Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft
File:                     XR4_PIuoncExBBA0X1DBAHYYEmE.mft (raw, json)
Hash identifier:          PywDLNR3lBS1ERboQPff1CrupIUDBLRvUS1btzLhE70=
Subject key identifier:   00:12:AE:94:F9:25:7E:B0:E2:4E:6E:36:4A:E0:E5:F5:36:05:AD:53
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Certificate issuer:       /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial:       0D39
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft
Manifest number:          0C27
Signing time:             Sun 02 Jun 2024 02:54:18 +0000
Manifest this update:     Sun 02 Jun 2024 02:54:18 +0000
Manifest next update:     Tue 04 Jun 2024 02:54:18 +0000
Files and hashes:         1: 3FU4gX3ffjhiWGJFrszfvPquhxQ.roa (hash: Dv6B8OadEpgh+IewQ1PB1xJfgcA7l39jOmIiavZoqIw=)
                          2: 4g4O9f0sbG16PEan1hV0h7uFPTQ.roa (hash: 3UnNcBinju5Cw3l3e7dHrr9IuFPiynSAZxTrLWKKjRw=)
                          3: 7-odCCdsjRnCxnskD3y9g4Z3TuE.roa (hash: Rc2+ZO9Evw9Sa16DVVW83lqv6Z0mwmfTEF0RMpzhR6E=)
                          4: 7Mg5uQvUOztOIe6Eq00F1cHlIqE.roa (hash: wUSd0lfRocOIds6Jfvva8/UjaZMGN74dyCgimeTzlXY=)
                          5: 7Szk38jmv0AQ8kurLVtOpB4yAGk.roa (hash: ghDs/I+ADSG4O70Vlu+G/NY9TjN05c45WGgFjx7Dup0=)
                          6: 7dO8xf7jH6i1oHW5nsTQ6HTS36c.roa (hash: mUo9onhOWtb6SuyNoCNNoY11wwur4HJZDblwRsxj+DE=)
                          7: 7zUnTvTIVJD5III4XmZnnSF0sQk.roa (hash: SgTxV17VhpN26F+PNk/2hJecGDVp/w5FcM53IsOoiuc=)
                          8: 98iFnMAWgpY4ULrio52NcwitUGc.roa (hash: xYMOYmM0zJrLMhL4QuTDY3tomo4WDI0q1r3jHGgDMEg=)
                          9: DQFSpg8AQzE2KOD8kFUVysa7i3Y.roa (hash: iEXq+wPsCgWZRxvrid5aa/LvsazhElGeVL5eL20ERG4=)
                          10: Drp7VOlboQY-4GSuHdjTrvcN5RY.roa (hash: NwKWwNZAEdOzXManl3RJCd6leLuP6bwSOy9EznQuHuo=)
                          11: DxWBsehLKviEZjPPkpsjxllh5jY.roa (hash: at40l+pmFJ7CegAPPLOOTkD59NIPzW4chwg2z4GXFFo=)
                          12: E0tLE6-RYQpkCPJKSCmCwIL5eOA.roa (hash: YA9lpePsdZXNZDH9ZVqnBdhD6cE52RnrWxQ3YXEMYqc=)
                          13: G_pHh4LtIn6ilAy5-yzxanaWmu0.roa (hash: pr2arg2agZk88Y8vwkRWz/U3CTYUbbovO4pgMfEb0l0=)
                          14: K4R-secfi5f9LiE0Ba7_ZuasR1k.roa (hash: gmXQyO9ZNRpihEX17FoNxuOlzj/+uaujSbZ7QkQq9Ok=)
                          15: L5J2MruoO2-rbqJumTMsnR21D5A.roa (hash: gmmrk/PSSLPuSymOJ79yVkOG1/wMpiRZMW+NpzJUVR4=)
                          16: LVfx9iET-Nj0wdk-X42EWCWD8Ik.roa (hash: KwLIgpCS7cHFCTih5fDiHHKJpLRtHvZBEL1s5CHtsGo=)
