Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
File:                     mZu-Ex3100bydifMT4-p-1dYGSk.mft (raw, json)
Hash identifier:          9jSU+/oYDuSy7rIIc9J2MnxzbqQvUceLBPsO2/0pUXg=
Subject key identifier:   BD:55:C9:E6:36:57:E8:A5:1D:91:B8:AC:F7:F8:44:52:7B:32:BF:62
Authority key identifier: 99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29
Certificate issuer:       /CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
Certificate serial:       0F4E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
Manifest number:          0E49
Signing time:             Thu 26 Mar 2026 11:28:56 +0000
Manifest this update:     Thu 26 Mar 2026 11:28:56 +0000
Manifest next update:     Sat 28 Mar 2026 11:28:56 +0000
Files and hashes:         1: -E9a3ONfXUvwS9sfZWQ17ZHTYTw.roa (hash: /RlG6BFho278MRdnS5SbdYQJ1RmyEBDTmRjW3qS8r0A=)
                          2: 0GdIWU1lfyMQFzmPTedYn0sWG4A.roa (hash: GL3oftuTiSnmkXMNrfCrB3JoRYgPoki7421QGPoHNPs=)
                          3: 3OH1ZZgOMWLuq_xJb1MnW_5wadQ.roa (hash: RmwMP27jBoCAHcfMyNtj3mVOKBk/2ItEvxHp1Mg0nqk=)
                          4: 4XNPF_1nF6Ng2AQQ_Nz6hsTh1hQ.roa (hash: VZjRlQxuqk4LD4pAw6Rii3AS/uiQQBhLeHbfWkfSyXQ=)
                          5: 5IcBnAH6Fo_cLOb4lYqQjrsF1sU.roa (hash: 1UoRILxr7QKz/9rLbzPgJgvueW4e5X53/3Ny82FGSLA=)
                          6: C4uLlF5Ciya9aKOGPjTIwmPl5-o.roa (hash: VQTyMiK7U/oIqQKxzt2MtmuXMCUZ98OG30aavS1L7UI=)
                          7: DWaCWgJUcyRXhRjZJgD-Yg88RKc.roa (hash: n8cgeLUKiWP5EkWdkCf2KKvEtOVc5/nPobum9VCjxqk=)
                          8: ER-SMPdGNgPN4517j9vYP4x2bpA.roa (hash: 0iiozWeR1cp77SOP9ZrtAZ/P/kikzX3JtXhgjn7RIC8=)
                          9: Fi2Vb9d4VKjN3sHJykP1Y74w-tA.roa (hash: m3IF72kSEWutBNYdTIwi0ojSMqt/qMNJrG88RnXIx6k=)
                          10: H3DO5w7k6VNBLK6Z_pov-DzbgtU.roa (hash: vfC/nwTMrdWmv96v7NIwzqgPPk9MQ7008kPJq/18dNg=)
                          11: L6ppqKhZbyWldT4YnDnzg9lHVAY.roa (hash: JO8UfxNQDwpzGeONQuMn4DuYbs9pHLBOsg80em3/Y8U=)
                          12: Pb90gZyXOF2Cy-T2b0x64sqTRak.roa (hash: YES9i6OJR0d6ta1r+931LLSbGXNhMCZAAQC+W9Xx6NM=)
                          13: SM_WF-NbdPdB-g5Q-_SG9ZgQNQc.roa (hash: k7k1euLZrEShC/clR8AMKPa2nvfZj5nO/fvV3GdxShQ=)
                          14: TUt7vBbneFlBK4WgTW3qMMNEH1g.roa (hash: qmKV7StXd0hVBvspp8exyjZjVzKIKY5B1/1vi1bb838=)
                          15: WIGrK8jlt2kzP1_6gdaM0x1zDog.roa (hash: 4WLx8/NdGGxXXZZhxneDyt2DHxUUW54r0MkHCdUvyu8=)
                          16: Y890H_Q6o1t79dbsQACdRPy09ts.roa (hash: sY+wx/gCaPxqYHOoXZDrPvZOrT3g+5NBbxz/duR3Rm4=)
                          17: ZT81LEWgl-cAVOBaJ37heSOJGO0.roa (hash: XyUgNkqHNOPBZdxkrcLQVZtlX/gfmQH2FoEx9wUrjC0=)
                          18: aDLSW8G9y84sYfEF3k4eqkaIHlk.roa (hash: ctskumdXtD7iinj2b5keWRLGCs7iufISx69sy01ozBg=)
                          19: eJxYBOuYz22JJPgBRsthigMO0gk.roa (hash: gfXZxAgdD4AVNi+mCqG2SZKCGAOEiqSyKK6nmO+0WK4=)
                          20: eRoPsh_05MVIVXLPIVJj48qmcnQ.roa (hash: 9kmFnyWJjXzk07Q4/J0BtYegTq7TeNCpcDtK2ThMpWE=)
                          21: jWBYQ5pbCg6OIgs9Pf3VodgEIM4.roa (hash: Xb56F6mzkQr+C03qp42Cx3YA+qDHu0+PW8bBe9JMehY=)
                          22: mZu-Ex3100bydifMT4-p-1dYGSk.crl (hash: puDoOZoyFMrKadfcpli0PDMFJBu8azEU1uw/Jhp39Rw=)
                          23: ny1XGJtvd5q0xR2i8UUTvzKuR3w.roa (hash: fCYyg9Ju/DomoX4J+gwK21fE/lu4/W1OH9TzGkGfMX0=)
                          24: oomKe4sIa9WcWQhYtP1ySUemtpE.roa (hash: GWjMSAIp2GTL6xnSqJe+5P6TJ7W2wqG/3J/Feuo2olM=)
