Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
File:                     4aiMNNJG73wqfBrF_peyYrxIF44.mft (raw, json)
Hash identifier:          XYuCJoTrx2qxYBq6ZeOHq9u2QXJDY7v/NguOSWPzGBY=
Subject key identifier:   44:D5:A9:8A:82:2C:97:33:66:C1:97:E7:58:A7:44:F3:03:82:78:C5
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       102E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
Manifest number:          0E3E
Signing time:             Mon 02 Jun 2025 02:26:11 +0000
Manifest this update:     Mon 02 Jun 2025 02:26:11 +0000
Manifest next update:     Wed 04 Jun 2025 02:26:11 +0000
Files and hashes:         1: -PBdU9fofnyz-kR_5_pZmjbJWNQ.roa (hash: U3S0Fw81729lxdhqgOqN4hqvSDqNRD2N+ab7ArJELRs=)
                          2: 1tq8MGswr7ZxNPPpZh8xvPDqXtQ.roa (hash: 45jVSW0on/ii96nyz9rKqSoOsW2zIf0sNGCfqt8v3g0=)
                          3: 3EUX6Lwlwomx4r6BSauBeqNPeTc.roa (hash: yTDy2shZUlPnxvCCIwdxi+MFClr9/6wMZ5cxGOeKfNc=)
                          4: 3a71Td1-RZ8ptRMRy-tEmcTmFPs.roa (hash: BiRSqHRe0z8Pcffdvt8d2W0BeuYa6oM5GT0WlymvIwE=)
                          5: 3l_j3IgsdvXJIzhowIb3Kc47GR8.roa (hash: SXwRVcOSwUrO40EUKAZwmuBU7zagiM17+RGRyFjW3pI=)
                          6: 4aiMNNJG73wqfBrF_peyYrxIF44.crl (hash: EOLqubAtBsjg2FHX6MSkjt9+W96VX+x5GF0LcHLDmaM=)
                          7: 5D2qfwB8pB2sd_UBIPc-dHvA-Zk.roa (hash: pqQPXpp09Ms67qUgiMxYn3CCM3mablGJ0Q8TEsEI/+8=)
                          8: 5JnyLjtF6IKfQJ93xn-Ojc2fgoc.roa (hash: SmVgxBr+A8wfLmGvRekvPHoNtYBDGQmysJZF4nYl8UI=)
                          9: 5kj3J5jOc61OP9Hesi0hVHRZskQ.roa (hash: CeiDWyQ8cZRPFG2ttnkXj2hkbnIysTmkZq7J38iqVQw=)
                          10: 9PHlfSjE2YvkH5T24PldPIJgc9k.roa (hash: P/WAjOCjoQP6wS7kRLEeZGnKMv0k364GnICY4X6DKCM=)
                          11: 9SqRpobI-GhH9oyyh_iW6f5nPIo.roa (hash: MNpFF9u9hCY4TShw3KxQIOPFvtHURLFgyeUX4+simpQ=)
                          12: 9a-z2A39NLe2pUVzU4tMRx6wujA.roa (hash: MfS5gzZw8yeMRD8+Hth4vlawOedk5UWwsAVIoR8d51I=)
                          13: A0I7_RQO-J2eEkKth8siF8-JA1M.roa (hash: IUEvkyKKFaaqXvqGp791FyMMWZEzgcvi7iOZ6UFGnLo=)
                          14: AK-tDM3Jj_DVxglhfVf0E-Tsmmw.roa (hash: iCzmuIorZbshiJG4irHmEoXIEW5AJ8Kf4OrAZQJKdFU=)
                          15: An6a5r2l8Bn6-PNDgl-z_-PkktU.roa (hash: M2wU8EHsE8zGmswpx5A+bcrdFkQjhz6g3cVc40sEQiU=)
                          16: B4w9IW-kZebClI-jto3pxg42wBE.roa (hash: 0Tp/+UslRyPRY1S7hrm0v91EH/8DUapnrRXKT0+tCEc=)
