Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft
File: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft (raw, json)
Hash identifier: A3Eep4Wccu6JiErfQoilgQ7sVLl9YtoUbA6O6RrTJxA=
Subject key identifier: 00:B6:BF:54:4F:16:35:96:E8:52:4B:F7:F4:2E:A7:B8:6F:8F:F4:34
Authority key identifier: 80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D
Certificate issuer: /CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D
Certificate serial: 60686DB0E5FC97B04BE6A26144A210E617C0EBFE
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft
Manifest number: 04
Signing time: Mon 11 May 2026 17:06:42 +0000
Manifest this update: Mon 11 May 2026 17:01:42 +0000
Manifest next update: Tue 12 May 2026 17:40:42 +0000
Files and hashes: 1: 3137352e3138342e3234302e302f32312d3234203d3e20313331313433.roa (hash: 0QQUBFrsQpXXTYt4aIh8/MbRTgI4V9RhZAxoH9bVt18=)
2: 8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl (hash: kSIQQuGZOux/FLxmCnxcHms4Ed79pj2/8fCFSpWjWHo=)
3: 323430353a333330303a3a2f33322d3936203d3e20313331313433.roa (hash: ZKiaer8NjI3ngd1EbZw69ZFOR2ZlmwyGwjPK8gzDQck=)
4: 3130332e3132362e3136342e302f32322d3234203d3e20313331313433.roa (hash: GE6WCLDpaYk350arhm6T0hTObeMU3HA8Pi8MilsnVwk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:68:6d:b0:e5:fc:97:b0:4b:e6:a2:61:44:a2:10:e6:17:c0:eb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D
Validity
Not Before: May 11 17:01:42 2026 GMT
Not After : May 12 17:40:42 2026 GMT
Subject: CN=00B6BF544F163596E8524BF7F42EA7B86F8FF434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:10:09:1a:50:32:bf:9e:b8:78:2c:da:50:b0:
ff:44:a7:be:34:7a:44:64:a6:4e:15:11:cc:1d:37:
b0:7c:69:84:67:45:e3:95:a2:8b:f0:b3:91:57:83:
f0:d6:61:7e:e2:5c:a1:1b:ff:5d:bf:9a:d6:34:1f:
a2:1b:71:3a:f3:40:94:4b:07:d3:28:f0:1c:36:35:
0e:b3:19:29:3c:d3:d0:51:70:71:ed:3c:92:7b:dd:
4f:e6:ea:3d:d0:b6:42:c7:1c:db:c8:ea:6a:35:ad:
2a:56:72:e9:48:a3:23:a4:f6:e0:00:c0:33:16:8a:
ba:ef:5a:6c:f7:56:ca:81:ea:d9:e1:b8:7e:a3:f2:
b7:3e:91:7e:9a:9d:86:13:44:9f:49:69:df:ab:af:
e4:01:4c:74:04:38:16:0a:1c:9d:1e:22:6d:79:a4:
ad:47:0e:2e:1d:d0:69:c0:e8:d3:b3:c9:67:0e:1a:
2b:b4:21:9f:2e:bb:82:50:9d:ea:e9:51:39:c7:92:
c3:78:80:af:2e:fb:a5:72:54:67:8c:6c:f2:b0:8e:
8e:46:1f:97:43:59:f6:ad:01:45:20:27:c4:7c:0b:
56:c1:85:f6:93:f7:85:69:1e:8e:11:06:a9:fc:3c:
da:8c:23:c9:df:bb:69:64:5a:f7:03:88:7d:1e:0c:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B6:BF:54:4F:16:35:96:E8:52:4B:F7:F4:2E:A7:B8:6F:8F:F4:34
X509v3 Authority Key Identifier:
keyid:80:99:DF:C0:CF:C8:3C:5D:DF:D9:0C:A5:EA:31:4C:C9:A8:67:7F:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATRUST/0/8099DFC0CFC83C5DDFD90CA5EA314CC9A8677F2D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:67:63:37:88:f3:76:43:e2:56:c8:ed:97:e9:c0:7c:93:85:
a1:b7:4b:42:22:2b:ec:2f:f3:1e:ae:3c:c9:1b:27:76:18:1c:
3c:88:13:77:46:db:79:93:d7:9c:30:8b:fa:49:36:4c:8f:c5:
0b:78:ed:6a:a1:a3:95:8f:9c:4a:34:db:48:17:00:95:82:84:
df:27:32:38:7b:49:a9:f7:24:88:53:dc:72:a7:5e:6d:30:14:
34:c1:2d:dc:76:3b:7f:cc:04:4b:eb:4f:1f:9c:aa:5e:cb:2d:
87:fb:dd:e4:34:c1:51:33:6e:15:f8:e1:7d:91:a6:b5:92:5f:
99:2e:be:7a:63:e3:b0:2f:d4:dc:ec:c5:e7:2f:2e:dc:bb:99:
d3:1c:2e:c5:6b:c5:cc:34:ed:4e:50:ff:c9:d7:67:fa:30:cf:
dc:2d:66:cf:f1:54:43:42:74:04:9a:f0:c1:c0:c5:a0:4c:fd:
87:8f:92:f5:63:d4:f2:55:82:c4:1f:f6:70:94:4c:40:fc:da:
2a:ab:6c:e7:0e:1d:75:2b:5c:18:4a:11:7b:5e:ac:40:5d:42:
8b:37:81:94:45:9a:29:c4:b5:5c:d8:e7:b2:ba:9a:60:42:b3:
3d:c7:cb:b7:00:64:8d:e6:30:a5:b0:39:c1:54:04:ca:5f:d1:
f9:52:0b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:49 2026 by rpki-client