Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft
File:                     T7OmmWT36W2ws1gTKPAG28oaupc.mft (raw, json)
Hash identifier:          08YCN2jR1IhIqCabbBcpzu9S9IJ22wFxlpGN+MoiARQ=
Subject key identifier:   85:71:F1:A9:69:10:DF:3A:50:E8:C7:1C:3B:F0:35:48:02:A5:5D:8E
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Certificate issuer:       /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial:       0C91
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft
Manifest number:          0C0C
Signing time:             Mon 03 Jun 2024 07:54:40 +0000
Manifest this update:     Mon 03 Jun 2024 07:54:40 +0000
Manifest next update:     Wed 05 Jun 2024 07:54:40 +0000
Files and hashes:         1: -dk9TTnimQLJ844d8Di5SPkea9Q.roa (hash: 1wec2kJjWPM8pOiHp57sUcqUFrY6HfJYq1a6utaBZjc=)
                          2: 1TzhwJNL0iz0tR_eU5fz9Dl8sxM.roa (hash: jEYD+BxP/pLJom2SMQ7fCOgMw/UvjaDPPaVhVnEtejA=)
                          3: 5GoRWa8ASwsD0dCWI9I20b80k4U.roa (hash: qH0hiNyUMWs84aJY4EhTlAS38++2Vu268nylMnfYSrs=)
                          4: 92RGTo7w6gdeKN0wKTgMyqqZH7E.roa (hash: 3wivtP2dvTmwwxNzl1MAO+SvD7lgLHWDqKSo81q5oh4=)
                          5: AyCLzj4eRt7OINqOzl9PwORpI9A.roa (hash: PVXJK7jv/UHEHLVGpJJ75rJ1sHIATlXwJ1kz2xkKGAU=)
                          6: BBFFWCGyAgLN_yyAgViwrzr70Jo.roa (hash: XO4VyxT+en5jh1ApT9WRJkRRrFMRPZIPf8GS1lJnh2E=)
                          7: F4gIUawHIoMBIr0sClj1QhMx4zI.roa (hash: LxjvHV5aNe8NAFI54fYgH9V7s7Kns7tnOI5MS+1cxr8=)
                          8: F_2j9U4KE3PyNXVzizPJ8cMBQ28.roa (hash: nHjd6WM8L3PZlqKGbfr2sotBp/SqhialOHZnOrHThSo=)
                          9: L1TBtfPqHMPAS_Djx-7Chp5Gh3Y.roa (hash: lECOB/DIwB6PMRVPad9oTJ4zi83/VdToF3otKpNjjgI=)
                          10: LSRJvpg8JWdibVbGwJLW1VHj3nI.roa (hash: Ajw9OQkkeF+kVpihTxqUYZRt8Mcb7CN2/boWwb6pIFA=)
                          11: NCBoTrcug2WSzlzS2EQDqu_CGvQ.roa (hash: XzHRIgIT5OqZgkUXkPPqqS5pAF4e8nHDpsdTbFUhKkg=)
                          12: SYM9TpZu5xqWexUipOrsUhSI2ms.roa (hash: VnZjSa9EB4x//85mifJfn7gbqHHOMOUxcTL+rxjkeIY=)
                          13: T7OmmWT36W2ws1gTKPAG28oaupc.crl (hash: 11dlxIrXs0/CimymDtFopANoGi2SfKZgEYmP2595tA4=)
                          14: W_PsN0fe3nHyuBpmIIw5EL1e06Q.roa (hash: KZZ13rrHmWh0dKc3YOlcS/RcJAC+KbCONcfEaW4h7Xk=)
                          15: YcPnry1nWwB6PP9pJirhuIjqW-g.roa (hash: 5M8RpAGqTPq5dz6xVs842H2lc5hDudlnSJyT0kRmqYI=)
                          16: ZAD8yNrCJ-1-1qvLPGW_HJZvQEI.roa (hash: G/4yfmmhldkPxgLYpTQGv0Xny29dG8n74Rp+sjztPiM=)
                          17: ZDuqwJ-ASCFwF_PPRc9SyDhRIuQ.roa (hash: x548oP2FcdTB8YtrCYcQnwwi2X0kJjA0p7rLsyDgwYQ=)
                          18: bhp5b7K_cr0Fqv473Jx4JsKUqSk.roa (hash: LJWxQANlqn5XbXQ7lD8kSOvbXw4rPUWX5dnMmw6ARF4=)
                          19: cP8X894Nik6Pg_fbCUyEeA4AtDA.roa (hash: 6I6lylt2m89uWp5mJkka75zQRb0DvquDiBKZXku+AtM=)
                          20: k1-eN5fMZJfDZqcB7295-MlJemg.roa (hash: E8VjdBL4mg/ZghlnGv298ovW5UQiASxa7L7XN8YIzwU=)
                          21: nBhJ9lBFClFLxwXC25ahFn4Sk6Y.roa (hash: g9aao9fvU44ZjN2Jn7l5+Q2euy8Mc1hzfF4HE2tPWNs=)
                          22: ovVOyUx1D13rv2EkzwKm3BSJqTY.roa (hash: N81kGabu1v/qEVG2L+UONdG5d+4ORltrcU/zoaUM8m4=)
                          23: pa5XwQYcaGZuzOjBhGrKH40OCrI.roa (hash: Gev1RTMM9E/xa6NKjzRkwAI15BbzJaE7xBsg5TgNx7k=)
