Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft
File:                     aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft (raw, json)
Hash identifier:          8mm+1Vqqjjsj6qfrBooTvL6Wt18t5rSjheKDchzd29M=
Subject key identifier:   8D:21:A4:B3:97:4B:0B:F7:AA:F6:C9:D1:3A:27:BC:B2:94:95:C0:67
Authority key identifier: 68:33:02:DF:6A:59:20:E2:F8:3A:C4:EF:76:65:6D:DC:E8:40:F5:93
Certificate issuer:       /CN=683302DF6A5920E2F83AC4EF76656DDCE840F593
Certificate serial:       01A8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/aDMC32pZIOL4OsTvdmVt3OhA9ZM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft
Manifest number:          01A8
Signing time:             Sun 19 Apr 2026 04:03:30 +0000
Manifest this update:     Sun 19 Apr 2026 04:03:30 +0000
Manifest next update:     Sun 19 Apr 2026 10:03:30 +0000
Files and hashes:         1: aDMC32pZIOL4OsTvdmVt3OhA9ZM.crl (hash: +TlZjOb7bLuG+qQSKVPrKRmwDmTF0MgOs3Mcu5hc6ys=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=683302DF6A5920E2F83AC4EF76656DDCE840F593
        Validity
            Not Before: Apr 19 04:03:30 2026 GMT
            Not After : Jan 27 15:30:18 2027 GMT
        Subject: CN=8D21A4B3974B0BF7AAF6C9D13A27BCB29495C067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dc:64:98:41:09:03:a8:00:65:a2:f4:14:34:
                    a5:84:77:90:52:53:7a:0f:11:9d:79:01:da:67:f3:
                    d7:9e:45:8b:00:cf:1a:b5:38:11:e9:11:2d:c2:6e:
                    32:18:ee:b1:76:06:b1:50:e2:86:bd:fc:69:f9:b5:
                    46:42:e2:1e:0b:cb:1e:6a:97:96:1a:75:ff:80:99:
                    cd:f4:13:c4:b4:f9:d1:a6:2d:26:89:c9:76:f2:25:
                    e8:a7:2c:04:a7:32:cf:51:0e:c7:30:5b:98:8d:ce:
                    06:c9:c8:35:58:32:cb:25:49:47:47:33:32:96:c7:
                    88:67:71:17:dd:c6:93:51:2a:ef:a0:38:f6:06:65:
                    8d:60:aa:1b:e8:00:aa:a3:5b:03:49:70:f7:84:80:
                    53:9b:13:f5:70:86:b3:60:53:b5:6d:1e:c6:cc:b2:
                    bc:d9:b7:d7:a4:08:67:1f:79:35:d0:f2:6f:fb:83:
                    8e:2e:ba:6b:e8:60:69:2a:31:8e:19:fd:97:f0:4d:
                    02:3f:76:da:db:73:b0:f2:f4:e1:11:5d:96:3f:c8:
                    c2:03:be:d4:1f:3b:ae:a6:84:76:f7:d6:bb:fc:1b:
                    ae:81:44:24:28:6b:90:11:d5:b5:d3:df:8e:46:f4:
                    72:d7:2f:cb:b3:74:4e:0b:7a:3e:b2:5a:69:83:7f:
                    50:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:21:A4:B3:97:4B:0B:F7:AA:F6:C9:D1:3A:27:BC:B2:94:95:C0:67
            X509v3 Authority Key Identifier:
                keyid:68:33:02:DF:6A:59:20:E2:F8:3A:C4:EF:76:65:6D:DC:E8:40:F5:93

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aDMC32pZIOL4OsTvdmVt3OhA9ZM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD_P/aDMC32pZIOL4OsTvdmVt3OhA9ZM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ce:ca:c1:07:b1:7b:d2:c8:7c:97:51:40:b9:f3:e7:00:8b:
         e5:11:17:e3:db:82:02:b6:82:d4:af:53:f3:08:a2:4f:72:31:
         a1:6b:4d:3b:cc:ec:90:e5:8d:4d:bc:a0:27:e4:f2:de:5d:05:
         b0:bf:36:e1:47:e3:ed:a9:86:31:19:93:33:9f:00:d5:5e:03:
         8d:20:03:2f:06:b1:00:a7:a8:2c:1b:5e:f6:b2:19:88:a3:19:
         fe:58:9b:55:d3:38:31:c6:30:65:ca:71:54:24:a1:4b:98:ee:
         ca:4d:2b:d7:96:f5:f1:77:86:17:f3:e0:a0:5d:84:fc:51:ef:
         3b:e8:aa:87:73:ad:f3:7e:a3:11:1a:56:33:57:62:df:ec:4b:
         9a:99:15:56:3a:42:0a:c6:5d:ea:cf:2e:9f:49:fa:45:22:23:
         02:d8:cb:74:53:06:fc:f4:59:e5:61:dc:0b:58:13:de:c2:95:
         5c:fa:32:a0:54:4b:58:9c:6c:07:d0:bd:48:91:e4:60:0e:2d:
         16:91:41:fd:a2:2f:b2:7d:82:71:1a:73:de:80:53:ca:e9:4f:
         12:96:5e:1e:87:0b:75:0f:e3:2b:af:34:fd:e0:51:27:fe:c6:
         90:72:4c:5c:3a:42:03:ef:f0:60:64:97:dd:09:a0:28:4e:8d:
         c6:13:00:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:19 2026 by rpki-client