Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft
File:                     ftgwlnECe35vya4nucaMnE4pxXU.mft (raw, json)
Hash identifier:          3Da4YjmW2b/1MJB5Tg74N8Q0M1kYwZj0IWWC0KKvmCM=
Subject key identifier:   66:A9:74:07:81:77:DC:FD:04:3F:D9:68:DE:DF:E1:B1:80:12:D4:2F
Authority key identifier: 7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75
Certificate issuer:       /CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575
Certificate serial:       05E2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft
Manifest number:          05DC
Signing time:             Fri 17 Apr 2026 11:02:50 +0000
Manifest this update:     Fri 17 Apr 2026 11:02:50 +0000
Manifest next update:     Fri 17 Apr 2026 17:02:50 +0000
Files and hashes:         1: YpjaZC5LJccyTWPtUV5W8y7mQGY.roa (hash: eUalxOIeDjSTxJCisxHcY9I9f8YtwI2myu3jsK0kajc=)
                          2: ftgwlnECe35vya4nucaMnE4pxXU.crl (hash: UaQ1aiX33Uo749lCoiomu25doVRf54qY5dDesDdJBqE=)
                          3: iCkkndkB1R7qDlnU5hlkXI5uiCw.roa (hash: YZBdfebh6s1B6Biq68yu8yDii8XEt7a+stEGQfzarEQ=)
                          4: mKdR6--Ct0FenOYAQquVe1RtECw.roa (hash: xDLu6qxNzNW8m67vaBbUTurxrLTvcboUKmV8uB7NENk=)
                          5: td3jCjzHIYCL0-HvpN4nhdz2tvg.roa (hash: rBvJqif2TLaa20JqvQMoW3jO03c53tQSeUOcr0H7L0I=)
                          6: uNVqEJogHZSaPrKSieumrfhC8bk.roa (hash: dR9jkjn7FRhIqoQ74x6PlkHXiKpeC16K+bmQtEzwsc0=)
                          7: zWE-TE2amDOnjAMsPX6eFXUA-m4.roa (hash: DqCV7q/facD9tax0P/ph0uxpmehV8sHVuAE9yxMfhKM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED8309671027B7E6FC9AE27B9C68C9C4E29C575
        Validity
            Not Before: Apr 17 11:02:50 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=66A974078177DCFD043FD968DEDFE1B18012D42F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:2e:ce:01:3c:ee:31:ae:3d:11:9f:9c:1d:
                    2c:de:41:17:95:93:07:18:4b:f2:b5:7c:6d:99:11:
                    32:65:a7:b4:4c:d4:9c:5c:95:33:3f:41:56:f8:40:
                    75:39:d9:67:03:42:b5:3f:a8:3c:89:a0:f6:db:57:
                    34:6f:92:8d:6b:1d:38:b3:e2:58:1f:9d:02:05:1d:
                    40:a0:25:bc:00:bb:2f:ed:17:eb:bd:6b:3a:98:83:
                    02:d4:c8:37:39:bf:88:25:c2:b3:c9:51:43:ef:74:
                    5b:ce:74:f8:6f:85:79:7e:b5:a0:73:bc:45:16:ca:
                    5d:fb:4b:98:54:18:71:70:d2:f0:60:b5:d5:2f:a6:
                    cb:c0:4b:c9:37:05:0a:fa:02:09:06:99:f7:53:c7:
                    81:f0:7c:1c:56:ba:76:e1:0a:6a:49:5e:49:32:3e:
                    01:c3:8e:db:b7:69:30:a0:af:b7:17:d0:f6:47:22:
                    20:bf:7b:3c:90:ad:3e:35:8d:58:de:73:c7:55:88:
                    f1:60:00:98:90:ff:a4:e8:bd:62:12:14:de:ae:3a:
                    55:24:a8:d2:3d:f8:2e:6d:b0:23:91:7a:95:72:9a:
                    7a:ca:32:d1:e4:46:b1:67:77:bc:63:43:53:d9:08:
                    3b:86:bb:be:d3:a8:e9:b4:3d:1e:e4:da:7e:19:cf:
                    8c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A9:74:07:81:77:DC:FD:04:3F:D9:68:DE:DF:E1:B1:80:12:D4:2F
            X509v3 Authority Key Identifier:
                keyid:7E:D8:30:96:71:02:7B:7E:6F:C9:AE:27:B9:C6:8C:9C:4E:29:C5:75

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ftgwlnECe35vya4nucaMnE4pxXU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GAMBESON/ftgwlnECe35vya4nucaMnE4pxXU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8a:ba:ec:7b:37:be:37:3f:d4:db:8e:4d:7d:50:fd:63:59:
         08:d2:be:be:df:9a:68:f9:82:b2:dc:81:87:92:a9:53:cc:90:
         16:16:18:a6:f7:79:69:21:4d:79:6c:e4:b8:83:0e:0b:a1:6c:
         a3:23:c6:a8:cf:7a:d5:9d:06:b4:1a:17:71:bf:d4:12:69:00:
         76:26:da:17:ae:7c:69:0f:66:dc:3c:d1:4e:f7:60:d6:cd:67:
         03:91:7e:d5:d3:cc:69:c0:fd:b0:d6:98:33:57:d4:2f:7b:de:
         36:c3:8f:b2:f4:ef:ac:28:aa:8a:a9:7b:71:0e:61:30:09:7a:
         bf:c0:9b:7d:a2:5c:bb:bb:e4:b9:4c:6a:9e:4d:19:0f:43:b6:
         70:ff:e8:77:0d:1b:8b:06:12:b4:84:cd:f5:38:1a:52:32:52:
         36:bb:98:dd:e8:9d:27:11:b2:30:0f:99:d5:cb:ca:ac:ea:f1:
         28:11:a2:82:2b:2c:d1:17:a7:a2:65:cf:2e:4b:c1:9a:f5:c8:
         69:64:bf:2c:fc:aa:ff:0d:ea:79:7b:64:38:32:08:5e:75:76:
         3f:2d:40:d9:e0:cd:c4:30:8a:73:8f:d5:b5:b5:fb:c1:f5:64:
         3d:44:7f:a7:cb:8d:a9:f5:c4:3f:61:4b:c4:2f:26:03:c8:91:
         34:77:fc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:46:33 2026 by rpki-client