Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
File:                     4aiMNNJG73wqfBrF_peyYrxIF44.mft (raw, json)
Hash identifier:          4IG0z2jBN6f10R4Cb0ORZJ36jfPkeQlytuOjUTnMnTY=
Subject key identifier:   44:D5:A9:8A:82:2C:97:33:66:C1:97:E7:58:A7:44:F3:03:82:78:C5
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1015
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
Manifest number:          0E26
Signing time:             Mon 28 Apr 2025 09:49:37 +0000
Manifest this update:     Mon 28 Apr 2025 09:49:37 +0000
Manifest next update:     Wed 30 Apr 2025 09:49:37 +0000
Files and hashes:         1: -PBdU9fofnyz-kR_5_pZmjbJWNQ.roa (hash: U3S0Fw81729lxdhqgOqN4hqvSDqNRD2N+ab7ArJELRs=)
                          2: 1tq8MGswr7ZxNPPpZh8xvPDqXtQ.roa (hash: 45jVSW0on/ii96nyz9rKqSoOsW2zIf0sNGCfqt8v3g0=)
                          3: 3EUX6Lwlwomx4r6BSauBeqNPeTc.roa (hash: yTDy2shZUlPnxvCCIwdxi+MFClr9/6wMZ5cxGOeKfNc=)
                          4: 3a71Td1-RZ8ptRMRy-tEmcTmFPs.roa (hash: BiRSqHRe0z8Pcffdvt8d2W0BeuYa6oM5GT0WlymvIwE=)
                          5: 3l_j3IgsdvXJIzhowIb3Kc47GR8.roa (hash: SXwRVcOSwUrO40EUKAZwmuBU7zagiM17+RGRyFjW3pI=)
                          6: 4aiMNNJG73wqfBrF_peyYrxIF44.crl (hash: yUzjrMbmtnanq981B1Wj/dDzugalEVlbAq/FmkpvlOI=)
                          7: 5D2qfwB8pB2sd_UBIPc-dHvA-Zk.roa (hash: pqQPXpp09Ms67qUgiMxYn3CCM3mablGJ0Q8TEsEI/+8=)
                          8: 5kj3J5jOc61OP9Hesi0hVHRZskQ.roa (hash: CeiDWyQ8cZRPFG2ttnkXj2hkbnIysTmkZq7J38iqVQw=)
                          9: 9PHlfSjE2YvkH5T24PldPIJgc9k.roa (hash: P/WAjOCjoQP6wS7kRLEeZGnKMv0k364GnICY4X6DKCM=)
                          10: 9SqRpobI-GhH9oyyh_iW6f5nPIo.roa (hash: MNpFF9u9hCY4TShw3KxQIOPFvtHURLFgyeUX4+simpQ=)
                          11: 9a-z2A39NLe2pUVzU4tMRx6wujA.roa (hash: MfS5gzZw8yeMRD8+Hth4vlawOedk5UWwsAVIoR8d51I=)
                          12: A0I7_RQO-J2eEkKth8siF8-JA1M.roa (hash: IUEvkyKKFaaqXvqGp791FyMMWZEzgcvi7iOZ6UFGnLo=)
                          13: AK-tDM3Jj_DVxglhfVf0E-Tsmmw.roa (hash: iCzmuIorZbshiJG4irHmEoXIEW5AJ8Kf4OrAZQJKdFU=)
                          14: An6a5r2l8Bn6-PNDgl-z_-PkktU.roa (hash: M2wU8EHsE8zGmswpx5A+bcrdFkQjhz6g3cVc40sEQiU=)
                          15: B4w9IW-kZebClI-jto3pxg42wBE.roa (hash: 0Tp/+UslRyPRY1S7hrm0v91EH/8DUapnrRXKT0+tCEc=)
                          16: CLp1aw9XNH4aqP-IbV66ODPesgU.roa (hash: hYjpaz5HD5xqshB1wsqDWeEiGFaTh8SCLdumFu085vA=)
                          17: Fzy5ZcCIQYy6f6lA6oebnObyTe4.roa (hash: gQyxZclXD43SXzVO2Tj+iHZYE/Sm307UI+DvcRcRISA=)
                          18: HckYPpVNzl15mv5OEbnTgr0zY3g.roa (hash: ZKKu7bXulj9P800La9JsBgooFN48D6t4v0E710GuAlI=)
                          19: IDVVxx8U8CSfE0VnxZJSZwOtZWM.roa (hash: AsEgLMsmQ4/a/DTbTpGUVRth+NrCQgLvJs3doR8ng3g=)
