Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
File:                     R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft (raw, json)
Hash identifier:          RO52Jwj9HLA/h2JoxP/U9abyKpXMBQs81kMwufdxdCE=
Subject key identifier:   94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Certificate issuer:       /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial:       0DB5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
Manifest number:          0C92
Signing time:             Fri 22 Nov 2024 01:54:32 +0000
Manifest this update:     Fri 22 Nov 2024 01:54:32 +0000
Manifest next update:     Sun 24 Nov 2024 01:54:32 +0000
Files and hashes:         1: -7kyndErW055Ghmb98HEP-EiQY4.roa (hash: 0TF4cDOCgKNugp73P6AC82kAhCTyAbPlubMBI4kduLE=)
                          2: -WvPtYlZI2MuilMqUnwWLNJdRok.roa (hash: V7RAfPmUtznyYnPmpKHOURmaDUxkMbsCReKZp6C+klo=)
                          3: 3GqTBYIEDUMMeNw_ZxlIKkYj8eE.roa (hash: duBKnqblITAKL+UI6kMapr3yNjL1vFFwAi6sFIAU6XE=)
                          4: 3yA4UjxwFXt1_uecGzIE8dEL0EA.roa (hash: g3zgJhNR30Mbq8JZ3sTLSGBwYyW/EMPEHEIJoFBcl58=)
                          5: 50Dt_MiIXZ-Ii6guJro8hi_D-mA.roa (hash: zgimVU4paUqD9EXvJMBOXR+QMd8dejTlp6f0idcQ7pg=)
                          6: 54kDlhpMHwlZPwHPfJ5FoIX0aGw.roa (hash: L1jxjPmqH4fiUgepqP9mHncPo3XXlUJvDMCL9EkBa2s=)
                          7: 7AkCS3NRub-UeVS9CwWwhTMb-EA.roa (hash: g2L4ZWHA57Q2DF0egqLYN4XLi2nQPI/KgGk9zDLBNiA=)
                          8: 87THd3brvAct4JdlWIHcccYxglw.roa (hash: fhRJ/WKauBuPbvptYdl4kzmJlw/ckuO/1BZpcl33GNw=)
                          9: 8S1wbucvY4vYuFezpvQbEv3-VHg.roa (hash: Wt50jMb6tp2G5q6wc8z0fTuSPVLtf7M9LeZ/Rznc7Fw=)
                          10: 8utBuLHuJG2T4buKOwJKGYLDxcc.roa (hash: plQZSwr/KNPQTPxs60nUPBdeDF1sfY2UP8nw/b8akC4=)
                          11: AxnTpDSnd7hatg0ui4944Vy_YTM.roa (hash: HtxAiX9XqyfseASDRyHL5m4yl/qofnVoZ2MJTHNig98=)
                          12: FglsAnX3EQdELxY19yu65B0rqQU.roa (hash: yIIOzPsx8S4ME3wDW3Ng92UVS+ET8UIzjXvmVyMq364=)
                          13: HXQPTWUFNx5D0ZQK0qVMGn80Wvk.roa (hash: HHFxUEuVCzAVqtRK+oBHLaUoOgTRScCZLx1lMjYyg9I=)
                          14: Kj2H2Qulwywar4nrDT2rorMSMuU.roa (hash: pEVEaUU8SnfxusyfZkPQ5iTOPPRAGSxGxvDXFHBNrSY=)
                          15: LJ_1VrZIQlWBpuD7jEZlRrChlFo.roa (hash: h+Tov41pvqApNnmRovnXhjjIZVBxpd+ARMHSYUr4/1Y=)
                          16: M1xXZ6Y5rolxAx_rBtGdcYN5aSY.roa (hash: ir5d342EM2pjofrjJivQF1WD5e9N26fDJzIEgKRoU5Q=)
                          17: Ob04RhHg0XnGKEH-H7TQkTvYSas.roa (hash: OQeYf9GNnUuRyQvk1EUUupZ7efJwutmvY1ukX4T6K8Y=)
                          18: PxbT4OmSUSYCqNeZkUSZXvHLJC0.roa (hash: NoaUqhOr/YD2T4Je9wnjpNUnVulAmDbmYRVh50qXSaY=)
                          19: Q9qbmU6rMUIS5l7-KJO5q9-UjZc.roa (hash: e+6o0cLADNDQMUK3/c+A6AjKxuVAwf/ee+b3YKtsnXE=)
