Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
File:                     R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft (raw, json)
Hash identifier:          B1Q/gU+iMr7EsQs0tPAeSDNgP80h2EYHr92tTDBt7IU=
Subject key identifier:   94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Certificate issuer:       /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial:       0E9C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
Manifest number:          0D4E
Signing time:             Sat 29 Mar 2025 09:07:14 +0000
Manifest this update:     Sat 29 Mar 2025 09:07:14 +0000
Manifest next update:     Mon 31 Mar 2025 09:07:14 +0000
Files and hashes:         1: 04_hKA3FS7y4qIecu-jOU0hL6uU.roa (hash: RXYYDTETSDt2HL0g8FPUEPFcyHqYWz0f16k/4Ht1AXc=)
                          2: 33ttGQGMXoRoa3LelEQnUBrHuVM.roa (hash: rVP0fVDStlZkeBvhzPXsZhD7dyLFDwzDf/o6XnRGH4M=)
                          3: 3Jl7cHH5HYCQWHO_lzBS2bI2_-4.roa (hash: NIh27RBULowgY3run8fB1cAsNECPa+zXlgTqNLMzoc0=)
                          4: 3u-kwYKTCI_XjoHvpEnuP1uD4gU.roa (hash: aXVbrvngr6DUTBdN1gxQ0orLdpgLCQdBwJu7mqqTAQI=)
                          5: 49zp7Z_uY0HRPNKRQ3U077hIh28.roa (hash: OdG79AZ4SuTY5mbtWXLtdcGajwP774Udcb9DcfSFxEI=)
                          6: 5sXa6Z82ItvLcwIuv-wz57rB0rc.roa (hash: LSSPSRYxo12cstJF5zb5GYkunFFh/e4gdT9mmWR0060=)
                          7: 6-wrxF-98h4aAQUgBe7jorUSH8M.roa (hash: yw/fvxYQdzm6hMhnsNwQAwqeUeaOLmQp1fUZvJpDNuU=)
                          8: 7fd3UOIfktXxCeuBJ7ehkt2Ouac.roa (hash: lO0EaVTx9XqMcpdHfVDkZMp8N56c+Ca7RSJruVSEtKE=)
                          9: CLwtPe6dxpPdYZBnwzjMs3ix0zE.roa (hash: dg/9stOZnuTQLs8ru/+P7gpFJSLhaSSNzn0gg/eMIq0=)
                          10: FBey0vFHuk2-mYPcn76OZv1n4Ls.roa (hash: S19WM4ULb6ZYZ7HMjLweRLc3BXXRzIeABbaLB8rBCnA=)
                          11: G7ioUVEV7C23rYXKw6_CEPXRB_o.roa (hash: 4bsxg8Wj2fhFlTYW0BFq1jVczwS7MLY9kjWr8p7wU8M=)
                          12: G9sNDeYN9TSx2s50RAodEnMokaY.roa (hash: o37qvREc6bX3M1h30Bq2ZG2w4jTWzNRtI36r6wIGzy4=)
                          13: HE7KVt1bmO_KMuOR8yn-RRxof_w.roa (hash: qWI6B8H8a8NOL1GqqpuEqZB5R7wuflbjaEPfpRpPm5c=)
                          14: JYT-fH_XETR31fNjDJLAvfhJRPk.roa (hash: D99igODa0kJA/aIPekGKQ8NjGX9hlxiOxNgBY1yBeKY=)
                          15: LGiRxL7ekLY7Nyq3koPZJ47BrBY.roa (hash: lLoJum00f/cNgtaB7/aBXHFrdI4n5psxVomj57ATfZM=)
                          16: LL1RHCqIWo8TJ3ZyceT21bg1dh0.roa (hash: 8CnWf961CAc3sHLKlEJOn+kDOiQWv+DaGYxmTUWuGa8=)
                          17: LaGPn4NbRjzEZ1AAVtnPoAopk2s.roa (hash: ruvlFLoVIPs7VHSJ/AKmR99jaumjRjmzXG1U8eOePGY=)
                          18: NvdTY5M_fTiaqtfGwMR2dzVYm0k.roa (hash: MCy+jOJ9oK1UmCB3jM7rClfRYJqjTGptiyBN5GtoYr8=)
                          19: R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl (hash: +9Z8WSOXjXXZKaLVmSSntFznkQ9C1lUFRgVrVKAQej8=)