                          17: LoxLvnF7vka-K89P5l3UiB0o0v0.roa (hash: GPi+m1lq8xLXhgHWUKdMKd8EO4kf5vjVPx/I9lAstT8=)
                          18: MDgJDWkTtHd39EeMN_5fewioG3U.roa (hash: dym4+nkmhKtBtjzG7B7CgI+39TxPME3mR3pwDYmb2O8=)
                          19: PGHsuKKZwL-QAroRS3KM46ufysY.roa (hash: AXESdcF4xbMsTfJn8M9y4aXRczdLRRM6ZqCsUw9kRbc=)
                          20: VITMqGLL8lph7Gx55NIt6xHC-ZQ.roa (hash: czJImi0LTb16TV4UVWldHq+4HipxOPPY3HczY4E4KdE=)
                          21: VfDbPZ2wZOSdWQbsl-AmiEtWsHs.roa (hash: WsrTcW/SIvQ3L4794raKS6YrUq9EF1C5pU49ohczNMc=)
                          22: XR4_PIuoncExBBA0X1DBAHYYEmE.crl (hash: WsS2/oWZiL4BNVhG4zK+VAGSN3msSXQKqdUtkE4cu24=)
                          23: YlnAkvURw4_Ofhccg4nJnc6ZV-g.roa (hash: s4+ugtz+3p2ZGbOHXT5chuIfO1RO2G+W6lEJ3FUGBAw=)
                          24: ZJJqiFqjBmU-BpCrvLs3EegFm0k.roa (hash: DtYSJ45PMYK5itgYqn33JV8xHDzr5Cg+BC9RM9Sk9Pk=)
                          25: ZdIst483a6d-kjAWtSZEz_4rEDw.roa (hash: jiRFccKDhoZAQEXEye4yg4vfCQH6NNDiAxTcdGfE+AU=)
                          26: bs3NiOX-g6uKLoLObIkbChu_SWs.roa (hash: s/Bqdg/Zrtdp8naUisbfE/H/bDaEirDV2zlW7O+z6RI=)
                          27: eao2QYwGh9WfDJ5OKctcX2QfhzM.roa (hash: W7o/Dxs6UzOfhc9eXvcxtdR7myYW6EAMW4D5hJxbGpI=)
                          28: gIyxlexR9D-ELNfkrwFYjmKjvLE.roa (hash: ly1WTg8hDxyA1qhGs4Ns6mtemsgpd9qoZ5aruZZJ1bI=)
                          29: gRpwspNHRemQRuP7MNV5av2EKLw.roa (hash: f/6b43C03FNe+5i+nMxLdExiB6JakTcF5b5ShLwr4yY=)
                          30: gnL9zjn-vmIZS0hXwesEWtKltK4.roa (hash: 1P3sIGFPtzN8CYFNm6dO0ErR0i+79was75QnPGq6JxY=)
                          31: jBfYhwpX_b8rzttSWccXHCWCsuI.roa (hash: RXDva9tVzx7pq+8UlIBvAGrmegk05kbjZlXIH7os0Xs=)
                          32: jMQu-sEBqqlap_A90eHPizOZj6I.roa (hash: esyg1VEJct6k1pqMagDgh+e4ri0YMW2IJKnn2+RzhWM=)
                          33: k6rLiUOzBHomssn1tHS11KpGvKc.roa (hash: HrQ3eYExguYtvZY3lRFhTf/3Vj2lBMOgV1Rsd3gjnlU=)
                          34: kZUqfeJA9Y2wtPZL9teP6c-1mBk.roa (hash: jcrYUyPAblQfsgTLkK03zQbrtTt82tly6i060ZINhHY=)
                          35: kk5Wjc-YkHfd083q0idJZJ8EZpI.roa (hash: aCKKTYHPbVayRQEAhNPp8uLdBWabNlh5V4lXSvIr6H4=)
                          36: mLDha4_bYY3NzTrlk7pkmLbN-Ik.roa (hash: obimOpEfZJijwxDdr/gsq3ZUzPMrdbIXqoug6lG0AEo=)
                          37: n7qWgNWwg3iWTwjcESmENiXc8Og.roa (hash: YxPHAEWkpb2Nsf01i3Y9cUzjI8j2hLAPJSQfJ231Buk=)
