Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
File:                     R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft (raw, json)
Hash identifier:          IZVp2ivkOi63caNB+GY7nZTU6iOiw2YsiI0txAN9vp8=
Subject key identifier:   94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Certificate issuer:       /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial:       0EB0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
Manifest number:          0D62
Signing time:             Mon 28 Apr 2025 09:51:38 +0000
Manifest this update:     Mon 28 Apr 2025 09:51:38 +0000
Manifest next update:     Wed 30 Apr 2025 09:51:38 +0000
Files and hashes:         1: 04_hKA3FS7y4qIecu-jOU0hL6uU.roa (hash: RXYYDTETSDt2HL0g8FPUEPFcyHqYWz0f16k/4Ht1AXc=)
                          2: 33ttGQGMXoRoa3LelEQnUBrHuVM.roa (hash: rVP0fVDStlZkeBvhzPXsZhD7dyLFDwzDf/o6XnRGH4M=)
                          3: 3Jl7cHH5HYCQWHO_lzBS2bI2_-4.roa (hash: NIh27RBULowgY3run8fB1cAsNECPa+zXlgTqNLMzoc0=)
                          4: 3u-kwYKTCI_XjoHvpEnuP1uD4gU.roa (hash: aXVbrvngr6DUTBdN1gxQ0orLdpgLCQdBwJu7mqqTAQI=)
                          5: 49zp7Z_uY0HRPNKRQ3U077hIh28.roa (hash: OdG79AZ4SuTY5mbtWXLtdcGajwP774Udcb9DcfSFxEI=)
                          6: 5sXa6Z82ItvLcwIuv-wz57rB0rc.roa (hash: LSSPSRYxo12cstJF5zb5GYkunFFh/e4gdT9mmWR0060=)
                          7: 6-wrxF-98h4aAQUgBe7jorUSH8M.roa (hash: yw/fvxYQdzm6hMhnsNwQAwqeUeaOLmQp1fUZvJpDNuU=)
                          8: 7fd3UOIfktXxCeuBJ7ehkt2Ouac.roa (hash: lO0EaVTx9XqMcpdHfVDkZMp8N56c+Ca7RSJruVSEtKE=)
                          9: CLwtPe6dxpPdYZBnwzjMs3ix0zE.roa (hash: dg/9stOZnuTQLs8ru/+P7gpFJSLhaSSNzn0gg/eMIq0=)
                          10: FBey0vFHuk2-mYPcn76OZv1n4Ls.roa (hash: S19WM4ULb6ZYZ7HMjLweRLc3BXXRzIeABbaLB8rBCnA=)
                          11: G7ioUVEV7C23rYXKw6_CEPXRB_o.roa (hash: 4bsxg8Wj2fhFlTYW0BFq1jVczwS7MLY9kjWr8p7wU8M=)
                          12: G9sNDeYN9TSx2s50RAodEnMokaY.roa (hash: o37qvREc6bX3M1h30Bq2ZG2w4jTWzNRtI36r6wIGzy4=)
                          13: HE7KVt1bmO_KMuOR8yn-RRxof_w.roa (hash: qWI6B8H8a8NOL1GqqpuEqZB5R7wuflbjaEPfpRpPm5c=)
                          14: JYT-fH_XETR31fNjDJLAvfhJRPk.roa (hash: D99igODa0kJA/aIPekGKQ8NjGX9hlxiOxNgBY1yBeKY=)
                          15: LGiRxL7ekLY7Nyq3koPZJ47BrBY.roa (hash: lLoJum00f/cNgtaB7/aBXHFrdI4n5psxVomj57ATfZM=)
                          16: LL1RHCqIWo8TJ3ZyceT21bg1dh0.roa (hash: 8CnWf961CAc3sHLKlEJOn+kDOiQWv+DaGYxmTUWuGa8=)
                          17: LaGPn4NbRjzEZ1AAVtnPoAopk2s.roa (hash: ruvlFLoVIPs7VHSJ/AKmR99jaumjRjmzXG1U8eOePGY=)
                          18: NvdTY5M_fTiaqtfGwMR2dzVYm0k.roa (hash: MCy+jOJ9oK1UmCB3jM7rClfRYJqjTGptiyBN5GtoYr8=)
