Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
File:                     _37NtiAv_Cw033vNcaHAiIU4L7c.mft (raw, json)
Hash identifier:          2Ez3IMZAoYCYfgeqYNjoTwgrYq7jzYz1HN16NNR0Ie4=
Subject key identifier:   67:7B:AD:17:1A:92:B8:41:8B:D6:B2:B5:9D:65:52:18:F2:CF:1E:7D
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Certificate issuer:       /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial:       0EAE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
Manifest number:          0D9E
Signing time:             Wed 16 Apr 2025 09:10:44 +0000
Manifest this update:     Wed 16 Apr 2025 09:10:44 +0000
Manifest next update:     Fri 18 Apr 2025 09:10:44 +0000
Files and hashes:         1: -oQKQNh70eBkxp_EOQb89z5F9t4.roa (hash: AMJ0on1JbXFgisXFlomBZ97N86mqyMFQK6/dKXTzGIU=)
                          2: -twckFhJyNqdYe92x0ECQbGrltw.roa (hash: xacALSzjMlnon5ojZKaxPkKWswuoIqUZq6AbiqOGoMw=)
                          3: 0D6fKJlxHmEVVIv5_fouOn_BYeo.roa (hash: vZhXB2WxRMUCQDzCjVb6KLiooI5h+vC3Qs96UDlTJPQ=)
                          4: 49KbUvYCnSnm001JhRWAhKr4RrM.roa (hash: D6iQ6G5LQqlGzBUICZf8uLb4CfcFuD/vIjW+po32MdU=)
                          5: 5Pn21OjQyjknKq49z8DXpYDqPWw.roa (hash: azrwXlNSFeRpWi5xvXmvqP3XDF+Ni1yDtsezyrSkgpA=)
                          6: 8yhXZpgl7Hx0UEoymqDtVSH37O4.roa (hash: XFuBoY1szJ/skMvjXIm5QmWUOGF7+5AvsZd0biT4n78=)
                          7: 9zK96dSbrJmTFynGEQ1Jizbw4IU.roa (hash: 53dN/XNWDO3AfgLL6Q3p27NOhbmGcEuZClpLaMJKjoc=)
                          8: BUj9TJNtNWydD8odDuNDD6YH6HI.roa (hash: 9VcJzAMQAiXGlzUmpu1+zf1rHazsZnZ1u7iDplmAX5I=)
                          9: El1XB-GEyPCgoj7voajx1MRd4Dk.roa (hash: Nscd7CK+K3z138cYxKzLDQ1gc1y+xtjEJcnCG8iXdpw=)
                          10: LlSJJcRR61jG0q_W7V_fAtSQs60.roa (hash: ksPQCpf5SbKsqir7OieSO3lO8knsdTUc4qYCsW5U6T4=)
                          11: M6ECQJjM4pZyihB60dA1ergCJy0.roa (hash: pAk+I+PyVtATo2lzkb5/98tJoGSjE2E9nK8Fyhpi9o0=)
                          12: O01spy06PhwnUxFi3eZuG9uwzYg.roa (hash: a+canhoXVVASOOYJZx/8cIUCdHJXq72zBgfU0tWe6Ug=)
                          13: PSGUXa6EU7B-2JxnqByErIABk3Q.roa (hash: w+YBlRShiSLccdE7u6WdMUlV5w+xeIZx6GOVFkhsfEY=)
                          14: Vbm_mM5QcOymdN-nDeu1zSIflC0.roa (hash: +St8oWZJ6RZgTPcyxUFC4NEreXCovhSwvz/fSTw4URc=)
                          15: WYJdsOkz6dN-bLYCf6tWyjcMO64.roa (hash: 1/7L5Jp/S5kfHQHkNoN4Q8bsTZdVsY/2lPRksVM0Wb4=)
                          16: _37NtiAv_Cw033vNcaHAiIU4L7c.crl (hash: ROAFMOD0xvW7i6sP97h3gQMH5IeKKF9UpOicf8i8iyI=)
                          17: _J8P4uCOq9z3pGEmtT18hYk1LPY.roa (hash: vsM3IUyb2ApWOsYQIYG/fwrA7Y+fodXaT7hVJsls3EI=)
                          18: fqWeM62k-hoLHFpjIbaZcQ-UEok.roa (hash: oMVfEaKh9v+B4JwmKhbQgmSk9eP8s80sxObdtqbM8Lc=)
                          19: h8BoRBPJrXSdcsTXWlcNuwvxPEQ.roa (hash: Z6AQt6xQ5QR0RFWPEK3frwqBYLFJw+ohKJ5LnKlkaw8=)
                          20: hCtVWGJZfiIS7kaYH24V6ZjDvSw.roa (hash: JconMIj0aINN0PNRm6CgRO/pERNT63I/BHIIaNVSO6I=)
                          21: iPyRmGmKyKcMis7K1-ROfHu1SLU.roa (hash: OWcgQ1KLp9oU5vXzMON3wjXFqp8tcZsof1RmsquBEw0=)
                          22: jQjlBykavC7hmXfK_twAplQxFlg.roa (hash: +CbT6OpLgTn3Lkjxgz3L35GCfjrb/zWkJ1eB0F2fDnE=)
