Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
File:                     R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft (raw, json)
Hash identifier:          xPGsc2nUyLDwcJ+VlEjm1clwbtJxQs9yma/q9KmPvdg=
Subject key identifier:   94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Certificate issuer:       /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial:       0EE7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
Manifest number:          0D99
Signing time:             Sat 19 Jul 2025 22:08:09 +0000
Manifest this update:     Sat 19 Jul 2025 22:08:09 +0000
Manifest next update:     Mon 21 Jul 2025 22:08:09 +0000
Files and hashes:         1: 04_hKA3FS7y4qIecu-jOU0hL6uU.roa (hash: RXYYDTETSDt2HL0g8FPUEPFcyHqYWz0f16k/4Ht1AXc=)
                          2: 33ttGQGMXoRoa3LelEQnUBrHuVM.roa (hash: rVP0fVDStlZkeBvhzPXsZhD7dyLFDwzDf/o6XnRGH4M=)
                          3: 3Jl7cHH5HYCQWHO_lzBS2bI2_-4.roa (hash: NIh27RBULowgY3run8fB1cAsNECPa+zXlgTqNLMzoc0=)
                          4: 3u-kwYKTCI_XjoHvpEnuP1uD4gU.roa (hash: aXVbrvngr6DUTBdN1gxQ0orLdpgLCQdBwJu7mqqTAQI=)
                          5: 49zp7Z_uY0HRPNKRQ3U077hIh28.roa (hash: OdG79AZ4SuTY5mbtWXLtdcGajwP774Udcb9DcfSFxEI=)
                          6: 5sXa6Z82ItvLcwIuv-wz57rB0rc.roa (hash: LSSPSRYxo12cstJF5zb5GYkunFFh/e4gdT9mmWR0060=)
                          7: 6-wrxF-98h4aAQUgBe7jorUSH8M.roa (hash: yw/fvxYQdzm6hMhnsNwQAwqeUeaOLmQp1fUZvJpDNuU=)
                          8: 7fd3UOIfktXxCeuBJ7ehkt2Ouac.roa (hash: lO0EaVTx9XqMcpdHfVDkZMp8N56c+Ca7RSJruVSEtKE=)
                          9: CLwtPe6dxpPdYZBnwzjMs3ix0zE.roa (hash: dg/9stOZnuTQLs8ru/+P7gpFJSLhaSSNzn0gg/eMIq0=)
                          10: FBey0vFHuk2-mYPcn76OZv1n4Ls.roa (hash: S19WM4ULb6ZYZ7HMjLweRLc3BXXRzIeABbaLB8rBCnA=)
                          11: G7ioUVEV7C23rYXKw6_CEPXRB_o.roa (hash: 4bsxg8Wj2fhFlTYW0BFq1jVczwS7MLY9kjWr8p7wU8M=)
                          12: G9sNDeYN9TSx2s50RAodEnMokaY.roa (hash: o37qvREc6bX3M1h30Bq2ZG2w4jTWzNRtI36r6wIGzy4=)
                          13: HE7KVt1bmO_KMuOR8yn-RRxof_w.roa (hash: qWI6B8H8a8NOL1GqqpuEqZB5R7wuflbjaEPfpRpPm5c=)
                          14: JYT-fH_XETR31fNjDJLAvfhJRPk.roa (hash: D99igODa0kJA/aIPekGKQ8NjGX9hlxiOxNgBY1yBeKY=)
                          15: LGiRxL7ekLY7Nyq3koPZJ47BrBY.roa (hash: lLoJum00f/cNgtaB7/aBXHFrdI4n5psxVomj57ATfZM=)
                          16: LL1RHCqIWo8TJ3ZyceT21bg1dh0.roa (hash: 8CnWf961CAc3sHLKlEJOn+kDOiQWv+DaGYxmTUWuGa8=)
                          17: LaGPn4NbRjzEZ1AAVtnPoAopk2s.roa (hash: ruvlFLoVIPs7VHSJ/AKmR99jaumjRjmzXG1U8eOePGY=)
                          18: NvdTY5M_fTiaqtfGwMR2dzVYm0k.roa (hash: MCy+jOJ9oK1UmCB3jM7rClfRYJqjTGptiyBN5GtoYr8=)
                          19: R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl (hash: 4SyX+5OxbhP6ZtT/4IcJRyhFWcMQKOjf518/qByecfg=)
