Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
File:                     wNLIw9TC-7ok09g1CKsULy1JQn0.mft (raw, json)
Hash identifier:          7+BNalb7rgtW5Jvo0W8WFIOmEMQ58qTS6jtRoMIjNRI=
Subject key identifier:   B7:A0:72:FF:D5:A0:F5:D2:70:56:47:B6:60:24:DB:B3:C4:3B:95:BC
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Certificate issuer:       /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial:       143D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
Manifest number:          13FE
Signing time:             Sun 19 Oct 2025 21:57:30 +0000
Manifest this update:     Sun 19 Oct 2025 21:57:30 +0000
Manifest next update:     Tue 21 Oct 2025 21:57:30 +0000
Files and hashes:         1: FLAncUewSF6hei4RPk49VjC_PQg.roa (hash: 8fZqIG/MMfhI6s+b0ATJTXxQ4tAwF4sO0Th4u13XmXk=)
                          2: LC_aFhBz7fd7C6FebQLwmHV3t9I.roa (hash: 8QLVAAyFdZwfuwuj45MZA7t9fieWo6P6SMjDJo6pGeM=)
                          3: LgggCVwPbNdcnrCqVMduXlIqpsw.roa (hash: 4ju6mocONKVH9JpMBsRARsenKxMgM5gKSyN495Ilqg0=)
                          4: VunfuzJ7FKNptif6Q8gzb0wR95E.roa (hash: OTzSlzlxAlVbWUDG/GkIkODkIAkRsiSwSYY13w3XFEM=)
                          5: XIhWOlBKRqMagkzqFrODB_R8sI8.roa (hash: 9l8Iouic8Gg8mE30CkufgikNUXR5oK1+0q+hXl9OL1g=)
                          6: aN1MRs9ky_ae4kbv2Ws0Wicbi94.roa (hash: sFRpEdz/RLn0u4unDaARJlbqPIW1CDZKiuTdFbZiM/M=)
                          7: aytBevsakWW2oNPJfb9kF-YHitU.roa (hash: Lps8rcvk2vL+W/b6q00wg4AJ2PHp3UoZgX8QZBHYtBY=)
                          8: wNLIw9TC-7ok09g1CKsULy1JQn0.crl (hash: mJvoarC135JngVv7t0srXrUjsAYwqsXTBFXcJLxSPSY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5181 (0x143d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
        Validity
            Not Before: Oct 19 21:57:30 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B7A072FFD5A0F5D2705647B66024DBB3C43B95BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9b:62:44:b4:9e:d6:69:a1:7c:5f:31:b7:69:
                    c1:b2:10:9d:9e:b2:99:07:6a:82:b5:03:07:6d:c9:
                    55:f4:2e:18:dd:c8:21:13:16:f9:e9:d9:38:68:16:
                    d4:24:24:5d:83:53:c4:ad:79:42:0a:ce:6c:af:cd:
                    f9:78:da:7d:18:fb:00:53:d8:b4:06:1d:75:3e:06:
                    25:c1:2e:35:59:b5:b1:83:30:50:58:cb:1f:19:5b:
                    63:46:d1:aa:21:e6:a8:76:8e:d7:72:46:26:86:51:
                    1d:bf:1f:90:6d:a8:5b:fb:73:79:81:da:0e:29:95:
                    be:29:d4:22:e8:b1:b9:c4:3a:22:a0:b3:30:c4:18:
                    a0:94:f4:c2:f2:bb:96:1f:ac:c0:81:7b:8c:49:3f:
                    e9:94:a7:c2:a1:1e:77:db:74:8f:40:92:85:1c:ad:
                    67:62:49:d0:fd:c2:32:48:7e:df:67:b8:46:34:cb:
                    53:6d:d7:ea:ed:fa:af:0c:47:6d:07:a5:12:ed:76:
                    1d:2d:b6:2a:d6:99:f9:5a:bb:35:5a:b6:89:63:bc:
                    43:cf:09:c0:cb:a5:50:d1:25:5c:b2:38:a0:e2:a8:
