Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
File:                     P4T67Wy0fhEvJMawJ3pIYicGcso.mft (raw, json)
Hash identifier:          /mSwOGMzGmIjsH395uxOnLq3GjwIik7i8zfv/i0/mfg=
Subject key identifier:   C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0
Authority key identifier: 3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA
Certificate issuer:       /CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
Certificate serial:       02BB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
Manifest number:          02B0
Signing time:             Tue 14 Apr 2026 04:33:12 +0000
Manifest this update:     Tue 14 Apr 2026 04:33:12 +0000
Manifest next update:     Thu 16 Apr 2026 04:33:12 +0000
Files and hashes:         1: P4T67Wy0fhEvJMawJ3pIYicGcso.crl (hash: u2syfAKQoOsJayvBv94ia7LwrvCg+zn9U+f07yVOdSM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 699 (0x2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
        Validity
            Not Before: Apr 14 04:33:12 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C62935BDEE28689F47A37A776EF691F2FD9522A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:6f:5a:29:d0:9d:14:37:3b:94:31:e9:b6:39:
                    92:35:1b:25:de:6b:91:ab:a9:75:3c:3a:c5:73:71:
                    d9:47:b9:21:fe:14:2a:4e:f9:c4:bf:d2:1f:4b:04:
                    f9:1e:c5:38:e5:81:2f:61:65:d8:35:f4:55:ba:17:
                    6f:1d:ab:ee:60:36:f9:ab:f3:b9:46:42:56:a0:65:
                    ce:68:17:4f:76:de:bb:2e:cc:6f:c9:00:dd:3a:ad:
                    41:1d:af:bf:5b:78:ef:29:5f:15:79:49:d7:53:ac:
                    56:6d:9c:b8:37:25:8f:f6:27:4e:54:d9:ca:ab:46:
                    36:ae:ea:ad:b4:d6:1b:b2:44:0e:61:84:a9:2d:fe:
                    29:47:38:ff:04:e3:8c:d1:e7:85:cf:8e:cc:d7:86:
                    0d:4b:5b:86:48:d6:fc:cd:21:96:e4:34:09:8c:a2:
                    66:b9:3a:6e:9a:9d:c9:a9:a8:66:e9:bf:94:e1:77:
                    d0:b8:ad:d3:08:b5:2b:73:71:01:06:49:f1:40:52:
                    a3:f3:c0:45:40:d4:4a:a0:a5:71:8a:19:d1:e1:a5:
                    7e:15:78:66:7a:06:fc:98:15:c8:a8:8d:af:d2:4c:
                    eb:83:e3:ae:3a:dc:81:f8:ac:ce:3a:8c:c6:74:11:
                    7d:99:c3:56:c8:8e:af:62:3a:af:a8:fd:14:09:4c:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0
            X509v3 Authority Key Identifier:
                keyid:3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d7:37:2c:e1:fd:fb:17:c5:21:8c:3a:3f:ae:fc:52:b8:50:
         45:ab:3c:69:75:d1:b8:d1:0e:6a:a8:60:bf:c4:22:50:9c:cd:
         2a:06:32:7f:92:bc:5b:b1:56:3a:f7:a1:1e:ac:fc:1a:2d:7c:
         46:1c:b3:f5:01:e8:1a:5f:c1:4b:39:af:f0:44:db:d3:c9:c9:
         2d:60:e7:4f:13:62:1b:c6:3a:1b:66:2a:3f:05:68:47:1c:b7:
         b5:52:a6:e3:a8:4b:c4:52:6e:ea:70:52:ed:e7:00:cd:3c:a5:
         30:cc:6d:96:62:4f:ab:83:16:e0:60:e4:da:9a:91:70:ea:e8:
         39:16:45:eb:10:b8:b1:08:57:ca:d3:6b:38:67:c8:bc:e9:10:
         eb:28:36:1d:6c:3a:5a:28:93:de:a9:cc:0f:7f:af:c0:17:b9:
         11:61:3f:47:d8:7d:f4:c6:4f:6a:4b:ad:5a:83:57:70:cf:7c:
         9a:9e:1e:ff:57:ad:9f:08:f9:a1:1b:42:8e:96:b7:14:7e:af:
         22:40:a4:2b:e4:85:92:13:8e:f7:ce:0a:24:38:45:d5:34:05:
         64:1d:73:30:f1:38:97:dd:90:d2:05:11:5d:a4:d0:c8:f5:f4:
         a6:cf:aa:0c:25:07:02:e1:ff:02:f4:57:08:5f:8a:27:54:16:
         10:a0:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 04:18:33 2026 by rpki-client