Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft
File:                     DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft (raw, json)
Hash identifier:          si9Pf/LtOL+cG+wz/a3Zu7tgrckUs79vOysi6f3K1rk=
Subject key identifier:   23:EF:D1:57:9D:D4:1A:4F:7C:CE:64:62:34:69:85:EA:AC:CB:B7:DD
Authority key identifier: DA:4F:E4:BD:E3:C7:97:EA:64:49:CE:50:67:41:58:68:66:75:A9:F4
Certificate issuer:       /CN=DA4FE4BDE3C797EA6449CE50674158686675A9F4
Certificate serial:       4B053262958198ABCEFC4315B2CF4C2D82CF6F0E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA4FE4BDE3C797EA6449CE50674158686675A9F4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft
Manifest number:          03
Signing time:             Mon 11 May 2026 17:58:50 +0000
Manifest this update:     Mon 11 May 2026 17:53:50 +0000
Manifest next update:     Tue 12 May 2026 20:11:50 +0000
Files and hashes:         1: DA4FE4BDE3C797EA6449CE50674158686675A9F4.crl (hash: l0TSDKy3/4OHqMexRl7kFPVnbPULdaicaQJWQin7xI4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:05:32:62:95:81:98:ab:ce:fc:43:15:b2:cf:4c:2d:82:cf:6f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA4FE4BDE3C797EA6449CE50674158686675A9F4
        Validity
            Not Before: May 11 17:53:50 2026 GMT
            Not After : May 12 20:11:50 2026 GMT
        Subject: CN=23EFD1579DD41A4F7CCE6462346985EAACCBB7DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:39:2e:d5:18:44:b9:1d:b6:67:41:23:cf:5b:
                    b2:13:98:2d:3e:8d:32:3b:ba:ba:a2:c5:6c:cb:b1:
                    b9:b0:5e:c2:c4:97:ba:44:d8:c6:df:b7:50:db:b4:
                    02:1a:da:e0:0a:0a:15:28:ae:74:b2:a5:8f:26:3f:
                    3f:6b:a9:d3:40:45:87:b1:db:3f:d6:f0:8c:2c:e9:
                    2b:21:5e:a2:76:05:01:d6:14:43:46:f0:9e:30:e1:
                    86:da:66:1d:5b:85:8a:40:46:af:f7:38:ec:a2:3c:
                    b7:8e:79:7e:9a:8e:92:13:70:ef:12:86:5c:23:8a:
                    a7:25:40:35:01:33:09:ff:ed:04:90:71:90:c0:43:
                    df:cd:e2:9d:da:2d:1d:a2:10:b6:db:d5:e2:4d:cf:
                    48:7a:26:71:2e:ce:81:0c:80:f6:4c:0d:c7:f6:b8:
                    a2:c8:2d:37:8c:db:02:f0:a5:36:12:b7:73:1e:1c:
                    0e:3c:bd:12:16:4b:e3:b8:68:71:a5:16:46:d4:06:
                    6b:df:91:0d:f6:30:8d:7f:bc:14:b1:da:ff:8e:87:
                    d8:fa:11:e8:91:0c:ed:58:8e:2e:33:36:68:5b:7e:
                    8b:7b:82:1c:f7:1d:6e:69:a0:a3:d5:9f:4c:d9:27:
                    8a:c6:3d:f3:1a:1b:c3:bd:42:80:f3:db:4b:91:0d:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EF:D1:57:9D:D4:1A:4F:7C:CE:64:62:34:69:85:EA:AC:CB:B7:DD
            X509v3 Authority Key Identifier:
                keyid:DA:4F:E4:BD:E3:C7:97:EA:64:49:CE:50:67:41:58:68:66:75:A9:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA4FE4BDE3C797EA6449CE50674158686675A9F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CJME/0/DA4FE4BDE3C797EA6449CE50674158686675A9F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e7:de:55:f2:0b:a5:51:dd:de:3e:85:64:6b:cc:15:e4:98:
         98:78:06:71:51:11:a0:4d:20:41:31:e7:4f:94:9b:cd:dd:7d:
         7b:be:0e:2b:16:e9:97:a4:31:e3:6c:ce:69:f6:84:e2:22:8d:
         c1:db:8c:5e:cb:0e:2a:c7:f2:c6:01:59:08:21:6b:ca:d6:70:
         83:8f:3f:2b:4e:6e:9f:53:62:ef:54:f1:d5:db:c0:87:a7:96:
         33:87:3a:57:33:6d:24:cf:30:d0:4f:79:a7:a2:49:76:1e:86:
         34:7e:2d:49:c3:92:ff:ec:29:b9:ba:91:6f:de:79:a3:1c:16:
         ec:31:ea:3e:96:88:6f:8f:19:95:e3:32:46:73:40:e2:a0:b3:
         74:20:1c:d3:43:af:6e:11:05:1c:04:5c:d2:f3:36:6c:ae:60:
         61:8a:fc:69:91:e2:c0:21:e8:be:b3:27:9e:a0:d6:37:24:e3:
         4b:6f:18:80:c7:01:82:3d:ac:93:07:36:22:39:f1:8e:c1:e6:
         67:fa:6d:7d:d1:1d:a3:fc:c5:30:c9:06:3d:75:01:75:04:76:
         46:4c:42:3a:f7:e6:08:ab:73:9b:6d:2e:4f:53:1b:e9:0a:ae:
         02:3e:5c:be:db:96:f4:73:59:21:84:97:c8:63:74:f6:d6:5a:
         55:d1:2f:2d
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUSwUyYpWBmKvO/EMVss9MLYLPbw4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE0RkU0QkRFM0M3OTdFQTY0NDlDRTUwNjc0MTU4Njg2
Njc1QTlGNDAeFw0yNjA1MTExNzUzNTBaFw0yNjA1MTIyMDExNTBaMDMxMTAvBgNV
BAMTKDIzRUZEMTU3OURENDFBNEY3Q0NFNjQ2MjM0Njk4NUVBQUNDQkI3REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOS7VGES5HbZnQSPPW7ITmC0+
jTI7urqixWzLsbmwXsLEl7pE2Mbft1DbtAIa2uAKChUornSypY8mPz9rqdNARYex
2z/W8Iws6SshXqJ2BQHWFENG8J4w4YbaZh1bhYpARq/3OOyiPLeOeX6ajpITcO8S
hlwjiqclQDUBMwn/7QSQcZDAQ9/N4p3aLR2iELbb1eJNz0h6JnEuzoEMgPZMDcf2
uKLILTeM2wLwpTYSt3MeHA48vRIWS+O4aHGlFkbUBmvfkQ32MI1/vBSx2v+Oh9j6
EeiRDO1Yji4zNmhbfot7ghz3HW5poKPVn0zZJ4rGPfMaG8O9QoDz20uRDU6rAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUI+/RV53UGk98zmRiNGmF6qzLt90wHwYDVR0j
BBgwFoAU2k/kvePHl+pkSc5QZ0FYaGZ1qfQwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0pNRS8w
L0RBNEZFNEJERTNDNzk3RUE2NDQ5Q0U1MDY3NDE1ODY4NjY3NUE5RjQuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvREE0RkU0QkRFM0M3OTdFQTY0NDlDRTUwNjc0MTU4
Njg2Njc1QTlGNC5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NKTUUvMC9EQTRGRTRCREUzQzc5N0VB
NjQ0OUNFNTA2NzQxNTg2ODY2NzVBOUY0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+feVfILpVHd3j6F
ZGvMFeSYmHgGcVERoE0gQTHnT5Sbzd19e74OKxbpl6Qx42zOafaE4iKNwduMXssO
KsfyxgFZCCFrytZwg48/K05un1Ni71Tx1dvAh6eWM4c6VzNtJM8w0E95p6JJdh6G
NH4tScOS/+wpubqRb955oxwW7DHqPpaIb48ZleMyRnNA4qCzdCAc00OvbhEFHARc
0vM2bK5gYYr8aZHiwCHovrMnnqDWNyTjS28YgMcBgj2skwc2IjnxjsHmZ/ptfdEd
o/zFMMkGPXUBdQR2RkxCOvfmCKtzm20uT1Mb6QquAj5cvtuW9HNZIYSXyGN09tZa
VdEvLQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:33:48 2026 by rpki-client