                          20: Rhb4eOvngnzLv3yMBVdKidq0WQM.roa (hash: 3zzwfiaKejxc4zUJ6iiilkNDaFTCtauaN4zX0rbEGOI=)
                          21: SGhBx3pu8ZaxuYR3nAKtqbGsywE.roa (hash: rPGZIo8f+X+08R8LNuF/SuD6PkVfMCYOiDhIn80whZU=)
                          22: TVi5ek_Ib3iqKwihbA9tQWR8EQI.roa (hash: RpuspKVhYAeoY0UDWAM3nI0p2Avdugl6ICrRlTlJuDM=)
                          23: TvvBBfl8ZtNoUbv-mRJkQDgGg4c.roa (hash: lrPccr3kbBFF4wFQJGdKQQGHgmvVCjMIPfa2T6nsRbc=)
                          24: W_BMnNsGL-KukyJJuRFybVheSyw.roa (hash: dSKFBnv5oyelWPDenIyUAmTnzH+MZrbVxIKUczwAUEs=)
                          25: XgOuxdFbAws6qbF8KMVYFAPYBVg.roa (hash: THgtnTHH1Aej0HtodUVAxTCvcsAODT2NTGS30dI9P1Y=)
                          26: XvDp09Ny8NK_FLZpWjS5Wm6USmg.roa (hash: FK81LqXIaFQDyGLikfEHRTrRAB59sSqyzfuCXDql+WU=)
                          27: _V6LoM_-PR8kO-9THX4sYwemMuw.roa (hash: YW+JivyED/fd9EZDBynxHWLRE77M0KTdIbd6ysuR0Zg=)
                          28: cS-04cQPLephKphOnVfz1geMx0o.roa (hash: IU4f9lpN9NvvQKMAweGLxBVPgLMy1JssOAa/e+tvQHI=)
                          29: d1dcHy2uo326hL4SMGV1RiCU1eg.roa (hash: GR2B9HkwmPEe4Z/QLjcdL9ULRS207aYryQ4Z3mmoi9Y=)
                          30: ftqJzZ8kD7q0RFepI1X1stIrCa4.roa (hash: cY28HA7DaBTxRjrxz71YTBTqDbigC4n5L17tkFC9uv8=)
                          31: fvMzsSyVYVhhqHclb_LGnYdxbIo.roa (hash: J+/LKYaTlh/SAfapTTUdFxez43X6jZG6jN8Fbm8BsQw=)
                          32: hi4e1zVzsRGKmbhSESfPV2tM-58.roa (hash: e1cHrs7TQFemHN8c/Uwo/nwqAH2mbP76IyN086CTtio=)
                          33: jDkazVUaVpNbOx6OHfw6Hph_IiI.roa (hash: RrKezydskRUoKILFHYFwFFWYspz35EmxY6nAnZY6G6U=)
                          34: n9BtrnEBR9zav2fTdgnJ4uhIQWM.roa (hash: uFxSbw1hOOLIV1YK3Fm8IwOopaM8maIlIpGrsjePQ5Y=)
                          35: nz2fbQeeIdVzqOPgIzLkk6MePu8.roa (hash: UlQnEhwyaezD1bLteRcGxOe9TW27N5Tf5IUSWgqCHfU=)
                          36: qE8gDIpuNyGK75y6UnB2gb2EtYg.roa (hash: ZAOrm0VQkad5s9+AzOUIWkQ16rxvE7zvJDTFL9m1V9g=)
                          37: qQk_E-QgP62JFZ53EZCxiXa4SOE.roa (hash: pSjoWU4WOTCTrbJmdbck9eHdrgnHfMRwnSEX8KQDlkA=)
                          38: tngoaW5JK2WDKwgVwlaltwvNJOw.roa (hash: op1GiOfoEQNnHUKrEO6BzoAcoOxDUX0AxLC47f/6m8o=)
                          39: vnQUub5MGeWj5-E1uKMpkeuw_Bw.roa (hash: iqmBhhgfmbNJFygGxNo2WISrfzzd7wyB/7vMGysjYiw=)
                          40: xRQPFBwu-gjKVoAgocMVNz-60BI.roa (hash: 9B/mGGQv4u8s5lKgfWdd5cuX4df7cbeme3ehFibb+MU=)
                          41: xqUO64Yhjxvnxp68bsdSDgI1hCc.roa (hash: fWTbsfazDrklyI7rkW/wNb5j/5lt8xlGmvhmb9zPe5A=)
                          42: xw5_GaOg57nda4hcEHKSmjccjjQ.roa (hash: tgL9BwerYw9rnWSehN60aC5obrMZ2uz4ubLgrR8KIGQ=)
                          43: yFln9FJcU5QAoqJuY7gN6gAiaEc.roa (hash: SSJ2fK40/h8DTM4X4rrCEU36uY5lJHxE2iQnR1vgY20=)