                          20: KB55XmwyA-SohPZ7Qz-wCOCJfGw.roa (hash: mLy6kz4C8/dZpZ2v96PEJiO+6vj/Hp1tJ2AILgwoVcM=)
                          21: MCGoJcjQPZMk_1A0M2w75UsEYJU.roa (hash: tiONKFQFsKLEW/1UovnGnS7T1Z4inM/YmD3YAcXLxVY=)
                          22: MEBnrCIBYERMhMPKh0QCiK6yJx4.roa (hash: OKOf44iTZ/KGleaZfWEzDHvwUjgQGvHtTbxkiJ65pVE=)
                          23: MP1KhUj5eJUX5RUdPERCimyA6dU.roa (hash: Dzbl+8aASQGco+4uyXQh9OdKaiGShbUbwqbNpsAZV8I=)
                          24: OECv0SKQp4Scu3VGlAGq5ezu47I.roa (hash: IpYIckjpktkKRl2WhAvnt5a2BlrL2zV07g6E6iWpuLE=)
                          25: OvDHEVzrNPLmKookGT5ACgPKIO4.roa (hash: /m/1GKZYA18JkViIEcLJRFokk7fsTKDOdRV6f4veaXA=)
                          26: RSvtvP0TchFIRVlUjyfOcm2s7dw.roa (hash: oyK5IhB4Lf3F/1GUU3ftADPfhmuUsNZ/TmZ2sJSZxYY=)
                          27: SNu-xiqg_Zio6yyTGhp-eNR5P_0.roa (hash: F2hIyD2nRNsFupTwATmx8hKNBeKjqJdU4w9Q+uIbOZ4=)
                          28: TI3UKkgKNhlPTHdpMAbOusbxI0A.roa (hash: NM/7R6qVlbjHqzlUsmsUORl618ol64YxCmmC2oRo2Aw=)
                          29: URO6KF4Mmo4XMrheZNzRJUrUIng.roa (hash: PzGIZ0wKW6AweJxQibXMjSP1ziqXS0tMyrCMUYWTrHU=)
                          30: _ILCxvG60CiCOap_Bn3VLGuCdr0.roa (hash: sR5q13RgLhE3GArsuDUpJWgiwy9ZhQidOM0po+VWD+w=)
                          31: a_gsB71XrTzw8UGhko0-Vfi7MIM.roa (hash: 7t7mCgC+OzLJnXojg8sT/2jt7JAI7LCqc2mpEUcEFqM=)
                          32: d7l5cB4yBVgvq5-1J2nDB3ZXv-c.roa (hash: 0NYixBwUhtgI4YmAWVKAHlkx1kTkOB+IkASJRNKhwqM=)
                          33: g8U2PvvZ0iz4Mfd8aSguHLL6Z_4.roa (hash: LrjR7WI19o+U7Wspxts/iUtiMx11bFgUKssoOTTttA4=)
                          34: gD5X77Z549QweS7og66H9Jo3Ph8.roa (hash: S6xdjNLO52Aclu5M42zVXQFFCDmQqHa7ec3Tvs0oc/g=)
                          35: gFGmyiV2VDAG4OISYDC6F01F034.roa (hash: s71g+pyJEK+StblvqYFJDsLJm2wIHy/XEB5/qLw0Ino=)
                          36: gkL3iPwUvRJdFOuH5h_esEYOv1g.roa (hash: D5sAaYrXC1iNIJEWzZH50ED8PYgdqHVtXy1apR/w+ts=)
                          37: hrHQwh3jFDDGSj_ooXRWRDLgDps.roa (hash: esnMboxmjKkkbYr0P9B0Y/e356Wg6P8mHlKkgi73sdk=)
                          38: hwhro3ukb2tVsrOp24DQIVP_9Io.roa (hash: /3CaOaLCU4Qdb5c8X3967ezBiaPcU1rspaozCcmaGdM=)
                          39: if44tGaUHf0ZPxa9pQzi6llZakw.roa (hash: 52p2Hd9BpRFvDzBoyHNqUaQOCmT0X98Kul4QMpwYTmw=)
                          40: js3KmPpJE18X1Z6ulmDj6bphGTE.roa (hash: 72NPAal/Ki4QecF4QWaFUuvgti4IDyUrsdggOyQR3mY=)
                          41: kUhTX3SG71N9NI7EZi8r7CYZXyA.roa (hash: ZlQn5p/dhTUwH6kIg8lDOPz/7mRsnrGYoC0w2KtRxO4=)
                          42: m8JZKVJM60J2i6s6B1gIoWi1AY8.roa (hash: 5TKfUkvaH9or1AZnkMeIjidMlv7V6PAJCBMWBj5WFAs=)
                          43: nDTizWNduxTTG0hVLtZext4ufa0.roa (hash: o4sq6lTmX192xTeloxGYa2ggWwUb49rapbjbSF84VPw=)
                          44: qjYhCz6ueLqJUawoGvKN4rdlEFw.roa (hash: mDLn1g+IUQQbe6e2DLelxuUz9GrvH4rZmmL31Tc/71c=)