                    4f:e1:ff:32:25:5c:26:a5:32:ef:28:36:0c:10:84:
                    ba:81:4b:74:6d:0e:c5:90:56:6b:35:eb:4c:aa:51:
                    39:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A0:72:FF:D5:A0:F5:D2:70:56:47:B6:60:24:DB:B3:C4:3B:95:BC
            X509v3 Authority Key Identifier:
                keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4b:f3:91:0b:c6:49:dc:c5:f8:0e:bc:2a:d6:17:15:06:ae:
         65:ba:fb:e1:0a:55:1b:84:5c:6f:d7:36:7c:ff:6d:85:f4:8c:
         72:84:2c:fe:9a:0c:23:b8:50:1a:af:3a:cd:ef:bc:d2:c3:83:
         b7:48:65:89:e1:5b:3f:bb:23:a7:3a:19:e5:89:c3:76:e2:57:
         e7:9d:5a:b7:2b:0a:b9:f8:00:48:59:0d:2e:b5:f7:b4:33:b3:
         d2:81:0a:b7:7d:d5:d2:3a:7c:5f:d2:b1:a1:19:cf:2a:b4:da:
         ab:b2:bb:d5:aa:5c:25:43:7f:6d:f1:b7:67:5d:43:85:6d:8f:
         7e:f6:d7:a8:a0:ae:4a:5a:2e:29:4f:c2:68:cb:6f:df:9d:d2:
         dd:6c:7f:b2:ef:0c:eb:d1:9f:39:48:d9:6c:68:17:ef:6d:25:
         36:6c:d3:d8:00:1e:3a:d7:78:c2:40:9c:7e:ca:6b:15:81:3f:
         bb:77:da:6f:6e:ff:81:77:e2:db:72:59:ed:e7:65:fa:17:d3:
         7e:31:dd:5d:1b:33:fb:03:7e:90:3b:e7:81:d9:14:2c:4f:92:
         4f:c7:3d:a7:ac:29:55:91:8d:86:30:f8:3e:3c:b0:5d:a1:a8:
         96:3f:3b:1b:66:6f:a7:69:72:89:1f:3d:52:57:c5:bc:f4:13:
         b8:20:ea:3d
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICFD0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzBE
MkM4QzNENEMyRkJCQTI0RDNEODM1MDhBQjE0MkYyRDQ5NDI3RDAeFw0yNTEwMTky
MTU3MzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEI3QTA3MkZGRDVBMEY1
RDI3MDU2NDdCNjYwMjREQkIzQzQzQjk1QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYm2JEtJ7WaaF8XzG3acGyEJ2espkHaoK1AwdtyVX0LhjdyCET
Fvnp2ThoFtQkJF2DU8SteUIKzmyvzfl42n0Y+wBT2LQGHXU+BiXBLjVZtbGDMFBY
yx8ZW2NG0aoh5qh2jtdyRiaGUR2/H5BtqFv7c3mB2g4plb4p1CLosbnEOiKgszDE
GKCU9MLyu5YfrMCBe4xJP+mUp8KhHnfbdI9AkoUcrWdiSdD9wjJIft9nuEY0y1Nt
1+rt+q8MR20HpRLtdh0ttirWmflauzVatoljvEPPCcDLpVDRJVyyOKDiqE/h/zIl
XCalMu8oNgwQhLqBS3RtDsWQVms160yqUTlFAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUt6By/9Wg9dJwVke2YCTbs8Q7lbwwHwYDVR0jBBgwFoAUwNLIw9TC+7ok09g1
CKsULy1JQn0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0FOSU4v
d05MSXc5VEMtN29rMDlnMUNLc1VMeTFKUW4wLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS93TkxJdzlUQy03b2swOWcxQ0tzVUx5MUpRbjAuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9XQU5JTi93TkxJdzlUQy03b2swOWcxQ0tz
VUx5MUpRbjAubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkvz
kQvGSdzF+A68KtYXFQauZbr74QpVG4Rcb9c2fP9thfSMcoQs/poMI7hQGq86ze+8
0sODt0hlieFbP7sjpzoZ5YnDduJX551atysKufgASFkNLrX3tDOz0oEKt33V0jp8
X9KxoRnPKrTaq7K71apcJUN/bfG3Z11DhW2PfvbXqKCuSlouKU/CaMtv353S3Wx/
su8M69GfOUjZbGgX720lNmzT2AAeOtd4wkCcfsprFYE/u3fab27/gXfi23JZ7edl
+hfTfjHdXRsz+wN+kDvngdkULE+ST8c9p6wpVZGNhjD4PjywXaGolj87G2Zvp2ly
iR89UlfFvPQTuCDqPQ==
-----END CERTIFICATE-----