Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONMORE/n-dA_Qxkkv7JLz5EzmNu4YuNNRc.mft
File:                     n-dA_Qxkkv7JLz5EzmNu4YuNNRc.mft (raw, json)
Hash identifier:          k6/YqFFPL9rOACb8NW74VH3IxGL7ViXodgMTAP2s5wQ=
Subject key identifier:   1E:C7:21:23:E4:65:34:4F:84:D2:FE:29:F9:3E:7B:F5:CF:9C:9F:4D
Authority key identifier: 9F:E7:40:FD:0C:64:92:FE:C9:2F:3E:44:CE:63:6E:E1:8B:8D:35:17
Certificate issuer:       /CN=9FE740FD0C6492FEC92F3E44CE636EE18B8D3517
Certificate serial:       0E0D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/n-dA_Qxkkv7JLz5EzmNu4YuNNRc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ONMORE/n-dA_Qxkkv7JLz5EzmNu4YuNNRc.mft
Manifest number:          0E0D
Signing time:             Thu 16 Apr 2026 11:33:10 +0000
Manifest this update:     Thu 16 Apr 2026 11:33:10 +0000
Manifest next update:     Sat 18 Apr 2026 11:33:10 +0000
Files and hashes:         1: n-dA_Qxkkv7JLz5EzmNu4YuNNRc.crl (hash: DAPkaCHErRBY6YKtYbgmLheEUS79CxYulyLLZZmtkkU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3597 (0xe0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE740FD0C6492FEC92F3E44CE636EE18B8D3517
        Validity
            Not Before: Apr 16 11:33:10 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=1EC72123E465344F84D2FE29F93E7BF5CF9C9F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:98:fc:f4:2b:c9:3f:10:90:3c:4f:2f:e1:61:
                    0c:e9:0d:dc:f4:4e:2e:05:8a:5f:5b:2c:20:5a:a5:
                    11:10:ec:6f:5d:0e:a3:83:43:05:13:d7:cf:60:c3:
                    6f:d8:4f:fb:ab:f2:33:5a:09:6c:38:99:c3:81:d5:
                    a3:7b:68:1d:e8:f9:ab:57:a2:45:ab:29:3d:a5:68:
                    e0:c1:0f:73:42:c6:39:21:15:23:49:a2:ef:93:d5:
                    1e:d0:50:a2:6c:d6:0f:a4:5c:43:7f:63:dc:42:da:
                    c7:42:df:91:b3:cc:b7:d5:1b:a4:df:8f:f9:fa:fa:
                    46:24:0c:fe:e6:54:ae:76:3a:3b:dd:bb:5f:b8:f3:
                    6e:e6:38:ed:f0:e6:bd:57:37:06:ac:f7:1c:d8:af:
                    a9:12:c4:31:67:76:7a:6f:ad:b4:b6:b8:10:23:78:
                    47:96:29:61:17:0c:60:87:6e:fc:e0:83:a9:f4:d3:
                    ed:21:5f:91:42:76:b3:9b:1b:cd:c7:7c:0e:e4:5b:
                    26:6e:81:58:bc:1e:99:75:ae:32:0d:4a:98:4f:aa:
                    04:a4:0d:e1:14:9a:fe:08:e0:c2:db:30:e5:fe:80:
                    92:fb:4c:7e:1b:ff:d7:e5:a7:e2:7e:ed:73:2a:bb:
                    17:1a:ed:1c:09:f0:9a:bb:2a:01:bc:05:80:16:0d:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C7:21:23:E4:65:34:4F:84:D2:FE:29:F9:3E:7B:F5:CF:9C:9F:4D
            X509v3 Authority Key Identifier:
                keyid:9F:E7:40:FD:0C:64:92:FE:C9:2F:3E:44:CE:63:6E:E1:8B:8D:35:17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONMORE/n-dA_Qxkkv7JLz5EzmNu4YuNNRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/n-dA_Qxkkv7JLz5EzmNu4YuNNRc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONMORE/n-dA_Qxkkv7JLz5EzmNu4YuNNRc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:5a:ee:86:3f:a2:41:ad:94:37:8a:2d:92:10:03:c3:3c:61:
         49:59:b7:50:cf:c5:96:a4:58:ef:ef:19:e4:31:3c:08:2b:ea:
         8f:3f:ff:5b:2e:72:26:69:db:cd:fe:b6:73:86:d7:9b:b8:7c:
         c0:ac:37:0d:97:d7:5f:a2:b3:02:a8:15:38:d0:76:28:7e:34:
         f9:6a:e9:a4:71:fd:33:43:18:00:a1:90:89:ad:00:1d:1a:d6:
         57:3f:0c:04:57:e8:36:cd:bd:4f:7c:a6:8e:31:93:95:5e:13:
         f3:f7:c3:d0:92:9c:7a:4e:69:f6:b9:cb:21:c0:e8:4a:a5:15:
         45:4d:e2:7b:b2:c4:21:da:c8:52:95:31:c0:a2:37:bc:e7:0a:
         7d:4f:d7:5d:54:44:a6:40:da:bd:ea:a6:4f:4b:2f:23:db:92:
         db:a2:18:cb:cd:24:c8:2a:64:a1:95:1f:31:2f:ed:dd:a2:d3:
         ca:4f:24:97:d2:59:ef:55:a5:be:b9:83:2a:28:b1:2e:75:f2:
         63:67:2b:41:8d:7f:dc:7c:fc:15:5d:cb:0f:8a:89:3b:0c:ed:
         a2:49:6e:a6:4b:ff:ae:18:a1:32:5d:ad:b9:7d:0c:9c:a3:a1:
         48:8a:42:2c:dc:6d:4b:b5:d8:95:56:37:d9:28:5e:85:b8:a8:
         c4:c0:68:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:19 2026 by rpki-client