Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft
File:                     KQF6QhbLesJUItjytuveOXjBS-c.mft (raw, json)
Hash identifier:          IM5HGvgJsNVaW5V9wJpLjACKNakA9XVwtV3rczjtBgc=
Subject key identifier:   7A:1F:7A:84:67:00:4D:E3:64:99:1A:45:B9:A5:DA:8E:67:C1:AD:17
Authority key identifier: 29:01:7A:42:16:CB:7A:C2:54:22:D8:F2:B6:EB:DE:39:78:C1:4B:E7
Certificate issuer:       /CN=29017A4216CB7AC25422D8F2B6EBDE3978C14BE7
Certificate serial:       02B9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft
Manifest number:          02B8
Signing time:             Mon 11 May 2026 08:07:49 +0000
Manifest this update:     Mon 11 May 2026 08:07:49 +0000
Manifest next update:     Mon 11 May 2026 14:07:49 +0000
Files and hashes:         1: 8hpjA8jUWHTJ-XrRrIgVLenTo1I.roa (hash: 5xd0ZvP39RbAt2K0chW0V9e6/aVioqMYr7abYJ2trW0=)
                          2: KQF6QhbLesJUItjytuveOXjBS-c.crl (hash: ZV/fNvCpxbwC/BLR57/EnWznowsxz+hPd8JtiUa5poI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 697 (0x2b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29017A4216CB7AC25422D8F2B6EBDE3978C14BE7
        Validity
            Not Before: May 11 08:07:49 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7A1F7A8467004DE364991A45B9A5DA8E67C1AD17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:28:2a:6c:31:ba:3c:a5:ca:bb:e8:75:be:
                    0c:aa:bb:9b:01:5c:ae:5c:7a:34:92:8b:8c:2e:73:
                    4b:35:eb:94:d8:84:a7:f0:9a:fb:c4:00:00:a4:26:
                    50:5e:be:cd:2b:a6:79:5c:94:df:42:0f:d2:64:99:
                    22:75:98:63:cd:00:17:9e:17:3a:52:22:3a:ce:0f:
                    53:3d:7b:46:ca:e6:52:d8:f5:ae:12:ca:e7:ae:f1:
                    93:79:90:a9:bf:7f:7a:d2:5e:db:77:11:92:52:11:
                    68:73:99:8f:a5:ff:c5:6e:8a:e1:a7:57:52:87:a7:
                    02:af:9d:7d:09:61:6f:a7:a5:07:26:65:96:f5:f1:
                    be:fc:c6:30:59:e6:81:c2:f2:c6:30:f4:21:92:e4:
                    42:83:17:ec:f7:d8:3e:f5:ed:64:35:ee:7b:92:da:
                    50:fa:b2:9e:44:36:31:91:06:80:a4:5b:1c:db:f4:
                    df:54:7a:24:09:97:04:88:1f:94:1d:be:26:9e:5c:
                    59:b7:6f:1e:e6:ad:ae:0e:b5:c4:53:62:ac:a8:ea:
                    94:2a:ce:32:68:cb:28:7f:bf:9b:75:0f:9f:fe:46:
                    a7:03:1c:ec:7a:2b:99:dd:35:62:a9:0f:ad:b0:17:
                    f4:5b:5b:48:23:34:6b:bc:cc:35:cc:9a:6d:a8:c4:
                    e1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1F:7A:84:67:00:4D:E3:64:99:1A:45:B9:A5:DA:8E:67:C1:AD:17
            X509v3 Authority Key Identifier:
