Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft
File:                     35C866BE000DEAB870C97BED72D0A7807B829E4D.mft (raw, json)
Hash identifier:          Xtnaa/9W1UIAZOZ1uCNXRlA7Ks2qOqYmEaZlDhk6dT4=
Subject key identifier:   C2:E2:58:3D:03:36:F5:09:F5:D4:5D:F9:09:0B:67:BD:B8:25:22:00
Authority key identifier: 35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D
Certificate issuer:       /CN=35C866BE000DEAB870C97BED72D0A7807B829E4D
Certificate serial:       5958904CA1DDAA205CE74AE89DF0BBF8F6F11843
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft
Manifest number:          05
Signing time:             Mon 11 May 2026 17:56:23 +0000
Manifest this update:     Mon 11 May 2026 17:51:23 +0000
Manifest next update:     Tue 12 May 2026 19:52:23 +0000
Files and hashes:         1: 323430363a326663303a3a2f33322d3332203d3e20313334383233.roa (hash: T6rxUJGmT1hptwoFyjautezkOkglfrNk05IrJlVztRE=)
                          2: 3130332e3135322e3232302e302f32332d3234203d3e20313338393937.roa (hash: J/22PWUGVzLaEIWqIEkco35k7PiKuvioKGMBglelLtk=)
                          3: 35C866BE000DEAB870C97BED72D0A7807B829E4D.crl (hash: Fq+QxXx1v9nVhTwzWEnVYSDrTXJMKZf2Tg5K8ZE5Rao=)
                          4: 3230322e3134382e3231302e302f32332d3234203d3e20313532313739.roa (hash: w66ZmETlDQxyi38rji0gzk1176tFqIfyztFJ3VNSIbg=)
                          5: 3232332e32362e342e302f32332d3234203d3e20313532313739.roa (hash: 1KuxfqT20KEMU13K1PoNgkxwUh6tXjO/u8vuBPBbPvM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:58:90:4c:a1:dd:aa:20:5c:e7:4a:e8:9d:f0:bb:f8:f6:f1:18:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35C866BE000DEAB870C97BED72D0A7807B829E4D
        Validity
            Not Before: May 11 17:51:23 2026 GMT
            Not After : May 12 19:52:23 2026 GMT
        Subject: CN=C2E2583D0336F509F5D45DF9090B67BDB8252200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ca:d6:48:5c:4d:27:4e:d3:2e:c0:92:b0:2b:
                    43:8a:eb:7b:36:c9:01:d4:34:d9:6e:16:9d:10:82:
                    1b:15:f9:dc:50:7d:53:cf:52:6f:de:11:f9:ca:1c:
                    e8:37:af:fc:1c:a0:93:3f:79:05:96:0c:a7:0c:ae:
                    0e:7e:a2:3a:89:6b:98:17:78:50:1e:d0:ed:e6:58:
                    e3:51:52:5e:bb:1c:a8:2c:1c:78:71:0c:e9:ef:ae:
                    56:14:2e:2e:91:84:79:e3:ec:99:3c:e5:7d:90:b5:
                    c4:05:6f:06:c0:37:b8:c1:c9:43:2e:f4:39:28:b5:
                    d0:d3:44:09:59:bf:b9:28:a7:54:b2:f0:ca:73:3d:
                    fc:c1:25:39:50:75:66:62:69:97:3c:43:97:7f:b6:
                    03:71:24:de:f6:8c:31:43:b4:52:17:99:f5:57:eb:
                    2a:35:b4:34:ad:54:8f:b5:17:76:dd:52:05:a8:51:
                    06:5b:e5:ed:ff:49:e1:09:d5:22:73:ef:0a:0f:9d:
                    23:a9:74:b9:36:54:aa:c9:01:62:7d:d0:e5:e5:a8:
                    56:d5:a7:c5:20:95:8c:b1:ac:8f:54:18:72:f7:d2:
                    e2:62:de:92:6a:95:82:5c:87:86:a3:9f:7e:9e:2c:
                    9a:d4:02:5d:de:fc:09:f8:33:87:11:5c:6a:6f:ea:
                    d9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E2:58:3D:03:36:F5:09:F5:D4:5D:F9:09:0B:67:BD:B8:25:22:00
            X509v3 Authority Key Identifier:
                keyid:35:C8:66:BE:00:0D:EA:B8:70:C9:7B:ED:72:D0:A7:80:7B:82:9E:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35C866BE000DEAB870C97BED72D0A7807B829E4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IDT/0/35C866BE000DEAB870C97BED72D0A7807B829E4D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:14:14:1e:70:71:24:9f:3d:ff:ff:c4:ff:c3:e0:90:a7:
         39:4b:85:f7:84:a3:79:07:ca:10:df:2e:b4:60:40:92:c5:a1:
         a4:7f:ae:4a:7a:11:e0:f7:e6:4b:a0:b6:c1:28:8b:e2:e4:8e:
         6f:3d:fd:bb:2f:f0:8e:41:48:ba:3c:24:66:e3:4b:26:b0:51:
         45:93:e3:06:0a:c7:91:76:ad:57:96:5a:04:62:79:8e:bf:bd:
         09:23:f5:f0:e0:45:3b:95:83:e2:64:48:ee:cc:6d:84:c4:86:
         4c:71:d3:92:57:8f:70:82:5d:02:99:d7:29:cd:0a:85:d1:ed:
         ff:9c:3b:f0:80:91:19:92:a8:fb:59:de:1d:69:1d:23:07:20:
         f2:3d:44:f1:9e:50:ff:34:cf:cf:88:87:4a:02:d2:bd:d2:ec:
         17:86:93:8d:d4:ea:28:fb:5f:1a:23:5d:65:ac:47:c2:ce:a0:
         af:9c:be:8f:47:74:b6:8e:d9:35:4f:dd:7a:d8:f1:72:fe:2d:
         75:ea:4f:42:98:c0:24:6d:ea:0a:62:38:f7:3d:8e:4a:00:7c:
         1f:89:a1:d5:1d:e2:e0:d9:60:a4:5d:8a:30:51:2d:a3:1f:28:
         bd:23:7f:cb:33:12:d2:c0:88:e1:17:e9:5a:e1:0e:91:11:b1:
         08:0a:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----