Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
File: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft (raw, json)
Hash identifier: bOW0DaRD/m+KgOUm1jpVeQK6ZhfrGQzx5x5I41dB1Z0=
Subject key identifier: 03:EB:40:5C:F1:23:40:2F:E1:79:35:8B:DE:AB:39:12:EE:F2:0F:7A
Authority key identifier: D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25
Certificate issuer: /CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25
Certificate serial: 044D610536BF08CEE58EE2CEA937CF7E6DBF66DC
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
Manifest number: 04
Signing time: Mon 11 May 2026 17:58:48 +0000
Manifest this update: Mon 11 May 2026 17:53:48 +0000
Manifest next update: Tue 12 May 2026 18:21:48 +0000
Files and hashes: 1: 3133382e3235322e3131362e302f32332d3234203d3e203231383539.roa (hash: sgvshajZGUxIlcU63EqLfebE4wegi3sti647jzuqblg=)
2: 3133382e3235322e3131362e302f32332d3234203d3e203234313632.roa (hash: xeGUxts4a0IBuIHgiewir0gp38fQafeLm2d3Cwvi9SE=)
3: D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl (hash: nOrGTPUOx4sHfJY5D7+1kD6/omiNvBI3fPZ93qm4ksA=)
4: 3133382e3235322e3131362e302f32332d3234203d3e203138343136.roa (hash: 5vM1t1el5nYZJRxVKo6mmnrOcGRvisTj4oU5YWdMajw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:4d:61:05:36:bf:08:ce:e5:8e:e2:ce:a9:37:cf:7e:6d:bf:66:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25
Validity
Not Before: May 11 17:53:48 2026 GMT
Not After : May 12 18:21:48 2026 GMT
Subject: CN=03EB405CF123402FE179358BDEAB3912EEF20F7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:18:c3:11:0a:ce:06:d5:d4:84:07:03:c3:
47:c9:c2:30:15:76:48:bf:bf:95:4f:08:4c:74:1a:
ba:b7:c4:0b:42:40:96:03:bf:69:3b:24:ad:c2:02:
9d:53:02:14:eb:0f:8e:e1:0f:37:a3:98:c2:e0:cb:
0b:ac:e4:39:50:97:8b:1c:32:b7:76:ef:09:36:e3:
b8:a3:eb:59:8a:5c:4f:2e:e9:fd:29:52:3a:06:29:
b0:c0:5f:38:45:9d:23:50:c5:4b:91:1d:bf:50:45:
57:03:35:ee:ce:e8:f6:7c:d5:22:64:76:f3:cc:6e:
10:b5:3a:cb:cd:8a:69:43:80:06:31:7a:fa:32:f8:
74:7b:b0:07:4d:07:78:3d:35:f8:9c:74:13:8c:17:
c7:82:89:92:0f:e6:ca:b3:06:ee:f4:65:e4:2d:3e:
34:e1:50:1b:96:37:38:42:a0:dd:aa:08:e5:96:e8:
9c:a8:6e:e4:b5:48:68:a4:ae:a1:e6:04:2c:9d:39:
a4:4d:e2:e4:c4:71:0e:44:ba:32:e2:fe:25:2b:95:
a4:bb:66:a2:ed:5b:b3:21:f7:7d:af:44:ca:1a:46:
ac:fb:c6:7e:30:1e:65:6a:d5:bc:98:67:e6:3d:83:
64:b4:3a:3d:c0:6c:ee:f0:b1:e3:5e:3c:c6:b4:95:
b5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EB:40:5C:F1:23:40:2F:E1:79:35:8B:DE:AB:39:12:EE:F2:0F:7A
X509v3 Authority Key Identifier:
keyid:D9:1F:6B:17:A5:DF:E3:B2:33:6D:1A:E3:E2:33:D1:0B:2D:62:AA:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MINGXI/1/D91F6B17A5DFE3B2336D1AE3E233D10B2D62AA25.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2c:d0:0d:a2:92:be:ad:a6:17:1c:6b:39:62:6d:3a:ce:6b:
de:26:a2:c5:9a:5f:4e:c3:a2:e6:b6:a9:41:17:3c:f3:cd:84:
b6:54:85:32:5c:94:48:08:c5:a6:fa:37:17:9e:be:da:a5:b7:
bc:bd:f7:cb:3f:3f:5e:66:0f:f9:c8:a4:f7:d6:f7:c7:c6:eb:
76:b3:fe:be:1d:5a:24:35:6d:49:40:d3:39:36:66:80:af:1c:
8b:69:5c:f1:7a:4a:ef:4f:4c:f7:49:a6:18:41:f2:ac:ca:b2:
50:49:2b:1f:05:27:c1:f7:dd:85:9b:ae:8e:85:a4:08:96:9a:
b7:de:61:89:af:f9:d8:12:9e:d0:d8:40:cb:81:70:d5:8c:f0:
3e:c8:74:d2:42:f2:ce:2f:c1:93:2d:3f:ab:45:0c:c4:2a:5a:
a8:50:52:53:b5:4b:3e:2f:51:c9:cb:55:09:cc:76:50:51:46:
72:08:f8:18:d1:cc:38:3c:8b:8e:fb:d3:ce:dc:26:8f:dc:a6:
0d:5a:40:d4:29:12:4f:f9:49:4b:6d:a9:95:36:81:f5:77:0e:
c7:03:56:06:ad:c0:34:ae:d7:f8:2d:be:7d:70:42:cf:92:d1:
ce:c8:ff:bf:84:36:d3:4e:da:8a:ba:f4:c7:7e:2b:07:1a:8d:
bd:88:a7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:48:27 2026 by rpki-client