                          24: sESwSRR0ZTMxuj4BDgpxFsMILGk.roa (hash: sItv4JHVZq+/yJWIfGQ3VGeMM1xLCmLl2m4zz1MG0yM=)
                          25: t3v1URSXfboQ15bPEFGdkLME5vY.roa (hash: zFZYPKEiZz4J0p8JxsHLWigro6D+eiFKt+Nag55r6RM=)
                          26: uCoeJ22KyrQ0VmQDWXScyGKP0Wo.roa (hash: H8zB57w0Ub7Zj4mNrXoUMqyhD0Bvrv+PoleF7DyETaA=)
                          27: vOzR6SrRaXFZ4paruMo2wuzJAsg.roa (hash: c4uSWxqAWA3UM2z0LxpmUXN3slNWOjoJd3v2e/f/yuo=)
                          28: zGn9dPnybRTCRwECWGOs3aL4g8Y.roa (hash: r4Ra/qg1X70juEL0p5N1wudS5CDK1vU66T3eybFpjAE=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3217 (0xc91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
        Validity
            Not Before: Jun  3 07:54:40 2024 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=8571F1A96910DF3A50E8C71C3BF0354802A55D8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:92:87:cc:56:73:bd:62:44:5b:02:1c:3a:
                    91:6c:b1:b6:7b:a3:60:bc:00:6f:ee:23:35:ce:4b:
                    53:03:ed:e2:5c:15:7d:99:82:1b:ba:bc:a6:29:84:
                    e6:a5:62:a3:ab:49:7f:a4:19:a8:d1:d5:90:ee:6b:
                    e6:ec:b8:39:d3:19:e7:17:08:50:b8:83:00:4d:f3:
                    88:12:87:41:0e:76:34:3f:b0:aa:99:e5:57:a2:77:
                    f6:7f:a6:30:b0:ca:60:04:d6:be:10:e1:7a:57:33:
                    8c:1c:46:4c:a4:b4:64:9b:df:d6:f3:b2:79:bc:fb:
                    33:2a:39:53:a2:9d:b2:8d:90:84:bb:81:6d:a2:ea:
                    3d:c5:23:b2:1a:62:c8:04:64:4d:c7:38:fe:af:f8:
                    9a:a6:36:12:d1:15:c2:8b:e7:e9:f2:71:d2:78:e5:
                    01:dc:73:06:ce:9e:58:07:22:fa:e7:61:f8:a1:da:
                    ad:8b:4c:bc:a9:f4:d6:30:45:8a:b7:2d:3f:05:cc:
                    9d:c2:10:88:fe:fa:0f:b7:91:2f:b9:54:ba:c6:14:
                    b0:cd:76:d2:09:56:dd:f4:21:80:0b:ee:a0:a3:1e:
                    15:b1:d5:97:64:4d:68:57:cb:37:ad:91:45:c0:37:
                    fc:27:56:9d:4c:0c:40:f5:d6:b3:16:cc:4d:97:94:
                    a7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:71:F1:A9:69:10:DF:3A:50:E8:C7:1C:3B:F0:35:48:02:A5:5D:8E
            X509v3 Authority Key Identifier:
                keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:36:04:db:de:4a:67:34:d2:c1:ad:fc:2d:3e:11:dd:5f:85:
         ac:8b:e5:ff:c8:eb:f3:6e:e1:52:b3:25:ba:e0:53:8d:21:c6:
         d2:6d:45:81:8d:bb:ef:2a:38:6b:eb:e5:2e:ef:a6:0c:a9:9a:
         d3:2f:8f:1c:53:8f:f5:90:dd:c9:7d:4b:07:c0:2c:b9:52:ac:
         f6:25:9f:5b:44:7b:0b:bd:e1:78:de:5f:a0:52:5b:81:73:6e:
         30:af:98:f2:4a:15:7f:3a:8a:38:db:a6:1a:87:32:b5:34:f1:
         2c:25:c6:4c:e8:92:d6:b6:40:bf:04:99:7e:1d:2a:c7:60:07:
         ab:ed:9d:ad:43:7a:b1:c8:c4:37:23:1f:f1:50:a1:7a:cd:d0:
         62:fd:20:ae:a5:db:ec:fe:1c:99:58:ce:5c:d1:14:a7:6a:e6:
         02:f7:54:ae:f7:3c:a6:73:a0:c3:8a:8d:a7:78:41:e2:cd:e0:
         a4:a4:bb:b9:2e:f3:a9:d9:99:da:a5:36:6f:1f:67:1e:4f:41:
         57:7c:d6:d2:d4:e6:03:08:38:d1:8c:f7:e8:86:25:ae:64:6c:
         b4:29:8b:7a:ca:1a:2d:f8:41:7d:51:9e:da:30:bc:bd:0b:98:
         ec:3f:57:53:67:e9:f3:ef:5a:de:b0:e9:ab:73:65:cf:d7:5e:
         e9:41:60:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 12:44:00 2024 by rpki-client on console-fra.rpki-client.org