Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft
File:                     72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft (raw, json)
Hash identifier:          m3JZQ3WoQXszivH8uNSrqQhk2bubLnR+fdNGVHYzIFc=
Subject key identifier:   41:03:87:79:90:14:92:90:6E:CF:9F:D2:CD:5F:72:A3:4C:91:64:9D
Authority key identifier: 72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A
Certificate issuer:       /CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A
Certificate serial:       6DDF43CE44A0FEC8157304F2ACE2D7D0CABDFAD6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft
Manifest number:          07
Signing time:             Mon 11 May 2026 17:38:56 +0000
Manifest this update:     Mon 11 May 2026 17:33:56 +0000
Manifest next update:     Tue 12 May 2026 18:48:56 +0000
Files and hashes:         1: 3131342e32392e3234302e302f32322d3234203d3e2034373830.roa (hash: KC1g1qM879l4ds0q/ydW26xvU61SJGGDoYP8GsPifjc=)
                          2: 3130332e3235322e3132382e302f32322d3234203d3e2034373830.roa (hash: aU5nH7E+iqqE72JCSOf/syfpmIQ4Ugwf1G4zZbGiNhs=)
                          3: 3131342e32392e3234302e302f32322d3234203d3e20313331363032.roa (hash: 4cmNPnys0d/FtI5okidfoOFAlkFUnmuDLC94ZHnaWrA=)
                          4: 72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl (hash: 0P3WU37fZ/tnAMQgZ0xWRHALgKXrYe6OxIJho01PXVU=)
                          5: 3130332e3235322e3132382e302f32322d3234203d3e20313331363032.roa (hash: nVHgvAQGfCe5GeqBJlvDWrqjtd8OwRSNjhUeOydBwUA=)
                          6: 3130332e3235322e3132382e302f32322d3232203d3e203130303835.roa (hash: z0gKkFBHhI3K6nHdzx65beXtOEgH8B0I5cTB2wTLt8g=)
                          7: 3131342e32392e3234302e302f32322d3232203d3e203130303835.roa (hash: Iu3XM7OWOu4YExXTvgO6ZRczd2wJf5M+hq5Ui0NVDWs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:df:43:ce:44:a0:fe:c8:15:73:04:f2:ac:e2:d7:d0:ca:bd:fa:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72487E17C240D55C16E8FE5B0B71D4498DD3099A
        Validity
            Not Before: May 11 17:33:56 2026 GMT
            Not After : May 12 18:48:56 2026 GMT
        Subject: CN=41038779901492906ECF9FD2CD5F72A34C91649D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:a5:06:60:bf:d3:80:2f:e8:85:d7:ed:68:
                    7d:a5:1a:f6:83:09:e1:f8:3a:a4:ab:c9:15:90:c8:
                    b4:94:f4:9f:87:4b:b7:9e:23:6c:b9:3e:2d:12:b8:
                    87:0e:a5:44:5a:1a:dd:7d:49:df:ca:1d:54:fe:dc:
                    69:e0:4f:73:e5:58:14:70:42:e7:7e:61:32:28:64:
                    19:de:7f:dd:b1:1b:f2:c9:14:0c:9b:c9:f4:63:76:
                    e4:14:a8:f3:2b:73:7a:8c:c0:ef:b9:06:8b:6f:e3:
                    01:04:2c:ea:4b:b4:dd:32:44:27:90:cf:7a:ce:f6:
                    b6:05:cd:5a:4c:07:73:01:c5:19:42:dd:1f:50:dc:
                    de:a7:a0:c6:e6:ee:d3:fe:e5:c6:ec:b1:c9:6f:35:
                    db:fd:b9:d9:d1:64:d4:7f:ec:0d:cb:a2:ed:f5:1d:
                    f7:0d:1f:9c:36:ed:f0:fb:95:bf:e8:85:aa:db:bf:
                    a0:73:2f:7e:19:e8:01:0f:cb:35:b0:07:f6:a5:26:
                    fc:f0:bc:4f:24:bc:c1:f1:ea:8f:9b:3d:2d:7f:2b:
                    e0:86:b2:63:7b:01:12:33:61:b0:49:45:78:a3:69:
                    2b:41:a8:6f:0f:ca:e4:0d:d4:61:2c:4c:bf:7e:c0:
                    5d:5c:ae:14:aa:75:64:f4:79:91:43:bb:3a:8d:89:
                    95:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:03:87:79:90:14:92:90:6E:CF:9F:D2:CD:5F:72:A3:4C:91:64:9D
            X509v3 Authority Key Identifier:
                keyid:72:48:7E:17:C2:40:D5:5C:16:E8:FE:5B:0B:71:D4:49:8D:D3:09:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/72487E17C240D55C16E8FE5B0B71D4498DD3099A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HYA/0/72487E17C240D55C16E8FE5B0B71D4498DD3099A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:80:27:03:04:4d:a4:b4:ef:be:2d:34:9b:f4:b0:50:a2:14:
         64:45:0d:af:72:e7:c0:f2:16:05:b2:7f:54:06:90:b1:f0:04:
         8e:46:f3:b5:f5:d8:8a:98:cd:c5:ed:96:22:c6:0e:29:fa:db:
         68:b8:56:ff:34:e3:bc:06:32:ae:f9:e3:e3:9a:fb:96:f1:c9:
         93:a5:8d:6a:95:35:80:fa:0a:f3:ad:8e:08:c9:26:f4:dc:a3:
         c7:e8:da:b2:42:54:87:34:7e:db:80:bf:cc:f9:45:0d:96:64:
         7d:71:29:0a:fd:cf:35:c2:87:b7:70:d7:67:21:f8:37:b7:eb:
         bc:2f:65:4b:62:78:b7:d1:37:e4:19:cb:5d:74:f6:d0:18:89:
         0e:6b:13:7e:87:89:28:ed:2e:7c:49:80:56:88:52:30:55:4c:
         29:11:06:09:8b:43:be:67:21:a9:80:e8:63:6c:d5:2f:c8:3c:
         7a:84:b2:4f:d3:77:f5:11:3c:06:d2:a8:38:20:a9:3c:26:f9:
         89:a2:4d:b4:ba:b3:ef:09:a7:1a:0c:28:33:03:43:44:d0:3f:
         9d:20:7a:76:c8:e8:73:fb:c4:b9:e0:39:2c:2c:13:cc:27:4d:
         e2:69:98:10:cd:77:c1:c9:d8:58:38:37:2c:b3:d5:d2:bf:69:
         1f:f2:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----