Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
File:                     mZu-Ex3100bydifMT4-p-1dYGSk.mft (raw, json)
Hash identifier:          nozM/Y1CFojJuvefbo2W1BebqYplUwHTGGIEKps881A=
Subject key identifier:   BD:55:C9:E6:36:57:E8:A5:1D:91:B8:AC:F7:F8:44:52:7B:32:BF:62
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Certificate issuer:       /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial:       0E4C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
Manifest number:          0D62
Signing time:             Mon 14 Apr 2025 20:07:21 +0000
Manifest this update:     Mon 14 Apr 2025 20:07:21 +0000
Manifest next update:     Wed 16 Apr 2025 20:07:21 +0000
Files and hashes:         1: -JCgfFVW1xj2brcjk1b4-gyW1QY.roa (hash: oO4RdshvbdCPhOy1N3oFa0ParsNZ2rcTMN2+/Whn+zo=)
                          2: 18_3HhBAfjTGtrEiqxyzOhoQgf0.roa (hash: WY+233z5yIeXkwEKbC8ejtiPAbBbmBcudv/Cfx5hTvQ=)
                          3: 1dplT5SM7R94ktWWnFP6NW4ccz8.roa (hash: Uy20XTDgjDx9o5Xvzc2ENgqk4rxvUUG8zqEKsQdw6IM=)
                          4: 4bjNyzLpdZEybjhWCFovTuhO5O8.roa (hash: HwpClSLSXtYtmQ2FvnTlPcstXeBt6SSEGgkseLzdsoM=)
                          5: 50dQoSU7B3M-Pdtfx6EkoqAoLDA.roa (hash: c2sF0JjzNZAuKDJATDDfb7P+KOMrjJ3kpnU6EHx5N5g=)
                          6: DG0Twt6hjQAjaQ48tN49Hvj-a-c.roa (hash: NvzLsIzD6QH+2pFOWYGxRMGzqJdhifcD8jUAC01ge1g=)
                          7: DpJZCtvn1TK9ngEldYR70rk5tqE.roa (hash: 3FgdK3fNFcjNheGEX4GfT1eRUUVD9k7Aznn4zJVcCUM=)
                          8: EiZwJDoZyAvvtrT67rMgBofrQcY.roa (hash: cRMNPVJYgzg8bYQCt/Ek3P60I2fnLFGVQmN74UXjxco=)
                          9: EvuCTEKYYH7BPrGDqvME-eQoLlA.roa (hash: xoQaTKSmw2oP2pi+xh38oCL7X/3E/vYaLZp9eJ/qieM=)
                          10: FB8v7zwguXqAYn6v6dJyElXNI_o.roa (hash: T+dAzxvJgQnjENflVWX2sUxWtQbv05jVeGA/oM20dos=)
                          11: IJ11rWt3tnyPABI0MYKl-Q-X648.roa (hash: M4YNjTCeurC58jnrpJqNE0cfqw9d0uxTe9CE2tkwtMs=)
                          12: KfRVmyt6LoekXb0AtYH1KmhQDG4.roa (hash: 2PsCOnYpuMUraxkz+MqhELYVvx4mAwA+gflBGDiVWmU=)
                          13: Koiv3EgiRVAR3q4bh-xEaQWb9Sw.roa (hash: NC7nYE5t5a6SGMNjdJjsgmdYLMWYgnrNeycT+8fngv0=)
                          14: NMII0UYsbApHrPNh2zIies_FORM.roa (hash: WPRdensKKIyL+m9Z/7KhIxQ3zlqzhNdHk3sVP7b3RXo=)
                          15: PDPm9dw50TWPn1PPA4j1U6xGhJs.roa (hash: aEpmEP5YAgqd75pUX/g0fkJ0iDsxAcXbGbte7+UzYmA=)
                          16: U5k1sRsHCexO6n8htmw-zfBvDzk.roa (hash: G6P+ED7wI48jtV8zf+WhYdJRgdjLDnJ+HY57tq5CxgY=)
                          17: WB6pWXEDFoyHp-ozKzcudllc-aY.roa (hash: mWl+7lTH3TMOp0L4A4x6QhkAffUGJNWAdwZUNWuC7MU=)
                          18: aedUVmwgj7eDG0fM7-OBoKtXZ5w.roa (hash: BqO1RV2HCRwB4MbRlNemp36dDZ3sfQXWXKFXRQ8VHsI=)
                          19: crC5Fvw43gBQLqU2VLnnCU4fPR0.roa (hash: CbAAo0Q0LmET1KkSCbcFfvgOPAJ8ZeLQhUWI0xcByjQ=)
                          20: dIarZ183NEXj4yCRCAMlfcblqy4.roa (hash: I81LLd0aKjx1O3CL4DLFiSUda0wz7ndS5BAKQ0Z0uLQ=)
                          21: eQ7buWLiA8J5zRwRFVwWTDLnGLw.roa (hash: HIo0GNUuNe3+Ud9MApOGFn3Z2OnMJSbhLE7hUqDHF88=)
                          22: hMOmGeIPoDT2_Xnxjoc3Fg52lbk.roa (hash: 8DrCpQdxzhW5XDXrnY+TgqG95vIMdgKkWoydvVkD1W8=)
                          23: itIZSwMsfSM_wDzRNviF8c2Tnk0.roa (hash: VCTHZJnuiO4k/aQ+IBYoXBIzA4RIrVI4vVs0F7+8Qr4=)