                          17: CLp1aw9XNH4aqP-IbV66ODPesgU.roa (hash: hYjpaz5HD5xqshB1wsqDWeEiGFaTh8SCLdumFu085vA=)
                          18: Fzy5ZcCIQYy6f6lA6oebnObyTe4.roa (hash: gQyxZclXD43SXzVO2Tj+iHZYE/Sm307UI+DvcRcRISA=)
                          19: HckYPpVNzl15mv5OEbnTgr0zY3g.roa (hash: ZKKu7bXulj9P800La9JsBgooFN48D6t4v0E710GuAlI=)
                          20: IDVVxx8U8CSfE0VnxZJSZwOtZWM.roa (hash: AsEgLMsmQ4/a/DTbTpGUVRth+NrCQgLvJs3doR8ng3g=)
                          21: KB55XmwyA-SohPZ7Qz-wCOCJfGw.roa (hash: mLy6kz4C8/dZpZ2v96PEJiO+6vj/Hp1tJ2AILgwoVcM=)
                          22: MCGoJcjQPZMk_1A0M2w75UsEYJU.roa (hash: tiONKFQFsKLEW/1UovnGnS7T1Z4inM/YmD3YAcXLxVY=)
                          23: MEBnrCIBYERMhMPKh0QCiK6yJx4.roa (hash: OKOf44iTZ/KGleaZfWEzDHvwUjgQGvHtTbxkiJ65pVE=)
                          24: MP1KhUj5eJUX5RUdPERCimyA6dU.roa (hash: Dzbl+8aASQGco+4uyXQh9OdKaiGShbUbwqbNpsAZV8I=)
                          25: OECv0SKQp4Scu3VGlAGq5ezu47I.roa (hash: IpYIckjpktkKRl2WhAvnt5a2BlrL2zV07g6E6iWpuLE=)
                          26: OvDHEVzrNPLmKookGT5ACgPKIO4.roa (hash: /m/1GKZYA18JkViIEcLJRFokk7fsTKDOdRV6f4veaXA=)
                          27: RSvtvP0TchFIRVlUjyfOcm2s7dw.roa (hash: oyK5IhB4Lf3F/1GUU3ftADPfhmuUsNZ/TmZ2sJSZxYY=)
                          28: SNu-xiqg_Zio6yyTGhp-eNR5P_0.roa (hash: F2hIyD2nRNsFupTwATmx8hKNBeKjqJdU4w9Q+uIbOZ4=)
                          29: TI3UKkgKNhlPTHdpMAbOusbxI0A.roa (hash: NM/7R6qVlbjHqzlUsmsUORl618ol64YxCmmC2oRo2Aw=)
                          30: URO6KF4Mmo4XMrheZNzRJUrUIng.roa (hash: PzGIZ0wKW6AweJxQibXMjSP1ziqXS0tMyrCMUYWTrHU=)
                          31: _ILCxvG60CiCOap_Bn3VLGuCdr0.roa (hash: sR5q13RgLhE3GArsuDUpJWgiwy9ZhQidOM0po+VWD+w=)
                          32: a_gsB71XrTzw8UGhko0-Vfi7MIM.roa (hash: 7t7mCgC+OzLJnXojg8sT/2jt7JAI7LCqc2mpEUcEFqM=)
                          33: d7l5cB4yBVgvq5-1J2nDB3ZXv-c.roa (hash: 0NYixBwUhtgI4YmAWVKAHlkx1kTkOB+IkASJRNKhwqM=)
                          34: g8U2PvvZ0iz4Mfd8aSguHLL6Z_4.roa (hash: LrjR7WI19o+U7Wspxts/iUtiMx11bFgUKssoOTTttA4=)
                          35: gD5X77Z549QweS7og66H9Jo3Ph8.roa (hash: S6xdjNLO52Aclu5M42zVXQFFCDmQqHa7ec3Tvs0oc/g=)
                          36: gFGmyiV2VDAG4OISYDC6F01F034.roa (hash: s71g+pyJEK+StblvqYFJDsLJm2wIHy/XEB5/qLw0Ino=)
                          37: gkL3iPwUvRJdFOuH5h_esEYOv1g.roa (hash: D5sAaYrXC1iNIJEWzZH50ED8PYgdqHVtXy1apR/w+ts=)
                          38: hrHQwh3jFDDGSj_ooXRWRDLgDps.roa (hash: esnMboxmjKkkbYr0P9B0Y/e356Wg6P8mHlKkgi73sdk=)