                          23: l7oKZLnxhlekWLkZqgZMFZaRscI.roa (hash: FcgRmjKOWuUGW6b3mB51jK98jc+eS8Z1bcYuBPBJ5MQ=)
                          24: oZXxChf66Wbb5YOyol2geDl6YS8.roa (hash: kwNGYkOUA47ow5NYn11aGHlyAPtQyc2f2cwP7T+T8h4=)
                          25: rCVQvnsOImRkTIe2wgPkl-dx7Tk.roa (hash: QeTCpLz32SVYncvhmEpXzQMrI3DPT4ZzUe7oigUXPLQ=)
                          26: y5WXtUDPcbhiATqyXprTgQHZ5f4.roa (hash: uGTEgP8QGNIJDkFF525VWfBRzsokWZjOiI7VhZf39ms=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 19:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3758 (0xeae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
        Validity
            Not Before: Apr 16 09:10:44 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=677BAD171A92B8418BD6B2B59D655218F2CF1E7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:b8:dc:49:0b:5f:84:f2:9a:40:13:8f:d2:
                    17:28:03:3b:17:ac:d3:51:8f:29:78:59:39:33:cf:
                    7d:a4:73:74:68:7d:99:bf:cd:fa:6d:62:7f:03:cb:
                    70:f6:18:01:a8:b3:d2:78:a8:e3:59:78:b2:c3:bb:
                    7e:3a:df:5c:7a:24:1a:3f:ac:a8:ce:40:14:7d:2e:
                    d2:2d:9c:f1:ae:05:05:84:e3:a1:c5:94:ec:94:e2:
                    6e:6f:69:6c:0b:c0:54:b4:f7:66:97:63:f0:a3:b4:
                    77:a1:b8:10:b0:5e:5d:4e:3b:15:66:05:06:c5:64:
                    a4:ae:4b:b9:ea:81:5c:f0:03:22:9f:be:20:92:62:
                    19:e7:48:26:66:8c:9b:04:41:03:fb:cd:cb:11:e9:
                    5e:fa:c1:15:d3:3d:b4:2b:aa:da:f0:97:03:dc:ab:
                    41:3d:ed:e4:75:f5:d5:a6:6a:08:46:02:6e:f6:16:
                    06:06:47:a5:fc:5c:8c:a5:df:f6:2f:04:82:f4:cd:
                    42:8d:a9:8a:87:23:e6:49:f0:1b:81:9e:bf:36:3d:
                    e8:a7:24:db:1a:3a:c0:bc:7d:8c:45:75:48:a0:74:
                    b1:88:7f:28:1e:8f:c4:10:4e:76:86:03:b9:b6:d2:
                    ed:ca:e6:97:82:7a:e0:d0:05:7e:5d:d3:f5:25:14:
                    59:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7B:AD:17:1A:92:B8:41:8B:D6:B2:B5:9D:65:52:18:F2:CF:1E:7D
            X509v3 Authority Key Identifier:
                keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:67:4e:f4:87:42:8f:94:ce:15:c6:76:ea:08:34:1c:5a:3f:
         e2:0b:5a:1a:d8:eb:fb:88:bf:a8:48:7d:7e:01:06:82:9a:4e:
         20:ce:db:17:d5:37:b5:6b:84:ee:c2:92:85:91:32:35:17:06:
         25:fa:ef:d8:69:3c:d5:86:76:d8:df:09:a4:8b:6c:41:e1:b6:
         4f:b6:9b:d2:1f:55:f7:9e:03:67:6c:73:8e:c2:72:20:21:1c:
         d6:55:ba:12:1e:94:5d:a3:a3:94:f4:44:65:cd:cf:fb:67:a9:
         a2:94:52:6e:f4:ea:bc:3e:e5:8b:8c:51:94:a5:e3:07:2b:f1:
         d5:62:cd:2b:98:60:25:72:d7:a8:64:11:35:be:27:d6:8e:bb:
         14:7a:87:68:49:e9:02:f9:2d:80:6e:45:8d:b8:ca:e0:1b:b3:
         96:a4:09:c1:e0:4c:59:31:73:20:dc:f7:f5:28:f1:83:15:a9:
         15:39:1f:71:51:f3:a7:be:80:8d:73:d3:e5:f8:13:81:eb:cd:
         3f:79:4b:73:b1:e6:b3:86:25:c8:06:2f:9c:9e:3a:c7:f8:e4:
         af:43:3c:49:c3:be:78:da:7f:80:7d:f5:d8:bb:fd:5a:28:c1:
         6a:f5:fa:6d:d5:27:0c:1f:9e:cf:7f:1f:e6:1e:3e:b4:2c:16:
         f1:25:f9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:19:11 2025 by rpki-client