Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RAID/PalqMYeFDKwQFQruNLuY3YHdups.mft
File:                     PalqMYeFDKwQFQruNLuY3YHdups.mft (raw, json)
Hash identifier:          gOn4r7HDKamTYfebrskNuDB5lRf7c+iiJ68qndeHdFw=
Subject key identifier:   64:81:D0:D7:57:88:DC:AC:68:A8:E9:81:D6:31:90:D2:E2:BE:B0:08
Authority key identifier: 3D:A9:6A:31:87:85:0C:AC:10:15:0A:EE:34:BB:98:DD:81:DD:BA:9B
Certificate issuer:       /CN=3DA96A3187850CAC10150AEE34BB98DD81DDBA9B
Certificate serial:       01E4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/PalqMYeFDKwQFQruNLuY3YHdups.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/RAID/PalqMYeFDKwQFQruNLuY3YHdups.mft
Manifest number:          01E4
Signing time:             Sun 10 May 2026 11:08:28 +0000
Manifest this update:     Sun 10 May 2026 11:08:28 +0000
Manifest next update:     Tue 12 May 2026 11:08:28 +0000
Files and hashes:         1: PalqMYeFDKwQFQruNLuY3YHdups.crl (hash: FELwHEuw2nKUSP9XLHGCHTdpGX1+pg4p66As4MhU5GY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DA96A3187850CAC10150AEE34BB98DD81DDBA9B
        Validity
            Not Before: May 10 11:08:28 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=6481D0D75788DCAC68A8E981D63190D2E2BEB008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7a:2d:40:90:4c:94:ce:b5:6b:8b:d4:d4:b1:
                    40:37:bc:04:5e:9a:2c:fe:30:94:d9:08:3a:94:b1:
                    7e:70:e5:a0:b3:67:da:ee:a2:f6:b5:30:9d:b1:d0:
                    92:62:71:79:be:22:b7:eb:a4:d0:0c:f8:d8:73:9b:
                    57:2b:97:01:c1:de:f1:27:22:d5:79:22:61:87:99:
                    18:ef:64:7f:02:fe:5d:4c:c5:f6:39:00:03:1c:0d:
                    14:f4:92:7b:75:b7:9b:5e:5e:da:e8:43:9a:cb:ea:
                    d0:8c:e9:cb:4b:34:75:8d:fb:32:74:ce:5d:de:6b:
                    91:39:89:ef:32:6d:03:7b:aa:23:16:a4:ef:f6:08:
                    9d:a0:cf:c6:73:91:fd:bb:44:52:5c:41:4b:71:56:
                    fb:7c:ff:56:2b:8e:80:bc:15:f2:8a:cf:a9:36:3f:
                    ae:2c:dc:e0:d2:ff:89:64:a3:cd:c0:ca:c2:f4:98:
                    4a:59:37:c7:b1:5a:9f:41:0b:f7:07:09:f3:03:82:
                    db:70:19:60:29:91:25:33:c7:40:c4:77:7c:b6:41:
                    42:d7:d0:cf:3b:69:df:01:de:f9:86:da:50:7e:8d:
                    a5:34:ad:a0:22:7a:43:8e:9c:53:2e:3b:77:30:32:
                    68:7c:c0:66:05:f1:ce:b7:fd:d8:ea:51:2b:54:ff:
                    73:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:81:D0:D7:57:88:DC:AC:68:A8:E9:81:D6:31:90:D2:E2:BE:B0:08
            X509v3 Authority Key Identifier:
                keyid:3D:A9:6A:31:87:85:0C:AC:10:15:0A:EE:34:BB:98:DD:81:DD:BA:9B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RAID/PalqMYeFDKwQFQruNLuY3YHdups.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PalqMYeFDKwQFQruNLuY3YHdups.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RAID/PalqMYeFDKwQFQruNLuY3YHdups.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:65:63:a6:38:cd:8e:f3:43:d8:68:d2:91:f0:96:43:37:a7:
         c4:02:87:05:2f:ce:11:cd:b0:36:d7:ef:6f:a0:e4:9e:02:a3:
         e6:5d:bb:cb:51:61:74:ef:7b:95:20:86:18:0e:40:cf:b8:a1:
         37:a2:7e:5e:d7:0e:da:18:00:16:85:09:44:a2:c5:fe:ea:89:
         58:42:34:32:83:be:4b:71:6b:e2:c6:ff:1d:99:f0:d2:1b:6d:
         2f:93:81:25:cf:7f:67:36:52:13:9c:8c:8d:e0:36:53:5f:12:
         47:3e:8e:e3:88:1b:36:5e:65:ed:cb:f5:35:28:fc:b6:a7:5b:
         60:fb:d2:15:06:6d:05:9b:0c:d3:39:3e:6a:0b:28:a1:b2:b3:
         2d:d0:2e:0b:af:2b:b3:16:5f:f8:c7:dc:88:49:ea:39:1a:33:
         ef:49:ca:b3:ca:40:a1:8a:ea:16:4a:ad:13:f4:9b:09:bb:11:
         fa:c8:e0:8e:4d:23:31:af:1e:86:39:63:30:b8:c8:32:72:26:
         ae:a9:9a:ca:de:6b:cd:ae:73:3d:ea:56:2f:46:64:22:44:c7:
         c5:fa:21:a5:7d:1a:d7:d8:a3:ea:eb:cc:14:35:e4:13:2b:49:
         4b:99:a8:3f:a5:2f:94:26:64:f6:d0:5c:bf:0e:f9:76:f3:6a:
         8e:7e:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:22:20 2026 by rpki-client