Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
File:                     RXsQNypobj_3Nla-tc0968kyNxo.mft (raw, json)
Hash identifier:          5MQq3t/PQv35Cn2hkq6WAAdEATdx4ImwjyMXL+v8Tj8=
Subject key identifier:   F4:AF:DC:44:CE:1F:43:D4:72:81:BB:30:6C:1F:7F:3C:E6:5F:E2:D2
Authority key identifier: 45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A
Certificate issuer:       /CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
Certificate serial:       103A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
Manifest number:          0EAA
Signing time:             Wed 05 Nov 2025 09:59:24 +0000
Manifest this update:     Wed 05 Nov 2025 09:59:24 +0000
Manifest next update:     Fri 07 Nov 2025 09:59:24 +0000
Files and hashes:         1: 07vcUggfOhRzdvP6je7M0VW6DSU.roa (hash: l73O/MfcK8gJef4ZyWkFYASOyaDhiWhoKdjFPMS6MHg=)
                          2: 124-dgujcSfZi9iFE7nrSwcZU1E.roa (hash: PTqkaLiD7JlVtDIsU1ySyDbrfGcLbb3p2bBV8kE3G2c=)
                          3: 37-lYtxharFPHhtQwqWHSe4JwTA.roa (hash: FtylxqbpWXvGaJsNJk+BBRV7NdkF0g4ITM8C46RrToo=)
                          4: 4Au0bOHNvYsK2lFyh1wM_NhbPVY.roa (hash: XnMd+o6nrZ5uKMH+8Xj4lCBg7e5oLMljN98FhV31eMw=)
                          5: 4ZquMrDim6vEbY5v354ZmXcA9ww.roa (hash: bZB0RcCSq1agYtANJAQPWHSgxv+HxLCxTBNORZaz4Gs=)
                          6: 4gSWxEaEes_CZu9oIvaptfbskxs.roa (hash: TDCx14q7U+WiMDo8buv597gY7Ww9SDeBGkEegSf1xPM=)
                          7: 4lA6qeEfiAsQPhE5QQ1KGP1XMPM.roa (hash: kvAEAwn0oPlHsLYESMFvTbF/3KcxnB1eOAuUaz77IvU=)
                          8: 6TA4FvrJBM_c7ymc-y0LwFb3OeU.roa (hash: Vtpqm4GH3fn0d+w/H5Se95gROwBG3DPy+boDkYCD4Xc=)
                          9: 6ZAnqa3O-kXxw0fa8okj7HcplHQ.roa (hash: Wz3Dq8YMxowyhHXJl/L+IhQkJjjWaYZvpQg9VouDtD0=)
                          10: 80lhrL1SGxFoAGNIUNqwq9U45-Q.roa (hash: O1kERfmBimG+47pZ08hI42/rnN+GiqN17/v8Mn3GN9M=)
                          11: 8AuZrWW_CDXH0eIbjSmrlQhnKaU.roa (hash: Zl1VDXziGuPBOTSctZBW3mIDi9q+9lwVM0+pMER0Z8Y=)
                          12: 8zXNS7EDQ_krZRYvp-RWXJ9BSVg.roa (hash: ksXJYKwa4dbT+L/pfMQ6hpWqvohAw3aAz5XjNMEeyTE=)
                          13: AaqI9dLMB5PCljrHn7_m7KKB76I.roa (hash: 8S3WL4tHeP0lGUCL4k8cGHAlLVnCHokakNLJ6Vedpqg=)
                          14: EQA-4XdfIndRiU4iGUybSR35gN4.roa (hash: n8tpDQg4agsYD6iJfoRPVCfRvAYkipOPVZYfqyhvTfE=)
                          15: G1A53IcjA4h3ALkwTKNj7y49MsQ.roa (hash: PstHa8drSDvmRBNIM7qaKd+iWEsp3+4H4ddmQdQtStE=)
                          16: Gnjc6b-HGqdLq697Zg__8aQQnh0.roa (hash: cvzGriPI9YxBHCvbNTY37A4PsLdMYw4BrOUHXqUiE7Q=)
                          17: M9zQyZuCA4Kb5sgFW282VKbEnO4.roa (hash: qZJ7HBPPcRlnosch01wWCGxhkFwgL+NKT2B5d7WrM7A=)
                          18: O5xTCgFJC-eQnd3PKv33c2PUecU.roa (hash: I8ngLyb+KeMNu+RicCYR/STTAaBKzz/2oCx5OOH4MB8=)
                          19: RXsQNypobj_3Nla-tc0968kyNxo.crl (hash: cOTwTk5of3zik2QafAc4SWQutcr1HUFuBzT7Cb6rUR8=)
                          20: Rc4KGG_kj9e26YHrFLFiB4TSdjM.roa (hash: PAfzDFhiteLKMnsbuZmz5PPVca9REQo8S9PbmLKKWiI=)
