Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
File: XNEK1bakd108UE1mEHH4ziQ-KAc.mft (raw, json)
Hash identifier: THRHKjtFXZCS08dJT4UunsRtbcfAd4js4MO54Ez0DiA=
Subject key identifier: FA:35:26:77:91:33:AF:50:0C:EB:1B:BD:B9:75:CA:67:F8:93:02:1E
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Certificate issuer: /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial: 0DE7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
Manifest number: 0DB6
Signing time: Mon 02 Mar 2026 05:35:57 +0000
Manifest this update: Mon 02 Mar 2026 05:35:57 +0000
Manifest next update: Wed 04 Mar 2026 05:35:57 +0000
Files and hashes: 1: 02Wxy1cQACTIEvEhl_sREhu84hE.roa (hash: ZbPLJgAEmZnLFnXy75z/nNFeien/ggjBoHaZ8IAGjk8=)
2: 1zTbbsFyQxh0RQaSCoLTvvYauI0.roa (hash: zHdaqPo+Ee3joFgC7eyJwFP2QnDQUHyQyF+3aILPEsg=)
3: 3Y-X7MISaEfvUh7XyStlBSKyPU8.roa (hash: oh2d53+8cLgrCJx0uYblY55cW86uWmf37eEcYwpYPoo=)
4: IJnVve9QI-ZV0sH7RR21AOtOTYU.roa (hash: bsPZmXIt0JI4sKspJljenCNpj9afsKdJj76ykssSn70=)
5: NvaWkBaND9dB2pG9K5QIu9qOoJU.roa (hash: xJVD5PsgRWco6mgThjfXshxiuA7o5nfBmOgLlmcuLbw=)
6: Th9RXu10cRYb4b9CBSyXnExnBdo.roa (hash: pEIUuhHMYcMSopcdOj03TOPFSL7mF9qf6JVmbuHXnj8=)
7: W9CH2jNQPeE6F56GrqNNQaeMBnQ.roa (hash: alE6qOzjvv1bdVpFxgmVkYRyaKHiH2nHE9BqToGwaAQ=)
8: XNEK1bakd108UE1mEHH4ziQ-KAc.crl (hash: 5ZRL3Hh2ZfezBWgEkw0/jifiFV5JQXcUMSgc+UyIOYw=)
9: iMRWOy8Kjg-Z6FXYwwdtX_N03gg.roa (hash: atIrascs8KvK/jjF+90Oyg80o5WLySej7SSpjKZ343g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3559 (0xde7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Validity
Not Before: Mar 2 05:35:57 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=FA3526779133AF500CEB1BBDB975CA67F893021E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:f0:ba:38:10:67:07:45:db:31:3e:c3:54:
90:bf:83:9b:2e:a7:bb:01:15:ec:64:d5:ac:2b:28:
33:68:4f:e2:e5:f3:cf:83:ae:a2:0f:c3:c3:3f:64:
13:ee:3d:86:a6:c6:99:50:ee:85:f4:24:de:71:be:
55:cd:34:6f:62:19:5f:71:bf:08:5e:07:d5:b8:1c:
0d:cf:90:db:f3:c0:33:ac:8c:55:f7:b5:dd:8f:34:
80:1f:48:b9:e8:92:39:8e:39:57:fe:02:36:1a:9c:
56:25:58:c9:5e:4d:69:d2:3a:77:a3:c2:83:a3:62:
48:dd:ba:8c:79:0c:b7:63:23:39:c8:60:8f:6b:7c:
a4:f5:1c:c7:db:5b:11:76:10:b2:49:e5:0a:9b:01:
12:48:97:08:6c:1c:47:5f:1f:82:bb:0a:44:09:2b:
01:b1:cd:74:8a:9b:c5:01:b8:57:6f:32:cf:d3:de:
19:46:e8:0f:b2:ed:68:6e:f8:96:39:09:e3:74:10:
cf:71:19:88:f6:32:47:0f:db:2b:41:c4:9c:69:ca:
76:72:f6:02:44:96:a0:11:7d:48:b6:47:18:39:5d:
c6:eb:d2:c1:fe:a8:49:5f:c4:e6:4d:3c:d9:6f:71:
05:30:8d:35:2e:77:b7:9d:e8:bc:a8:b0:af:09:01:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:35:26:77:91:33:AF:50:0C:EB:1B:BD:B9:75:CA:67:F8:93:02:1E
X509v3 Authority Key Identifier:
keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:47:78:49:94:f0:da:20:bb:65:9e:d9:8d:9f:c0:9a:54:7d:
89:25:e1:6b:99:30:51:b2:59:b6:f0:3b:7a:6d:fb:88:8b:05:
85:fc:da:d0:94:2f:9b:f6:8b:49:5c:79:2e:ff:cf:5c:77:e3:
95:2f:62:d4:b7:56:99:8d:0a:10:2d:2d:29:5c:c8:9a:71:8d:
e8:38:ed:cb:30:a6:ee:ff:3d:0d:70:65:81:ec:3e:33:eb:0c:
a3:37:c5:61:a0:df:d8:ac:04:ab:01:7d:30:48:e9:a7:99:b7:
54:a6:88:14:3e:80:ff:9d:40:b2:14:70:9e:53:a4:01:e5:11:
53:63:21:7d:cd:74:a9:ac:fa:22:b5:c8:a3:61:1f:de:ff:ea:
77:b3:32:1d:97:bc:41:04:4e:30:45:af:1c:60:53:5d:b7:dd:
7a:a5:49:a5:90:55:5a:62:c7:62:f9:b6:68:ff:82:b0:c6:c2:
52:ab:d2:78:40:22:54:f5:8e:87:a0:3f:b8:a4:9b:f0:09:d0:
dd:69:f0:21:6e:b6:10:f1:6c:98:8e:77:12:64:65:cc:29:b8:
6d:14:7b:f6:a0:2e:c7:e9:3b:9d:2b:52:46:2b:a6:fd:3d:75:
3a:cf:72:c8:a8:b4:05:a7:45:79:de:2a:96:bd:15:f3:ea:8c:
06:d6:d2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:54 2026 by rpki-client