Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft
File: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft (raw, json)
Hash identifier: SQ8CzkzF/TWK+RXZNascwbi5/PmCLEykt3U6tIvfK0M=
Subject key identifier: A4:DB:AF:CD:DF:28:D5:A5:2A:CC:B3:6D:D5:7D:E9:61:6B:99:25:2D
Authority key identifier: 28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07
Certificate issuer: /CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407
Certificate serial: 6CE4B5DA8BCC375A5FFE3A793E7635E7C1EFDD0D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft
Manifest number: 03
Signing time: Mon 11 May 2026 17:39:00 +0000
Manifest this update: Mon 11 May 2026 17:34:00 +0000
Manifest next update: Tue 12 May 2026 20:47:00 +0000
Files and hashes: 1: 3136302e3138372e3139382e302f32332d3234203d3e20313532363135.roa (hash: I6RgBeSwuI+mSenPcIlVAxSTnNAaaE4/xzzLMyb2FH0=)
2: 28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl (hash: nzK/EGCfM8wVVgq+1BZtGgQEG2jn1E9WIXDcSIR/JXY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e4:b5:da:8b:cc:37:5a:5f:fe:3a:79:3e:76:35:e7:c1:ef:dd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28E1FD03C8B040A9874A90D4654322ACDFCA3407
Validity
Not Before: May 11 17:34:00 2026 GMT
Not After : May 12 20:47:00 2026 GMT
Subject: CN=A4DBAFCDDF28D5A52ACCB36DD57DE9616B99252D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:41:20:14:91:55:8e:fd:79:03:8b:a8:8e:
53:8f:83:36:b7:37:6f:30:d3:5e:4f:57:35:38:b5:
f3:9e:74:7d:05:54:d5:f4:a5:9d:ac:3e:94:64:35:
84:1a:79:ec:cf:ae:30:06:19:52:93:63:c2:8d:c7:
f2:2c:7a:58:c7:17:f6:ab:c6:51:e5:7a:d2:35:98:
10:6e:59:8c:09:c7:83:b3:e6:52:e7:84:fe:d9:f3:
93:83:e1:a9:cd:5c:c6:a4:ed:18:0b:5e:02:2a:bb:
c9:54:18:74:36:21:72:b9:47:56:96:e5:fc:0e:8e:
51:57:5c:63:71:2a:20:0f:5f:fd:11:94:d7:a4:eb:
ce:e6:fc:64:3e:15:ae:4c:f1:66:6d:74:46:7e:c0:
d9:3a:0d:7d:51:c4:96:f4:79:fa:f2:eb:09:68:08:
fe:3b:f4:3b:49:22:1c:44:e6:6c:c5:72:2d:2d:8e:
a9:b0:41:18:53:63:37:55:af:73:89:76:95:b2:09:
c4:cd:8c:49:c5:f4:a7:d5:5f:3e:74:d8:33:84:67:
77:7c:59:d8:f4:60:d2:52:53:a8:14:a4:fe:f3:28:
45:18:1d:c4:5f:51:33:56:a9:e7:7f:3a:a2:dc:e8:
34:5a:9f:f1:e7:26:b4:58:7c:62:50:3b:a6:6d:84:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DB:AF:CD:DF:28:D5:A5:2A:CC:B3:6D:D5:7D:E9:61:6B:99:25:2D
X509v3 Authority Key Identifier:
keyid:28:E1:FD:03:C8:B0:40:A9:87:4A:90:D4:65:43:22:AC:DF:CA:34:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/28E1FD03C8B040A9874A90D4654322ACDFCA3407.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHUMMYTECH/1/28E1FD03C8B040A9874A90D4654322ACDFCA3407.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6b:fe:79:a6:fd:5f:47:b5:74:49:42:69:27:41:e7:c5:44:
b3:24:42:38:e4:4a:07:da:a9:41:50:0a:51:5b:8a:e1:75:f1:
e8:0e:5c:0b:94:20:77:8b:4c:62:f6:1b:69:fb:c6:14:2c:e6:
e9:c6:c4:3a:55:98:cf:b7:29:69:53:cd:a2:61:56:a9:9b:d9:
55:75:3d:eb:56:c4:bc:02:60:52:c7:bf:7e:80:95:ce:55:b1:
b4:7e:f7:f4:a1:5f:b4:79:df:d6:69:ee:c4:07:cd:8e:9d:83:
39:81:bc:88:fe:59:bc:cb:7e:f3:a6:92:bf:8f:2a:eb:cc:f2:
bf:3f:6d:4a:25:0d:94:e9:c2:b7:29:ab:c2:86:b5:48:b9:ea:
b5:9d:92:1e:a6:2c:3b:cc:9c:bf:2e:69:26:d7:de:ad:e0:8a:
6c:bd:13:c8:c3:32:ca:9f:19:95:14:02:15:81:95:b0:78:e6:
9c:be:1e:fa:e6:03:5f:71:a9:a5:c0:66:eb:92:95:38:17:d9:
4f:46:67:34:68:5d:2a:d7:f6:8f:3d:0d:8f:3d:05:9e:3a:d8:
e6:e4:d8:2e:25:20:20:d3:3d:c7:a5:0e:b1:e2:60:5f:ee:fa:
96:11:cb:7b:58:b3:ee:b0:22:ca:4a:77:f9:7f:64:ea:d6:67:
16:cb:03:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:21:09 2026 by rpki-client