Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
File:                     9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft (raw, json)
Hash identifier:          N+IrajGfg75Pcgpniu8t/3v6AFoZq1ShwoGOdtadI6s=
Subject key identifier:   F3:F0:4A:EB:E5:8F:3C:3B:57:14:66:DC:81:52:A2:0E:2F:6D:B5:C3
Authority key identifier: 98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3
Certificate issuer:       /CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
Certificate serial:       4EC1244C490CBC559739DD95AC96FCEFB6D158F6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft
Manifest number:          0A
Signing time:             Mon 11 May 2026 17:59:03 +0000
Manifest this update:     Mon 11 May 2026 17:54:03 +0000
Manifest next update:     Tue 12 May 2026 19:13:03 +0000
Files and hashes:         1: 9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl (hash: yp6zBWayDwgpEg7XIVenR3EPlTnSTENVD9T9/2wDZgw=)
                          2: 3230322e3134302e3136302e302f31392d3139203d3e2039323634.roa (hash: LA74+HRCy+YQeY35gYYWFZPH2WSKO8OariSVC3JqHzM=)
                          3: 323030313a6330383a3a2f33322d3332203d3e2039323634.roa (hash: Za2eLedW7Dgj1YKn18rk+zYaiAYcT3aXmTUgI60NrbY=)
                          4: 323030313a6330383a666666663a666666663a666666663a666666663a666666613a3830302f3131392d313139203d3e203138323137.roa (hash: LlmnWD7qIwStfYARyzYDm1T1rVnzOKq6b9lEjT/7ewQ=)
                          5: 323430333a633234303a3a2f33322d3332203d3e2039323634.roa (hash: oe8xOwIqr2mO81l6+e7ZMOIERS2RYBz6q6ygl7MIFms=)
                          6: 3230322e3136392e3136302e302f32302d3230203d3e2039323634.roa (hash: sSOmlXcn9YAxBpR7Y/Omip1XRS2+5nTj6dTKOHSNkp4=)
                          7: 323430303a343530303a3a2f33322d3332203d3e2039323634.roa (hash: KHJasWZ7ZRecfk0BbyKR1BgVi3lPmEGN9yAwpdYHKvo=)
                          8: 3130332e3133302e3235322e302f32322d3232203d3e2039323634.roa (hash: VvHRqWxVEtxPJcjsyJFxfRKVgF0vRJqpYge9SzO33qM=)
                          9: 3130332e3133302e3235322e302f32322d3234203d3e2039323634.roa (hash: ebYSyc6wu3utGCh3CfyxTzxW7KNMw2xjNw8vV6+J0FQ=)
                          10: 3131372e3130332e39362e302f32302d3230203d3e2039323634.roa (hash: QzqhrVUHom/+44097wyR/SgbPwVIpPZtBP2vJQUQT34=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c1:24:4c:49:0c:bc:55:97:39:dd:95:ac:96:fc:ef:b6:d1:58:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3
        Validity
            Not Before: May 11 17:54:03 2026 GMT
            Not After : May 12 19:13:03 2026 GMT
        Subject: CN=F3F04AEBE58F3C3B571466DC8152A20E2F6DB5C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:85:b9:ab:da:27:fe:e3:71:52:cc:94:ac:
                    a5:f8:57:36:fa:c4:ed:9b:47:77:4a:42:2a:0b:21:
                    97:eb:26:09:1b:c8:a6:7c:24:b8:4b:ad:80:aa:d2:
                    76:1c:25:79:8e:64:45:53:f6:ae:9c:5b:b5:8e:2f:
                    5b:2d:51:14:79:fe:0d:5c:bf:98:fa:63:1d:aa:46:
                    0e:28:4b:86:85:a1:ba:05:b5:88:af:cf:f4:7b:b8:
                    6b:6e:77:42:f8:79:f2:7b:41:5d:af:59:6e:0e:9c:
                    38:40:2d:e2:52:e5:66:30:c9:cd:44:f6:a7:f9:d7:
                    13:6d:2c:1c:62:df:69:61:ea:01:e0:0b:b1:f5:e8:
                    5f:7a:a3:83:50:2e:d7:d2:d0:6d:f4:08:21:73:96:
                    3e:9e:8a:d9:4e:b7:78:af:ef:58:9d:43:ad:d9:b5:
                    df:77:3d:d4:9f:56:39:4a:44:ec:7f:02:1b:b3:b0:
                    d0:b4:09:a2:55:03:bf:9d:a9:f9:18:b9:2f:8e:75:
                    e5:6b:18:d3:6e:a5:19:bd:21:3b:bf:e0:0e:f4:74:
                    7e:3c:9d:f9:b6:2a:d6:71:51:9e:4d:a7:07:03:16:
                    2a:37:69:46:4e:c9:75:09:e1:bd:7e:4b:81:e1:92:
                    f6:78:72:85:59:cd:ff:32:c7:fe:78:99:28:ac:c3:
                    0b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F0:4A:EB:E5:8F:3C:3B:57:14:66:DC:81:52:A2:0E:2F:6D:B5:C3
            X509v3 Authority Key Identifier:
                keyid:98:32:A7:E4:CF:45:72:9E:DC:D3:68:1D:01:46:E1:ED:3A:4A:40:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ASNET/0/9832A7E4CF45729EDCD3681D0146E1ED3A4A40C3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0d:a7:8d:b5:f5:70:a5:e6:2d:32:a9:89:fc:94:bb:e8:dc:
         a3:9b:de:79:b1:a1:39:1b:ba:fe:3f:98:8a:f6:ea:22:86:80:
         41:49:af:f5:c8:20:7c:9e:82:97:90:af:42:e7:ae:4a:80:09:
         3f:fe:70:d8:ee:43:d3:4a:fb:74:b5:ca:84:cb:39:81:a9:84:
         16:59:37:c2:4f:d0:dd:43:ab:b6:4c:b7:3c:98:4e:1a:a1:1c:
         3c:ff:b4:ee:66:b7:f1:89:d2:2c:77:9b:47:cb:4c:01:c0:4b:
         84:86:d3:d9:11:f7:5c:12:b5:22:18:93:99:22:94:34:42:6b:
         4a:cc:c7:ca:68:fd:5d:d8:1a:85:e9:5c:0a:2a:d1:3c:19:86:
         5a:4b:f8:2e:44:b6:a4:37:3a:51:29:31:66:b9:1a:8b:f0:97:
         09:ee:ea:e6:14:3b:08:55:2d:3b:ec:ce:3f:1c:64:7b:4c:5f:
         11:f1:3d:63:a7:f6:b5:a6:ab:fd:f9:5d:d5:9c:7c:ff:13:42:
         63:c2:df:27:1d:1f:d8:28:aa:e0:57:be:19:47:af:a2:f2:49:
         df:71:31:ec:ac:fb:21:f5:04:22:db:53:fb:a0:2f:e5:bb:c7:
         28:ae:a1:d1:71:48:1d:d2:0e:e5:be:e9:89:28:68:c8:8b:9f:
         07:6f:0b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:53:26 2026 by rpki-client