                          25: qb10jBUSS__aRyofeJ1wJ8zhTmU.roa (hash: qXAwUdQtZdFdorK0xXhZGKR6TcPGB4KualcreWDx3vo=)
                          26: rJSRRSJ82eb844ESSTTNRBrTjsM.roa (hash: 3XqDY54B2moYjfizW8cWVFahr+o9bn3ZhxmwR0jY+NE=)
                          27: rmGjxoFGyivv95aLnkG5sRd74yU.roa (hash: JYg151bQmrajPMUuu2WN3NSDKytSX43Uli66ziBnHlQ=)
                          28: sydBr4xKaQYOdLiz5nITiyme1LM.roa (hash: knoFvxrN5GTINwkfJI3ZohoaZyfQ4WX4WEctsRJxf9g=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 02:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3918 (0xf4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=999BBE131DF5D346F27627CC4F8FA9FB57581929
        Validity
            Not Before: Mar 26 11:28:56 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BD55C9E63657E8A51D91B8ACF7F844527B32BF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:c1:63:32:01:c5:b1:de:eb:56:8d:fe:89:
                    56:57:71:a0:b2:43:6d:70:89:1a:3b:7c:3f:e7:3a:
                    5c:07:36:16:dd:d3:f3:f0:a7:a9:9a:5c:11:4a:73:
                    28:69:8c:42:f7:f0:60:bc:34:62:39:39:f7:41:38:
                    7f:b0:30:72:26:00:0a:8e:0c:42:35:54:b1:a6:db:
                    61:4e:47:bf:8f:27:b9:ef:6e:1d:e9:c1:af:e3:04:
                    15:69:65:8a:d8:58:f5:13:de:d0:19:05:5c:56:36:
                    c6:be:54:61:98:a0:f5:1b:37:12:f7:af:7b:c3:92:
                    b5:f7:34:14:1e:4c:ca:70:10:b9:0a:32:01:b2:62:
                    42:3f:95:a5:ed:8b:91:08:84:aa:3a:98:c4:79:9a:
                    2e:69:26:78:86:33:9f:4e:7e:33:8d:84:69:a8:d6:
                    d0:95:7d:ef:35:fa:57:ee:1a:56:5f:c6:6a:1a:d8:
                    4a:d3:71:4c:40:6a:e8:b1:08:04:5c:b5:e5:fa:51:
                    5e:5a:4d:03:48:84:9f:63:78:59:4e:c2:ee:4f:76:
                    37:bf:2d:1e:46:14:7b:94:e4:93:24:e7:02:10:6e:
                    22:96:70:30:c4:4f:55:3e:12:b2:79:3e:50:dc:7c:
                    7a:e5:65:ba:a0:b4:f5:ec:f6:dc:f0:7a:a8:7a:fe:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:55:C9:E6:36:57:E8:A5:1D:91:B8:AC:F7:F8:44:52:7B:32:BF:62
            X509v3 Authority Key Identifier:
                keyid:99:9B:BE:13:1D:F5:D3:46:F2:76:27:CC:4F:8F:A9:FB:57:58:19:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mZu-Ex3100bydifMT4-p-1dYGSk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KE-ING/mZu-Ex3100bydifMT4-p-1dYGSk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fb:1e:3e:60:c2:76:cd:a0:26:76:02:e4:c9:e9:39:77:26:
         96:f1:c7:6f:45:9b:ff:c3:76:42:61:3f:56:59:44:ca:96:2e:
         51:d4:1d:d1:5b:4e:47:24:f2:a5:ff:5a:5d:53:10:ec:4a:c0:
         ea:6e:f4:24:0a:0d:a8:a3:98:7d:82:f8:2a:65:4b:70:c7:8b:
         54:4f:6b:95:fd:21:50:32:7b:81:bb:9a:ff:42:7b:1e:c7:05:
         10:91:bc:e7:e3:0e:e0:2b:7d:c7:fb:7b:f5:c1:95:f9:62:22:
         88:92:c5:82:57:4f:b9:dc:76:80:2f:87:25:f2:1d:08:e9:1e:
         ba:d6:46:a8:1a:7f:dd:32:08:c1:f4:d1:19:f2:af:7f:31:37:
         1a:2b:bb:ef:3e:16:d4:20:33:26:e0:00:27:4d:85:75:87:2e:
         b5:0f:b2:0e:2d:a6:32:4b:e0:89:e9:31:80:d9:a7:88:7e:19:
         94:cf:68:fb:73:0b:ef:a7:45:54:b8:89:f7:95:56:b2:65:c8:
         07:ed:58:7d:31:34:1a:67:aa:bd:9d:f9:e4:22:1d:6e:68:aa:
         7a:31:4c:7c:da:26:dc:74:f3:86:e2:56:2d:31:e5:72:f6:33:
         86:57:42:7c:94:c8:5d:ab:b0:6f:1e:4f:6b:c1:1f:57:7a:ad:
         04:d3:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 00:28:09 2026 by rpki-client