Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/STW/NYtyYLEW2Tp3AeP67qe9X4ZtzFc.mft
File:                     NYtyYLEW2Tp3AeP67qe9X4ZtzFc.mft (raw, json)
Hash identifier:          loA5tpKg72czemx8iJvB8bQhRVHJpHFgaRW4uz4s5eg=
Subject key identifier:   9A:93:08:28:BB:B6:F2:EC:79:7E:00:5E:4E:F2:C6:64:D5:00:F7:92
Authority key identifier: 35:8B:72:60:B1:16:D9:3A:77:01:E3:FA:EE:A7:BD:5F:86:6D:CC:57
Certificate issuer:       /CN=358B7260B116D93A7701E3FAEEA7BD5F866DCC57
Certificate serial:       01EC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NYtyYLEW2Tp3AeP67qe9X4ZtzFc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/NYtyYLEW2Tp3AeP67qe9X4ZtzFc.mft
Manifest number:          01EC
Signing time:             Thu 26 Mar 2026 11:00:01 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:01 +0000
Manifest next update:     Sat 28 Mar 2026 11:00:01 +0000
Files and hashes:         1: NYtyYLEW2Tp3AeP67qe9X4ZtzFc.crl (hash: Fn2YarE6k7DBhvLAda5ILx0ftdJoPqwD0VltlM0VntI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358B7260B116D93A7701E3FAEEA7BD5F866DCC57
        Validity
            Not Before: Mar 26 11:00:01 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9A930828BBB6F2EC797E005E4EF2C664D500F792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6c:e9:48:2a:d8:b2:68:96:8a:00:8c:c0:8e:
                    30:a6:91:c8:c9:11:76:b9:58:2d:f3:ea:0a:d0:8b:
                    f4:c4:b8:00:0a:aa:72:64:ea:19:c3:2f:82:11:0d:
                    31:8f:e7:cc:f1:12:01:40:f0:33:3a:8a:9a:8a:d9:
                    f9:cb:f6:96:50:c5:5b:72:cd:2b:85:0d:af:3b:ab:
                    85:81:8e:fe:fe:9d:20:51:fe:14:77:7e:9d:35:d2:
                    81:21:58:23:74:4c:72:6e:9d:20:27:99:19:12:f8:
                    e4:07:09:0f:c0:77:76:79:d7:d7:e1:70:cd:e0:35:
                    73:08:e9:7f:3a:f6:78:87:ca:85:10:18:79:fa:39:
                    0a:b9:47:15:c9:e8:08:23:dd:50:9b:d5:c3:23:36:
                    c9:22:5d:d4:7e:c2:9b:f8:29:db:34:22:ca:c6:85:
                    b4:35:36:d9:e7:d9:4b:1d:b4:10:3f:47:6b:64:83:
                    04:6c:7a:ff:c9:71:fa:35:2b:c7:45:05:e6:fb:cc:
                    b2:14:bd:6e:20:0e:18:66:46:aa:60:54:0f:c6:20:
                    bf:26:26:2d:86:81:88:65:02:d3:c0:12:27:89:25:
                    cc:7f:dc:af:c0:9b:2b:7c:50:8e:c3:fb:82:04:02:
                    8b:fc:94:09:64:be:76:ab:ba:ef:b0:49:6c:bb:ad:
                    8e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:93:08:28:BB:B6:F2:EC:79:7E:00:5E:4E:F2:C6:64:D5:00:F7:92
            X509v3 Authority Key Identifier:
                keyid:35:8B:72:60:B1:16:D9:3A:77:01:E3:FA:EE:A7:BD:5F:86:6D:CC:57

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/NYtyYLEW2Tp3AeP67qe9X4ZtzFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NYtyYLEW2Tp3AeP67qe9X4ZtzFc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/STW/NYtyYLEW2Tp3AeP67qe9X4ZtzFc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:15:64:9a:36:a4:3e:dc:c7:16:9a:5c:05:2b:e9:20:fd:b8:
         43:bf:d6:6d:6e:02:05:e3:2b:a7:b2:3b:91:0a:04:ce:a3:ec:
         33:38:74:84:cc:fe:0e:76:5d:96:d1:75:e9:b9:87:66:c0:e0:
         2d:16:3b:55:e7:c8:ab:be:83:27:76:83:42:14:b6:5e:84:28:
         e8:c8:02:92:87:4c:34:9f:3a:ba:61:96:53:d2:4e:cc:ea:e3:
         0e:b6:7a:f3:cf:8a:de:42:a9:63:9c:9d:0b:81:fe:a1:9b:c7:
         91:8b:62:3a:ed:20:d7:b4:12:53:9e:98:fb:62:c6:22:c3:60:
         f3:58:7c:f8:43:cc:16:93:08:52:8a:53:64:66:e3:26:7b:cb:
         f1:3b:ea:4a:da:d7:ec:58:0c:ed:96:96:d0:82:e2:13:63:e1:
         78:b6:7b:d3:a5:77:ac:13:c7:38:03:41:20:2c:72:7f:bc:ed:
         d9:a0:68:b4:76:d5:eb:55:c4:b5:d9:5d:be:0a:22:02:b8:91:
         b3:25:0f:0b:16:46:34:b5:ce:b8:60:2b:ab:4a:ce:f0:c4:e4:
         3e:5b:50:07:13:f3:3a:f8:58:70:6b:e1:99:ed:00:18:b4:f3:
         fe:e7:6a:61:a1:3c:42:67:68:a7:32:f4:5a:54:0c:3f:16:80:
         5a:27:54:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:32:34 2026 by rpki-client