                          20: Rhb4eOvngnzLv3yMBVdKidq0WQM.roa (hash: 3zzwfiaKejxc4zUJ6iiilkNDaFTCtauaN4zX0rbEGOI=)
                          21: SGhBx3pu8ZaxuYR3nAKtqbGsywE.roa (hash: rPGZIo8f+X+08R8LNuF/SuD6PkVfMCYOiDhIn80whZU=)
                          22: TVi5ek_Ib3iqKwihbA9tQWR8EQI.roa (hash: RpuspKVhYAeoY0UDWAM3nI0p2Avdugl6ICrRlTlJuDM=)
                          23: TvvBBfl8ZtNoUbv-mRJkQDgGg4c.roa (hash: lrPccr3kbBFF4wFQJGdKQQGHgmvVCjMIPfa2T6nsRbc=)
                          24: W_BMnNsGL-KukyJJuRFybVheSyw.roa (hash: dSKFBnv5oyelWPDenIyUAmTnzH+MZrbVxIKUczwAUEs=)
                          25: XgOuxdFbAws6qbF8KMVYFAPYBVg.roa (hash: THgtnTHH1Aej0HtodUVAxTCvcsAODT2NTGS30dI9P1Y=)
                          26: XvDp09Ny8NK_FLZpWjS5Wm6USmg.roa (hash: FK81LqXIaFQDyGLikfEHRTrRAB59sSqyzfuCXDql+WU=)
                          27: _V6LoM_-PR8kO-9THX4sYwemMuw.roa (hash: YW+JivyED/fd9EZDBynxHWLRE77M0KTdIbd6ysuR0Zg=)
                          28: cS-04cQPLephKphOnVfz1geMx0o.roa (hash: IU4f9lpN9NvvQKMAweGLxBVPgLMy1JssOAa/e+tvQHI=)
                          29: d1dcHy2uo326hL4SMGV1RiCU1eg.roa (hash: GR2B9HkwmPEe4Z/QLjcdL9ULRS207aYryQ4Z3mmoi9Y=)
                          30: ftqJzZ8kD7q0RFepI1X1stIrCa4.roa (hash: cY28HA7DaBTxRjrxz71YTBTqDbigC4n5L17tkFC9uv8=)
                          31: fvMzsSyVYVhhqHclb_LGnYdxbIo.roa (hash: J+/LKYaTlh/SAfapTTUdFxez43X6jZG6jN8Fbm8BsQw=)
                          32: hi4e1zVzsRGKmbhSESfPV2tM-58.roa (hash: e1cHrs7TQFemHN8c/Uwo/nwqAH2mbP76IyN086CTtio=)
                          33: jDkazVUaVpNbOx6OHfw6Hph_IiI.roa (hash: RrKezydskRUoKILFHYFwFFWYspz35EmxY6nAnZY6G6U=)
                          34: n9BtrnEBR9zav2fTdgnJ4uhIQWM.roa (hash: uFxSbw1hOOLIV1YK3Fm8IwOopaM8maIlIpGrsjePQ5Y=)
                          35: nz2fbQeeIdVzqOPgIzLkk6MePu8.roa (hash: UlQnEhwyaezD1bLteRcGxOe9TW27N5Tf5IUSWgqCHfU=)
                          36: qE8gDIpuNyGK75y6UnB2gb2EtYg.roa (hash: ZAOrm0VQkad5s9+AzOUIWkQ16rxvE7zvJDTFL9m1V9g=)
                          37: qQk_E-QgP62JFZ53EZCxiXa4SOE.roa (hash: pSjoWU4WOTCTrbJmdbck9eHdrgnHfMRwnSEX8KQDlkA=)
                          38: tngoaW5JK2WDKwgVwlaltwvNJOw.roa (hash: op1GiOfoEQNnHUKrEO6BzoAcoOxDUX0AxLC47f/6m8o=)
                          39: vnQUub5MGeWj5-E1uKMpkeuw_Bw.roa (hash: iqmBhhgfmbNJFygGxNo2WISrfzzd7wyB/7vMGysjYiw=)
                          40: xRQPFBwu-gjKVoAgocMVNz-60BI.roa (hash: 9B/mGGQv4u8s5lKgfWdd5cuX4df7cbeme3ehFibb+MU=)
                          41: xqUO64Yhjxvnxp68bsdSDgI1hCc.roa (hash: fWTbsfazDrklyI7rkW/wNb5j/5lt8xlGmvhmb9zPe5A=)
                          42: xw5_GaOg57nda4hcEHKSmjccjjQ.roa (hash: tgL9BwerYw9rnWSehN60aC5obrMZ2uz4ubLgrR8KIGQ=)
                          43: yFln9FJcU5QAoqJuY7gN6gAiaEc.roa (hash: SSJ2fK40/h8DTM4X4rrCEU36uY5lJHxE2iQnR1vgY20=)
