Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft
File:                     KQF6QhbLesJUItjytuveOXjBS-c.mft (raw, json)
Hash identifier:          BUe2tNiWrVamSUM0mQW+rWB8AP3m1kW8jFMXIn+t/IM=
Subject key identifier:   7A:1F:7A:84:67:00:4D:E3:64:99:1A:45:B9:A5:DA:8E:67:C1:AD:17
Authority key identifier: 29:01:7A:42:16:CB:7A:C2:54:22:D8:F2:B6:EB:DE:39:78:C1:4B:E7
Certificate issuer:       /CN=29017A4216CB7AC25422D8F2B6EBDE3978C14BE7
Certificate serial:       0148
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft
Manifest number:          0148
Signing time:             Mon 02 Mar 2026 09:24:02 +0000
Manifest this update:     Mon 02 Mar 2026 09:24:02 +0000
Manifest next update:     Mon 02 Mar 2026 15:24:02 +0000
Files and hashes:         1: KQF6QhbLesJUItjytuveOXjBS-c.crl (hash: EWOb+riaM1jEHah6YrqjmtSkCO6YuiwjO6lztbVMkDY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29017A4216CB7AC25422D8F2B6EBDE3978C14BE7
        Validity
            Not Before: Mar  2 09:24:02 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7A1F7A8467004DE364991A45B9A5DA8E67C1AD17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:28:2a:6c:31:ba:3c:a5:ca:bb:e8:75:be:
                    0c:aa:bb:9b:01:5c:ae:5c:7a:34:92:8b:8c:2e:73:
                    4b:35:eb:94:d8:84:a7:f0:9a:fb:c4:00:00:a4:26:
                    50:5e:be:cd:2b:a6:79:5c:94:df:42:0f:d2:64:99:
                    22:75:98:63:cd:00:17:9e:17:3a:52:22:3a:ce:0f:
                    53:3d:7b:46:ca:e6:52:d8:f5:ae:12:ca:e7:ae:f1:
                    93:79:90:a9:bf:7f:7a:d2:5e:db:77:11:92:52:11:
                    68:73:99:8f:a5:ff:c5:6e:8a:e1:a7:57:52:87:a7:
                    02:af:9d:7d:09:61:6f:a7:a5:07:26:65:96:f5:f1:
                    be:fc:c6:30:59:e6:81:c2:f2:c6:30:f4:21:92:e4:
                    42:83:17:ec:f7:d8:3e:f5:ed:64:35:ee:7b:92:da:
                    50:fa:b2:9e:44:36:31:91:06:80:a4:5b:1c:db:f4:
                    df:54:7a:24:09:97:04:88:1f:94:1d:be:26:9e:5c:
                    59:b7:6f:1e:e6:ad:ae:0e:b5:c4:53:62:ac:a8:ea:
                    94:2a:ce:32:68:cb:28:7f:bf:9b:75:0f:9f:fe:46:
                    a7:03:1c:ec:7a:2b:99:dd:35:62:a9:0f:ad:b0:17:
                    f4:5b:5b:48:23:34:6b:bc:cc:35:cc:9a:6d:a8:c4:
                    e1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1F:7A:84:67:00:4D:E3:64:99:1A:45:B9:A5:DA:8E:67:C1:AD:17
            X509v3 Authority Key Identifier:
                keyid:29:01:7A:42:16:CB:7A:C2:54:22:D8:F2:B6:EB:DE:39:78:C1:4B:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KQF6QhbLesJUItjytuveOXjBS-c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QISDA/KQF6QhbLesJUItjytuveOXjBS-c.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0d:cb:dc:1b:fc:c4:5d:2c:c9:d5:3f:ad:c8:52:d7:92:aa:
         36:e3:dd:da:75:61:c6:d4:2f:59:15:36:8a:c9:9a:37:a9:6f:
         80:e9:fa:bf:9b:4a:78:db:c2:08:db:e1:05:33:83:77:4d:d6:
         2b:8b:f9:a4:cb:78:97:6f:e3:f5:69:fe:3a:3d:49:96:f8:c7:
         b6:08:10:b0:80:49:78:b3:7d:3d:dc:33:a8:ee:6e:03:e9:85:
         4a:3a:59:4e:7d:83:d3:a2:40:59:f6:03:6d:31:c0:4c:c7:e7:
         88:4b:d3:5f:70:51:ba:a5:9e:03:15:cb:35:c6:73:44:47:71:
         61:de:16:17:8f:f6:55:66:ad:e9:5c:9c:71:c0:63:eb:64:36:
         ca:0d:5d:b1:28:26:f1:dd:b7:51:7a:29:0f:77:81:e6:74:13:
         32:18:c8:06:18:7a:88:76:3e:9c:55:fd:4f:dc:bd:7c:5f:41:
         b1:83:0a:df:07:a7:98:f4:0d:e1:25:0d:ba:da:8a:cd:3b:3a:
         18:a2:8e:0e:f6:1c:97:af:7b:8d:59:80:0a:ef:6f:82:13:78:
         2b:f0:8d:83:48:5b:7d:2e:0b:02:55:75:08:72:e3:79:6e:c9:
         d1:31:21:e8:60:f7:3e:15:17:12:65:19:ca:cb:04:f6:a7:2b:
         e6:c8:f2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:11:02 2026 by rpki-client