                          21: T8grVSgCOVd9RlLOquTWnWZteWM.roa (hash: JdFJgdgJ3bH0879cnOADFivV54HW8aRE/2pH2wTgGnE=)
                          22: TBqHuahGb-yyswk33rZtWuf0R8w.roa (hash: nRpJ1s4jCyMiAaF0o59T2gpgjYq5nck+zW4oyUCorBw=)
                          23: U8PSOlHnj11iCtdWThsHPXy3NKQ.roa (hash: D1fOwuW6ap84NF8yh8KX+AqzrWrx7VnhS2TJzePzJzQ=)
                          24: V5G1e2ZF_6a71ikGHtCbI1HI2qc.roa (hash: wT7Iff+cp2WAm2lhXkBmJsE16yuudWbwAy/o+l5b1Cg=)
                          25: XdGou_W_p_3tHGn8K9kxDcaryOA.roa (hash: +Q1w6WHibwNrTlmgh2O9esMWPGaMomx1w1zKZhWIEuE=)
                          26: YMW9ZoePgAT8By822yn9Vo4cpxU.roa (hash: iZm/HStqt8+oRfagB9EUFyL1009RD3aX35KFby/pGJ4=)
                          27: ZBoD3voBPD6qPW_WBinDNbCdt2w.roa (hash: JqJZPt3JM9dwTIFTqDZ2EY3ExGuilfFuqC1asU6JlNs=)
                          28: ZmmuqSue9GzkbQyrve25xeyRRs0.roa (hash: PZwl3ODRhRitrbtWU7QCfSTVYNkXb8vJIX7X6I3Vpgc=)
                          29: _CZpU9Pa62g2IEWy1B_ZjsPiMdo.roa (hash: 1bDHPlvQrQ/gIImzobRjtEGxBIX0Rd+/voSs/Mncw/U=)
                          30: a_2YjzwzMKrJSxHOuqvqTl_ZHZ8.roa (hash: siDZyijVWW04qYXlz1B0ZejhJRSDshfSYJCU8YmhJGM=)
                          31: bATQpIqR0bbFj0vAfhjTqa8N_e4.roa (hash: YuVwDAqUTVHBgbS2qqVfxsPbFPD8mnquowZlFbOxOBQ=)
                          32: dhYV4Dq67AmzgTEfsVFvGZh6iY8.roa (hash: NALE21HugR2GyqyzbCTTKWgbvN82Fy8LeXax3d6+OrU=)
                          33: e9ztbKn32n0ypGfjgeEb0Ry-LK0.roa (hash: OR7ByThYT9j9dGf3uFwmStcD5zJsBhmGvc9Edog0E6c=)
                          34: fNiXZxDiBMEiKWsX4ylbbkQVO3Y.roa (hash: BOmglLNARwgsCN3WF4kB0yBfjRsddgxsc/2R54WShPM=)
                          35: hduL-GcwBEv-zE3cfjsU3pZFokE.roa (hash: TtVcyTISWTBLcvyGUxlMoAzMqlUsRL9yBdZKYSYMfWE=)
                          36: i3sqQPMLPXwMXiYiexg6awg8cQQ.roa (hash: BqZIrfo7IHps0NnuIytI3jd+kxNHcNbJsFGuazoK0Tg=)
                          37: ijieom_c1p0KsAAIxWeZaW7VIfk.roa (hash: p1vK+ZK7gZCYypb9EP3mk4lpcQ5GRL+CqqmdlriPLBI=)
                          38: iwW5LVmMj3k1cMpWLeLAQl7HxeM.roa (hash: nHKO6HQR2W7bF++PHDoslu69H8d2Ngr+YXouvidjk3k=)
                          39: jh3goPFnjTaJwwQgzURw22Ny1-0.roa (hash: uo5LDrgO+knr9j2+VwrN5K678mUacyITKVK9tqdXhyo=)
                          40: lPkzuUS7XQ-2ZVfgaUt8dnRvguw.roa (hash: y5VtucSA8cGGt8TuFgBbyce34HB6E68APILUVFLY6f8=)
                          41: mJBqscIg4eG8Tbz9Q0XWgAJHXNY.roa (hash: EA//zl5leG6otj907ssyAICblIvwjou/tnOlIfpFTRk=)
                          42: mUTuj6ZTgtgpXQazsdQQTTE3uqs.roa (hash: 6by9gqrr+X2+H9UUv+XFpSIysiRVFV3KjuytLCfrC2w=)
                          43: nkbmGfe7JcJRmB3RWPPtmVIxVTg.roa (hash: YuChHZZqzXgkLcfSkmIaAgxllyIATVQ40+DC45Hg+Y4=)
                          44: o_ILGP7QEWQWHooK5VhpU06V9rA.roa (hash: 6fFnrqS49hNGX0Ra5UJvKsm/ePi4y60mzY1qYm4NqDw=)
                          45: pePjoLg8fASsPdpaASipK35XmjM.roa (hash: 8h1l/GfP5gxnbkcTvV2FayKulM6DNoKQW/2YQlAtrQs=)
                          46: tiTZ7ris6dqYoo38VoHN72mEYac.roa (hash: dM/WvZFdtig7QlMjVZ+v0b9Y2p4wgEAkagzJz4eGORI=)