                          44: zAfILLQGdMn9_H3daB3YDMYuvvc.roa (hash: G1CyC21mffFPH4Sd/OyY/uj22wQjVxjdQJwfemFe6mc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3740 (0xe9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
        Validity
            Not Before: Mar 29 09:07:14 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=941718ED009CDF242900C7D17EB829A06CF0F8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:aa:68:d2:a2:4b:a1:33:fc:28:bc:7a:32:
                    4d:ed:93:dd:5e:89:7d:49:0c:77:fc:63:35:e6:eb:
                    4e:d6:92:b7:0e:03:43:f9:99:3b:c6:2e:92:e2:06:
                    d1:7b:98:61:1b:af:e3:c9:e7:8b:ee:cc:32:db:52:
                    4a:5d:eb:ff:5c:f2:ae:84:aa:63:ce:6b:cd:1e:65:
                    05:50:8b:7d:90:d5:a4:5c:25:a6:66:02:0e:28:9f:
                    2c:c5:ae:14:c4:ae:84:e1:f7:ee:c0:88:8a:a7:2e:
                    7e:f9:ee:0a:37:1e:d6:07:df:ac:16:bc:91:4c:8d:
                    c8:06:32:c3:e0:ce:2d:76:1f:65:1d:e3:37:4f:0d:
                    92:18:d5:76:08:0d:4a:0a:58:50:e8:ac:53:59:ef:
                    89:83:17:ed:b4:49:32:62:5f:5f:e9:85:1a:54:ff:
                    5b:a3:35:43:db:12:e3:2a:3f:db:18:ef:9f:2e:b5:
                    27:82:76:d1:5e:dd:fe:cd:98:c1:e6:9c:0d:21:24:
                    ff:5c:06:b0:24:c0:af:d8:5f:00:83:6c:99:98:21:
                    35:e1:68:5b:33:b3:0f:0f:42:9d:29:c0:ba:85:6b:
                    97:e0:98:a0:99:cf:71:85:b2:fc:20:2d:a0:f5:d2:
                    6e:7d:b2:3f:5c:f3:71:79:d4:3c:c5:98:2a:64:64:
                    b7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:18:ED:00:9C:DF:24:29:00:C7:D1:7E:B8:29:A0:6C:F0:F8:FB
            X509v3 Authority Key Identifier:
                keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:30:8f:1a:bb:49:b6:fb:3a:0e:be:f5:0b:28:08:34:65:47:
         b2:ee:ca:89:ea:10:54:83:f6:fb:bb:04:e9:84:ff:b6:2c:96:
         1d:a2:22:d5:99:ae:18:81:ee:0a:23:24:e2:35:8d:a9:fc:91:
         ab:aa:92:dc:60:88:67:f9:c6:19:2d:4e:dc:cf:28:57:8c:31:
         cf:bb:c9:83:e8:41:43:9c:f3:de:6f:c4:be:0a:d2:49:8d:41:
         0a:3a:59:2e:42:88:66:65:26:23:4b:f8:9a:07:8c:3e:9c:f1:
         17:88:0a:f6:80:75:9f:1c:dc:dd:45:95:61:56:ff:da:7f:79:
         39:14:4f:2d:f2:36:3f:48:79:e9:39:83:67:71:fd:5b:86:1c:
         b3:04:c4:9a:ea:12:5f:3c:15:70:4e:ec:e7:de:e4:15:02:08:
         02:25:85:42:89:9b:b7:09:84:68:90:76:2e:af:53:08:b8:38:
         ef:f8:b5:d1:d6:e9:d5:0a:6e:db:fd:82:47:f4:1a:dd:8e:a1:
         40:78:aa:b3:a4:b6:bc:2a:ef:26:b7:3f:11:c6:9b:7a:43:fe:
         7d:23:43:bd:0f:67:92:4d:0e:d5:b0:28:ee:40:95:99:4f:b1:
         cc:37:ac:43:d1:af:b8:65:a2:ca:f0:61:7d:e9:7c:cc:12:f6:
         bc:4b:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:47:38 2025 by rpki-client