                          24: lp0ow6Xsllc39h4Pfchw5xCS8og.roa (hash: 9CTXtH3B19Uk5UqVfYXiQYjSw1D8IzvJ0k7vYNMiGOA=)
                          25: mZu-Ex3100bydifMT4-p-1dYGSk.crl (hash: WYwL6gB5swb4RJwTrxxiZ/yJQ1MjI8fL8FIgk5dGwkM=)
                          26: q-Wq6lWMQqVTwNUg52JrQIJNTK0.roa (hash: gx73p2UnG0M9sAWCdiCBde8U0ghm12g2Q3k9wUu/IaI=)
                          27: qM0uOx_U6LlgOoOqqp4I_1nNt4M.roa (hash: 4VtWO6bCIAy9hSHjeNMCr1AVLTa9S72hXpcUdlj88HA=)
                          28: vEABdh9QnNyKGLllW8gMaYux36U.roa (hash: mgujBs6ejGeJNsujhXWhV77MSQB3Z4fas5aWBgv0rPo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 15:08:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3660 (0xe4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
        Validity
            Not Before: Apr 14 20:07:21 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=BD55C9E63657E8A51D91B8ACF7F844527B32BF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:c1:63:32:01:c5:b1:de:eb:56:8d:fe:89:
                    56:57:71:a0:b2:43:6d:70:89:1a:3b:7c:3f:e7:3a:
                    5c:07:36:16:dd:d3:f3:f0:a7:a9:9a:5c:11:4a:73:
                    28:69:8c:42:f7:f0:60:bc:34:62:39:39:f7:41:38:
                    7f:b0:30:72:26:00:0a:8e:0c:42:35:54:b1:a6:db:
                    61:4e:47:bf:8f:27:b9:ef:6e:1d:e9:c1:af:e3:04:
                    15:69:65:8a:d8:58:f5:13:de:d0:19:05:5c:56:36:
                    c6:be:54:61:98:a0:f5:1b:37:12:f7:af:7b:c3:92:
                    b5:f7:34:14:1e:4c:ca:70:10:b9:0a:32:01:b2:62:
                    42:3f:95:a5:ed:8b:91:08:84:aa:3a:98:c4:79:9a:
                    2e:69:26:78:86:33:9f:4e:7e:33:8d:84:69:a8:d6:
                    d0:95:7d:ef:35:fa:57:ee:1a:56:5f:c6:6a:1a:d8:
                    4a:d3:71:4c:40:6a:e8:b1:08:04:5c:b5:e5:fa:51:
                    5e:5a:4d:03:48:84:9f:63:78:59:4e:c2:ee:4f:76:
                    37:bf:2d:1e:46:14:7b:94:e4:93:24:e7:02:10:6e:
                    22:96:70:30:c4:4f:55:3e:12:b2:79:3e:50:dc:7c:
                    7a:e5:65:ba:a0:b4:f5:ec:f6:dc:f0:7a:a8:7a:fe:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:55:C9:E6:36:57:E8:A5:1D:91:B8:AC:F7:F8:44:52:7B:32:BF:62
            X509v3 Authority Key Identifier:
                keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:22:6f:83:a4:29:97:6b:a6:b8:02:e4:6c:cf:0c:8d:6a:8e:
         47:2a:07:35:0e:45:9e:dc:5a:f0:e8:78:12:3f:49:40:ae:ea:
         4e:b2:a1:5b:24:80:16:e3:8c:0a:87:ce:b9:0c:5a:98:0e:de:
         d6:7f:ed:fc:63:dc:29:8c:44:50:96:00:d4:e3:2a:9c:48:3d:
         d5:90:f4:ca:b6:f2:31:b7:62:90:8e:73:8c:ac:43:92:ff:d4:
         29:1b:bc:41:db:4a:d4:bf:8a:d6:76:da:c4:e3:76:b7:13:b8:
         ff:79:2f:02:83:6a:83:33:a4:36:97:48:f8:b4:d2:14:ea:47:
         f2:b8:4b:1f:f8:d4:c3:4d:84:4c:15:70:2f:63:a8:79:38:b9:
         cf:df:4e:27:94:eb:27:1c:4c:ed:24:f4:b4:d4:b4:60:1d:10:
         51:bd:71:cc:ec:ad:62:4d:f1:86:b5:a4:53:21:87:99:1f:55:
         44:78:f3:d3:ac:3a:50:9a:97:b5:bd:c4:c5:b2:f5:d8:50:8a:
         4c:47:e8:3b:00:48:61:a4:a9:68:02:17:f8:89:64:17:8d:15:
         81:44:a6:68:f5:20:ec:4c:b9:b7:3b:bb:9f:1a:d5:f3:62:00:
         a4:f9:7e:bc:98:a7:d0:07:7b:6a:a6:aa:ec:91:33:3d:9b:20:
         b1:e2:2c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:20:29 2025 by rpki-client