Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PCHOME/8ytU4ZH0DTcQjzszpSO5dVnmlNU.mft
File:                     8ytU4ZH0DTcQjzszpSO5dVnmlNU.mft (raw, json)
Hash identifier:          B/qlfToxe173R1kD2dLqEaMaLadoNpHq+cPx0mJ+oUY=
Subject key identifier:   D0:D0:A5:27:B0:82:EB:27:FD:F0:9B:8F:F0:36:9F:08:BA:F1:A9:DC
Authority key identifier: F3:2B:54:E1:91:F4:0D:37:10:8F:3B:33:A5:23:B9:75:59:E6:94:D5
Certificate issuer:       /CN=F32B54E191F40D37108F3B33A523B97559E694D5
Certificate serial:       0D97
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8ytU4ZH0DTcQjzszpSO5dVnmlNU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PCHOME/8ytU4ZH0DTcQjzszpSO5dVnmlNU.mft
Manifest number:          0D97
Signing time:             Sat 28 Feb 2026 22:52:55 +0000
Manifest this update:     Sat 28 Feb 2026 22:52:55 +0000
Manifest next update:     Mon 02 Mar 2026 22:52:55 +0000
Files and hashes:         1: 8ytU4ZH0DTcQjzszpSO5dVnmlNU.crl (hash: 4RUavV53J0DReY+oS6FKGOmGac4iMN3AwmJk6z/+ddo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3479 (0xd97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F32B54E191F40D37108F3B33A523B97559E694D5
        Validity
            Not Before: Feb 28 22:52:55 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D0D0A527B082EB27FDF09B8FF0369F08BAF1A9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ca:c5:02:6b:bc:8c:d3:18:26:21:40:55:cb:
                    af:97:7e:1e:7c:47:a6:04:dc:00:05:69:02:09:14:
                    36:24:0f:1d:43:60:b1:26:ac:e2:15:90:a2:9b:98:
                    09:fd:69:7e:76:c0:58:a5:a9:c0:cb:1b:54:43:73:
                    26:a8:e4:57:46:2d:a6:39:9e:0d:0e:bb:d4:5f:91:
                    26:49:85:3c:b1:e4:13:6e:c6:a0:e0:21:78:56:d0:
                    56:44:c9:96:b6:cb:93:8c:97:be:07:43:18:6c:64:
                    04:88:e2:28:2b:62:32:65:c9:5a:a3:d4:f3:80:49:
                    83:bc:6a:34:36:bb:c7:cc:f0:1f:1f:92:38:8b:9c:
                    3e:f9:07:d3:f6:af:7f:8c:68:c2:f6:7f:5c:41:86:
                    32:a7:ef:62:92:f6:b5:cc:04:bd:de:17:08:66:9a:
                    78:c8:29:02:a6:a9:68:02:db:9e:f5:a9:ed:97:d6:
                    08:6a:3a:86:01:48:d9:b4:fd:78:38:35:6f:11:ed:
                    cd:3f:31:b3:af:27:ab:bc:a9:bf:79:fd:4a:7a:0a:
                    d6:ac:99:66:4c:64:c8:e1:90:b0:87:b9:79:57:30:
                    ca:ea:1f:fd:2c:06:b5:ec:5f:47:f2:ed:b4:f1:00:
                    9f:6c:50:ca:83:31:b0:67:52:b7:36:b6:b8:c3:5b:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D0:A5:27:B0:82:EB:27:FD:F0:9B:8F:F0:36:9F:08:BA:F1:A9:DC
            X509v3 Authority Key Identifier:
                keyid:F3:2B:54:E1:91:F4:0D:37:10:8F:3B:33:A5:23:B9:75:59:E6:94:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCHOME/8ytU4ZH0DTcQjzszpSO5dVnmlNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8ytU4ZH0DTcQjzszpSO5dVnmlNU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PCHOME/8ytU4ZH0DTcQjzszpSO5dVnmlNU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:35:e8:91:f4:81:0c:34:88:9e:74:47:b9:30:2c:e5:37:2e:
         8a:60:5c:12:6a:c2:d7:e5:e1:4b:e7:fd:52:80:2c:dc:9f:b8:
         20:66:8f:02:0a:b0:5f:d0:c7:8b:82:66:ff:a7:06:ad:e9:5d:
         f9:df:ee:c8:d1:9d:9e:20:ca:2d:de:67:91:c2:32:b8:42:94:
         b0:a2:98:97:70:c7:e2:89:26:5d:18:19:ab:73:0f:9e:75:5a:
         f9:c4:fe:ec:aa:98:99:e9:79:3d:26:ee:b4:de:4c:7f:f9:83:
         48:0f:bb:7b:3e:16:91:43:25:d7:e7:83:bd:bf:1e:79:23:6e:
         ec:55:2e:e5:dc:b4:a0:03:44:ac:e5:af:cb:15:2b:87:16:9d:
         3d:b7:2b:ef:39:5d:e2:2b:17:fb:5a:82:7b:7e:f4:5b:d4:56:
         c3:ad:0a:08:25:30:35:be:7d:5a:f2:25:f8:26:fa:87:82:f6:
         81:5e:d9:33:de:b2:12:95:b7:51:1e:7c:98:20:2b:2a:4a:09:
         dd:1e:01:d0:e6:4a:b4:ed:ef:e3:a2:96:3b:83:8a:e5:2d:77:
         fa:e7:ba:25:b0:ac:2a:ce:d2:83:02:f1:19:ee:26:05:b2:05:
         50:ff:2b:bf:da:4e:6e:52:32:e1:2d:9c:df:54:12:0e:6c:1d:
         7f:6e:66:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:33 2026 by rpki-client