Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
File:                     JX23uZGZdWlzZrcBT4z-KO82TnM.mft (raw, json)
Hash identifier:          mlyn1cAt8SEnAVlcY3IlKNEce1TJc+QN5PigVNqDrNE=
Subject key identifier:   A6:7B:B6:01:33:0E:55:E0:31:8C:07:90:16:ED:DD:96:F6:71:B4:76
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       0717
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
Manifest number:          0679
Signing time:             Thu 21 Nov 2024 07:24:38 +0000
Manifest this update:     Thu 21 Nov 2024 07:24:38 +0000
Manifest next update:     Sat 23 Nov 2024 07:24:38 +0000
Files and hashes:         1: 0dRALIpK4HmN5-Sr1TedNUwRFxg.roa (hash: 0PTnxefQL3HxVYRTbk1CKte3YQIKvxrTwkR9nVW9Tis=)
                          2: 14HqjdHXd5qKNS_E9qs_Syh3qPA.roa (hash: oufCUWRVXs43yrZfpSnau2MgimbKWPXmnKJkxXSQN2w=)
                          3: 3EKzYf745b-2665iq1z5y5ivUfs.roa (hash: QGVa0Kouu/forB0pvZETkQ0WzDdYFygpaYV2gYZo/Zo=)
                          4: 8LnOL23gz3frQ5h-ct61OJ1ItiE.roa (hash: xHH0c4/0WNyPwPRyyF7p3+bE9awcDAnLG/oTR2Va/tY=)
                          5: 8YXm4xDhouCmygDskvXFdchfcow.roa (hash: 8sYgFsM9ZQIDnMSMqb0HHGcqjjBb6VF+69H73liE6qA=)
                          6: Eu6i5x6iR9Au_0sUDDY7HnClnh4.roa (hash: TS1/aSSKrNXovbyGiteslKip3cb0KrFkaQGPeKzFOFk=)
                          7: G2Ykj2l3phIcVtMM6VaOoWYJdgs.roa (hash: 7YSUkYloPstyGRxUWFTzKwPHdKiPy/q0ULg7nW95d7E=)
                          8: GHtRqvCiFyvOSenRVzvuKA8hD5k.roa (hash: UHwp4Fy4Ttx3eVIYjnRvNG/b8OzwuJeMj/0NxkWhucY=)
                          9: JX23uZGZdWlzZrcBT4z-KO82TnM.crl (hash: J1lhD93j15EJqbO77UuW1kfM75c4aD8XPVldxpbcwZM=)
                          10: LHgfYSdTZxNOoYJF5gC0B44OY3M.roa (hash: YCXf9VCtedABHrSiNuF0xqAdOhD9QalAkhXfkObIrGI=)
                          11: NqfYPXjmV-p1uEO4CRDqrDh8WHg.roa (hash: KiqQEAdfuEOZYZjf3FAuD94UqZl5vfISgiN6za9SV/c=)
                          12: OA2wLVyo1L-FqAtXUR8WEKCB2us.roa (hash: jT6fFHz2kgfUsy6Kid5PZQawnWIG87BIiu27NakfOyA=)
                          13: OY0XfEXixZoRhVdoxqs3FW9xmXs.roa (hash: 9wAWXl2qoUupCiuE54zxKOLch/WkD81MH5VbCAwjmVU=)
                          14: PINEahGUqZ-AXJ6mi-t70YdvAC8.roa (hash: 6l4CUc/HY+Cp75M15KXTW12nEPtECMdsOKDSqF1KHRs=)
                          15: UQ8DmkUTCB9GFw6gk4wF9fVoq7o.roa (hash: glHvpWnIIssHFrF0ju7BP7TVmTWxYWrISAG1ThFKoKk=)
                          16: YCcBtkrCK81KrwTI96Lw7mblt3o.roa (hash: PkCAJlpf7lhiqGPsPT0SeQ9IfjonaTus8mW/uDxnuks=)
                          17: aLOeQ-F4EpF8JrfH5pHsjON1bUE.roa (hash: YxK/MP1oRNWo8Bjwlr3P4X3835+AZt6YfWzR9b8qxv8=)
                          18: b879hwCCetQsEpCroW6u_cZw5qA.roa (hash: T6HLlWmkFl4l9vhqJVIr8qDzQXH9iRHnT+XCJaIuxjk=)
                          19: dtWqXJheZcnRqAmrqfJaWEMezps.roa (hash: VVSvt+Na5L5NseZMnq2Udi3zm5JrPzysTi1qwTz3TqM=)
