Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft
File:                     8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft (raw, json)
Hash identifier:          YD8Wu3Urwn/5vCVWF1QhxNZhVQSla368ik7XPA2+/po=
Subject key identifier:   B4:C3:A9:3C:B4:E2:A2:BB:D4:75:B2:46:7A:57:69:0F:A3:CC:F6:40
Authority key identifier: 82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8
Certificate issuer:       /CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8
Certificate serial:       02A48061D91259EAC88CE422C0BFAD4D792A2B75
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft
Manifest number:          07
Signing time:             Mon 11 May 2026 17:58:27 +0000
Manifest this update:     Mon 11 May 2026 17:53:27 +0000
Manifest next update:     Tue 12 May 2026 19:33:27 +0000
Files and hashes:         1: 3136302e3139312e382e302f32342d3234203d3e20313530373636.roa (hash: 23kEX/05VYapgUwuItpshBmqk2zUM39bNJvI89JH27Y=)
                          2: 3136302e3139312e392e302f32342d3234203d3e20313530373636.roa (hash: Fdjjfm1fJnNWkVxu2u3fwQcxaiitdeQENtBg51jTLAs=)
                          3: 3136302e3139312e392e302f32342d3332203d3e20313530373636.roa (hash: iobSCigwHPXsmKPAiv0Cm9wPrYmBsLfhPZWAEKgfxoc=)
                          4: 3136302e3139312e382e302f32332d3234203d3e20313530373636.roa (hash: BxOTrJ4kAeU/jIshca7/vnqFH5T34oiHpb989w5ilgs=)
                          5: 3136302e3139312e382e302f32342d3332203d3e20313530373636.roa (hash: rnSZ0yRJQ87LO3K66pUprLSWzMYNldm6q1qbJoiJRVA=)
                          6: 8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl (hash: MyPjAGdtn2y3rtx5xBCarKf9D4TX8QRYZI0lUfIDpZw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:a4:80:61:d9:12:59:ea:c8:8c:e4:22:c0:bf:ad:4d:79:2a:2b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8242A39E0577E8E82BF863D0124FF5AF2F53C9C8
        Validity
            Not Before: May 11 17:53:27 2026 GMT
            Not After : May 12 19:33:27 2026 GMT
        Subject: CN=B4C3A93CB4E2A2BBD475B2467A57690FA3CCF640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:79:3b:4c:8f:f6:02:e8:2f:2a:c3:c4:7f:
                    e2:64:45:6b:71:36:bb:59:49:48:7a:51:43:7e:c3:
                    ac:3b:a6:b4:94:72:ae:0f:36:30:9f:59:5b:21:1a:
                    20:d9:d0:8f:8b:55:35:39:16:e2:84:b3:0e:0f:90:
                    b0:69:01:04:cd:d6:59:6e:8a:83:ad:ca:7c:76:3d:
                    88:1c:61:bc:85:4b:d8:7e:fc:67:d2:04:d0:76:b9:
                    4c:d5:62:a1:eb:de:0b:38:6b:8e:d8:f6:ef:0a:53:
                    07:32:23:4c:cf:a4:23:a4:b2:2b:66:22:02:2c:a2:
                    1b:92:e8:78:82:5c:79:eb:13:be:9c:ea:99:c6:88:
                    08:f5:dc:6a:4a:a6:dd:84:6d:19:22:8e:15:00:fd:
                    3d:b6:35:96:f2:9e:c5:ec:b0:2f:8c:88:fe:a9:9f:
                    97:86:6b:88:85:21:ab:84:92:a5:b3:af:f2:a7:3c:
                    61:ed:d3:b6:5f:b9:41:0a:41:a4:cc:bc:7c:83:53:
                    92:8e:3c:96:d1:7f:f4:0d:59:6b:8f:c7:23:9b:67:
                    04:21:44:a2:3a:e8:26:6e:1e:4c:87:c0:11:c5:5e:
                    16:e3:ff:3d:dc:61:dc:f8:39:9d:74:18:0d:f4:c7:
                    80:23:7b:38:01:9b:62:7b:53:bf:65:27:4d:8b:44:
                    73:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C3:A9:3C:B4:E2:A2:BB:D4:75:B2:46:7A:57:69:0F:A3:CC:F6:40
            X509v3 Authority Key Identifier:
                keyid:82:42:A3:9E:05:77:E8:E8:2B:F8:63:D0:12:4F:F5:AF:2F:53:C9:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATHDD/1/8242A39E0577E8E82BF863D0124FF5AF2F53C9C8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cf:a5:4e:f7:ca:7e:46:4a:8b:c1:c8:dc:03:7b:dd:5c:49:
         85:fe:96:bb:a3:22:f2:86:cc:45:63:2a:1f:03:7e:33:70:74:
         96:cc:97:97:66:dd:71:c3:c0:65:4d:b8:29:9b:d7:25:7c:16:
         eb:4b:ad:7d:a7:cd:5d:e9:a0:26:64:83:57:20:f6:92:3a:b7:
         a3:ce:88:07:a2:e6:e0:e5:f3:74:3c:9e:96:f4:9c:75:c9:f6:
         98:47:71:d4:94:19:99:d9:6e:d8:a7:d0:7e:68:2f:08:5d:9b:
         19:fb:52:bd:51:ba:be:71:4a:b7:69:44:5b:e7:05:16:88:37:
         f3:f9:9c:a2:32:d9:19:d6:ba:91:02:35:60:f9:cb:94:e6:82:
         23:78:59:3f:8d:38:6e:f0:7a:50:c6:f2:49:37:6a:00:ab:fe:
         ff:74:81:b4:8e:f9:a5:94:bd:01:b8:88:3c:0a:bb:2c:bd:87:
         04:2f:f3:c9:60:6c:8b:cd:67:12:8f:14:ae:c1:f1:b7:cb:ef:
         cb:12:3f:9a:08:2e:dc:2a:8d:aa:91:7d:95:41:74:7e:c1:a7:
         15:f5:fb:fd:c7:11:98:0b:50:e5:22:53:82:b6:37:dd:5a:bf:
         e2:a8:1e:9d:21:55:9d:fd:05:c3:6c:25:b7:ba:dd:80:f4:7d:
         a7:1c:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----