Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SPUSER/QNpOLMsDK23HfGWArizi-A3M_iE.mft
File:                     QNpOLMsDK23HfGWArizi-A3M_iE.mft (raw, json)
Hash identifier:          JLkIhpSXET17hQCsJFdQyRpww1eOLzCTdU6ePy9DBgI=
Subject key identifier:   95:66:6F:6F:ED:09:F5:F2:EC:4E:2F:DE:20:51:E3:CC:2D:00:4C:64
Authority key identifier: 40:DA:4E:2C:CB:03:2B:6D:C7:7C:65:80:AE:2C:E2:F8:0D:CC:FE:21
Certificate issuer:       /CN=40DA4E2CCB032B6DC77C6580AE2CE2F80DCCFE21
Certificate serial:       0DF0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/QNpOLMsDK23HfGWArizi-A3M_iE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SPUSER/QNpOLMsDK23HfGWArizi-A3M_iE.mft
Manifest number:          0DEF
Signing time:             Sun 10 May 2026 22:08:56 +0000
Manifest this update:     Sun 10 May 2026 22:08:56 +0000
Manifest next update:     Tue 12 May 2026 22:08:56 +0000
Files and hashes:         1: QNpOLMsDK23HfGWArizi-A3M_iE.crl (hash: QnjmiEgqVSan78FEU56Tbqo+duZEiLuJwAhJFNX9Sxc=)
                          2: qI7XbxdaJ7o2S2EdJMOfBC8XFwM.roa (hash: Xag3CviWYL9M3NfAliamyS+Ixpa0XVZ0L14oYoJklxA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3568 (0xdf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40DA4E2CCB032B6DC77C6580AE2CE2F80DCCFE21
        Validity
            Not Before: May 10 22:08:56 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=95666F6FED09F5F2EC4E2FDE2051E3CC2D004C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:65:a1:1a:9a:e3:29:03:e4:91:4c:cb:6d:f8:
                    00:26:8f:16:4b:53:c7:7b:5d:f3:7a:b3:da:1e:e8:
                    a4:7c:ba:79:32:91:6d:78:57:a3:92:b3:e2:9d:6a:
                    04:8b:47:30:ad:96:77:de:a5:16:51:64:4f:b8:49:
                    02:6f:85:dd:15:6e:ad:44:af:b6:e2:99:37:09:56:
                    77:8d:52:da:64:e8:65:6b:4f:b3:bf:6c:c2:d9:b3:
                    96:db:40:fd:05:26:f0:d0:cc:81:8d:5b:1e:45:89:
                    4a:70:91:f1:02:de:9b:82:67:b7:90:16:2e:f0:f7:
                    95:ef:40:2c:1f:11:96:52:5f:2d:ba:2c:ae:e8:75:
                    61:23:46:0b:7a:e5:ab:9c:d3:00:a9:04:1c:0f:eb:
                    13:4d:72:4a:31:f8:db:48:a4:3a:ae:60:22:03:fa:
                    8d:c2:e8:51:62:c4:64:48:fd:ee:d1:e5:a3:81:8d:
                    5f:69:7e:ca:52:04:70:cd:8e:25:11:13:88:39:13:
                    f5:0f:89:37:f5:34:50:e3:b8:3b:55:41:09:07:e1:
                    52:c4:ee:a1:c1:d4:34:24:68:b9:c2:29:ac:55:de:
                    f7:59:a6:d9:e1:37:f1:d3:00:32:d8:16:22:90:f2:
                    db:ed:43:98:0c:21:6d:d5:15:c3:a4:77:88:7d:bb:
                    06:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:66:6F:6F:ED:09:F5:F2:EC:4E:2F:DE:20:51:E3:CC:2D:00:4C:64
            X509v3 Authority Key Identifier:
                keyid:40:DA:4E:2C:CB:03:2B:6D:C7:7C:65:80:AE:2C:E2:F8:0D:CC:FE:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPUSER/QNpOLMsDK23HfGWArizi-A3M_iE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QNpOLMsDK23HfGWArizi-A3M_iE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SPUSER/QNpOLMsDK23HfGWArizi-A3M_iE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e5:0a:40:b9:e1:5c:e6:09:f4:91:c1:35:40:9c:a0:c8:16:
         60:ea:fa:0f:d9:57:e0:1f:5b:f2:dd:f0:19:44:22:88:fe:73:
         61:4e:43:91:2e:e2:9f:58:bb:a4:75:57:a1:ab:1d:5a:23:bb:
         e7:0f:f1:40:93:f2:ff:8b:4e:dd:cd:71:dd:53:40:ba:8d:f0:
         bb:5a:14:3d:d4:77:98:36:86:a1:2a:b8:55:ef:d1:c1:04:73:
         b2:8d:0b:15:2d:59:d7:ca:d2:44:e2:1b:f4:e0:24:7d:58:98:
         b0:9b:51:b1:c7:0a:e7:b8:b9:79:9b:4a:d7:76:61:13:54:dc:
         45:e2:17:43:c8:b4:01:3c:f5:6f:51:4c:de:1d:87:d9:a1:b1:
         42:13:48:5b:ed:46:ed:b3:67:6a:6e:f4:b7:b1:2b:6a:e1:e6:
         3c:eb:eb:04:16:ab:85:b4:0a:4f:02:33:ee:ff:02:9b:7a:b5:
         38:96:8e:e5:20:07:0a:d5:37:cb:1d:84:6f:3d:0b:75:aa:2b:
         a9:83:0d:24:b0:1b:f2:61:97:78:70:82:70:fd:6b:76:80:d8:
         2b:1e:3b:d5:4d:28:24:f7:3e:bd:31:99:a6:79:2b:45:65:12:
         04:b3:e7:c1:1b:93:0a:ae:27:4e:65:42:29:cf:59:0b:34:98:
         46:10:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:21:54 2026 by rpki-client