Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
File: XNEK1bakd108UE1mEHH4ziQ-KAc.mft (raw, json)
Hash identifier: 8Hz1Rqh80gY5EFhdMjAFEU0xhs0lc8G/q0yIxAJWL7Y=
Subject key identifier: FA:35:26:77:91:33:AF:50:0C:EB:1B:BD:B9:75:CA:67:F8:93:02:1E
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 0DFF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
Manifest number: 0DCE
Signing time: Tue 07 Apr 2026 06:30:48 +0000
Manifest this update: Tue 07 Apr 2026 06:30:48 +0000
Manifest next update: Thu 09 Apr 2026 06:30:48 +0000
Files and hashes: 1: 02Wxy1cQACTIEvEhl_sREhu84hE.roa (hash: ZbPLJgAEmZnLFnXy75z/nNFeien/ggjBoHaZ8IAGjk8=)
2: 1zTbbsFyQxh0RQaSCoLTvvYauI0.roa (hash: zHdaqPo+Ee3joFgC7eyJwFP2QnDQUHyQyF+3aILPEsg=)
3: 3Y-X7MISaEfvUh7XyStlBSKyPU8.roa (hash: oh2d53+8cLgrCJx0uYblY55cW86uWmf37eEcYwpYPoo=)
4: IJnVve9QI-ZV0sH7RR21AOtOTYU.roa (hash: bsPZmXIt0JI4sKspJljenCNpj9afsKdJj76ykssSn70=)
5: NvaWkBaND9dB2pG9K5QIu9qOoJU.roa (hash: xJVD5PsgRWco6mgThjfXshxiuA7o5nfBmOgLlmcuLbw=)
6: Th9RXu10cRYb4b9CBSyXnExnBdo.roa (hash: pEIUuhHMYcMSopcdOj03TOPFSL7mF9qf6JVmbuHXnj8=)
7: W9CH2jNQPeE6F56GrqNNQaeMBnQ.roa (hash: alE6qOzjvv1bdVpFxgmVkYRyaKHiH2nHE9BqToGwaAQ=)
8: XNEK1bakd108UE1mEHH4ziQ-KAc.crl (hash: NDuDBrpznWCtBnwozr8vepom6TcvQXiWDvmXMB7y2N8=)
9: iMRWOy8Kjg-Z6FXYwwdtX_N03gg.roa (hash: atIrascs8KvK/jjF+90Oyg80o5WLySej7SSpjKZ343g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3583 (0xdff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Apr 7 06:30:48 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=FA3526779133AF500CEB1BBDB975CA67F893021E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:f0:ba:38:10:67:07:45:db:31:3e:c3:54:
90:bf:83:9b:2e:a7:bb:01:15:ec:64:d5:ac:2b:28:
33:68:4f:e2:e5:f3:cf:83:ae:a2:0f:c3:c3:3f:64:
13:ee:3d:86:a6:c6:99:50:ee:85:f4:24:de:71:be:
55:cd:34:6f:62:19:5f:71:bf:08:5e:07:d5:b8:1c:
0d:cf:90:db:f3:c0:33:ac:8c:55:f7:b5:dd:8f:34:
80:1f:48:b9:e8:92:39:8e:39:57:fe:02:36:1a:9c:
56:25:58:c9:5e:4d:69:d2:3a:77:a3:c2:83:a3:62:
48:dd:ba:8c:79:0c:b7:63:23:39:c8:60:8f:6b:7c:
a4:f5:1c:c7:db:5b:11:76:10:b2:49:e5:0a:9b:01:
12:48:97:08:6c:1c:47:5f:1f:82:bb:0a:44:09:2b:
01:b1:cd:74:8a:9b:c5:01:b8:57:6f:32:cf:d3:de:
19:46:e8:0f:b2:ed:68:6e:f8:96:39:09:e3:74:10:
cf:71:19:88:f6:32:47:0f:db:2b:41:c4:9c:69:ca:
76:72:f6:02:44:96:a0:11:7d:48:b6:47:18:39:5d:
c6:eb:d2:c1:fe:a8:49:5f:c4:e6:4d:3c:d9:6f:71:
05:30:8d:35:2e:77:b7:9d:e8:bc:a8:b0:af:09:01:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:35:26:77:91:33:AF:50:0C:EB:1B:BD:B9:75:CA:67:F8:93:02:1E
