lf3F/1GUU3ftADPfhmuUsNZ/TmZ2sJSZxYY=)
                          28: SNu-xiqg_Zio6yyTGhp-eNR5P_0.roa (hash: F2hIyD2nRNsFupTwATmx8hKNBeKjqJdU4w9Q+uIbOZ4=)
                          29: TI3UKkgKNhlPTHdpMAbOusbxI0A.roa (hash: NM/7R6qVlbjHqzlUsmsUORl618ol64YxCmmC2oRo2Aw=)
                          30: URO6KF4Mmo4XMrheZNzRJUrUIng.roa (hash: PzGIZ0wKW6AweJxQibXMjSP1ziqXS0tMyrCMUYWTrHU=)
                          31: _ILCxvG60CiCOap_Bn3VLGuCdr0.roa (hash: sR5q13RgLhE3GArsuDUpJWgiwy9ZhQidOM0po+VWD+w=)
                          32: a_gsB71XrTzw8UGhko0-Vfi7MIM.roa (hash: 7t7mCgC+OzLJnXojg8sT/2jt7JAI7LCqc2mpEUcEFqM=)
                          33: d7l5cB4yBVgvq5-1J2nDB3ZXv-c.roa (hash: 0NYixBwUhtgI4YmAWVKAHlkx1kTkOB+IkASJRNKhwqM=)
                          34: g8U2PvvZ0iz4Mfd8aSguHLL6Z_4.roa (hash: LrjR7WI19o+U7Wspxts/iUtiMx11bFgUKssoOTTttA4=)
                          35: gD5X77Z549QweS7og66H9Jo3Ph8.roa (hash: S6xdjNLO52Aclu5M42zVXQFFCDmQqHa7ec3Tvs0oc/g=)
                          36: gFGmyiV2VDAG4OISYDC6F01F034.roa (hash: s71g+pyJEK+StblvqYFJDsLJm2wIHy/XEB5/qLw0Ino=)
                          37: gkL3iPwUvRJdFOuH5h_esEYOv1g.roa (hash: D5sAaYrXC1iNIJEWzZH50ED8PYgdqHVtXy1apR/w+ts=)
                          38: hrHQwh3jFDDGSj_ooXRWRDLgDps.roa (hash: esnMboxmjKkkbYr0P9B0Y/e356Wg6P8mHlKkgi73sdk=)
                          39: hwhro3ukb2tVsrOp24DQIVP_9Io.roa (hash: /3CaOaLCU4Qdb5c8X3967ezBiaPcU1rspaozCcmaGdM=)
                          40: if44tGaUHf0ZPxa9pQzi6llZakw.roa (hash: 52p2Hd9BpRFvDzBoyHNqUaQOCmT0X98Kul4QMpwYTmw=)
                          41: js3KmPpJE18X1Z6ulmDj6bphGTE.roa (hash: 72NPAal/Ki4QecF4QWaFUuvgti4IDyUrsdggOyQR3mY=)
                          42: kUhTX3SG71N9NI7EZi8r7CYZXyA.roa (hash: ZlQn5p/dhTUwH6kIg8lDOPz/7mRsnrGYoC0w2KtRxO4=)
                          43: m8JZKVJM60J2i6s6B1gIoWi1AY8.roa (hash: 5TKfUkvaH9or1AZnkMeIjidMlv7V6PAJCBMWBj5WFAs=)
                          44: nDTizWNduxTTG0hVLtZext4ufa0.roa (hash: o4sq6lTmX192xTeloxGYa2ggWwUb49rapbjbSF84VPw=)
                          45: qjYhCz6ueLqJUawoGvKN4rdlEFw.roa (hash: mDLn1g+IUQQbe6e2DLelxuUz9GrvH4rZmmL31Tc/71c=)
                          46: qunzVS5tB_Cy8DRv15CfgcT_89c.roa (hash: HWjsSutf83HwkBWESI9eEZa0oFN5x9AufmM+0T2q5/g=)
                          47: t1jSSZI5r1cbfuWooSYwkGfrx1k.roa (hash: YhhwImZ7Eye+Cd0mkwgJyO/vrHSqQm4/pigdKF62+5Y=)
                          48: t7G5aL6DBA9OzI4he23v2P_yY5s.roa (hash: OaEUBPyYC18/YKHKIupoL7d9vHoJ7zgKWy46MTwky6Y=)
                          49: tdTA8GWKN249A61iP7qLq3-LMLQ.roa (hash: +VcngFzr/CYXFu7EAmp7039fb4218jFlyVzttQ+6Go8=)
                          50: uVkhVqA46iOFnAsF8pJTL4Cwsj8.roa (hash: UT3zAiJwazKkgUn4sGEkAh+iXiMt73Jz2LgBWR6eB54=)
                          51: v8BpW71yUlg4wLI1NjuQQ_DljEM.roa (hash: rVW4v27WPAaz4IhlRFm+rOmX0ie1e6p8xWY0KDJ1TbA=)
                          52: v8oeKp7bRuuQ8tvr8GPO32KKHPY.roa (hash: 9OxkLT/8AGddj4U4ldWh5bB00oXsm5jpq8Oa9mLJsKk=)
                          53: vHDn8D38-GTGg23dt5lfwMr08yc.roa (hash: o+1YJ97GD93efmsGzbTEPg2yTqAr5UCXtUE29LtP3T4=)
