Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LETSWIN2012/ZeY8_v7dg9_qD1S96DsUO9or7gI.mft
File:                     ZeY8_v7dg9_qD1S96DsUO9or7gI.mft (raw, json)
Hash identifier:          bOZSGhEwGY7iJwXorOQg7I6GiQ8KG/1g7+bLpkDseE0=
Subject key identifier:   23:82:91:19:DF:4C:C0:61:C1:64:3D:E1:B4:84:48:2C:59:50:E0:22
Authority key identifier: 65:E6:3C:FE:FE:DD:83:DF:EA:0F:54:BD:E8:3B:14:3B:DA:2B:EE:02
Certificate issuer:       /CN=65E63CFEFEDD83DFEA0F54BDE83B143BDA2BEE02
Certificate serial:       0D87
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ZeY8_v7dg9_qD1S96DsUO9or7gI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN2012/ZeY8_v7dg9_qD1S96DsUO9or7gI.mft
Manifest number:          0D87
Signing time:             Sat 28 Feb 2026 22:55:24 +0000
Manifest this update:     Sat 28 Feb 2026 22:55:24 +0000
Manifest next update:     Mon 02 Mar 2026 22:55:24 +0000
Files and hashes:         1: ZeY8_v7dg9_qD1S96DsUO9or7gI.crl (hash: y5t73u8jgzhr0lPUDhxL3gRM9Tk68dE8aKZgG2lpffQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3463 (0xd87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65E63CFEFEDD83DFEA0F54BDE83B143BDA2BEE02
        Validity
            Not Before: Feb 28 22:55:24 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=23829119DF4CC061C1643DE1B484482C5950E022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:32:47:69:66:9c:64:2f:d7:78:39:08:da:
                    bd:0f:e4:eb:07:84:eb:2a:8b:8a:3a:56:61:ea:94:
                    b3:ea:07:3c:13:db:21:de:f5:c9:f4:c3:8d:cb:24:
                    ea:9f:d5:7c:f2:e8:19:8c:de:98:f5:63:ae:3c:a6:
                    1d:3b:d5:e4:e7:d7:0e:3b:81:ad:67:ca:d6:2e:76:
                    60:41:34:26:c8:60:60:94:ac:16:d4:ef:8e:b9:f5:
                    cf:95:c7:ba:79:05:f1:b2:0e:72:b8:6e:80:58:05:
                    4d:61:4d:ba:52:65:2d:18:50:9d:aa:02:b2:e3:54:
                    99:2c:53:bc:f4:57:51:8c:03:db:ba:da:8a:b7:d7:
                    6f:d3:d6:e3:be:46:af:b4:82:78:45:c0:e1:c6:96:
                    8b:f3:f2:8c:6c:80:f4:a0:88:d8:0b:94:25:ba:bf:
                    77:3b:9b:9b:78:c3:24:c5:20:9b:c6:f9:76:fe:b6:
                    b4:d0:88:66:48:c0:6d:fc:ae:00:51:d8:4f:5b:59:
                    4f:89:fe:35:3e:7f:ea:d5:de:b6:92:05:8d:f2:f1:
                    fc:48:22:d8:11:4b:8b:0c:37:62:b3:1b:e7:12:ed:
                    a7:07:a8:fe:6e:fb:f5:56:f3:1d:6a:76:d7:31:0d:
                    02:f6:c3:a6:75:b8:33:5d:cc:c3:16:d1:8b:33:61:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:82:91:19:DF:4C:C0:61:C1:64:3D:E1:B4:84:48:2C:59:50:E0:22
            X509v3 Authority Key Identifier:
                keyid:65:E6:3C:FE:FE:DD:83:DF:EA:0F:54:BD:E8:3B:14:3B:DA:2B:EE:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN2012/ZeY8_v7dg9_qD1S96DsUO9or7gI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZeY8_v7dg9_qD1S96DsUO9or7gI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN2012/ZeY8_v7dg9_qD1S96DsUO9or7gI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:af:a1:da:ae:e3:77:8c:64:1d:63:ac:f9:c1:49:dd:c0:23:
         86:f0:54:39:f5:d0:38:2c:85:2b:65:29:c1:52:db:6a:7a:f6:
         4c:62:85:be:2f:a2:b7:93:2b:8b:d6:2b:17:cc:5e:52:2b:3a:
         a0:28:73:04:0f:d4:30:df:86:99:57:38:db:b7:9c:c0:f0:d2:
         c7:af:62:33:58:ca:e4:c1:82:39:2c:d4:1b:9f:dc:fa:5c:b6:
         0a:81:d8:d2:b0:dc:35:db:b1:8b:93:93:c2:6a:89:86:ba:9e:
         39:75:ef:28:7c:0e:c6:fb:01:2e:8d:f1:1e:a3:ea:00:1d:0d:
         80:86:5d:8b:34:ab:53:28:ed:97:92:6a:1f:07:96:ce:f6:4d:
         a3:b4:cc:ac:96:90:b8:fd:86:a4:ea:a3:6c:64:de:a9:d6:2b:
         8e:4f:0c:20:2a:ff:ea:b4:5d:80:ac:65:82:fc:39:a7:df:04:
         3a:99:41:ed:da:fd:80:a1:da:0a:3a:39:3a:df:47:a6:35:05:
         50:7e:f5:f6:60:dc:b6:3c:42:54:be:db:2b:4a:a9:ee:cd:99:
         70:ff:1d:53:fb:5b:92:75:ba:5f:01:4f:5d:d6:49:a4:15:54:
         37:7e:43:7e:df:de:bb:91:cf:91:41:87:d6:59:d2:d1:2a:35:
         64:e0:5c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:57 2026 by rpki-client