Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
File:                     KY7S_WrVxbVoffYUonXC_ISNTpQ.mft (raw, json)
Hash identifier:          ux/OW5N2BMNQcvAxwrRMAUe3mj6/sL0fxcsnYn0IcN0=
Subject key identifier:   B0:36:85:E8:40:40:AE:F3:72:A7:53:06:42:B6:0A:22:91:8B:A4:15
Authority key identifier: 29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94
Certificate issuer:       /CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
Certificate serial:       03A2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
Manifest number:          0395
Signing time:             Sun 19 Oct 2025 21:55:21 +0000
Manifest this update:     Sun 19 Oct 2025 21:55:21 +0000
Manifest next update:     Tue 21 Oct 2025 21:55:21 +0000
Files and hashes:         1: KY7S_WrVxbVoffYUonXC_ISNTpQ.crl (hash: 7uzkroAkmassBxY/Df/FdXGu4n5pXShtb26FZuaI2PI=)
                          2: NlQidybSBeZHTZI3L4pKpirVIps.roa (hash: UIQb5c2F88EIT7UEI7F2iTP67ctCprgSSNLLg9Bho/E=)
                          3: eNy_6L-cDdzy9gYGpgWCKQ9JFV0.roa (hash: kgrLy2Dxerb5vSlDt7R16GUhBYYkorNYj7an5P4SDQM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 930 (0x3a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298ED2FD6AD5C5B5687DF614A275C2FC848D4E94
        Validity
            Not Before: Oct 19 21:55:21 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B03685E84040AEF372A7530642B60A22918BA415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:c5:43:f2:41:c1:58:1f:f2:6b:c8:89:6a:
                    9c:a3:c3:3a:ff:fe:f1:0c:55:e8:13:49:bf:8b:b1:
                    eb:13:04:81:5f:11:1c:73:a7:a4:04:51:38:8b:88:
                    02:49:da:61:e0:18:4d:22:f1:c3:fc:4c:3a:45:87:
                    9a:19:90:ea:21:1b:78:6f:57:b2:2a:b9:bb:d9:9d:
                    c0:45:9b:73:99:48:44:1f:ce:87:cd:70:d0:be:48:
                    ab:6b:2b:c5:68:21:79:93:1f:b0:2e:e6:9b:93:66:
                    ff:27:db:e4:4b:da:0c:11:92:be:a6:1b:37:36:5b:
                    79:72:cf:d0:6e:92:e3:7f:40:0c:2e:b3:41:f8:3d:
                    26:d1:ef:50:6a:a9:91:58:7d:23:a0:9e:98:7c:73:
                    73:6c:86:16:4b:cb:51:20:ab:91:5d:b8:73:a9:99:
                    8a:93:df:1f:80:52:25:2c:e6:1a:96:d8:75:5b:5e:
                    24:97:18:bb:69:70:30:31:b4:d0:0e:63:ad:2e:f0:
                    14:ef:af:34:38:cf:e8:58:9a:49:7a:ec:d6:4e:e5:
                    be:4a:f6:f1:21:d9:8a:c6:ec:7a:48:ef:47:3b:74:
                    ce:8b:6f:ad:f9:82:38:70:4f:4b:7f:b4:37:42:f8:
                    0a:3f:34:e7:64:83:55:ef:97:f6:e1:c8:b2:2a:d8:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:36:85:E8:40:40:AE:F3:72:A7:53:06:42:B6:0A:22:91:8B:A4:15
            X509v3 Authority Key Identifier:
                keyid:29:8E:D2:FD:6A:D5:C5:B5:68:7D:F6:14:A2:75:C2:FC:84:8D:4E:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KY7S_WrVxbVoffYUonXC_ISNTpQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TTNS/KY7S_WrVxbVoffYUonXC_ISNTpQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:07:11:66:61:df:aa:60:8c:61:f4:21:a8:48:23:c4:7a:d6:
         61:73:f3:58:c5:e0:1a:32:74:45:ca:8f:56:33:c5:ec:de:04:
         a4:57:b1:a9:5b:76:c0:43:7e:25:00:00:c5:cf:0d:4e:4e:c2:
         ed:9b:5c:d5:d1:18:7d:a9:45:90:d9:5f:8a:33:2d:40:3a:84:
         b1:dd:5f:94:6d:18:39:2c:cd:7d:99:27:81:08:87:61:6c:91:
         3e:12:cb:39:13:d9:0e:89:ba:8e:9d:9f:1b:c5:1e:b9:5a:1e:
         54:1e:ba:cd:d1:0c:44:08:f1:11:d5:5a:8c:74:53:f5:32:9a:
         ec:80:3f:80:15:e2:9b:7b:62:6c:9a:13:5c:08:7c:97:72:0b:
         40:a7:db:85:7c:73:64:db:8b:b4:04:29:09:dd:c4:e6:5e:84:
         dc:ea:18:9d:72:e3:5f:f4:64:a8:be:16:19:f6:1d:63:c7:ca:
         67:d5:3c:8d:de:d3:64:39:bf:6f:e4:de:d5:35:53:0c:db:d4:
         86:18:32:6e:28:53:24:17:f3:b5:d0:ab:58:f0:3e:42:2d:04:
         67:0c:c0:18:e8:9b:07:78:8e:1a:6d:d7:6c:34:e4:a2:64:1c:
         62:15:f4:8d:c2:53:f1:85:4c:0f:5b:bc:78:0b:35:90:9c:d9:
         99:c1:03:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:00:13 2025 by rpki-client