                          54: vK6lZVwwFrrGosRR3Cb0QmYGMe8.roa (hash: cv2XkTceg5X5AwGrrfbtgS4K4/3cYC/kUDi7E+IBH3c=)
                          55: yZCiF6eDj-Pd22afZSdL8w7P_sk.roa (hash: ZkUtXEyj460p+bz66NWxkLzZ24pM9HTfJ7UUKQlSGE0=)
                          56: zH5KQHECPQcURrUZSIHiZwwqGQ0.roa (hash: QvCdVoPQ7qNgVbAGA/mMS7wyvcdF0lsXJDQ2M0thL5o=)
                          57: zKC-KBAigjxqNf76MZUYxkL71dI.roa (hash: CoJNMKbGXUpkmp+6Oc3WlDU+f6gzNa47GaYcy5sGZjA=)
                          58: z_0tDqcaxg4icyKASdhj4TUR3hY.roa (hash: 3/RIxb0xmdF9HN16jg6D4PitJc9dZuzYQFsrVH08Uhs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 May 2025 15:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4126 (0x101e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: May  9 01:53:30 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=44D5A98A822C973366C197E758A744F3038278C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:b6:95:b6:4c:61:91:69:75:17:90:97:b1:
                    45:51:4c:eb:c2:b5:b7:40:78:d2:78:42:f3:1f:50:
                    89:fe:af:a3:07:52:ba:2a:a1:95:6b:05:f7:4a:34:
                    88:bf:d0:67:32:e5:fb:c5:60:85:5e:f3:32:a9:4f:
                    9a:17:c4:c0:fa:52:9c:1c:b0:c8:dd:6e:25:32:3a:
                    fa:59:28:1b:16:4c:e1:56:52:a6:d9:c2:00:39:3d:
                    a0:73:68:d6:a6:ac:1d:e5:b3:21:e7:84:61:67:f7:
                    57:ff:1e:d8:d6:88:c1:66:39:60:8a:92:cc:3c:c3:
                    ed:a8:42:28:01:ac:be:af:aa:82:54:11:e8:a9:39:
                    b3:80:33:94:18:22:ee:a6:b1:0d:8b:bf:77:eb:38:
                    e5:a5:d4:a8:79:79:e7:22:b7:d7:ca:81:03:95:05:
                    e1:b3:f3:57:81:a8:c1:bf:b0:cd:e7:62:43:2e:72:
                    6a:d0:00:95:54:1f:53:69:e2:2f:b2:6b:49:52:37:
                    86:8e:e9:a6:1f:b3:ef:a4:29:a1:0a:43:34:a4:99:
                    f1:90:32:a0:b2:a4:f7:65:0a:5e:91:70:8d:6d:ab:
                    a5:b8:38:d5:f0:5d:9a:bf:57:a5:c6:a3:85:7e:19:
                    15:f1:cc:ce:fe:72:9b:57:f3:05:5f:b3:24:bb:74:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D5:A9:8A:82:2C:97:33:66:C1:97:E7:58:A7:44:F3:03:82:78:C5
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b8:31:18:41:bf:34:5a:b2:57:13:ea:ef:57:27:1c:bb:1d:
         96:ca:90:c0:0b:5a:4a:b4:af:d1:3b:09:90:5a:e1:68:87:70:
         8d:0b:da:dd:35:cc:ea:80:a7:d4:13:1d:93:bc:48:40:0a:c3:
         f4:c5:90:3e:17:05:92:d0:79:a4:28:91:6a:2d:e6:01:70:1c:
         04:70:ec:49:3f:09:f0:54:4a:50:74:67:88:bc:8c:98:7a:d7:
         72:73:e4:4a:9e:fc:fc:1c:a5:74:8b:c1:92:fd:8b:dd:a1:32:
         bd:bb:fe:43:51:ea:dd:da:e3:0e:c5:dd:09:32:7d:a5:0c:ee:
         de:c4:3d:39:00:02:17:e3:f7:b2:ce:70:87:ba:8f:a3:f9:b8:
         a3:a3:29:c8:56:35:b7:e2:ed:99:fa:8f:60:80:a5:fc:8a:69:
         7c:7d:32:c4:d8:40:d5:49:89:d1:06:67:44:a3:d6:d0:72:bf:
         80:ae:a4:84:60:15:16:c3:13:fe:50:48:6d:cd:55:cb:b3:a8:
         e3:a6:a5:88:4d:17:4e:f0:fa:b1:74:4d:e3:71:21:f2:93:dd:
         4c:d4:9e:73:8a:2e:f3:29:6d:99:cf:d1:37:d6:09:db:e9:e2:
         eb:8c:d4:cc:2f:08:3e:17:ce:c7:e3:4e:90:df:51:b6:99:d8:
         63:13:7e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----