Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TYCATV/3yEHAK6OolZo5r6j-mptOzeMMSE.mft
File:                     3yEHAK6OolZo5r6j-mptOzeMMSE.mft (raw, json)
Hash identifier:          k8Ne5HcnRmDAcZtC3gj7NiBCW42UBsYf7oqL9pgsQak=
Subject key identifier:   37:DA:D5:D1:89:42:EE:6C:37:A3:16:45:FB:C9:1A:78:6D:C1:61:2D
Authority key identifier: DF:21:07:00:AE:8E:A2:56:68:E6:BE:A3:FA:6A:6D:3B:37:8C:31:21
Certificate issuer:       /CN=DF210700AE8EA25668E6BEA3FA6A6D3B378C3121
Certificate serial:       0DDE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3yEHAK6OolZo5r6j-mptOzeMMSE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TYCATV/3yEHAK6OolZo5r6j-mptOzeMMSE.mft
Manifest number:          0DD6
Signing time:             Sun 10 May 2026 11:37:33 +0000
Manifest this update:     Sun 10 May 2026 11:37:33 +0000
Manifest next update:     Tue 12 May 2026 11:37:33 +0000
Files and hashes:         1: 3yEHAK6OolZo5r6j-mptOzeMMSE.crl (hash: uvpsEgf7N3CliTRFCy9hLk0pMCC2tvZ1+M9/8ZXL4KE=)
                          2: knwivzGweWUJYWEY31AlCKvv9zo.roa (hash: v/uUvUxzz91iShaH89C69QYRefb7VBQZ1saM94bz/cQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3550 (0xdde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF210700AE8EA25668E6BEA3FA6A6D3B378C3121
        Validity
            Not Before: May 10 11:37:33 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=37DAD5D18942EE6C37A31645FBC91A786DC1612D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:77:ed:bd:f3:06:dd:21:90:27:61:a7:dc:
                    3b:7b:ad:cb:70:7d:6c:f4:81:21:16:9b:0a:63:69:
                    e9:4e:5d:80:a9:65:2a:b6:7a:55:4c:21:52:bd:c5:
                    cd:43:59:57:e5:5f:3e:96:85:eb:42:87:0e:e4:4b:
                    75:59:4d:4a:e8:c9:35:94:20:84:0d:b9:08:c6:d8:
                    f8:96:b1:b8:76:81:8b:73:aa:d5:9e:45:bd:fd:83:
                    0d:29:29:c9:e6:3a:17:dc:40:04:4b:f0:9b:8c:dc:
                    8e:a8:09:4c:31:e9:e5:07:2c:59:af:f6:3a:4c:c2:
                    7f:c0:cd:cd:65:b2:fa:60:5a:d9:04:e8:63:05:fd:
                    0e:b4:50:64:ac:38:9e:34:eb:e7:09:85:e5:c9:d8:
                    3d:ec:78:c5:db:dc:07:1e:47:9e:a6:14:9a:b6:ce:
                    c8:1d:24:4a:4f:7f:ae:77:1c:5e:6f:3c:29:60:23:
                    de:c9:7d:db:5a:ed:4b:59:e8:5b:a9:56:23:85:24:
                    89:a4:60:c2:9d:22:ea:59:f3:8f:a6:a8:5f:8a:f9:
                    4b:d2:4a:49:80:e5:fa:0b:7d:32:9a:95:cd:a1:fb:
                    e5:e2:2a:5a:2f:77:14:bc:c7:5f:4a:a1:bf:36:1e:
                    65:a6:0c:50:e6:5e:ef:d0:2e:57:eb:c2:e5:0a:33:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DA:D5:D1:89:42:EE:6C:37:A3:16:45:FB:C9:1A:78:6D:C1:61:2D
            X509v3 Authority Key Identifier:
                keyid:DF:21:07:00:AE:8E:A2:56:68:E6:BE:A3:FA:6A:6D:3B:37:8C:31:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TYCATV/3yEHAK6OolZo5r6j-mptOzeMMSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3yEHAK6OolZo5r6j-mptOzeMMSE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TYCATV/3yEHAK6OolZo5r6j-mptOzeMMSE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:66:1d:83:81:d2:89:7b:27:80:a0:da:9e:b1:47:d0:17:e8:
         d9:83:33:e9:fe:69:19:b7:19:f3:af:ac:bd:16:24:b3:cf:e1:
         66:81:94:ef:ef:18:dc:85:76:26:2c:5a:1c:ea:09:32:f5:f3:
         72:ce:22:57:4c:0a:24:be:44:f7:6e:a1:ea:16:48:db:6f:cc:
         3f:c5:23:3a:63:60:3e:56:d7:65:28:e0:dc:03:c7:e4:c1:e3:
         55:34:43:f5:ae:eb:80:31:5d:87:13:8a:27:f1:ff:8a:d6:7d:
         6d:43:03:42:74:63:45:d3:ec:fe:35:f6:15:eb:4b:79:96:23:
         2a:8c:91:a4:38:0f:60:fb:c1:77:43:90:99:47:cf:be:ad:9a:
         e1:4c:fb:8b:2e:bc:9a:dd:44:cb:1c:44:df:0e:6b:d2:10:fa:
         e9:51:9c:f4:7d:78:93:1e:ca:15:6f:2e:56:6b:1a:32:5f:b0:
         35:29:eb:1a:71:84:58:39:48:48:12:c7:08:2a:a5:1b:02:ce:
         52:01:a7:0e:c9:5d:3b:69:69:3a:ec:3b:bf:07:95:85:5f:42:
         11:8d:da:d7:28:d1:bc:24:cf:f1:58:6f:3c:30:34:bc:27:0e:
         97:1f:60:ba:fd:74:5c:23:d0:41:a1:69:90:96:6d:3d:f3:13:
         ba:3e:1f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 14:24:56 2026 by rpki-client