                          45: qunzVS5tB_Cy8DRv15CfgcT_89c.roa (hash: HWjsSutf83HwkBWESI9eEZa0oFN5x9AufmM+0T2q5/g=)
                          46: t1jSSZI5r1cbfuWooSYwkGfrx1k.roa (hash: YhhwImZ7Eye+Cd0mkwgJyO/vrHSqQm4/pigdKF62+5Y=)
                          47: t7G5aL6DBA9OzI4he23v2P_yY5s.roa (hash: OaEUBPyYC18/YKHKIupoL7d9vHoJ7zgKWy46MTwky6Y=)
                          48: tdTA8GWKN249A61iP7qLq3-LMLQ.roa (hash: +VcngFzr/CYXFu7EAmp7039fb4218jFlyVzttQ+6Go8=)
                          49: uVkhVqA46iOFnAsF8pJTL4Cwsj8.roa (hash: UT3zAiJwazKkgUn4sGEkAh+iXiMt73Jz2LgBWR6eB54=)
                          50: v8BpW71yUlg4wLI1NjuQQ_DljEM.roa (hash: rVW4v27WPAaz4IhlRFm+rOmX0ie1e6p8xWY0KDJ1TbA=)
                          51: v8oeKp7bRuuQ8tvr8GPO32KKHPY.roa (hash: 9OxkLT/8AGddj4U4ldWh5bB00oXsm5jpq8Oa9mLJsKk=)
                          52: vHDn8D38-GTGg23dt5lfwMr08yc.roa (hash: o+1YJ97GD93efmsGzbTEPg2yTqAr5UCXtUE29LtP3T4=)
                          53: vK6lZVwwFrrGosRR3Cb0QmYGMe8.roa (hash: cv2XkTceg5X5AwGrrfbtgS4K4/3cYC/kUDi7E+IBH3c=)
                          54: yZCiF6eDj-Pd22afZSdL8w7P_sk.roa (hash: ZkUtXEyj460p+bz66NWxkLzZ24pM9HTfJ7UUKQlSGE0=)
                          55: zH5KQHECPQcURrUZSIHiZwwqGQ0.roa (hash: QvCdVoPQ7qNgVbAGA/mMS7wyvcdF0lsXJDQ2M0thL5o=)
                          56: zKC-KBAigjxqNf76MZUYxkL71dI.roa (hash: CoJNMKbGXUpkmp+6Oc3WlDU+f6gzNa47GaYcy5sGZjA=)
                          57: z_0tDqcaxg4icyKASdhj4TUR3hY.roa (hash: 3/RIxb0xmdF9HN16jg6D4PitJc9dZuzYQFsrVH08Uhs=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4117 (0x1015)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Apr 28 09:49:37 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=44D5A98A822C973366C197E758A744F3038278C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:b6:95:b6:4c:61:91:69:75:17:90:97:b1:
                    45:51:4c:eb:c2:b5:b7:40:78:d2:78:42:f3:1f:50:
                    89:fe:af:a3:07:52:ba:2a:a1:95:6b:05:f7:4a:34:
                    88:bf:d0:67:32:e5:fb:c5:60:85:5e:f3:32:a9:4f:
                    9a:17:c4:c0:fa:52:9c:1c:b0:c8:dd:6e:25:32:3a:
                    fa:59:28:1b:16:4c:e1:56:52:a6:d9:c2:00:39:3d:
                    a0:73:68:d6:a6:ac:1d:e5:b3:21:e7:84:61:67:f7:
                    57:ff:1e:d8:d6:88:c1:66:39:60:8a:92:cc:3c:c3:
                    ed:a8:42:28:01:ac:be:af:aa:82:54:11:e8:a9:39:
                    b3:80:33:94:18:22:ee:a6:b1:0d:8b:bf:77:eb:38:
                    e5:a5:d4:a8:79:79:e7:22:b7:d7:ca:81:03:95:05:
                    e1:b3:f3:57:81:a8:c1:bf:b0:cd:e7:62:43:2e:72:
                    6a:d0:00:95:54:1f:53:69:e2:2f:b2:6b:49:52:37:
                    86:8e:e9:a6:1f:b3:ef:a4:29:a1:0a:43:34:a4:99:
                    f1:90:32:a0:b2:a4:f7:65:0a:5e:91:70:8d:6d:ab:
                    a5:b8:38:d5:f0:5d:9a:bf:57:a5:c6:a3:85:7e:19:
                    15:f1:cc:ce:fe:72:9b:57:f3:05:5f:b3:24:bb:74:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D5:A9:8A:82:2C:97:33:66:C1:97:E7:58:A7:44:F3:03:82:78:C5
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:a8:ed:d1:28:0a:01:49:83:07:27:17:1a:4c:ec:71:5d:
         6f:f6:d3:73:d5:83:76:1d:55:b6:ba:3e:f0:c7:19:77:29:c8:
         9a:f8:f6:57:15:bd:26:a2:83:66:d6:5e:c7:3f:9f:77:30:ab:
         79:13:7f:a1:a0:76:e0:c4:30:a0:50:65:73:28:e0:e8:5a:a2:
         f4:32:a6:e1:62:7a:49:c3:f0:54:4e:02:9f:cc:9a:2f:59:39:
         be:04:f9:7d:36:b2:7f:24:dc:94:d3:e4:4a:24:4d:3d:aa:b7:
         f4:b8:3e:02:05:9b:84:7d:e4:86:aa:06:c2:b4:d1:56:79:15:
         92:90:b8:9a:a3:14:87:a5:a1:e0:54:bf:70:94:d6:24:4d:6a:
         79:b6:db:15:21:b5:3f:85:4b:23:8b:31:11:e0:54:35:63:17:
         50:23:19:bd:e0:81:0a:89:5e:43:34:9f:d7:e2:e8:2d:e6:a5:
         37:17:68:1f:b5:75:79:61:c2:82:e9:77:28:b7:1f:07:cf:57:
         ae:fd:ba:3e:20:71:13:a6:43:43:c4:d8:83:3e:4b:f5:9a:59:
         83:bf:e2:af:84:02:fd:77:35:40:f4:f9:b5:7c:8d:c1:c0:db:
         aa:83:2e:db:84:62:f7:cd:b7:60:88:98:ba:59:30:da:0d:b4:
         99:ba:fd:b5
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICEBUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTFB
ODhDMzREMjQ2RUY3QzJBN0MxQUM1RkU5N0IyNjJCQzQ4MTc4RTAeFw0yNTA0Mjgw
OTQ5MzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQ0RDVBOThBODIyQzk3
MzM2NkMxOTdFNzU4QTc0NEYzMDM4Mjc4QzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiALaVtkxhkWl1F5CXsUVRTOvCtbdAeNJ4QvMfUIn+r6MHUroq
oZVrBfdKNIi/0Gcy5fvFYIVe8zKpT5oXxMD6UpwcsMjdbiUyOvpZKBsWTOFWUqbZ
wgA5PaBzaNamrB3lsyHnhGFn91f/HtjWiMFmOWCKksw8w+2oQigBrL6vqoJUEeip
ObOAM5QYIu6msQ2Lv3frOOWl1Kh5eecit9fKgQOVBeGz81eBqMG/sM3nYkMucmrQ
AJVUH1Np4i+ya0lSN4aO6aYfs++kKaEKQzSkmfGQMqCypPdlCl6RcI1tq6W4ONXw
XZq/V6XGo4V+GRXxzM7+cptX8wVfsyS7dAfpAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQURNWpioIslzNmwZfnWKdE8wOCeMUwHwYDVR0jBBgwFoAU4aiMNNJG73wqfBrF
/peyYrxIF44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEFORVQv
NGFpTU5OSkc3M3dxZkJyRl9wZXlZcnhJRjQ0LmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS80YWlNTk5KRzczd3FmQnJGX3BleVlyeElGNDQuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQU5FVC80YWlNTk5KRzczd3FmQnJGX3Bl
eVlyeElGNDQubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2yo
7dEoCgFJgwcnFxpM7HFdb/bTc9WDdh1Vtro+8McZdynImvj2VxW9JqKDZtZexz+f
dzCreRN/oaB24MQwoFBlcyjg6Fqi9DKm4WJ6ScPwVE4Cn8yaL1k5vgT5fTayfyTc
lNPkSiRNPaq39Lg+AgWbhH3khqoGwrTRVnkVkpC4mqMUh6Wh4FS/cJTWJE1qebbb
FSG1P4VLI4sxEeBUNWMXUCMZveCBColeQzSf1+LoLealNxdoH7V1eWHCgul3KLcf
B89Xrv26PiBxE6ZDQ8TYgz5L9ZpZg7/ir4QC/Xc1QPT5tXyNwcDbqoMu24Ri9823
YIiYulkw2g20mbr9tQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:44 2025 by rpki-client on console.sobornost.net