                          20: R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl (hash: Upio1nTGwRKP6Y0uE5BR2Q57PGHinVky3KSr39y6ruU=)
                          21: RuqQB0YVeaK_GOm5wdDjCwTLYco.roa (hash: G6FbcLq2j6qwdQXKTpY9pg/K2bKsDvyUqqZBdVvRu3Y=)
                          22: SHu7QbI4NU5uvGKApc8OAMmjKHY.roa (hash: GZj161Hoovb+Yj9Q3IY6Fp4VXtFg5jmHvLRB8mCgghg=)
                          23: UBS4JWjvueOqWBcNYWYHNN-tyKs.roa (hash: O+e8BVqpqkgw7l7oXkyrEWOMsRmxe2MEotxYgPz4QWI=)
                          24: V9jfrW-2LBd3jTmCkA9440y3h6U.roa (hash: 2neVV67SNuw1WyydqtbeaE0+9QWkGZkBrWrVx+On+Pw=)
                          25: ZMQ9tdiSLPon_D5SD1jEQEIO4AQ.roa (hash: bLuNqXxpPjXSASGFbBtEK/+Sx75CU76dxvEFFgDImF4=)
                          26: ZSAg73V6fOrk8f4y1gL1pCdOr8o.roa (hash: 0u3t6Cu110NQKYXqoIrXA4Cm91Pia1hJk8EecwNNYCg=)
                          27: aidX89saKMBU404BRGnbO5FGer8.roa (hash: swJuC90DlTDfhfTjp1KrjsEnFYNjb+tMnoq3KVkMEkI=)
                          28: cIGiogp2iCp4hKzJdnv4DDFEdIU.roa (hash: TmQNqziElc/aVnzCw4r24T/D7EeyUBPIsUEdv0HoRh8=)
                          29: eupw2wLbA9wEOzv-tqxNNOnhQgw.roa (hash: LyW1o6OObbI/7PGni3lkVJTDeJzqF1SnyUEbghTAD3A=)
                          30: gO-44bLGahKRhqLDRsMnKHB-Q94.roa (hash: AmhaB/6N0gnou5kzK8bfwi+Gn1w4ZoWo5NLg8qEU1Es=)
                          31: ghin7qeasFX4mzKEs0KIe4q82ts.roa (hash: gvuv2xmTW3Kyxfr2SVqzQOMTPbT7P3iGIZm37k5ZQ6k=)
                          32: iqTi3Rhik_-GqiVzKe0GyNXmiSU.roa (hash: S8ywsazla7tktMe7iBWJ4L4DgMUUIbPwzKG40GnZuak=)
                          33: lCldc1syMFT1eYm4ckMzfsJz05U.roa (hash: W+ia2G70nIcEfeU87K1dpxDkOZ1J+rHtlG3NeeGwpmw=)
                          34: lHwdS1QPnvoFKd_sONCa5pQ55EQ.roa (hash: QEQ2q1NZJv8c6KGXCL3iF4szIZsYvTlq/kyLE9cLWsY=)
                          35: mYCNzNwitd-QKJNBM21x2_SPbgI.roa (hash: OD6zgB9aEYbHnuylqlAGfC1E52K0gMNFKXDVpV+3s0E=)
                          36: oBlQ2-4B0rn0ukFmOxLBniWHWAU.roa (hash: UsYdSh1l2SHxRx1HCLzKZdJk3G1bh8IyO5IarZ+zFYI=)
                          37: ozSOMKSSOZWu80-2GP_UnIdTiSI.roa (hash: a//Ral0PyEsNOlGUDKZAqmO9/rYbP4ltgN8rdJz5Ocs=)
                          38: qC2vcvSXQegsyYRElrsATW1v9Fc.roa (hash: UjDIt0F7FizSdXJfo6WiRQajaWpTIke7BadEqxSYK4g=)
                          39: rP2YqdSch8Jw8Mqe-txGHspUjNw.roa (hash: ntp0TltPiVF3Nn7BpxSGLjDyPdCsafN2X0i8tRUi/ZA=)
                          40: rh0kdNZd_CwdrGnyNgt2bKWyqrc.roa (hash: BNXUq5aEqvSPLHcb2exUSAfZN1uay+0ggWQSftVMBlI=)
                          41: ulfXhiuh2fjfvYYvyUggaw8hg_8.roa (hash: vwIPN67iJyUQhYEoY9jYnDgrSwuuNQRPPcpnNAcNfHA=)
                          42: vK5vbVxW-dnGErOhzAXon29P8q4.roa (hash: OwYN46rWXYSZrSIPBMS5I2ZHkvUIBmSo4Joaw9iYEEA=)
                          43: ypDmWZ5GV1vYi4bAAXNL4OoUog8.roa (hash: ZG+SxVZBS0stNbnVFEFUEjl60Ko8ewZTgsKCEgeT24M=)
