Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
File:                     JX23uZGZdWlzZrcBT4z-KO82TnM.mft (raw, json)
Hash identifier:          l+GfmYze55WaoUSczDv9HNeurmd8vnQA/y7zgA7SFho=
Subject key identifier:   A6:7B:B6:01:33:0E:55:E0:31:8C:07:90:16:ED:DD:96:F6:71:B4:76
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Certificate issuer:       /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial:       083D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
Manifest number:          073C
Signing time:             Fri 04 Apr 2025 08:36:28 +0000
Manifest this update:     Fri 04 Apr 2025 08:36:28 +0000
Manifest next update:     Sun 06 Apr 2025 08:36:28 +0000
Files and hashes:         1: 1PbSh-akEpBWdwH8TxknKcGI2Qc.roa (hash: FlgYEhUB8Co5VEc6Z95U4RQMMdUsfTUC/n0BNBCQcvg=)
                          2: 1ThVdaoJkKialZuUyfjyCbVUT40.roa (hash: 4GX4AQlfS9XnCO1N5KZiRFmFN22cuAbxziJrcPm8Tvg=)
                          3: 2sIaEJO1lhXuygM5MBnBSqJ5Aoo.roa (hash: TJAKclQ7FC09EEWSaWV6Qf1HFoJkjkv9SJZoHhGKv88=)
                          4: 3yk8VYoeX4Y7BnxIJ4KdKyT4Ecg.roa (hash: s6a1PQDI/GRBdfP/rD2j14GE7v1QJ19cO7gwim5PSC8=)
                          5: 5a10hckju7Nb5Kau56UJrSBWN5Q.roa (hash: awi/nxAzZr7t3CsVjTuOvQ6wFJBfXTjxb7CVtwpvkLY=)
                          6: 6jhCAVsAEif59XJSp_ByCGkHif0.roa (hash: JBCJUwCEJoTzqzXFwB3jcso5poNs54vMmjiJ3l5Rhb8=)
                          7: 7960XTulI_UNCe1Wq7ZQucTOstM.roa (hash: /erIHRyxwTMyiE/VijPMsxZAyvxY8miiCtIYkZNbbCA=)
                          8: BNeBC2Je2cjrrv9Wfz4YiDiYCfQ.roa (hash: TE/F7HiF/MCtF+uAnGZXif5QdZGyP7CP6EvGLrJ+eOU=)
                          9: Fg9x59aFjlliWMuBAeWelnaQmz0.roa (hash: C3Kw0ZgDnizcx8UwZPCULryh8/vJToOHSqeOiCBRdCY=)
                          10: IKnwvUPvQgSALLsx-t_OHZQxVYc.roa (hash: gdavrcrM9WdqVkRav9a9A0TtaO2ZdbQE7gza++k7kLU=)
                          11: JX23uZGZdWlzZrcBT4z-KO82TnM.crl (hash: X2Gc03qwabqZFRKDvnIP9WYANhTz73dezdAgsHNejKo=)
                          12: L-94wboaaVgPHVkRYvI7gZfD_9s.roa (hash: bXAn+Hu3fjVuxA6uW5fP3em0sJ+rJeQr42FQ06boVqw=)
                          13: MfszGtR2dwxcf143HKZ-Nbv_CWM.roa (hash: PJHyAN9AlzKr7wDiemfzd/ffYEe9JFaQJp7WgCubBOg=)
                          14: OCddZIEAz9W0-xmwDu3UXvMDvUQ.roa (hash: TvSuEV/9esgoUgWn2N42+OsQd8vML6tPdgY6Seutg2c=)
                          15: QEGy_JiOeWDlHFmOphaeWrhRPAM.roa (hash: VhLV0o43S+zeWqNhE5w8LJgrosGBqBdZCFMsVjk+/A4=)
                          16: R0X2ZZGXnipKb8tfawtpurjWMXE.roa (hash: rQlhAl0JoXasmldHCGizLJJtW3x1AHuacxKVKycm6rM=)
                          17: SChvRI6t8GVgNAHnlDZb_arOi4k.roa (hash: VcqybCs0QaK3EwDmEOV3MsYoFzcizsdmVw0OJyVRW/M=)
                          18: Smzr0oI9Mt0W4OD3NV_GfCeHH48.roa (hash: Q5QWELqviUcbXJMCcbEgLw1YNwi9oA39cGEAIV89pYE=)
                          19: UeSxuH9_5rhS8rVwFfuqUpcd0AE.roa (hash: T3KOLIrvulruedCKBPKf1W8sFJYYXTPR0de+NvGNMdY=)
                          20: XAgJp8wGygf2F1yjeLhm7LwdpVk.roa (hash: cyzeS2Aak4vSvsXPe1t2lgED2mhPz6MsE4RPAUSyTFA=)
                          21: Xsx9JVvgAZPb-IvejCLYA-BwxgE.roa (hash: Dc+jgZV6FbEHEx+1c6V4rkSFYf0Dir0CqHxCngR7Gbg=)
                          22: dtozVWTr4k6wqE2pmiWIXc-jtvQ.roa (hash: 4tTx/wvOcFfn4EJ5rSIHG1LpnvDzWkXttKMlZaOJMEI=)
                          23: eYvkALsA4MvgoEHrjYFSqOUQea4.roa (hash: LYCOdo9I1ggYG0GO18ZtJ72cD52GucHntu+MfcFEdgU=)
                          24: earjNJ22xSAf0h3LLM7zM53oSu4.roa (hash: FkFFZspIIy4AomQwl+A1qCP3G6CllbRW2n8EML6mOBY=)
                          25: jzDMpnJqMdWwDz5gxf1UUhMSZaM.roa (hash: mfIQs2/7k8EAC7Bet3PUcJCVRTVc78KFbu3H/35vm2Q=)
                          26: kogDtg33wQ4lcjRGa0cxGa3_m8w.roa (hash: 6TcKfkoWFdPeqH7VfELr2mQb01e675VS0FQhvWS7jts=)