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:81:aa:60:0f:db:2e:e6:12:f5:86:2a:3c:41:2d:22:db:c7:
63:eb:c8:4c:f2:5e:7e:1b:e1:28:29:88:fa:7d:ff:2c:03:d8:
5d:c9:b8:af:3d:2a:59:e6:e5:c1:79:60:04:03:63:cc:a1:2f:
07:c1:fd:7b:c2:11:81:03:3b:09:5c:2e:f0:2d:61:69:2c:4c:
5a:89:af:d0:4e:67:c9:0c:98:1b:65:89:80:b1:5f:cc:21:f5:
b0:e1:97:0e:4d:44:dc:52:38:9a:14:fb:a5:c4:27:05:bf:4f:
2e:15:29:d7:1d:d8:e3:ca:4a:c6:a6:9c:e7:8f:81:bf:a9:70:
ff:40:70:35:5a:46:85:ba:e8:ff:d0:ca:8a:ff:b8:4e:51:23:
49:7e:8b:91:d9:22:7c:d2:f6:f9:25:65:86:c8:85:e6:9e:0c:
a1:be:36:31:7c:34:96:6a:6b:d1:1f:7c:ff:15:db:3e:28:14:
e8:46:3e:13:9c:24:47:e8:8a:5e:c2:39:00:00:d3:51:1b:63:
30:c3:1d:23:3a:85:25:1e:90:3a:b6:fa:36:67:8c:ba:eb:1a:
97:3c:de:14:ca:2b:c3:ee:3e:af:72:81:f3:35:a2:2d:0f:60:
f9:4c:9d:25:5f:bd:e2:c8:d1:06:62:51:f3:c1:5e:56:ce:cd:
06:0a:97:fe
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICDf8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUNE
MTBBRDVCNkE0Nzc1RDNDNTA0RDY2MTA3MUY4Q0UyNDNFMjgwNzAeFw0yNjA0MDcw
NjMwNDhaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZBMzUyNjc3OTEzM0FG
NTAwQ0VCMUJCREI5NzVDQTY3Rjg5MzAyMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBdfC6OBBnB0XbMT7DVJC/g5sup7sBFexk1awrKDNoT+Ll88+D
rqIPw8M/ZBPuPYamxplQ7oX0JN5xvlXNNG9iGV9xvwheB9W4HA3PkNvzwDOsjFX3
td2PNIAfSLnokjmOOVf+AjYanFYlWMleTWnSOnejwoOjYkjduox5DLdjIznIYI9r
fKT1HMfbWxF2ELJJ5QqbARJIlwhsHEdfH4K7CkQJKwGxzXSKm8UBuFdvMs/T3hlG
6A+y7Whu+JY5CeN0EM9xGYj2MkcP2ytBxJxpynZy9gJElqARfUi2Rxg5Xcbr0sH+
qElfxOZNPNlvcQUwjTUud7ed6LyosK8JAeBHAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQU+jUmd5Ezr1AM6xu9uXXKZ/iTAh4wHwYDVR0jBBgwFoAUXNEK1bakd108UE1m
EHH4ziQ+KAcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0tNQVRF
Uy9YTkVLMWJha2QxMDhVRTFtRUhINHppUS1LQWMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1hORUsxYmFrZDEwOFVFMW1FSEg0emlRLUtBYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NLTUFURVMvWE5FSzFiYWtkMTA4VUUx
bUVISDR6aVEtS0FjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AIWBqmAP2y7mEvWGKjxBLSLbx2PryEzyXn4b4SgpiPp9/ywD2F3JuK89Klnm5cF5
YAQDY8yhLwfB/XvCEYEDOwlcLvAtYWksTFqJr9BOZ8kMmBtliYCxX8wh9bDhlw5N
RNxSOJoU+6XEJwW/Ty4VKdcd2OPKSsamnOePgb+pcP9AcDVaRoW66P/Qyor/uE5R
I0l+i5HZInzS9vklZYbIheaeDKG+NjF8NJZqa9EffP8V2z4oFOhGPhOcJEfoil7C
OQAA01EbYzDDHSM6hSUekDq2+jZnjLrrGpc83hTKK8PuPq9ygfM1oi0PYPlMnSVf
veLI0QZiUfPBXlbOzQYKl/4=
-----END CERTIFICATE-----
Generated at Tue Apr 7 12:04:42 2026 by rpki-client