                keyid:29:01:7A:42:16:CB:7A:C2:54:22:D8:F2:B6:EB:DE:39:78:C1:4B:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:22:53:ec:50:23:31:85:19:9a:98:4f:9b:d3:6e:52:4f:de:
         30:06:f1:05:f8:ad:9e:9a:35:41:92:fb:65:6e:45:84:fe:96:
         d6:69:62:d7:74:93:39:c3:4d:68:1e:52:75:7d:6d:b1:4f:78:
         40:e1:62:08:62:8d:00:24:75:6b:62:14:00:8c:a5:ff:96:ed:
         e2:13:79:2e:84:c9:0b:c9:12:03:ab:63:4a:9b:2c:39:22:5b:
         9c:9e:6b:51:bf:6d:65:5b:28:05:25:ff:a7:64:17:24:9e:10:
         83:1f:37:c7:26:47:f5:68:e2:74:0d:a0:ce:3b:b9:b5:32:91:
         e5:4d:2a:30:29:78:a2:d9:ff:a0:93:66:4c:ff:ac:2e:6c:8f:
         e3:1f:c2:71:84:8b:79:dd:29:a8:c4:b6:5c:90:67:d9:97:bd:
         43:33:68:3a:72:63:87:94:eb:e7:f9:97:9d:79:45:44:23:3f:
         c8:2f:bf:9b:af:73:c9:24:9f:e6:6a:97:cf:75:2c:cf:0c:6f:
         02:2a:4f:97:8f:bf:87:bf:16:fb:07:41:3e:4f:a8:d3:b2:eb:
         86:91:b4:12:b0:9b:af:00:ef:10:0f:1c:55:39:af:96:f8:6e:
         7d:a7:c8:a2:46:6b:f2:b4:64:14:a1:8a:d4:da:66:34:d0:c5:
         03:ce:bb:e4
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICArkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjkw
MTdBNDIxNkNCN0FDMjU0MjJEOEYyQjZFQkRFMzk3OEMxNEJFNzAeFw0yNjA1MTEw
ODA3NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDdBMUY3QTg0NjcwMDRE
RTM2NDk5MUE0NUI5QTVEQThFNjdDMUFEMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtdCgqbDG6PKXKu+h1vgyqu5sBXK5cejSSi4wuc0s165TYhKfw
mvvEAACkJlBevs0rpnlclN9CD9JkmSJ1mGPNABeeFzpSIjrOD1M9e0bK5lLY9a4S
yueu8ZN5kKm/f3rSXtt3EZJSEWhzmY+l/8VuiuGnV1KHpwKvnX0JYW+npQcmZZb1
8b78xjBZ5oHC8sYw9CGS5EKDF+z32D717WQ17nuS2lD6sp5ENjGRBoCkWxzb9N9U
eiQJlwSIH5QdviaeXFm3bx7mra4OtcRTYqyo6pQqzjJoyyh/v5t1D5/+RqcDHOx6
K5ndNWKpD62wF/RbW0gjNGu8zDXMmm2oxOGXAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUeh96hGcATeNkmRpFuaXajmfBrRcwHwYDVR0jBBgwFoAUKQF6QhbLesJUItjy
tuveOXjBS+cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUUlTREEv
S1FGNlFoYkxlc0pVSXRqeXR1dmVPWGpCUy1jLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9LUUY2UWhiTGVzSlVJdGp5dHV2ZU9YakJTLWMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9RSVNEQS9LUUY2UWhiTGVzSlVJdGp5dHV2
ZU9YakJTLWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvCJT
7FAjMYUZmphPm9NuUk/eMAbxBfitnpo1QZL7ZW5FhP6W1mli13STOcNNaB5SdX1t
sU94QOFiCGKNACR1a2IUAIyl/5bt4hN5LoTJC8kSA6tjSpssOSJbnJ5rUb9tZVso
BSX/p2QXJJ4Qgx83xyZH9WjidA2gzju5tTKR5U0qMCl4otn/oJNmTP+sLmyP4x/C
cYSLed0pqMS2XJBn2Ze9QzNoOnJjh5Tr5/mXnXlFRCM/yC+/m69zySSf5mqXz3Us
zwxvAipPl4+/h78W+wdBPk+o07LrhpG0ErCbrwDvEA8cVTmvlvhufafIokZr8rRk
FKGK1NpmNNDFA8675A==
-----END CERTIFICATE-----
Generated at Tue Jun 16 14:24:21 2026 by rpki-client