                          27: mc0NGujw0NZIMQfezcA2d3SkdWY.roa (hash: /TBDiUPmxqn0+zmC2hr8koGEyWJia6MfZb7ZlHOCy1w=)
                          28: oW2b6Frim7BzpjWh0yoMjeG6EaI.roa (hash: KoM7TKJ0noVcKeixxHKVWbb06GYncGp37mrPoHQc/zU=)
                          29: p9s6eNnU_cxDhgUCZ31ripJkHSY.roa (hash: pGxIHlm0F0bAixiPB4I0ToccTbAPeEheYpEfnmJgLCg=)
                          30: uaPCbKZq15NVbtweJv7WtywLv48.roa (hash: 0l94X004grw0dIoTIwVSKLYrGx8DsDRZHZu033I4/e4=)
                          31: vYvorumRfYYlkH-5546E8rUu0Gc.roa (hash: DNQqRM29eKz3sH6M6Zi5Bsse3MHx+oMmQRfSuiGQ0BI=)
                          32: wRyUW2ckM9N3imr8vpl7s-4pLuM.roa (hash: 5v9UK90jSzR88IFUBZZdHdJJA/IlSpXpEu9/2CmMj6o=)
                          33: xwv6W-sSPbkSMnZ17nEzZZKHtQQ.roa (hash: 0GiClcAnjYe5aGWPDtZm2ee46UCEppI0cNRqKGiDdro=)
                          34: zU3YWZyStlpE4HJAmVRL-a8PZnA.roa (hash: Ju978NYbKQWyYohWneIrqjr9OFZSneCb3ZOEyykXteQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 08:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2109 (0x83d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
        Validity
            Not Before: Apr  4 08:36:28 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=A67BB601330E55E0318C079016EDDD96F671B476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:ef:4c:a4:e8:ff:a9:11:bb:d1:ba:46:bf:
                    22:5d:54:4e:fe:f5:0e:75:88:c5:c2:8a:ba:53:ca:
                    7a:73:1b:b3:23:f2:39:96:e2:ee:e8:c0:9e:57:52:
                    3c:3c:4d:60:f9:e8:e6:2d:e1:49:41:56:6a:6d:38:
                    76:59:5c:12:e2:93:37:31:e9:5b:b9:aa:9f:fd:80:
                    e4:45:44:3a:1a:70:73:a5:48:66:6a:c7:9e:94:a1:
                    5f:99:e9:ca:16:10:8d:5d:27:7c:ad:82:5f:9d:75:
                    70:c2:37:02:05:f2:86:1e:3a:74:26:76:e3:f2:c2:
                    ba:1c:ea:fe:51:c0:b2:8b:ae:c2:58:bb:14:6c:ac:
                    f8:61:95:6d:05:0b:21:15:61:48:bc:45:77:ab:b8:
                    1d:7f:67:69:df:39:0c:b5:87:1c:5d:58:8a:db:b5:
                    bb:8c:a6:27:4f:07:b6:00:aa:9a:1d:9a:c0:98:8e:
                    0d:f9:20:36:21:43:87:ea:c4:fb:cd:b8:9a:9d:14:
                    1e:bf:5b:4d:56:b2:f7:73:0d:62:e8:8d:78:c3:11:
                    66:b8:a3:ae:93:45:9e:0a:db:62:e6:e3:ec:bf:d6:
                    9e:e2:5e:48:7f:5a:09:c1:01:28:92:eb:65:9b:8c:
                    62:ea:19:09:15:d8:30:82:ec:0d:1b:39:9f:ee:06:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:7B:B6:01:33:0E:55:E0:31:8C:07:90:16:ED:DD:96:F6:71:B4:76
            X509v3 Authority Key Identifier:
                keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:49:78:88:87:22:45:9d:bd:87:e3:59:7e:db:43:0f:04:e8:
         07:23:72:47:e2:03:09:45:fd:7f:25:65:6c:a0:27:c6:e5:3e:
         1f:40:a6:74:93:03:cf:d0:6c:09:e6:c6:4c:54:b4:f0:9f:c2:
         ec:c1:c8:fc:81:f9:d1:e9:36:f7:84:82:e4:9d:18:8e:35:96:
         19:cc:74:98:2c:b6:4c:16:72:33:53:32:f8:90:3e:a4:b4:9a:
         88:49:5f:d2:70:89:bf:2f:16:8b:cf:c4:c0:c6:87:3c:86:1f:
         02:dc:4c:b8:f3:ee:0a:b6:0d:ae:1c:66:8d:3e:8f:21:02:d7:
         42:88:26:e8:a2:57:bb:f3:ed:77:49:3a:9c:a3:5b:55:2a:63:
         2e:51:02:7e:e9:aa:bd:56:c8:ae:25:e9:59:ec:ff:05:a1:56:
         ce:cd:3d:30:d2:47:22:84:f8:a4:a6:34:fd:94:91:6b:9f:6b:
         51:0e:eb:59:9b:7d:56:a7:32:60:5e:ed:70:01:8d:97:ce:06:
         ca:7f:9f:ef:54:e7:ad:ed:62:9d:a0:2e:da:11:91:d6:14:4b:
         57:60:c2:d5:91:92:23:ae:24:48:68:3d:66:15:df:33:84:e4:
         c5:95:65:7e:20:3b:fe:0f:0c:d1:05:e4:b4:8e:4a:cf:8c:55:
         c9:17:6d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:06:44 2025 by rpki-client