                          39: hwhro3ukb2tVsrOp24DQIVP_9Io.roa (hash: /3CaOaLCU4Qdb5c8X3967ezBiaPcU1rspaozCcmaGdM=)
                          40: if44tGaUHf0ZPxa9pQzi6llZakw.roa (hash: 52p2Hd9BpRFvDzBoyHNqUaQOCmT0X98Kul4QMpwYTmw=)
                          41: js3KmPpJE18X1Z6ulmDj6bphGTE.roa (hash: 72NPAal/Ki4QecF4QWaFUuvgti4IDyUrsdggOyQR3mY=)
                          42: kUhTX3SG71N9NI7EZi8r7CYZXyA.roa (hash: ZlQn5p/dhTUwH6kIg8lDOPz/7mRsnrGYoC0w2KtRxO4=)
                          43: m8JZKVJM60J2i6s6B1gIoWi1AY8.roa (hash: 5TKfUkvaH9or1AZnkMeIjidMlv7V6PAJCBMWBj5WFAs=)
                          44: nDTizWNduxTTG0hVLtZext4ufa0.roa (hash: o4sq6lTmX192xTeloxGYa2ggWwUb49rapbjbSF84VPw=)
                          45: qjYhCz6ueLqJUawoGvKN4rdlEFw.roa (hash: mDLn1g+IUQQbe6e2DLelxuUz9GrvH4rZmmL31Tc/71c=)
                          46: qunzVS5tB_Cy8DRv15CfgcT_89c.roa (hash: HWjsSutf83HwkBWESI9eEZa0oFN5x9AufmM+0T2q5/g=)
                          47: t1jSSZI5r1cbfuWooSYwkGfrx1k.roa (hash: YhhwImZ7Eye+Cd0mkwgJyO/vrHSqQm4/pigdKF62+5Y=)
                          48: t7G5aL6DBA9OzI4he23v2P_yY5s.roa (hash: OaEUBPyYC18/YKHKIupoL7d9vHoJ7zgKWy46MTwky6Y=)
                          49: tdTA8GWKN249A61iP7qLq3-LMLQ.roa (hash: +VcngFzr/CYXFu7EAmp7039fb4218jFlyVzttQ+6Go8=)
                          50: uVkhVqA46iOFnAsF8pJTL4Cwsj8.roa (hash: UT3zAiJwazKkgUn4sGEkAh+iXiMt73Jz2LgBWR6eB54=)
                          51: v8BpW71yUlg4wLI1NjuQQ_DljEM.roa (hash: rVW4v27WPAaz4IhlRFm+rOmX0ie1e6p8xWY0KDJ1TbA=)
                          52: v8oeKp7bRuuQ8tvr8GPO32KKHPY.roa (hash: 9OxkLT/8AGddj4U4ldWh5bB00oXsm5jpq8Oa9mLJsKk=)
                          53: vHDn8D38-GTGg23dt5lfwMr08yc.roa (hash: o+1YJ97GD93efmsGzbTEPg2yTqAr5UCXtUE29LtP3T4=)
                          54: vK6lZVwwFrrGosRR3Cb0QmYGMe8.roa (hash: cv2XkTceg5X5AwGrrfbtgS4K4/3cYC/kUDi7E+IBH3c=)
                          55: yZCiF6eDj-Pd22afZSdL8w7P_sk.roa (hash: ZkUtXEyj460p+bz66NWxkLzZ24pM9HTfJ7UUKQlSGE0=)
                          56: zH5KQHECPQcURrUZSIHiZwwqGQ0.roa (hash: QvCdVoPQ7qNgVbAGA/mMS7wyvcdF0lsXJDQ2M0thL5o=)
                          57: zKC-KBAigjxqNf76MZUYxkL71dI.roa (hash: CoJNMKbGXUpkmp+6Oc3WlDU+f6gzNa47GaYcy5sGZjA=)