                          19: R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl (hash: n4KdUXek57/1Os98psrBccPdJeugnSV/T48ptvpB2Ps=)
                          20: Rhb4eOvngnzLv3yMBVdKidq0WQM.roa (hash: 3zzwfiaKejxc4zUJ6iiilkNDaFTCtauaN4zX0rbEGOI=)
                          21: SGhBx3pu8ZaxuYR3nAKtqbGsywE.roa (hash: rPGZIo8f+X+08R8LNuF/SuD6PkVfMCYOiDhIn80whZU=)
                          22: TVi5ek_Ib3iqKwihbA9tQWR8EQI.roa (hash: RpuspKVhYAeoY0UDWAM3nI0p2Avdugl6ICrRlTlJuDM=)
                          23: TvvBBfl8ZtNoUbv-mRJkQDgGg4c.roa (hash: lrPccr3kbBFF4wFQJGdKQQGHgmvVCjMIPfa2T6nsRbc=)
                          24: W_BMnNsGL-KukyJJuRFybVheSyw.roa (hash: dSKFBnv5oyelWPDenIyUAmTnzH+MZrbVxIKUczwAUEs=)
                          25: XgOuxdFbAws6qbF8KMVYFAPYBVg.roa (hash: THgtnTHH1Aej0HtodUVAxTCvcsAODT2NTGS30dI9P1Y=)
                          26: XvDp09Ny8NK_FLZpWjS5Wm6USmg.roa (hash: FK81LqXIaFQDyGLikfEHRTrRAB59sSqyzfuCXDql+WU=)
                          27: _V6LoM_-PR8kO-9THX4sYwemMuw.roa (hash: YW+JivyED/fd9EZDBynxHWLRE77M0KTdIbd6ysuR0Zg=)
                          28: cS-04cQPLephKphOnVfz1geMx0o.roa (hash: IU4f9lpN9NvvQKMAweGLxBVPgLMy1JssOAa/e+tvQHI=)
                          29: d1dcHy2uo326hL4SMGV1RiCU1eg.roa (hash: GR2B9HkwmPEe4Z/QLjcdL9ULRS207aYryQ4Z3mmoi9Y=)
                          30: ftqJzZ8kD7q0RFepI1X1stIrCa4.roa (hash: cY28HA7DaBTxRjrxz71YTBTqDbigC4n5L17tkFC9uv8=)
                          31: fvMzsSyVYVhhqHclb_LGnYdxbIo.roa (hash: J+/LKYaTlh/SAfapTTUdFxez43X6jZG6jN8Fbm8BsQw=)
                          32: hi4e1zVzsRGKmbhSESfPV2tM-58.roa (hash: e1cHrs7TQFemHN8c/Uwo/nwqAH2mbP76IyN086CTtio=)
                          33: jDkazVUaVpNbOx6OHfw6Hph_IiI.roa (hash: RrKezydskRUoKILFHYFwFFWYspz35EmxY6nAnZY6G6U=)
                          34: n9BtrnEBR9zav2fTdgnJ4uhIQWM.roa (hash: uFxSbw1hOOLIV1YK3Fm8IwOopaM8maIlIpGrsjePQ5Y=)
                          35: nz2fbQeeIdVzqOPgIzLkk6MePu8.roa (hash: UlQnEhwyaezD1bLteRcGxOe9TW27N5Tf5IUSWgqCHfU=)
                          36: qE8gDIpuNyGK75y6UnB2gb2EtYg.roa (hash: ZAOrm0VQkad5s9+AzOUIWkQ16rxvE7zvJDTFL9m1V9g=)
                          37: qQk_E-QgP62JFZ53EZCxiXa4SOE.roa (hash: pSjoWU4WOTCTrbJmdbck9eHdrgnHfMRwnSEX8KQDlkA=)
                          38: tngoaW5JK2WDKwgVwlaltwvNJOw.roa (hash: op1GiOfoEQNnHUKrEO6BzoAcoOxDUX0AxLC47f/6m8o=)
                          39: vnQUub5MGeWj5-E1uKMpkeuw_Bw.roa (hash: iqmBhhgfmbNJFygGxNo2WISrfzzd7wyB/7vMGysjYiw=)
                          40: xRQPFBwu-gjKVoAgocMVNz-60BI.roa (hash: 9B/mGGQv4u8s5lKgfWdd5cuX4df7cbeme3ehFibb+MU=)
                          41: xqUO64Yhjxvnxp68bsdSDgI1hCc.roa (hash: fWTbsfazDrklyI7rkW/wNb5j/5lt8xlGmvhmb9zPe5A=)
                          42: xw5_GaOg57nda4hcEHKSmjccjjQ.roa (hash: tgL9BwerYw9rnWSehN60aC5obrMZ2uz4ubLgrR8KIGQ=)
                          43: yFln9FJcU5QAoqJuY7gN6gAiaEc.roa (hash: SSJ2fK40/h8DTM4X4rrCEU36uY5lJHxE2iQnR1vgY20=)
