Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft
File:                     3D576C4841082805B3CDBD7337F3963A8833174B.mft (raw, json)
Hash identifier:          LEGFGjbXwbu9vTBm9qGCcRU3tCd4I1XodsQbkEGU35Q=
Subject key identifier:   9B:76:31:15:C7:2A:F8:2E:0D:A7:DE:C3:09:06:53:FB:0B:72:FC:A8
Authority key identifier: 3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B
Certificate issuer:       /CN=3D576C4841082805B3CDBD7337F3963A8833174B
Certificate serial:       302E5F4CD6324B62B8B7162B09B5D26A43FCE984
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft
Manifest number:          09
Signing time:             Mon 11 May 2026 17:58:19 +0000
Manifest this update:     Mon 11 May 2026 17:53:19 +0000
Manifest next update:     Tue 12 May 2026 18:41:19 +0000
Files and hashes:         1: 3130332e3131392e3231322e302f32322d3234203d3e20313333373437.roa (hash: zPQusnanznelCXG1KdOD21zkqA+VphGwDoshIYxRbJ0=)
                          2: 3130332e3131392e3231352e302f32342d3234203d3e20313339363337.roa (hash: jPTm5d5SYsezMtn+BRkYU2/hKNSbQfuFpXU/01PcOeQ=)
                          3: 3D576C4841082805B3CDBD7337F3963A8833174B.crl (hash: pVkesfmmliYm7w9ZKdXgyJHxIYrgBHYljdYxEgJAhj0=)
                          4: 3130332e3131392e3231332e302f32342d3234203d3e203136353039.roa (hash: PL2cz2Hbk/JdNHMN06li8HzqoQzLhVGaxZWqRcHi6hM=)
                          5: 3130332e3131392e3231332e302f32342d3234203d3e203134363138.roa (hash: sldyxDcFqyW0yrBmnmv5iDOduZFppPbQvxaSJnOI1Vw=)
                          6: 3130332e3131392e3231342e302f32342d3234203d3e20313331363239.roa (hash: ATTGrI+LdxvHy7tZZvIf74Pi92V/OccZmHc6iAFqFXM=)
                          7: 3130332e3131392e3231332e302f32342d3234203d3e20313331363239.roa (hash: EJjmwH6YAXPBMwmijz6eL3wQvRP4K1M4tTn06rZJrIA=)
                          8: 3130332e3131392e3231342e302f32342d3234203d3e20313339363337.roa (hash: BkQPXEKbvmbpHuwtKiewh9JYhpq3BksNtpHsw33H1fI=)
                          9: 3130332e3131392e3231322e302f32322d3234203d3e20313331363239.roa (hash: eXsmebarUaems23bSj2ZcVD8dLS2085WCpxoaq88x4M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2e:5f:4c:d6:32:4b:62:b8:b7:16:2b:09:b5:d2:6a:43:fc:e9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D576C4841082805B3CDBD7337F3963A8833174B
        Validity
            Not Before: May 11 17:53:19 2026 GMT
            Not After : May 12 18:41:19 2026 GMT
        Subject: CN=9B763115C72AF82E0DA7DEC3090653FB0B72FCA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:5a:f5:61:01:16:de:c9:bc:59:fd:ce:3a:
                    c5:05:22:d3:50:15:26:c6:7e:4c:4d:8e:88:a5:3d:
                    5a:00:ef:ee:ae:4e:99:f5:82:22:e8:a5:f8:7b:a2:
                    41:47:c3:d9:a5:82:6e:ce:84:5a:94:ee:e2:3c:13:
                    30:22:d7:fc:ea:e7:bd:ce:fd:5a:83:92:73:dd:a7:
                    da:7a:e5:cd:b2:68:5f:d0:68:65:bb:83:d6:97:bc:
                    ed:8f:a4:46:a6:c8:56:da:35:5a:27:1c:ce:2c:62:
                    7f:f2:8d:d5:0c:b3:e2:40:86:25:c6:6d:de:d5:21:
                    aa:a0:1c:95:e7:b5:d1:10:b1:aa:ff:a2:8e:6f:97:
                    0c:98:d4:b1:33:63:73:15:7e:64:66:ff:25:cc:1a:
                    8c:c5:d8:77:c6:3a:00:1d:f8:33:be:9e:40:ef:5c:
                    26:4d:89:20:a9:e4:7a:f7:bb:1e:d4:10:d0:c9:11:
                    70:36:8c:d9:43:bd:8d:b0:cb:03:52:7c:8c:8d:5d:
                    f8:ee:e4:88:0f:85:75:6f:e6:39:74:07:93:21:ed:
                    6f:9a:e0:77:27:6f:c1:44:a9:3e:40:bd:6c:d8:51:
                    66:fd:f5:3a:0e:ba:ba:6b:02:6e:86:0a:a8:e5:4f:
                    28:b8:5d:c6:4e:12:1d:dd:ab:b2:47:b9:5e:68:ce:
                    cd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:76:31:15:C7:2A:F8:2E:0D:A7:DE:C3:09:06:53:FB:0B:72:FC:A8
            X509v3 Authority Key Identifier:
                keyid:3D:57:6C:48:41:08:28:05:B3:CD:BD:73:37:F3:96:3A:88:33:17:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3D576C4841082805B3CDBD7337F3963A8833174B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CKMATES/0/3D576C4841082805B3CDBD7337F3963A8833174B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:08:b4:85:f6:d4:cf:4a:66:2e:87:d8:1f:31:74:49:c2:51:
         12:f6:7f:62:bf:d9:cf:2a:f4:22:a5:b2:a2:2d:75:ae:d2:03:
         20:8b:0b:d7:4e:51:14:50:78:0e:48:8d:85:71:dd:45:c4:e7:
         92:5c:04:44:e9:1c:69:b6:e0:9f:11:a1:d4:91:cb:0c:e5:1d:
         6b:61:95:61:7f:87:40:fd:22:7a:5b:c4:27:a6:60:a9:4c:ac:
         66:29:2a:10:84:d6:c8:5c:1b:c1:f6:44:5a:74:c9:76:bb:7e:
         e6:a5:bc:08:21:1b:7f:87:77:49:5e:8a:e1:88:ef:f1:ef:f7:
         36:6d:5e:d9:38:2f:09:98:89:7a:a4:2d:80:55:12:3d:26:85:
         2c:87:b7:9f:9e:2d:28:ac:e9:59:10:22:8f:d6:60:53:55:0d:
         1e:39:0b:3a:a4:e0:a9:e9:24:48:d7:9d:7b:43:34:f9:cd:19:
         e7:5b:50:bb:5a:81:a9:aa:ec:49:1f:4b:2b:e0:46:12:f0:fb:
         79:fe:e4:69:7a:94:99:06:3f:0f:c2:0e:b1:dd:29:4e:8d:d7:
         96:36:a0:3c:ce:36:77:40:90:22:9b:c3:d5:73:40:87:77:95:
         1a:8b:e0:f6:26:86:7f:3d:d4:2a:ef:4e:da:d1:26:27:1a:11:
         88:fe:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----