Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
File:                     36jEVIFcMBdFbqO0p9ACE7uFyWU.mft (raw, json)
Hash identifier:          03mw6L1c6mTLZB2S66B4OSeo4/Yc7mgybrgzopfScPY=
Subject key identifier:   E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Certificate issuer:       /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial:       144A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
Manifest number:          11A4
Signing time:             Sat 19 Jul 2025 19:35:49 +0000
Manifest this update:     Sat 19 Jul 2025 19:35:49 +0000
Manifest next update:     Mon 21 Jul 2025 19:35:49 +0000
Files and hashes:         1: 2XBjvhd9HsNGsz3sVX-YrUxN2J0.roa (hash: r3RprEbFY5D/eUUfDNspK5gO1L5U6LqeI24/RBOjPJo=)
                          2: 36jEVIFcMBdFbqO0p9ACE7uFyWU.crl (hash: tUe6E8xBN8tGoOsQfHAu4OQLQlTLpVIqdgu/l90oqF4=)
                          3: 6yeKJ4SBXFjOZ6lFfU_GjAnzo5w.roa (hash: w0r7gPk7NFbvooslria7JSIFRn4HORHadkqDZviF0FQ=)
                          4: 9YE3H9tQXm5n_dPA3CNYP-HKyNg.roa (hash: u2NXnt4a2nOymrLWWWIUbAjh0iqprGLPU4YOrBk6apw=)
                          5: 9hprR9JpNzKfz7fClJHRbQEEtkU.roa (hash: fU47rjPuUw+mWy0ZxTHSlwyV6VpkLo9pi3yBwf4K49E=)
                          6: DKAmm7WvROO-uq9Txso8xOhskiI.roa (hash: kHjrWIt3U+AspPuXQqE+ZeDId+XcnLjJ1iYQYYBAczE=)
                          7: FYVh_wmYVBNHR1BpVGCn3bDL4KQ.roa (hash: oDCQu1Wrys2+HN8dhUYJVs/7XulpZyArGc3tisrogns=)
                          8: FazexQlgZ1k5spmuNg6PUEiGJoo.roa (hash: PyBmuUjPVntFbwmUMUtLgikL/SN1R1iZBVPJn6wi29Q=)
                          9: FeYM9jwsUN9tCTXQszc7n3ifeZs.roa (hash: oA1hxVtTeJrHU6b5RpjxZk9ihgPs2IOXC2+YmewQxmQ=)
                          10: FfkdNsW_0brVVAClCLGO8vDsjtU.roa (hash: NJ5LnTpQpqg1MWRaULRQck26nsbj0kYHTpMn8Y79fOQ=)
                          11: FkHzksHnidS1buQGVe3OSwW4jcU.roa (hash: QKSP6ji6Q9q5lDJM8MhbST6bRWfD7IgQYXbNMGw1EHk=)
                          12: GPfsYbgxLLBar81CjOdsdqJAKPw.roa (hash: 6Y/RF8RerKBr+p4DJVQJIE5CQ7tQEJKmhV1kIappGwM=)
                          13: Kt144IxNF1SF__VsAGar25xhvc4.roa (hash: Bc/T5aHsxR2ugC/sj/rS8yp41XbrwYfCvCMaJi1a2SA=)
                          14: RxLNDBhbmRFtSAhqDIq62vUvecY.roa (hash: y1UGQ4p73UkndrTtaA5Sek64GoD2Qj8ypy20ePPodnw=)
                          15: Szni_yWlqO__RHm1SOUg9mwtG9Q.roa (hash: /dZcUGYyxz/bG4cMFooKd9B+l3q09s/+d7Mcce3hSnE=)
                          16: V4SxGypEsp134Pzd6scAQzLv540.roa (hash: gMJwfBnwxm27C09xK+bfDKD/oIcgx7aGOt7cmUZ5vq8=)
                          17: X_-Jkwrf4wwC6ItzLQhLePazlUQ.roa (hash: Nu17R64WXaWslx/ReIjhLvq/lF2xFDfTtETTKppn/Io=)
                          18: cNVMtiOzyQ9giYjcu1YV0t7b8t4.roa (hash: jDASBZzRsytD0EJ63YDg4xU01pfh6+bMvxO+/sHJ81w=)
                          19: edlKt9EZ_2zPFqWoRRS-i6IdHR8.roa (hash: mIHGr0wpUz9CZynd/KQO/iKBfS48rCtnmV2jl1Vr0wY=)
                          20: ncYAkuRgs6o1PI2mYg5m5e7kcPI.roa (hash: 0sMRlHrUXYYpCex3C7siKoyaZcMu9BlEAH1YttO8NlI=)
                          21: se7FJWD_woURmKPXQawb96dUemw.roa (hash: emadz6fOTyJp9nw7Ndopx0Zm4+LVYoYR1Q3HY/KcwF4=)
                          22: tJVO11kQc0ZthAAgZ4llTv8aaNk.roa (hash: Gf28MLjqRTr3HoAGerP01O+ND0rYXZbpw1REMmj51+4=)