                          44: zAfILLQGdMn9_H3daB3YDMYuvvc.roa (hash: G1CyC21mffFPH4Sd/OyY/uj22wQjVxjdQJwfemFe6mc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Jul 2025 16:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3815 (0xee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
        Validity
            Not Before: Jul 19 22:08:09 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=941718ED009CDF242900C7D17EB829A06CF0F8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:aa:68:d2:a2:4b:a1:33:fc:28:bc:7a:32:
                    4d:ed:93:dd:5e:89:7d:49:0c:77:fc:63:35:e6:eb:
                    4e:d6:92:b7:0e:03:43:f9:99:3b:c6:2e:92:e2:06:
                    d1:7b:98:61:1b:af:e3:c9:e7:8b:ee:cc:32:db:52:
                    4a:5d:eb:ff:5c:f2:ae:84:aa:63:ce:6b:cd:1e:65:
                    05:50:8b:7d:90:d5:a4:5c:25:a6:66:02:0e:28:9f:
                    2c:c5:ae:14:c4:ae:84:e1:f7:ee:c0:88:8a:a7:2e:
                    7e:f9:ee:0a:37:1e:d6:07:df:ac:16:bc:91:4c:8d:
                    c8:06:32:c3:e0:ce:2d:76:1f:65:1d:e3:37:4f:0d:
                    92:18:d5:76:08:0d:4a:0a:58:50:e8:ac:53:59:ef:
                    89:83:17:ed:b4:49:32:62:5f:5f:e9:85:1a:54:ff:
                    5b:a3:35:43:db:12:e3:2a:3f:db:18:ef:9f:2e:b5:
                    27:82:76:d1:5e:dd:fe:cd:98:c1:e6:9c:0d:21:24:
                    ff:5c:06:b0:24:c0:af:d8:5f:00:83:6c:99:98:21:
                    35:e1:68:5b:33:b3:0f:0f:42:9d:29:c0:ba:85:6b:
                    97:e0:98:a0:99:cf:71:85:b2:fc:20:2d:a0:f5:d2:
                    6e:7d:b2:3f:5c:f3:71:79:d4:3c:c5:98:2a:64:64:
                    b7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
            X509v3 Authority Key Identifier:
                keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0d:d6:18:2d:84:95:97:fe:ee:5b:f4:f7:69:2e:ca:e3:f7:
         8d:b7:d9:97:34:40:b0:cb:17:b1:9e:1e:5c:6f:f8:ee:4d:b3:
         3b:e3:0d:d7:b8:de:b5:4f:5f:94:ec:7c:37:e2:1f:a7:2f:b5:
         70:79:a2:2b:07:93:86:b7:c4:6e:f2:71:13:4d:2a:39:35:24:
         ef:11:e9:4c:4e:9b:31:1a:34:42:be:64:31:9d:1f:0e:34:80:
         9d:e9:b5:77:f7:8a:dd:5c:46:85:ab:05:db:a4:18:f1:19:ee:
         89:93:99:34:66:9c:95:22:d3:c6:4c:23:27:9f:f7:6f:81:97:
         02:d3:46:c3:b8:d1:91:78:be:32:f8:b4:ae:9f:03:d1:8d:e5:
         64:c3:7d:80:c7:13:91:01:f9:d4:b1:38:30:4a:6f:15:4d:96:
         51:fd:11:b3:76:4b:76:ae:46:04:2d:a3:3d:6b:e7:4c:3e:7c:
         bf:93:7f:b3:9c:e4:4f:fe:7c:56:0e:bb:ef:dd:6e:9c:4a:d8:
         cc:1b:f6:9d:fc:2a:29:58:d5:f7:71:4a:6a:71:a0:26:52:91:
         7d:76:fa:d4:46:44:d1:58:9f:8c:08:6a:c4:dc:0b:ad:f7:2d:
         48:ed:75:36:96:75:e9:d6:4e:34:bd:20:90:e6:aa:88:23:8f:
         65:52:ed:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----