                          47: tlqCQ5KxB-mpvox50MiGbeYTdv0.roa (hash: ejbkUYBgRIPIiw+aGJylEV7qQK3PhCSlLHTZO4V+aQ4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Nov 2025 20:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4154 (0x103a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457B10372A686E3FF73656BEB5CD3DEBC932371A
        Validity
            Not Before: Nov  5 09:59:24 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F4AFDC44CE1F43D47281BB306C1F7F3CE65FE2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:24:c4:78:01:25:42:66:e7:d5:e3:1a:12:b0:
                    28:a1:50:89:96:c6:c9:77:17:36:f3:4d:67:43:7f:
                    14:cc:30:28:70:2e:da:86:85:df:1d:58:19:bd:6f:
                    ca:9b:57:b0:5c:db:4c:93:0b:2c:5b:a0:1b:25:2e:
                    e6:b5:2d:cf:5a:bf:0b:64:7e:b3:8d:24:40:98:96:
                    58:34:02:06:8a:c1:c8:e1:c9:ad:1a:c0:e4:fc:dc:
                    87:67:b3:11:dd:92:db:42:3c:97:85:f0:b4:b7:ca:
                    64:78:d2:ac:e4:dd:c6:be:b0:5b:d4:fd:7b:14:4a:
                    a0:d7:be:f2:2c:3d:fc:51:fc:bb:28:b2:18:9f:f2:
                    bb:dc:11:b8:14:35:ba:8f:78:0f:34:37:fd:46:fa:
                    e6:32:21:02:0d:2e:40:42:e5:0c:14:60:a3:06:23:
                    e2:49:45:3f:7f:8e:9e:9e:95:c8:da:2e:86:7c:4c:
                    be:15:b8:f1:64:9e:68:d9:01:19:c6:d2:eb:dd:01:
                    28:96:84:fd:63:d6:f4:33:db:76:ee:35:7e:a3:c1:
                    87:42:f1:a7:d3:41:48:38:80:a1:b1:8a:a8:36:8e:
                    61:70:f2:e1:e0:aa:77:57:3f:23:83:c7:70:6c:a9:
                    f5:f2:00:0e:b8:ce:fb:d9:04:41:7b:29:3b:18:29:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AF:DC:44:CE:1F:43:D4:72:81:BB:30:6C:1F:7F:3C:E6:5F:E2:D2
            X509v3 Authority Key Identifier:
                keyid:45:7B:10:37:2A:68:6E:3F:F7:36:56:BE:B5:CD:3D:EB:C9:32:37:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RXsQNypobj_3Nla-tc0968kyNxo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/RXsQNypobj_3Nla-tc0968kyNxo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:af:08:b3:61:8f:e4:68:23:48:4c:7a:21:63:ed:e9:9f:da:
         6b:83:f0:ae:9a:c6:61:92:9d:cb:bf:e9:77:d8:94:16:b4:f2:
         4e:de:32:b8:59:30:b1:8c:1b:58:10:00:7f:d9:d2:eb:66:9a:
         a8:c1:57:ab:a7:dd:78:9a:43:80:b7:35:fb:f8:08:b0:b4:b6:
         c1:64:12:7d:71:79:2b:86:07:b7:df:5b:e2:b0:d4:eb:c6:41:
         ee:13:fa:81:57:4e:5c:d1:bf:de:5d:a7:79:6c:fb:10:1c:77:
         bf:cc:6e:41:57:a0:bb:48:99:a9:4b:12:74:f7:76:ae:a1:25:
         1f:e0:19:85:5c:83:1b:49:61:84:1b:d8:3d:3d:7f:8c:01:9e:
         a1:64:cd:ab:8d:f4:ce:53:c2:fc:31:87:6a:e4:fa:48:cd:c7:
         04:69:25:5b:ab:67:c1:b8:26:ed:f5:db:05:1e:74:46:a7:a6:
         63:90:8c:c4:9b:e4:b2:a7:6b:c6:a2:3b:87:d0:bb:c5:dc:93:
         c5:e4:58:b4:aa:c6:fa:6a:f2:e6:ea:dd:e5:9f:5d:e1:1b:52:
         2b:21:b0:67:f1:c0:c7:d2:46:14:18:89:01:c2:6c:e2:59:d8:
         65:e5:1e:90:d6:fa:ad:6a:e7:13:cc:e5:6a:ac:6a:4e:92:24:
         02:cb:a1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----