Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/p7aF2RtOmIGWTnfVtOI591VSoYs.mft
File:                     p7aF2RtOmIGWTnfVtOI591VSoYs.mft (raw, json)
Hash identifier:          iceP0bdFU+IvvEMt4QzdMyMYk/7DTyk2+I+OowtL0U4=
Subject key identifier:   B7:03:44:CC:A1:81:68:92:84:55:83:9B:00:83:76:09:9F:CB:17:00
Authority key identifier: A7:B6:85:D9:1B:4E:98:81:96:4E:77:D5:B4:E2:39:F7:55:52:A1:8B
Certificate issuer:       /CN=A7B685D91B4E9881964E77D5B4E239F75552A18B
Certificate serial:       0281
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/p7aF2RtOmIGWTnfVtOI591VSoYs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/p7aF2RtOmIGWTnfVtOI591VSoYs.mft
Manifest number:          0281
Signing time:             Sun 10 May 2026 12:08:19 +0000
Manifest this update:     Sun 10 May 2026 12:08:19 +0000
Manifest next update:     Tue 12 May 2026 12:08:19 +0000
Files and hashes:         1: p7aF2RtOmIGWTnfVtOI591VSoYs.crl (hash: EKKWlJhfPJL/Ekh4lMmrpxcjTYjq4KegTHcetpUzi04=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7B685D91B4E9881964E77D5B4E239F75552A18B
        Validity
            Not Before: May 10 12:08:19 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B70344CCA18168928455839B008376099FCB1700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:fc:c9:8a:ce:0e:24:02:36:12:19:73:41:
                    a8:7b:60:92:68:db:b4:be:5c:1b:7d:12:bd:22:00:
                    ce:27:d7:35:cd:19:79:a4:8f:cc:d9:df:11:3c:51:
                    f3:db:ba:cb:8c:09:2b:ae:30:15:a9:0b:20:ea:b7:
                    95:5d:17:2a:33:25:09:a0:8e:ff:d1:33:54:4f:42:
                    12:0f:5e:ca:6e:c0:68:66:ee:a5:aa:00:fc:94:82:
                    3f:ec:f7:cf:e7:93:72:01:ce:5e:a1:16:17:61:c7:
                    de:86:b6:53:4f:61:f8:04:bc:e3:c3:90:ef:2c:b6:
                    76:57:76:f5:91:12:69:7b:a1:36:c4:8f:21:77:f7:
                    43:8a:14:8a:92:69:02:d3:82:30:99:d0:6d:dd:6e:
                    d3:e9:22:8b:cf:e8:e1:3b:1c:a5:7b:5a:49:13:d1:
                    ae:ac:46:03:11:0a:55:b3:43:77:7a:a0:89:5d:3c:
                    b4:d2:c9:3a:6f:d8:07:3e:ce:de:38:ff:47:d9:5b:
                    05:68:39:d1:55:a8:23:3e:a1:56:01:ee:ba:e3:bd:
                    c0:c5:60:6d:77:b7:62:aa:b2:00:1d:b2:16:bc:7a:
                    db:4a:ba:d7:32:72:ba:a6:46:aa:d3:f5:2c:7e:b6:
                    c2:51:d3:d6:80:b2:3c:3c:25:d7:3e:6a:69:5e:67:
                    e3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:03:44:CC:A1:81:68:92:84:55:83:9B:00:83:76:09:9F:CB:17:00
            X509v3 Authority Key Identifier:
                keyid:A7:B6:85:D9:1B:4E:98:81:96:4E:77:D5:B4:E2:39:F7:55:52:A1:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/p7aF2RtOmIGWTnfVtOI591VSoYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/p7aF2RtOmIGWTnfVtOI591VSoYs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASPIRAPPS/p7aF2RtOmIGWTnfVtOI591VSoYs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:78:75:3c:c9:e2:28:9b:d6:b2:a3:44:eb:d2:ad:f7:d4:99:
         f8:15:d8:e0:e2:88:ae:12:9c:44:fd:d9:34:d8:af:8b:a2:81:
         39:c5:3c:1f:5e:be:16:7d:bd:46:7c:5a:2d:8b:3b:df:9d:e8:
         d4:fa:66:55:93:62:b1:54:b8:48:a3:54:87:39:bc:72:e7:cb:
         74:d1:56:b0:76:78:98:f1:00:e5:30:d3:2a:2c:ca:8e:2f:1b:
         71:82:07:c4:08:87:8c:b4:10:a0:e6:dd:17:23:83:bf:28:82:
         10:e0:d2:4f:aa:71:02:79:8d:3a:c4:c6:21:a3:d2:b2:33:e9:
         cf:1f:39:db:20:f3:0a:fd:d6:5a:6d:aa:7b:3b:6c:f6:de:f9:
         fe:a1:3b:06:2c:d4:40:00:02:23:75:bc:2a:0d:b9:da:6e:b3:
         62:33:46:01:ec:48:6e:38:28:68:21:8e:1a:06:27:57:97:b7:
         fb:39:f1:5e:ee:b1:37:09:8f:d3:6d:59:47:88:64:0e:7a:3f:
         9e:8f:00:50:bb:06:b9:92:f8:85:c9:16:7b:00:1d:42:7c:2d:
         49:08:42:4c:0b:c6:1a:4a:6f:cc:ec:66:96:76:cd:50:1c:9f:
         b7:4c:a7:6c:f4:bd:0c:68:50:81:ea:9d:d8:11:41:ab:22:ce:
         6d:b3:13:7b
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTdC
Njg1RDkxQjRFOTg4MTk2NEU3N0Q1QjRFMjM5Rjc1NTUyQTE4QjAeFw0yNjA1MTAx
MjA4MTlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI3MDM0NENDQTE4MTY4
OTI4NDU1ODM5QjAwODM3NjA5OUZDQjE3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNSPzJis4OJAI2EhlzQah7YJJo27S+XBt9Er0iAM4n1zXNGXmk
j8zZ3xE8UfPbusuMCSuuMBWpCyDqt5VdFyozJQmgjv/RM1RPQhIPXspuwGhm7qWq
APyUgj/s98/nk3IBzl6hFhdhx96GtlNPYfgEvOPDkO8stnZXdvWREml7oTbEjyF3
90OKFIqSaQLTgjCZ0G3dbtPpIovP6OE7HKV7WkkT0a6sRgMRClWzQ3d6oIldPLTS
yTpv2Ac+zt44/0fZWwVoOdFVqCM+oVYB7rrjvcDFYG13t2KqsgAdsha8ettKutcy
crqmRqrT9Sx+tsJR09aAsjw8Jdc+amleZ+PhAgMBAAGjggINMIICCTAdBgNVHQ4E
FgQUtwNEzKGBaJKEVYObAIN2CZ/LFwAwHwYDVR0jBBgwFoAUp7aF2RtOmIGWTnfV
tOI591VSoYswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNQSVJB
UFBTL3A3YUYyUnRPbUlHV1RuZlZ0T0k1OTFWU29Zcy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcDdhRjJSdE9tSUdXVG5mVnRPSTU5MVZTb1lzLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNQSVJBUFBTL3A3YUYyUnRPbUlH
V1RuZlZ0T0k1OTFWU29Zcy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQCzeHU8yeIom9ayo0Tr0q331Jn4Fdjg4oiuEpxE/dk02K+LooE5xTwfXr4W
fb1GfFotizvfnejU+mZVk2KxVLhIo1SHObxy58t00VawdniY8QDlMNMqLMqOLxtx
ggfECIeMtBCg5t0XI4O/KIIQ4NJPqnECeY06xMYho9KyM+nPHznbIPMK/dZabap7
O2z23vn+oTsGLNRAAAIjdbwqDbnabrNiM0YB7EhuOChoIY4aBidXl7f7OfFe7rE3
CY/TbVlHiGQOej+ejwBQuwa5kviFyRZ7AB1CfC1JCEJMC8YaSm/M7GaWds1QHJ+3
TKds9L0MaFCB6p3YEUGrIs5tsxN7
-----END CERTIFICATE-----
Generated at Tue Jun 16 14:21:04 2026 by rpki-client