                          44: z_OClDPRIgMMyUHzR6JjTYzCxqY.roa (hash: VqEMKR/gJfNLsbjd63EOLsyXlNZsz6k9Hk4Nz53WkxE=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 14:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3509 (0xdb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
        Validity
            Not Before: Nov 22 01:54:32 2024 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=941718ED009CDF242900C7D17EB829A06CF0F8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:aa:68:d2:a2:4b:a1:33:fc:28:bc:7a:32:
                    4d:ed:93:dd:5e:89:7d:49:0c:77:fc:63:35:e6:eb:
                    4e:d6:92:b7:0e:03:43:f9:99:3b:c6:2e:92:e2:06:
                    d1:7b:98:61:1b:af:e3:c9:e7:8b:ee:cc:32:db:52:
                    4a:5d:eb:ff:5c:f2:ae:84:aa:63:ce:6b:cd:1e:65:
                    05:50:8b:7d:90:d5:a4:5c:25:a6:66:02:0e:28:9f:
                    2c:c5:ae:14:c4:ae:84:e1:f7:ee:c0:88:8a:a7:2e:
                    7e:f9:ee:0a:37:1e:d6:07:df:ac:16:bc:91:4c:8d:
                    c8:06:32:c3:e0:ce:2d:76:1f:65:1d:e3:37:4f:0d:
                    92:18:d5:76:08:0d:4a:0a:58:50:e8:ac:53:59:ef:
                    89:83:17:ed:b4:49:32:62:5f:5f:e9:85:1a:54:ff:
                    5b:a3:35:43:db:12:e3:2a:3f:db:18:ef:9f:2e:b5:
                    27:82:76:d1:5e:dd:fe:cd:98:c1:e6:9c:0d:21:24:
                    ff:5c:06:b0:24:c0:af:d8:5f:00:83:6c:99:98:21:
                    35:e1:68:5b:33:b3:0f:0f:42:9d:29:c0:ba:85:6b:
                    97:e0:98:a0:99:cf:71:85:b2:fc:20:2d:a0:f5:d2:
                    6e:7d:b2:3f:5c:f3:71:79:d4:3c:c5:98:2a:64:64:
                    b7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
            X509v3 Authority Key Identifier:
                keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4b:2d:d9:fe:76:ea:3f:d4:f1:09:da:f7:3f:4a:f0:d0:57:
         49:fd:81:ff:e2:1d:a1:08:bc:64:3d:9b:e0:5f:8a:f4:28:24:
         9f:17:b0:5e:d4:ee:ff:fa:bd:48:5f:e6:0c:7d:aa:e0:86:92:
         a0:62:1a:a6:6f:ac:35:28:7d:f1:ec:ec:28:b7:7b:80:f6:2e:
         08:6a:03:1f:ba:8e:3a:c9:39:6a:3a:cd:84:ab:ef:53:81:26:
         94:37:2a:c6:92:e5:5c:d9:e5:c5:45:4b:00:42:77:4a:70:29:
         d1:3d:7f:da:ea:de:ab:34:1c:8b:9b:ad:93:92:99:fc:76:54:
         82:df:ce:a4:e4:51:7b:86:ab:24:37:6d:f3:96:ad:c3:a5:a8:
         4f:d9:8f:50:26:e9:c1:cb:e1:9b:da:2b:81:c6:74:ad:70:35:
         ca:44:15:51:d7:6e:8e:9b:3b:6a:cf:2a:a7:a4:4d:33:ee:c9:
         29:02:7b:18:28:da:81:bf:2a:34:1b:ec:da:5f:4d:17:6a:9e:
         57:07:c2:4c:11:5f:b9:24:38:f7:2f:8d:b4:42:9b:a9:1f:af:
         2d:d1:2a:c3:62:22:44:ad:85:50:af:a3:f6:a5:1b:b8:88:98:
         a3:8c:60:6a:e6:a4:f9:ab:3e:a6:9c:09:3b:67:aa:60:3a:d2:
         2f:0b:5f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----