Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
File:                     9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft (raw, json)
Hash identifier:          I2/btE0dl3Qsnl60Zcsfs/SI0rO4Ub7aiE8Rs803yM8=
Subject key identifier:   DF:B4:2F:AC:C4:BC:E5:C5:AF:6B:DD:25:80:7A:DF:05:EF:2F:85:3C
Authority key identifier: 9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1
Certificate issuer:       /CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
Certificate serial:       77D014EFBC6E755CC2DFDD402351A0428E896204
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft
Manifest number:          07
Signing time:             Mon 11 May 2026 17:04:58 +0000
Manifest this update:     Mon 11 May 2026 16:59:58 +0000
Manifest next update:     Tue 12 May 2026 18:12:58 +0000
Files and hashes:         1: 3130332e3132342e37322e302f32322d3234203d3e2037353339.roa (hash: /oWUtrivyYYR3xINxuZfk4J46KekrLAODBaoBbnjf6g=)
                          2: 9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl (hash: xJV6EMmDsiB9wGrmFWLiAPyM5LRQfujXyeD4hPjNd/8=)
                          3: 3230332e3134352e3230382e302f32302d3234203d3e2037353339.roa (hash: TkgRJDcSEgq7NjOc3j8nZRABpENJrXFx+4WnsRFtzh4=)
                          4: 3230332e3134352e3230302e302f32312d3234203d3e2037353339.roa (hash: jxkAJdAcKZ8RSCBcISH4Y4rq8GCUJiutzooENkFUhIc=)
                          5: 3230332e3134352e3139322e302f32312d3234203d3e203138343236.roa (hash: gNPPk70chubQg8rvqCFhjNMJr/GwTZPy8GKS/JxLGtk=)
                          6: 323030313a343530303a3a2f33322d3634203d3e203138313833.roa (hash: PMzGY0PfcdsGzBMtdtqJG5vua06dScgAEtiVBZ8oJwQ=)
                          7: 323030313a343530303a313030303a3a2f34302d3634203d3e2037353339.roa (hash: aCon7ihkrSQu1jOrSasXY8xC7tkNYvzzB6OK08dUqns=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d0:14:ef:bc:6e:75:5c:c2:df:dd:40:23:51:a0:42:8e:89:62:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1
        Validity
            Not Before: May 11 16:59:58 2026 GMT
            Not After : May 12 18:12:58 2026 GMT
        Subject: CN=DFB42FACC4BCE5C5AF6BDD25807ADF05EF2F853C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:33:a3:85:64:44:42:1a:b0:d6:12:96:fb:
                    a6:8d:7c:97:a7:a9:5d:0d:36:12:73:67:17:6a:db:
                    58:f1:82:ce:f9:78:fd:d5:3f:99:01:c5:7c:d2:b9:
                    36:8d:b7:3c:ea:9f:93:02:83:d4:54:fe:0d:8d:8d:
                    a2:58:f6:27:93:14:f1:01:8d:15:e5:4e:0b:e1:3c:
                    3f:67:60:d9:f1:0d:3e:27:c7:05:ed:1d:88:c4:32:
                    72:32:c1:d9:fa:ae:50:eb:fc:7a:40:ec:71:c2:d8:
                    3e:fb:d1:59:2c:b6:bf:a1:1c:17:83:88:41:f3:71:
                    a2:be:0f:7b:06:af:2d:52:96:4d:ee:51:d5:60:8d:
                    e3:40:87:59:96:41:65:6a:57:fc:79:88:2b:27:f3:
                    3f:6f:8b:f7:43:39:d0:7c:9f:f9:78:a7:e0:ec:29:
                    85:c6:09:bf:47:b6:e5:ef:b7:7f:b8:8d:2e:1a:d2:
                    6a:3e:55:da:0e:30:8f:16:dd:04:84:6b:a7:44:22:
                    eb:0a:c5:70:5b:19:f2:77:e8:0c:ef:63:a4:27:e1:
                    4f:7e:96:61:5b:39:42:eb:a2:1b:7b:1e:9f:b4:80:
                    af:63:4d:54:3e:12:ed:82:51:47:1a:4a:f1:21:c2:
                    a4:3d:bd:46:5a:47:c7:33:37:fb:a0:4d:73:83:0b:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B4:2F:AC:C4:BC:E5:C5:AF:6B:DD:25:80:7A:DF:05:EF:2F:85:3C
            X509v3 Authority Key Identifier:
                keyid:9D:85:BB:8D:93:00:6D:35:86:E2:8D:0D:66:12:CA:FA:CC:8E:A6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NARL/0/9D85BB8D93006D3586E28D0D6612CAFACC8EA6C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:bc:1e:5f:a7:42:a1:82:4b:bd:22:62:82:59:59:82:09:d4:
         42:2f:51:41:96:91:57:8f:69:8e:eb:1b:c5:ee:09:05:f3:28:
         1d:9e:45:8e:31:51:46:28:e5:b2:fb:83:e5:8b:57:0d:9b:e0:
         b5:31:e4:ce:ea:24:25:34:dd:99:0e:8e:4a:11:6a:6a:ed:a1:
         fa:ef:d1:4f:6f:11:40:e8:3f:ac:b8:6e:bb:c4:65:68:00:94:
         49:a5:12:54:df:ee:ac:ef:63:84:2a:9d:61:1e:16:ef:9d:0b:
         06:96:92:88:49:d3:71:05:74:24:d6:2b:4c:33:df:49:c8:4e:
         e8:3c:5e:f0:a3:ad:fc:8f:c0:e9:5e:64:2a:f5:7f:30:9e:d9:
         48:7f:14:d8:3d:5c:b5:32:33:80:a8:23:db:c4:34:eb:c6:c3:
         00:9e:e2:d2:1a:55:81:d9:2b:49:de:45:5e:7b:ac:9d:b4:ba:
         02:8a:d5:c7:fe:3a:64:52:96:e1:0f:81:ab:43:1d:16:79:d4:
         b1:e2:60:a8:e6:f7:3c:c5:f6:dd:1b:76:8b:63:69:1c:66:79:
         0f:dd:85:42:d1:ef:8c:46:90:ff:2d:47:68:92:7c:6a:3d:44:
         67:aa:c3:a1:d6:3d:88:4c:68:22:b1:46:05:38:68:a3:ca:80:
         2f:ce:de:d2
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUd9AU77xudVzC391AI1GgQo6JYgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNBRkFD
QzhFQTZDMTAeFw0yNjA1MTExNjU5NThaFw0yNjA1MTIxODEyNThaMDMxMTAvBgNV
BAMTKERGQjQyRkFDQzRCQ0U1QzVBRjZCREQyNTgwN0FERjA1RUYyRjg1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUTOjhWREQhqw1hKW+6aNfJen
qV0NNhJzZxdq21jxgs75eP3VP5kBxXzSuTaNtzzqn5MCg9RU/g2NjaJY9ieTFPEB
jRXlTgvhPD9nYNnxDT4nxwXtHYjEMnIywdn6rlDr/HpA7HHC2D770Vkstr+hHBeD
iEHzcaK+D3sGry1Slk3uUdVgjeNAh1mWQWVqV/x5iCsn8z9vi/dDOdB8n/l4p+Ds
KYXGCb9HtuXvt3+4jS4a0mo+VdoOMI8W3QSEa6dEIusKxXBbGfJ36AzvY6Qn4U9+
lmFbOULroht7Hp+0gK9jTVQ+Eu2CUUcaSvEhwqQ9vUZaR8czN/ugTXODCyIhAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQU37QvrMS85cWva90lgHrfBe8vhTwwHwYDVR0j
BBgwFoAUnYW7jZMAbTWG4o0NZhLK+syOpsEwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkFSTC8w
LzlEODVCQjhEOTMwMDZEMzU4NkUyOEQwRDY2MTJDQUZBQ0M4RUE2QzEuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvOUQ4NUJCOEQ5MzAwNkQzNTg2RTI4RDBENjYxMkNB
RkFDQzhFQTZDMS5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05BUkwvMC85RDg1QkI4RDkzMDA2RDM1
ODZFMjhEMEQ2NjEyQ0FGQUNDOEVBNkMxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLweX6dCoYJLvSJi
gllZggnUQi9RQZaRV49pjusbxe4JBfMoHZ5FjjFRRijlsvuD5YtXDZvgtTHkzuok
JTTdmQ6OShFqau2h+u/RT28RQOg/rLhuu8RlaACUSaUSVN/urO9jhCqdYR4W750L
BpaSiEnTcQV0JNYrTDPfSchO6Dxe8KOt/I/A6V5kKvV/MJ7ZSH8U2D1ctTIzgKgj
28Q068bDAJ7i0hpVgdkrSd5FXnusnbS6AorVx/46ZFKW4Q+Bq0MdFnnUseJgqOb3
PMX23Rt2i2NpHGZ5D92FQtHvjEaQ/y1HaJJ8aj1EZ6rDodY9iExoIrFGBThoo8qA
L87e0g==
-----END CERTIFICATE-----