                          20: e6ctCldZnVIycrlLqEoesEG4TjU.roa (hash: Yfrr0x2Gp+uA76xSpj0FvIQWna20/kjCSUw1jac5BT8=)
                          21: fY3ico_mQ2mSUGz1l-m_cVO51NE.roa (hash: purSts2iNl2SBPpzGWDTlVcMDPKqEM89q1hlDW29nko=)
                          22: ggcJu91vAQpJDG_rTj-tLyt4qb8.roa (hash: oG00aEZEu95EV2Ppo6ZEWSCTwn/jYrVEFgrrFBobZ9s=)
                          23: jM0Uhaky-H8CGHAtNG56Cc2s7hs.roa (hash: VsMzUSR73ZSOdfVa7Z9+hKbo2f7bOamjG6h/f0hrLKU=)
                          24: jwpH_h6e8ja8YLxRnJb8l6kVxYw.roa (hash: aKBfXuSrmkdotgUD8bDis0A+2cOViYgmWtVCdoTDolw=)
                          25: koGiCX_c2H-4cBkozpXYg21XSGY.roa (hash: 9wHau0Wdee9SMcpruS6lP3U3WsNwX6RQbUybuT8ptSY=)
                          26: lDXTS22hnwBNFgV6qLAgD0HYAl8.roa (hash: N2HxoJgAl5GoNLYwzj0Kwd4ASQXWlC2HJD5ZqH/1s9M=)
                          27: mBvb4R_HROzZIMaOU-UoH8H6xrc.roa (hash: +AtYXmY5MHi2KL/t9YIrPHAJZyea1Ee3gILD+4WCxg0=)
                          28: pCBV4rYUZ6NyklYsHFblOs8c3yc.roa (hash: KguZbKIYtCP+ziPS5EPLA+6/bi/C3ae0NDsSUFbfRJ4=)
                          29: pMF5rrFbcESlPIQgkhNcUXpCK0U.roa (hash: Qe1A9Uyb/JF9UwGLoX3b8ktKwP0Wq3rDk324ljRtqSo=)
                          30: skbOegMCvEECPNkLj6hqpjcsTzw.roa (hash: UbRw9Z2UZ0talRPh3atdD7QTsqkqtLq4iXfnmeUPxT8=)
                          31: yFs8b0PteXV4xGOGq2PgwfSgJN4.roa (hash: xK0E3E7OAn95/EazCFD+Ax/8/ofPzsB9X8UE/NhbKJQ=)
                          32: yHWJb-ErYMMtOOdAQs3wVR7FEQg.roa (hash: PFMTJ6nG9mqrZr7enzZn6kAldrhZ06/PuYNxXxNksaA=)
                          33: yevWzleE3arDxQnXiHkqC9KsWg4.roa (hash: mrVjXXWy05RbV9x6Ugao4a5GWtE+17Qf5gx5bciwPZk=)
                          34: zHMsDm7qtXYM-2krADSMFQVnT4Y.roa (hash: If+/t6A7vQ93AipSfd9M6ai8/H0LoersNPJfmieIq7w=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 11:24:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Nov 21 07:24:38 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A67BB601330E55E0318C079016EDDD96F671B476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:ef:4c:a4:e8:ff:a9:11:bb:d1:ba:46:bf:
                    22:5d:54:4e:fe:f5:0e:75:88:c5:c2:8a:ba:53:ca:
                    7a:73:1b:b3:23:f2:39:96:e2:ee:e8:c0:9e:57:52:
                    3c:3c:4d:60:f9:e8:e6:2d:e1:49:41:56:6a:6d:38:
                    76:59:5c:12:e2:93:37:31:e9:5b:b9:aa:9f:fd:80:
                    e4:45:44:3a:1a:70:73:a5:48:66:6a:c7:9e:94:a1:
                    5f:99:e9:ca:16:10:8d:5d:27:7c:ad:82:5f:9d:75:
                    70:c2:37:02:05:f2:86:1e:3a:74:26:76:e3:f2:c2:
                    ba:1c:ea:fe:51:c0:b2:8b:ae:c2:58:bb:14:6c:ac:
                    f8:61:95:6d:05:0b:21:15:61:48:bc:45:77:ab:b8:
                    1d:7f:67:69:df:39:0c:b5:87:1c:5d:58:8a:db:b5:
                    bb:8c:a6:27:4f:07:b6:00:aa:9a:1d:9a:c0:98:8e:
                    0d:f9:20:36:21:43:87:ea:c4:fb:cd:b8:9a:9d:14:
                    1e:bf:5b:4d:56:b2:f7:73:0d:62:e8:8d:78:c3:11:
                    66:b8:a3:ae:93:45:9e:0a:db:62:e6:e3:ec:bf:d6:
                    9e:e2:5e:48:7f:5a:09:c1:01:28:92:eb:65:9b:8c:
                    62:ea:19:09:15:d8:30:82:ec:0d:1b:39:9f:ee:06:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7B:B6:01:33:0E:55:E0:31:8C:07:90:16:ED:DD:96:F6:71:B4:76
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3e:f4:8a:7b:39:12:e3:31:2f:99:f5:1c:66:c3:fc:1b:99:
         a5:4d:56:ba:75:d3:cb:dc:ba:d9:7b:84:d8:ce:ef:2a:0c:b6:
         41:a0:dd:fb:f9:a3:83:56:14:f2:64:66:2b:52:c2:5c:8a:5e:
         9a:1b:d7:51:02:a1:a4:e4:4a:7f:6d:27:04:c6:1e:48:01:2f:
         df:c4:3c:db:56:5c:5c:75:0c:33:fa:7e:31:4d:21:dc:f5:db:
         7d:8c:86:b8:a6:48:2f:e8:e2:a4:7a:76:35:ea:62:b8:67:74:
         b9:58:ee:ea:f3:97:26:03:94:ed:67:1d:fb:be:77:ea:32:e2:
         b1:96:95:b4:7b:13:59:cc:c3:23:0e:d9:9f:50:23:b8:96:b8:
         9e:4d:b1:81:83:d9:9f:95:dc:44:85:ee:a5:82:e7:1e:97:a2:
         98:ff:8b:54:f8:70:33:b4:5e:c9:68:f2:98:8c:22:8b:96:c7:
         cf:7c:6d:90:e9:32:b7:89:7b:72:34:26:ab:8f:4c:2c:04:ca:
         ab:d7:04:96:b9:cb:0b:4c:31:dc:76:e0:2b:7f:d0:91:2b:d8:
         f2:b7:95:97:4a:46:b6:98:ef:da:49:91:d2:6a:88:93:1a:c3:
         21:48:a3:45:fc:1e:28:9c:2a:f0:10:f2:3e:b1:a6:e7:d1:f6:
         bd:4b:91:25
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3
REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yNDExMjEw
NzI0MzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE2N0JCNjAxMzMwRTU1
RTAzMThDMDc5MDE2RURERDk2RjY3MUI0NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYeu9MpOj/qRG70bpGvyJdVE7+9Q51iMXCirpTynpzG7Mj8jmW
4u7owJ5XUjw8TWD56OYt4UlBVmptOHZZXBLikzcx6Vu5qp/9gORFRDoacHOlSGZq
x56UoV+Z6coWEI1dJ3ytgl+ddXDCNwIF8oYeOnQmduPywroc6v5RwLKLrsJYuxRs
rPhhlW0FCyEVYUi8RXeruB1/Z2nfOQy1hxxdWIrbtbuMpidPB7YAqpodmsCYjg35
IDYhQ4fqxPvNuJqdFB6/W01WsvdzDWLojXjDEWa4o66TRZ4K22Lm4+y/1p7iXkh/
WgnBASiS62WbjGLqGQkV2DCC7A0bOZ/uBt+rAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQUpnu2ATMOVeAxjAeQFu3dlvZxtHYwHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB
T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB
L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBL0pYMjN1WkdaZFdselpyY0JU
NHotS084MlRuTS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQ
PvSKezkS4zEvmfUcZsP8G5mlTVa6ddPL3LrZe4TYzu8qDLZBoN37+aODVhTyZGYr
UsJcil6aG9dRAqGk5Ep/bScExh5IAS/fxDzbVlxcdQwz+n4xTSHc9dt9jIa4pkgv
6OKkenY16mK4Z3S5WO7q85cmA5TtZx37vnfqMuKxlpW0exNZzMMjDtmfUCO4lrie
TbGBg9mfldxEhe6lgucel6KY/4tU+HAztF7JaPKYjCKLlsfPfG2Q6TK3iXtyNCar
j0wsBMqr1wSWucsLTDHcduArf9CRK9jyt5WXSka2mO/aSZHSaoiTGsMhSKNF/B4o
nCrwEPI+sabn0fa9S5El
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:23 2024 by rpki-client on console-fra.rpki-client.org