Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAELW/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.mft
File:                     Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.mft (raw, json)
Hash identifier:          ufWOJyt3ypY3dl8K+5/dU/pQHkmudZpYvJNbmBlHUZo=
Subject key identifier:   EA:F2:BE:88:3E:F8:ED:0C:1C:90:C3:D0:5D:11:1B:85:39:F3:7A:69
Authority key identifier: 43:EB:D3:9F:B5:18:B5:5D:A0:07:42:AE:EC:7B:0D:A6:AA:BA:61:F7
Certificate issuer:       /CN=43EBD39FB518B55DA00742AEEC7B0DA6AABA61F7
Certificate serial:       021B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.mft
Manifest number:          0215
Signing time:             Fri 06 Mar 2026 21:54:45 +0000
Manifest this update:     Fri 06 Mar 2026 21:54:45 +0000
Manifest next update:     Sun 08 Mar 2026 21:54:45 +0000
Files and hashes:         1: DHfspAVUUZ0rNFX5agFJgGyx23Q.roa (hash: 0yRv4FcWg1qFIUGDL74GwiVrS4qIfgwZ9YjYGaMW7Ks=)
                          2: Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.crl (hash: MWqLlfJFKQ1O0knWDwI/gjuNEpIjQ1dmg0FEaKbvPDE=)
                          3: plN6TlQMP3qTM5WBPlFYzO6YRCE.roa (hash: oXn5+/wl8H3Ceea5XWKI+xNM2/t6MEJx6Sg2hKc5Oaw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43EBD39FB518B55DA00742AEEC7B0DA6AABA61F7
        Validity
            Not Before: Mar  6 21:54:45 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EAF2BE883EF8ED0C1C90C3D05D111B8539F37A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b5:3e:8b:b8:23:d0:67:20:07:ec:8a:ac:1d:
                    e4:82:63:90:b5:bd:e0:39:64:00:a9:a4:04:a5:e8:
                    32:34:38:0f:ad:0b:f1:dd:bf:6d:52:4d:5e:98:cd:
                    bd:83:9d:40:9a:ae:40:0e:c6:e6:df:2f:ca:36:02:
                    96:ba:a1:3d:b3:d1:66:f9:3c:2e:63:d4:3a:95:c4:
                    4d:b9:cc:57:07:4c:72:12:e1:15:50:6c:14:72:41:
                    58:79:2d:09:03:55:e3:f8:65:8b:9f:28:9a:09:80:
                    6b:ef:6b:4c:4d:2d:cc:9c:3b:39:00:3f:99:35:00:
                    f9:2a:92:95:51:e8:42:56:64:12:94:d2:43:f5:60:
                    79:65:56:27:e6:20:8d:0f:30:0c:92:fe:6c:2e:f4:
                    1f:09:0f:ab:9c:22:2d:e2:73:ef:dd:09:97:d3:35:
                    83:ef:81:75:33:60:63:83:81:2b:91:1c:55:f8:8c:
                    48:7e:db:af:79:b6:82:ba:65:79:cd:98:36:a9:b4:
                    dd:28:ef:8d:bd:e7:46:d5:da:79:d5:30:58:89:5c:
                    58:95:a8:1b:d0:57:e1:7e:d7:ce:1d:80:99:ee:ae:
                    00:20:12:45:a5:f3:37:69:71:b6:27:45:32:46:55:
                    8c:f9:ea:86:77:07:bd:c9:68:9c:15:29:02:f2:d5:
                    df:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F2:BE:88:3E:F8:ED:0C:1C:90:C3:D0:5D:11:1B:85:39:F3:7A:69
            X509v3 Authority Key Identifier:
                keyid:43:EB:D3:9F:B5:18:B5:5D:A0:07:42:AE:EC:7B:0D:A6:AA:BA:61:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAELW/Q-vTn7UYtV2gB0Ku7HsNpqq6Yfc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f8:59:94:fc:0a:fb:55:69:75:0c:5f:bc:21:f7:c4:d1:09:
         e0:df:38:62:cb:c1:af:02:1b:15:40:ca:3a:2e:b5:76:51:10:
         23:e0:ea:44:e6:b6:4a:9a:41:a9:cf:fc:4e:fd:ab:ec:02:dd:
         55:8d:1d:9c:5e:21:df:20:29:d0:4d:6b:08:b5:43:66:38:c0:
         a9:75:6b:1b:eb:77:36:38:1b:ee:ec:25:71:ae:dd:7b:a8:65:
         d7:5a:24:b2:bc:ff:ae:b0:f5:1b:6a:7f:3a:66:70:ae:4f:12:
         d4:5a:d4:da:00:92:03:82:bd:2a:73:5c:8c:a1:6f:e9:83:50:
         8c:a5:5e:28:19:42:b9:0f:f6:db:3d:84:f7:3e:91:ef:e7:e6:
         18:7d:ad:7d:10:2a:b1:6e:70:be:ec:dc:81:54:42:14:1e:55:
         f3:59:24:35:31:fb:3c:5e:33:74:b6:c8:3c:b5:c8:62:29:68:
         bf:1d:19:2b:95:b7:39:37:f2:ad:ed:3e:62:19:40:ec:19:a7:
         af:16:f0:83:c8:d5:10:2a:4c:51:79:93:23:2b:ea:d4:d8:5a:
         55:c1:1b:b9:76:3a:58:47:58:9d:48:ca:9b:39:24:12:dd:f8:
         0d:53:10:d6:d4:4a:71:55:87:87:a9:e4:5d:5c:f9:7f:2e:c5:
         fb:eb:32:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:29:54 2026 by rpki-client