                          58: z_0tDqcaxg4icyKASdhj4TUR3hY.roa (hash: 3/RIxb0xmdF9HN16jg6D4PitJc9dZuzYQFsrVH08Uhs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Jun 2025 09:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4142 (0x102e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Jun  2 02:26:11 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=44D5A98A822C973366C197E758A744F3038278C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:00:b6:95:b6:4c:61:91:69:75:17:90:97:b1:
                    45:51:4c:eb:c2:b5:b7:40:78:d2:78:42:f3:1f:50:
                    89:fe:af:a3:07:52:ba:2a:a1:95:6b:05:f7:4a:34:
                    88:bf:d0:67:32:e5:fb:c5:60:85:5e:f3:32:a9:4f:
                    9a:17:c4:c0:fa:52:9c:1c:b0:c8:dd:6e:25:32:3a:
                    fa:59:28:1b:16:4c:e1:56:52:a6:d9:c2:00:39:3d:
                    a0:73:68:d6:a6:ac:1d:e5:b3:21:e7:84:61:67:f7:
                    57:ff:1e:d8:d6:88:c1:66:39:60:8a:92:cc:3c:c3:
                    ed:a8:42:28:01:ac:be:af:aa:82:54:11:e8:a9:39:
                    b3:80:33:94:18:22:ee:a6:b1:0d:8b:bf:77:eb:38:
                    e5:a5:d4:a8:79:79:e7:22:b7:d7:ca:81:03:95:05:
                    e1:b3:f3:57:81:a8:c1:bf:b0:cd:e7:62:43:2e:72:
                    6a:d0:00:95:54:1f:53:69:e2:2f:b2:6b:49:52:37:
                    86:8e:e9:a6:1f:b3:ef:a4:29:a1:0a:43:34:a4:99:
                    f1:90:32:a0:b2:a4:f7:65:0a:5e:91:70:8d:6d:ab:
                    a5:b8:38:d5:f0:5d:9a:bf:57:a5:c6:a3:85:7e:19:
                    15:f1:cc:ce:fe:72:9b:57:f3:05:5f:b3:24:bb:74:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D5:A9:8A:82:2C:97:33:66:C1:97:E7:58:A7:44:F3:03:82:78:C5
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:fd:f4:21:a7:31:54:9e:ef:51:26:0d:1c:8a:db:6f:40:40:
         1d:48:32:0e:d3:02:e0:d7:90:8c:94:0b:a2:11:4a:49:35:1a:
         5d:0b:9d:bc:01:54:1d:6c:4f:1a:7b:42:10:4a:a3:1a:8d:5b:
         c0:71:b1:0e:29:cd:0b:ba:8e:02:11:af:a4:e3:69:33:38:2a:
         f0:5b:dd:e7:e3:f3:a3:e1:44:d0:66:e5:14:df:be:69:15:04:
         de:2b:b1:fa:26:a6:fe:61:3b:0b:e4:91:76:aa:e4:01:6e:02:
         19:7b:a8:74:5f:23:39:c1:d0:79:51:6b:31:d7:40:2e:22:b9:
         69:f9:83:90:a0:77:e2:c4:ff:09:05:18:a2:9b:7c:00:c0:67:
         df:d8:69:22:a3:b2:aa:0d:33:78:36:ed:69:d4:36:d4:46:bb:
         26:09:be:6e:68:e4:76:6d:9b:a9:01:f3:cb:8e:5d:42:24:1b:
         d9:ff:37:cf:5a:2a:22:e2:32:0e:bf:d0:7c:a3:5a:bc:48:56:
         6d:12:f2:4d:90:92:0a:7a:6c:24:68:6b:ac:95:97:66:4b:86:
         7e:ec:3f:1b:13:9e:2a:24:80:e9:28:e2:e1:5f:0f:60:46:dd:
         67:ee:e5:40:55:56:79:aa:f9:f8:8a:96:0b:09:e0:7d:d3:b0:
         19:e1:54:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----