Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft
File:                     20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft (raw, json)
Hash identifier:          3QcIRzGK+KoDVqz9MpHsK3Fm43+nd3NRxuVEUsYXk8k=
Subject key identifier:   1B:A4:B4:4D:ED:53:E2:49:D3:06:D3:DF:CD:AF:B4:22:70:31:96:E2
Authority key identifier: 20:E6:A3:BA:2C:4D:A1:64:07:FE:46:FD:4F:DF:6D:BD:BA:41:97:DC
Certificate issuer:       /CN=20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC
Certificate serial:       60411D6CB2237DBE73E2E6F4FD0AFC447CC5E737
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft
Manifest number:          09
Signing time:             Mon 11 May 2026 17:44:46 +0000
Manifest this update:     Mon 11 May 2026 17:39:46 +0000
Manifest next update:     Tue 12 May 2026 18:25:46 +0000
Files and hashes:         1: 20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl (hash: Wt8WFFX2WNxBB3SMZWNQJYHl59y1cx5XO/ZyQUkCAg8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:41:1d:6c:b2:23:7d:be:73:e2:e6:f4:fd:0a:fc:44:7c:c5:e7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC
        Validity
            Not Before: May 11 17:39:46 2026 GMT
            Not After : May 12 18:25:46 2026 GMT
        Subject: CN=1BA4B44DED53E249D306D3DFCDAFB422703196E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e3:fd:eb:65:f4:2a:8a:4c:cd:79:98:d9:85:
                    67:00:df:9c:f6:2f:65:41:53:7b:84:f5:9b:ad:a6:
                    75:6a:2c:f2:26:0d:da:98:3e:3f:d4:4c:82:db:ec:
                    60:0c:d5:8c:06:37:c3:41:13:24:fb:c3:2c:df:52:
                    8c:d0:c1:22:ea:a4:ae:80:70:32:3a:0e:52:da:ff:
                    6b:77:5f:9c:28:82:ef:81:2c:72:a4:d0:16:18:33:
                    b2:95:e0:be:b9:94:c3:ae:84:df:f3:bb:28:9c:37:
                    ee:50:69:ea:99:83:cc:f8:e6:6a:51:83:b7:05:d9:
                    1e:0c:02:1f:14:0a:54:ab:88:d6:c9:63:3b:58:3b:
                    61:90:21:4f:bd:89:63:04:3a:97:06:9b:a4:8a:53:
                    99:d2:c6:ff:a1:ed:cd:b9:b9:87:9a:4b:f2:b1:41:
                    89:6f:d1:b0:33:65:a3:27:6e:e2:f8:cc:49:2d:7e:
                    52:c6:18:dc:db:5e:1c:07:ca:5a:88:1f:f6:e0:38:
                    dc:cb:8c:c0:d9:6a:e2:ce:57:d7:3c:48:f9:94:f3:
                    a1:93:a6:26:b8:45:36:55:3c:df:b0:70:7e:ab:3a:
                    79:37:9b:3b:de:23:b5:6e:d9:93:53:87:86:27:51:
                    fd:aa:cb:99:97:58:29:09:f6:5c:c3:fc:d3:02:5c:
                    bd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A4:B4:4D:ED:53:E2:49:D3:06:D3:DF:CD:AF:B4:22:70:31:96:E2
            X509v3 Authority Key Identifier:
                keyid:20:E6:A3:BA:2C:4D:A1:64:07:FE:46:FD:4F:DF:6D:BD:BA:41:97:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BEIDOU/0/20E6A3BA2C4DA16407FE46FD4FDF6DBDBA4197DC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b4:2d:ab:f7:c0:4a:7d:68:d6:fa:71:80:d4:79:8d:73:84:
         a8:5d:d8:df:d0:16:48:58:64:a0:88:ba:dc:06:51:58:7e:c3:
         41:55:95:b5:bd:9d:bc:7d:8e:cb:4b:c0:54:61:c2:05:89:c2:
         28:7e:b1:41:f2:bf:9a:53:8b:90:60:d0:aa:f5:24:57:4b:12:
         17:7a:ff:56:a1:56:97:9d:7a:ce:6d:d1:f9:2e:e4:75:46:a6:
         f3:47:a6:45:8b:7b:c0:c6:7b:c2:93:21:23:39:a0:d1:65:c8:
         f5:3b:4a:78:01:7b:d0:b1:eb:5a:1d:49:0b:cb:16:ee:6a:e1:
         31:5d:2a:43:28:a4:66:b9:8e:82:ab:7d:ed:44:5f:6f:fd:ad:
         dd:a6:21:49:3d:0c:ed:18:95:0f:a3:b9:37:4d:d8:a1:ae:f2:
         b3:dc:9b:9c:31:9a:3b:3e:9f:44:7d:c1:0c:7c:a5:d9:6d:73:
         cc:34:67:74:12:44:70:98:6a:dd:39:0f:dc:7d:f8:73:fb:6e:
         82:d4:0c:55:6a:1e:a6:32:0b:86:74:97:f7:3a:d4:bd:29:a1:
         59:48:31:aa:6f:6e:7d:e3:ad:cc:03:df:9a:55:5d:98:db:b7:
         70:91:4d:91:22:7e:c1:8e:c7:00:4d:49:8c:aa:2f:3a:50:ba:
         51:b8:b6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:53:27 2026 by rpki-client