                          44: zAfILLQGdMn9_H3daB3YDMYuvvc.roa (hash: G1CyC21mffFPH4Sd/OyY/uj22wQjVxjdQJwfemFe6mc=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3760 (0xeb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
        Validity
            Not Before: Apr 28 09:51:38 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=941718ED009CDF242900C7D17EB829A06CF0F8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:aa:68:d2:a2:4b:a1:33:fc:28:bc:7a:32:
                    4d:ed:93:dd:5e:89:7d:49:0c:77:fc:63:35:e6:eb:
                    4e:d6:92:b7:0e:03:43:f9:99:3b:c6:2e:92:e2:06:
                    d1:7b:98:61:1b:af:e3:c9:e7:8b:ee:cc:32:db:52:
                    4a:5d:eb:ff:5c:f2:ae:84:aa:63:ce:6b:cd:1e:65:
                    05:50:8b:7d:90:d5:a4:5c:25:a6:66:02:0e:28:9f:
                    2c:c5:ae:14:c4:ae:84:e1:f7:ee:c0:88:8a:a7:2e:
                    7e:f9:ee:0a:37:1e:d6:07:df:ac:16:bc:91:4c:8d:
                    c8:06:32:c3:e0:ce:2d:76:1f:65:1d:e3:37:4f:0d:
                    92:18:d5:76:08:0d:4a:0a:58:50:e8:ac:53:59:ef:
                    89:83:17:ed:b4:49:32:62:5f:5f:e9:85:1a:54:ff:
                    5b:a3:35:43:db:12:e3:2a:3f:db:18:ef:9f:2e:b5:
                    27:82:76:d1:5e:dd:fe:cd:98:c1:e6:9c:0d:21:24:
                    ff:5c:06:b0:24:c0:af:d8:5f:00:83:6c:99:98:21:
                    35:e1:68:5b:33:b3:0f:0f:42:9d:29:c0:ba:85:6b:
                    97:e0:98:a0:99:cf:71:85:b2:fc:20:2d:a0:f5:d2:
                    6e:7d:b2:3f:5c:f3:71:79:d4:3c:c5:98:2a:64:64:
                    b7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
            X509v3 Authority Key Identifier:
                keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2f:bd:24:b9:43:7b:ac:ca:30:80:c6:c1:35:75:d1:f9:17:
         bc:36:9d:29:a4:a5:38:93:91:62:15:f3:48:f3:ad:87:cd:53:
         d7:ad:9f:67:e3:b5:cc:dc:fb:a4:1c:cc:4e:f3:1c:dd:69:6c:
         bd:11:b8:fd:28:38:b5:11:d6:08:d8:fa:02:ed:6c:59:93:ee:
         6f:15:9a:10:da:32:58:5c:2c:d2:96:51:6a:c4:a1:ff:44:41:
         40:1b:a5:5a:d5:01:9c:34:ac:8c:70:da:c0:4e:dd:6f:4c:25:
         ac:54:98:a2:f9:0d:43:84:87:f2:6b:c3:7c:4c:a7:01:9a:19:
         e3:3a:9b:dc:41:39:dd:ef:e5:ef:0a:47:71:3a:36:42:c7:a8:
         cb:a9:30:cb:dc:c3:31:c4:ad:8e:1f:bd:61:7c:36:50:7b:03:
         b5:9d:8b:6f:3f:55:22:f1:33:4c:00:d9:87:fb:d4:99:7f:8f:
         b3:7d:ed:ff:77:40:90:80:da:e4:7d:3b:1c:0d:8e:34:49:4e:
         08:9d:c3:2d:e7:03:f0:91:15:d9:11:95:82:6b:0e:e7:06:f7:
         cd:36:8f:5d:20:d0:9e:63:1e:9e:6a:2f:6e:c3:98:e5:6f:60:
         26:98:8c:0a:e3:ca:d6:d2:d6:8d:19:e0:f4:87:2e:80:27:23:
         e6:02:7d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:39 2025 by rpki-client on console.sobornost.net