                          23: toRjlGPVYMZtmxqOmLlk80gCpTY.roa (hash: aQX+Gf82MXttD+WePSOdOvWL9P/v1S5AH2vx3Ej/oXI=)
                          24: w-DdvlBPOjF1RTy13y2GC5cYQPo.roa (hash: HPBylB7AU3sZVqJwwScaX6BBWM8hDiRxliOCVTAJ0TY=)
                          25: yLYLiE-Y6-5FzeNJm-hXke6CdJ4.roa (hash: dV6ued2+tcVHLvdQkMcClUoSjJy0E/S6bZw/nSsAjQY=)
                          26: zZvi7CaDqsRI3a8gFXloPi1vna4.roa (hash: WAFO1g1ZR3BJEhhAV08tZCwYanqtXnrCEGFoIEJQB4c=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Jul 2025 20:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5194 (0x144a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
        Validity
            Not Before: Jul 19 19:35:49 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E3D8A0FBCFFB3039E9A81AF606A67073E115855F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:4c:96:9d:90:56:1e:17:3a:7d:ad:d1:c9:
                    37:4c:e8:b9:74:39:be:5d:e2:9c:46:0a:06:a6:af:
                    53:57:b8:c9:18:60:67:9b:a1:56:2b:cb:24:4d:0e:
                    06:fd:a5:5e:f7:4e:ab:c4:2d:77:d1:55:8c:32:c2:
                    28:50:95:25:a3:51:c7:a8:ec:f2:66:69:1b:2f:46:
                    43:b3:64:2e:6f:33:76:cf:45:23:2c:55:1b:db:4a:
                    65:91:f8:f0:d1:1c:16:a0:55:73:25:ba:07:fe:f7:
                    bb:7d:be:67:90:3d:d5:bf:4e:95:c6:b3:64:8d:d1:
                    79:33:3a:b4:05:04:5f:ec:df:ba:c5:12:0a:1b:3f:
                    b5:bf:ed:fa:80:d7:17:72:2f:25:e1:02:cf:38:e8:
                    c4:53:f2:b7:20:09:7a:2c:43:df:e0:b1:f9:40:7d:
                    7a:d0:b5:ad:87:72:8d:3f:1b:1d:16:9a:22:87:69:
                    eb:e6:28:a0:8a:12:7f:cf:69:c0:83:ef:5c:10:8b:
                    60:52:8b:9a:a7:2f:8c:6a:f2:11:ef:9f:66:15:03:
                    56:c1:e7:30:6e:cc:41:42:f6:1b:3f:b2:95:67:b0:
                    91:69:bb:c3:f6:ab:2f:63:af:b2:5f:23:0f:37:ae:
                    21:74:a0:76:aa:b7:bd:13:9d:95:62:b6:90:d7:e5:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D8:A0:FB:CF:FB:30:39:E9:A8:1A:F6:06:A6:70:73:E1:15:85:5F
            X509v3 Authority Key Identifier:
                keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:77:ec:73:97:52:a3:3f:49:9a:0a:29:f1:18:c9:d4:6a:fe:
         49:46:e0:9d:8a:78:59:3b:09:6b:b7:29:6a:d4:19:6b:bd:e3:
         60:9f:6c:1c:94:3d:f0:e1:22:27:99:74:a2:b2:c8:dd:71:6e:
         7c:1c:72:66:3d:35:47:45:d1:d2:3f:0e:a6:0b:1b:de:86:68:
         4b:13:75:a2:e8:cc:15:91:ed:39:ac:5a:0d:e6:5b:48:89:1d:
         7c:a7:cb:1d:19:de:66:2b:65:7c:50:65:9c:19:a4:eb:66:12:
         83:cf:25:33:ff:f3:a1:8b:70:d9:26:1d:37:7a:c4:99:04:fa:
         46:14:94:69:c8:cc:fb:f2:19:67:c0:19:e1:f7:b2:86:06:02:
         34:d4:db:5d:15:92:39:c4:6a:d7:a2:18:75:b4:39:0b:cb:2a:
         98:62:5f:1e:91:51:18:8d:9f:9f:4e:21:a5:ba:aa:27:76:70:
         bc:cc:2c:fc:0f:ac:43:c9:3c:7e:7b:c5:99:89:d2:c3:b4:a2:
         57:64:19:60:04:55:91:20:4e:24:df:c7:2e:a3:dd:13:6d:4b:
         1b:71:1b:4c:4c:47:1c:09:da:c7:09:fa:22:38:38:a5:fa:de:
         79:52:e1:6c:da:0e:e9:6c:22:c4:47:70:4e:61:ae:5d:3b:48:
         c9:5d:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:12:29 2025 by rpki-client