Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
File:                     BDC7715D29F4E43198D59315B71674EE9F648F6D.mft (raw, json)
Hash identifier:          ZkM1jQqV1HVDOZ+e+rtluaRKGf3MZ9z/V3x6rIur5Wg=
Subject key identifier:   24:28:83:4C:22:BA:C9:66:AE:81:53:53:36:97:51:86:31:47:21:95
Authority key identifier: BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D
Certificate issuer:       /CN=BDC7715D29F4E43198D59315B71674EE9F648F6D
Certificate serial:       7F726776297E44129E921A5F75A96DDB5B65416C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft
Manifest number:          1B
Signing time:             Mon 11 May 2026 17:56:36 +0000
Manifest this update:     Mon 11 May 2026 17:51:36 +0000
Manifest next update:     Tue 12 May 2026 21:05:36 +0000
Files and hashes:         1: BDC7715D29F4E43198D59315B71674EE9F648F6D.crl (hash: 8zSlrZZSb6N5XN8elDOFkBdkYxHZKg5bC+jtuSUe6m4=)
                          2: 322e35382e3234302e302f32342d3234203d3e2039363738.roa (hash: 8WByk8O4kwdnsBSn9Y+LA4Eu51CWVBIY6jyU3fmAQP4=)
                          3: 322e35382e3234332e302f32342d3234203d3e2039363738.roa (hash: R7ZTnM2GzL6tGXWETAhZV1QG0NLgjbwtPX+n/Lsjjmg=)
                          4: 322e35382e3234322e302f32342d3234203d3e2039363738.roa (hash: 20/au47MFkheH0xw2Ry8v40+WXu95ZMOioGimilGBJc=)
                          5: 322e35382e3234312e302f32342d3234203d3e2039363738.roa (hash: xOi/I/BBtkCDpDsROaS/HLOcxW99pEr4rll9RneIDHw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:72:67:76:29:7e:44:12:9e:92:1a:5f:75:a9:6d:db:5b:65:41:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC7715D29F4E43198D59315B71674EE9F648F6D
        Validity
            Not Before: May 11 17:51:36 2026 GMT
            Not After : May 12 21:05:36 2026 GMT
        Subject: CN=2428834C22BAC966AE8153533697518631472195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:37:1a:98:dd:09:fd:20:2b:76:ab:b7:a7:76:
                    b4:a1:6f:38:28:8e:d0:9a:11:1a:55:4c:d2:76:03:
                    61:3c:d2:14:9d:70:12:f2:af:35:f7:ad:df:5f:51:
                    ff:68:ba:25:40:92:f9:df:e4:19:c5:1f:29:06:71:
                    82:c1:15:f2:71:1f:a5:a5:d0:e5:af:51:3f:00:88:
                    38:11:a9:c0:61:c6:28:33:aa:6e:ed:67:63:47:54:
                    27:52:80:56:7c:1c:c4:92:62:ca:a7:f8:1c:01:2d:
                    d8:40:6d:d1:e0:16:ee:e6:3f:e5:3b:f8:48:55:14:
                    00:57:59:ad:46:d0:e7:78:a1:44:2f:23:34:be:a2:
                    0d:b9:b5:84:00:d4:77:88:ae:8c:6d:68:58:79:4c:
                    e4:60:0f:de:ba:0a:90:23:9a:0d:c1:f9:0b:09:62:
                    0d:e9:1a:b4:dd:9f:70:d6:1d:45:9d:08:18:27:f6:
                    44:0e:9a:a7:2a:67:44:78:18:9a:72:50:4d:9c:55:
                    e5:e9:0a:f5:d9:0a:b2:a0:ab:bc:ed:1d:cf:9e:99:
                    4a:43:94:3a:bc:9d:f5:8b:de:75:71:46:96:06:ca:
                    84:a4:b9:0e:f1:7d:2c:aa:0e:69:24:e0:27:eb:48:
                    e7:dc:f5:bc:bd:cc:bc:7e:71:87:53:dd:82:03:1b:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:28:83:4C:22:BA:C9:66:AE:81:53:53:36:97:51:86:31:47:21:95
            X509v3 Authority Key Identifier:
                keyid:BD:C7:71:5D:29:F4:E4:31:98:D5:93:15:B7:16:74:EE:9F:64:8F:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BDC7715D29F4E43198D59315B71674EE9F648F6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/1/BDC7715D29F4E43198D59315B71674EE9F648F6D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7f:e2:8a:e0:36:03:c4:65:04:22:36:d2:f5:b3:cb:cb:8e:
         9f:f2:78:f6:6f:ea:19:c2:41:9e:b2:cf:f2:ab:8d:27:64:6d:
         ad:2b:a1:14:61:60:00:be:19:d8:f1:21:58:f9:e1:11:5f:f7:
         d8:ca:54:c7:b5:2e:8c:97:1b:f5:a0:7b:b1:2f:28:95:81:38:
         51:c4:61:21:88:ed:31:d7:1f:28:9b:9c:71:19:88:6b:78:15:
         06:a3:57:d4:04:7e:8f:0d:3f:50:3e:e3:1a:5d:d3:74:1c:f3:
         86:6f:53:f5:a2:16:3a:34:86:4a:4c:6e:00:ed:71:d5:43:e7:
         21:69:e3:0d:cd:04:e2:0f:78:89:46:9a:68:c4:1a:a6:f1:12:
         e7:23:fd:ad:1d:c9:fc:c7:e9:fa:6e:00:86:28:6f:2b:b6:ca:
         cc:db:63:65:5d:a0:df:3c:62:67:00:c2:dd:a0:4e:b0:8f:51:
         4e:44:de:e4:56:75:d7:09:d4:94:c5:b1:dc:08:0f:ea:1f:b8:
         29:6d:25:00:6a:e0:99:1d:d3:57:8c:75:52:74:da:55:fc:08:
         c8:40:e5:6a:fe:9b:98:70:67:0e:60:4f:e6:1e:db:4b:5c:4e:
         a9:18:f1:f8:6b:d3:2a:d9:47:09:0c:10:01:48:0d:91:39:d8:
         4d:4a:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----