Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DIGICELL/jQhNTLJ9iJDmHY7woXMFPEGQtkQ.mft
File:                     jQhNTLJ9iJDmHY7woXMFPEGQtkQ.mft (raw, json)
Hash identifier:          5j5zgwvh9fzm8DR/43edMkWMH49nrUVLQZdpb4jnJOY=
Subject key identifier:   DC:50:4C:52:7C:00:0B:B5:DA:84:F3:66:48:DC:0C:17:4E:A5:ED:7E
Authority key identifier: 8D:08:4D:4C:B2:7D:88:90:E6:1D:8E:F0:A1:73:05:3C:41:90:B6:44
Certificate issuer:       /CN=8D084D4CB27D8890E61D8EF0A173053C4190B644
Certificate serial:       0DE7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jQhNTLJ9iJDmHY7woXMFPEGQtkQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DIGICELL/jQhNTLJ9iJDmHY7woXMFPEGQtkQ.mft
Manifest number:          0DE7
Signing time:             Tue 14 Apr 2026 23:34:51 +0000
Manifest this update:     Tue 14 Apr 2026 23:34:51 +0000
Manifest next update:     Thu 16 Apr 2026 23:34:51 +0000
Files and hashes:         1: jQhNTLJ9iJDmHY7woXMFPEGQtkQ.crl (hash: KcB8x5kq7kxQAUtNh2eY0pvO9SZBkTR0N4yxlCRT350=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3559 (0xde7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D084D4CB27D8890E61D8EF0A173053C4190B644
        Validity
            Not Before: Apr 14 23:34:51 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=DC504C527C000BB5DA84F36648DC0C174EA5ED7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:f3:bb:2f:99:ef:c9:ec:a7:d6:d7:d3:27:
                    73:68:00:9b:75:40:10:4c:9f:9d:61:ce:b6:3c:5c:
                    97:0b:0b:25:74:d8:b4:d1:0f:3c:93:ab:05:5b:11:
                    e2:b1:43:37:59:02:56:72:93:24:1d:23:2f:51:26:
                    58:71:ed:2c:e5:21:ee:43:ef:60:14:00:24:df:21:
                    b8:89:90:f2:c7:a8:0e:f4:9d:2d:16:8c:27:09:bb:
                    f6:20:f9:70:c1:a5:00:4b:84:0b:f0:be:57:ec:06:
                    53:fa:1c:8a:ed:71:f9:14:95:e6:26:8f:91:c0:eb:
                    af:3c:17:92:8b:a8:be:84:5b:53:75:d9:3a:cc:4d:
                    a9:02:6b:19:93:3e:93:0e:ab:4c:0b:98:b1:d0:e4:
                    df:1c:6b:ec:22:f6:cf:43:d8:37:4b:e8:eb:13:cd:
                    5c:c5:47:bf:97:3a:13:2a:de:16:7d:58:95:b4:11:
                    33:e8:fb:4c:ac:50:73:95:7d:d0:b3:0a:c6:41:45:
                    76:4e:7b:7d:b0:43:5f:c5:d5:73:80:ae:00:94:30:
                    d3:13:55:2d:2a:db:46:bf:11:3f:48:04:08:d3:01:
                    f1:ea:89:b2:67:15:95:7a:a9:67:79:ef:c9:47:27:
                    03:01:2b:41:5e:9b:45:98:cc:6e:eb:fb:a0:5f:34:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:50:4C:52:7C:00:0B:B5:DA:84:F3:66:48:DC:0C:17:4E:A5:ED:7E
            X509v3 Authority Key Identifier:
                keyid:8D:08:4D:4C:B2:7D:88:90:E6:1D:8E:F0:A1:73:05:3C:41:90:B6:44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DIGICELL/jQhNTLJ9iJDmHY7woXMFPEGQtkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jQhNTLJ9iJDmHY7woXMFPEGQtkQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DIGICELL/jQhNTLJ9iJDmHY7woXMFPEGQtkQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8d:52:58:db:f0:82:a6:2e:f9:a1:70:fd:bb:89:be:af:a2:
         7f:4b:1c:98:a3:6a:0c:ec:e2:c1:b9:cb:33:d4:f5:9c:7f:56:
         b6:68:e4:ad:02:f9:6c:c5:f0:ec:21:7c:3e:83:00:b5:14:8d:
         c8:30:49:87:bf:bf:3d:c1:8c:7f:ea:09:e5:d7:1f:38:94:28:
         92:90:b7:55:59:1b:7b:ea:85:56:38:9a:31:26:bd:4f:7a:23:
         dd:45:cd:02:62:12:92:24:b8:37:5e:fe:54:05:1f:40:13:5e:
         d9:0b:3c:b8:ab:38:54:ab:c6:bb:77:2a:80:9e:13:6a:68:0a:
         3b:bf:42:79:a5:5b:52:78:35:98:c4:35:91:81:14:67:2b:a3:
         dd:99:9b:ab:e0:73:2c:23:64:00:45:b6:a9:42:85:af:00:82:
         52:98:88:21:f1:86:47:87:88:81:34:c1:31:c0:89:bf:b4:7c:
         e4:f2:7b:dc:3d:2a:fe:58:21:02:fa:34:8f:2e:f7:93:14:64:
         10:af:cf:d3:20:cb:f4:95:c6:a2:ac:ae:1a:aa:96:15:89:97:
         3e:8e:22:c3:53:e2:12:8c:cc:a6:15:f6:dc:f3:22:ad:99:46:
         fd:25:dd:f5:48:a2:91:26:54:76:f4:29:78:9f:e5:29:89:a6:
         3b:37:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 12:28:58 2026 by rpki-client