Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft
File: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft (raw, json)
Hash identifier: 2P6J8U+b3P7TkiHvqOudn3yYsuP+MV5F53f+4b0uKRI=
Subject key identifier: 90:88:6E:B3:BE:65:C7:C8:D3:9D:EA:DE:41:A2:85:0B:42:B1:B5:C6
Authority key identifier: AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9
Certificate issuer: /CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9
Certificate serial: 5C461EB9BC18CB0C34AD9C58029D5C44EE777F5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft
Manifest number: 01
Signing time: Mon 11 May 2026 15:48:15 +0000
Manifest this update: Mon 11 May 2026 15:43:15 +0000
Manifest next update: Tue 12 May 2026 18:06:15 +0000
Files and hashes: 1: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl (hash: 5frpsKRSs6gPmKVXfvHkN8uUJa4xLmBTw5EDFmgPekE=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:46:1e:b9:bc:18:cb:0c:34:ad:9c:58:02:9d:5c:44:ee:77:7f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9
Validity
Not Before: May 11 15:43:15 2026 GMT
Not After : May 12 18:06:15 2026 GMT
Subject: CN=90886EB3BE65C7C8D39DEADE41A2850B42B1B5C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:27:40:3d:3c:c9:96:ba:d3:22:8b:9f:d9:
1c:9a:a2:0e:e4:2d:18:d7:99:a8:ab:34:11:f8:9e:
24:b3:31:02:5a:a6:89:72:65:b8:3f:26:3b:07:7b:
20:6e:f4:b5:6e:cd:33:c5:7f:cf:94:ab:3d:75:81:
02:16:1a:1a:9a:01:d3:4c:dc:11:7f:b0:b0:34:17:
5f:86:51:09:ac:64:b0:42:c5:0e:38:c4:8d:0b:84:
f1:99:cc:69:e8:01:44:c5:51:f6:d2:33:eb:78:71:
c3:41:33:ca:9b:ab:60:8c:f0:b5:1b:e5:85:9d:bd:
2e:69:56:99:eb:f9:9b:67:e9:90:d4:ee:5f:b3:a3:
2d:71:8f:c2:fd:ea:76:df:54:d3:57:f2:f4:20:a2:
f5:49:ba:53:ba:a3:1f:72:aa:c6:4d:e4:9d:46:8d:
a7:11:8b:5f:7a:29:22:5b:18:85:3d:1b:45:e3:32:
cc:38:b2:5b:dc:6e:f0:90:dd:89:8f:e7:9a:71:77:
e9:1a:36:fe:af:02:f3:34:1a:73:ae:f2:e0:ca:2f:
ca:22:9b:8d:a3:d7:b4:a9:cd:ba:e5:c4:5b:e8:e4:
cc:30:93:a4:46:af:66:26:68:3c:f0:c5:00:66:ac:
2d:db:ff:95:81:8a:f9:fb:95:52:bf:8c:66:6d:f3:
00:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:88:6E:B3:BE:65:C7:C8:D3:9D:EA:DE:41:A2:85:0B:42:B1:B5:C6
X509v3 Authority Key Identifier:
keyid:AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ae:0a:1a:e6:16:5a:77:9d:d2:0d:a7:17:2e:2f:42:ad:e3:
30:48:c4:22:3d:5e:54:ee:d7:0e:8f:84:ef:4e:28:3f:d5:82:
66:05:c5:26:15:df:dc:af:9f:b7:37:ea:ed:ca:69:97:bb:dd:
0c:b2:6d:89:09:87:97:b8:5f:f3:50:17:00:b4:27:f4:a4:10:
33:4d:16:20:d3:80:d9:ff:11:16:aa:d6:c0:1e:17:1a:7a:7d:
65:3a:ab:de:6d:07:fc:65:29:b2:36:db:a8:0b:6e:59:30:52:
fa:78:fb:6b:36:75:aa:60:d3:43:54:d0:ed:a0:d1:34:5b:98:
c8:4d:0b:cb:3e:28:40:f8:9e:26:b8:59:48:1d:db:69:1c:e9:
cd:66:d7:73:dc:da:83:d8:b7:10:e2:f8:ed:75:fd:f8:e9:80:
77:d7:02:1b:19:e5:88:f1:e7:90:6c:23:e8:28:79:7d:d3:97:
9e:f8:71:fa:b6:16:e5:ed:9c:a3:fd:48:d4:ca:51:ea:cb:59:
86:7a:c4:13:e2:d0:a8:81:cf:67:63:66:f8:20:fa:f0:a1:6c:
22:c2:8c:a2:3f:bc:0e:9a:2b:b6:8b:a5:75:f0:af:2c:95:0c:
fa:6a:78:00:5b:48:00:ab:8f:a4:75:38:44:90:ab:83:30:5e:
c4:34:7c:73
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUXEYeubwYyww0rZxYAp1cRO53f1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUZDMTFBODI0RDk5MjNCRTkyMTdCN0REMkVENkNFQzk5
NkRCRkZGOTAeFw0yNjA1MTExNTQzMTVaFw0yNjA1MTIxODA2MTVaMDMxMTAvBgNV
BAMTKDkwODg2RUIzQkU2NUM3QzhEMzlERUFERTQxQTI4NTBCNDJCMUI1QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCCCdAPTzJlrrTIouf2Ryaog7k
LRjXmairNBH4niSzMQJapolyZbg/JjsHeyBu9LVuzTPFf8+Uqz11gQIWGhqaAdNM
3BF/sLA0F1+GUQmsZLBCxQ44xI0LhPGZzGnoAUTFUfbSM+t4ccNBM8qbq2CM8LUb
5YWdvS5pVpnr+Ztn6ZDU7l+zoy1xj8L96nbfVNNX8vQgovVJulO6ox9yqsZN5J1G
jacRi196KSJbGIU9G0XjMsw4slvcbvCQ3YmP55pxd+kaNv6vAvM0GnOu8uDKL8oi
m42j17SpzbrlxFvo5Mwwk6RGr2YmaDzwxQBmrC3b/5WBivn7lVK/jGZt8wBlAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUkIhus75lx8jTnereQaKFC0KxtcYwHwYDVR0j
BBgwFoAUr8Eagk2ZI76SF7fdLtbOyZbb//kwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVElO
VEVDSC8wL0FGQzExQTgyNEQ5OTIzQkU5MjE3QjdERDJFRDZDRUM5OTZEQkZGRjku
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQUZDMTFBODI0RDk5MjNCRTkyMTdCN0RE
MkVENkNFQzk5NkRCRkZGOS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JFU1RJTlRFQ0gvMC9BRkMx
MUE4MjREOTkyM0JFOTIxN0I3REQyRUQ2Q0VDOTk2REJGRkY5Lm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ma4KGuYWWned0g2nFy4vQq3jMEjEIj1eVO7XDo+E704oP9WCZgXFJhXf3K+ftzfq
7cppl7vdDLJtiQmHl7hf81AXALQn9KQQM00WINOA2f8RFqrWwB4XGnp9ZTqr3m0H
/GUpsjbbqAtuWTBS+nj7azZ1qmDTQ1TQ7aDRNFuYyE0Lyz4oQPieJrhZSB3baRzp
zWbXc9zag9i3EOL47XX9+OmAd9cCGxnliPHnkGwj6Ch5fdOXnvhx+rYW5e2co/1I
1MpR6stZhnrEE+LQqIHPZ2Nm+CD68KFsIsKMoj+8DportouldfCvLJUM+mp4AFtI
AKuPpHU4RJCrgzBexDR8cw==
-----END CERTIFICATE-----
Generated at Tue May 12 23:24:43 2026 by rpki-client