                          38: oSG-mFpW0SCqvqkaRBokFcifAHU.roa (hash: XaSBunFbGDKKODF02iYQMkUMQUVMtTRntSXFjBdTNsE=)
                          39: oiARlMdb-F9YR7Y5VQw6dAS56PM.roa (hash: CP8c933HAhVfVJ9eUtOfQ7h+1hU9i9Cb5da/wAXhCIg=)
                          40: ouQBXX5VBVvXpoGudj7X6mi_kAM.roa (hash: l7pz4hw5KE13Fr7dcdtDm0UaZgHQB5BbkVPTT9KBJCg=)
                          41: qF1TWgnCloE3aDN4EJsNezaj7xM.roa (hash: 31TX1JqUiriw0vyVKtGxVXHQGqClALHtAxJWvOnFXas=)
                          42: r3QLXk6jJJ2xUhnTyiukeVmDyTE.roa (hash: maABu675NKgVjMmovs//pAkGuM0VOsARkx1jjwLCYWU=)
                          43: s8bSSqyCGMGHfghAiuFSP3W9Qx8.roa (hash: V6eWZr6fZyCLXst0Fh64JF49OIRANa9oE9a36JrRjrU=)
                          44: tAj2M5cPidNRN_A4ub-80FnZOaQ.roa (hash: YwyV69lMEvx6wWHV4bq80Z119MSSIH6mgKTAqsEm8w4=)
                          45: u6icZCr2lDZYgRnZd4z1NP-_hQM.roa (hash: ghGXlSItY3XADAzHZUOh/iY6DNrC0nnFDQk57xN4tkk=)
                          46: xIyRdMmI1dtiCbEaV0nfRfLuTic.roa (hash: WJvGwDG24salfa80T1H82XOz3P5wduo/BUb0bPXf6bY=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 02:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3385 (0xd39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
        Validity
            Not Before: Jun  2 02:54:18 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=0012AE94F9257EB0E24E6E364AE0E5F53605AD53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:43:64:ab:94:4f:8a:91:b6:a7:5d:01:ed:
                    a0:76:56:d3:a4:a4:b0:5c:d9:cb:e5:2e:40:8a:2a:
                    c8:76:df:54:d5:05:2f:a8:9d:90:2c:57:fc:51:b7:
                    f0:69:51:5a:3f:65:5a:43:b4:ea:35:0d:2d:8f:73:
                    1d:7a:80:f0:f7:02:34:a4:b2:13:03:6e:ff:d9:5c:
                    6a:9d:0f:e4:14:93:03:15:eb:62:96:a6:b8:96:d9:
                    14:53:d0:7a:84:cb:06:33:ac:2d:a9:bd:5e:57:b2:
                    b9:4d:bc:a7:5a:ae:1c:de:ff:bf:d6:fd:9f:f4:25:
                    44:e3:a2:92:b1:f5:6f:9e:6d:8a:70:6d:e4:bd:42:
                    10:7e:46:da:9f:fe:21:08:33:ff:27:56:2f:fe:4c:
                    ca:6d:8f:24:05:c2:0e:6a:87:18:a7:2c:a4:bd:8d:
                    fa:c1:e2:17:04:01:f6:ac:27:4d:a4:1d:10:cf:06:
                    88:d7:3d:73:32:f2:20:75:59:da:0a:59:dc:f8:32:
                    12:43:4b:ab:96:35:89:8d:ee:b5:75:54:d8:56:8f:
                    aa:00:0a:ef:51:4c:4e:a0:96:ab:3a:0b:58:34:55:
                    b0:be:02:52:cf:5f:2b:19:56:cf:72:48:5d:31:37:
                    cc:a7:77:1c:6b:a0:6b:8c:34:f4:f3:b1:c8:11:99:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:12:AE:94:F9:25:7E:B0:E2:4E:6E:36:4A:E0:E5:F5:36:05:AD:53
            X509v3 Authority Key Identifier:
                keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:30:d2:a7:89:c1:13:81:8c:78:55:76:af:03:57:7e:41:51:
         1f:26:43:4d:3f:ed:c7:11:f1:34:18:bf:4c:6b:a8:6a:43:4d:
         bf:af:aa:fb:98:c0:aa:c4:7e:0b:53:47:2a:36:a3:54:de:a2:
         fe:38:d0:96:39:c5:d2:df:42:76:f7:2a:91:31:7b:65:0b:da:
         db:da:fb:d0:53:86:c0:0d:26:9e:84:6c:cb:f5:d5:1f:38:d4:
         0f:8a:54:d0:f1:5a:dd:21:f1:23:c1:aa:f9:80:11:c5:01:93:
         4b:4b:a7:0e:77:4e:c8:48:88:e6:03:eb:5c:fd:3b:77:22:13:
         c6:70:f8:ba:ed:9c:f9:3d:c3:6d:60:9b:59:c7:65:9d:0b:9b:
         f7:2d:5f:3a:18:64:3a:60:22:4b:8b:1c:ba:ba:65:f5:55:73:
         5e:de:a9:e0:1d:4e:e2:74:8b:b7:55:84:de:c4:93:24:c0:f4:
         cd:2b:4f:84:5d:dc:57:84:a8:d9:f8:62:96:5c:d7:88:d3:de:
         4c:a8:16:df:0e:b9:a2:b2:2f:f1:98:40:69:9b:49:1b:66:11:
         95:90:2d:5b:9b:9a:3e:a3:a1:da:1c:47:ab:68:00:81:97:a2:
         de:55:ae:c8:5a:54:b0:5f:a4:99:86:af:79:b3:86:36:14:a3:
         d1:a2:af:eb
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICDTkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yNDA2MDIw
MjU0MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAwMTJBRTk0RjkyNTdF
QjBFMjRFNkUzNjRBRTBFNUY1MzYwNUFENTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC/UNkq5RPipG2p10B7aB2VtOkpLBc2cvlLkCKKsh231TVBS+o
nZAsV/xRt/BpUVo/ZVpDtOo1DS2Pcx16gPD3AjSkshMDbv/ZXGqdD+QUkwMV62KW
priW2RRT0HqEywYzrC2pvV5XsrlNvKdarhze/7/W/Z/0JUTjopKx9W+ebYpwbeS9
QhB+Rtqf/iEIM/8nVi/+TMptjyQFwg5qhxinLKS9jfrB4hcEAfasJ02kHRDPBojX
PXMy8iB1WdoKWdz4MhJDS6uWNYmN7rV1VNhWj6oACu9RTE6glqs6C1g0VbC+AlLP
XysZVs9ySF0xN8yndxxroGuMNPTzscgRmefjAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUABKulPklfrDiTm42SuDl9TYFrVMwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9YUjRfUEl1b25jRXhCQkEwWDFE
QkFIWVlFbUUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzDS
p4nBE4GMeFV2rwNXfkFRHyZDTT/txxHxNBi/TGuoakNNv6+q+5jAqsR+C1NHKjaj
VN6i/jjQljnF0t9CdvcqkTF7ZQva29r70FOGwA0mnoRsy/XVHzjUD4pU0PFa3SHx
I8Gq+YARxQGTS0unDndOyEiI5gPrXP07dyITxnD4uu2c+T3DbWCbWcdlnQub9y1f
OhhkOmAiS4scurpl9VVzXt6p4B1O4nSLt1WE3sSTJMD0zStPhF3cV4So2fhillzX
iNPeTKgW3w65orIv8ZhAaZtJG2YRlZAtW5uaPqOh2hxHq2gAgZei3lWuyFpUsF+k
mYavebOGNhSj0aKv6w==
-----END CERTIFICATE-----
Generated at Mon Jun 3 02:57:38 2024 by rpki-client on console-fra.rpki-client.org