Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft
File:                     4CB3ABB1B4A024A701223CD715911D996706E3AA.mft (raw, json)
Hash identifier:          mgZBOjn+Netvs7NPR9oPGcAvOmMgAXbywmY/wzbe/yA=
Subject key identifier:   EC:58:6B:72:78:9A:65:D7:E6:32:9A:3E:49:E6:7D:72:B8:5A:48:59
Authority key identifier: 4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA
Certificate issuer:       /CN=4CB3ABB1B4A024A701223CD715911D996706E3AA
Certificate serial:       4087B0A9A1B629EDCB07C74001B2CCD2ABF297D4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft
Manifest number:          05
Signing time:             Mon 11 May 2026 17:37:12 +0000
Manifest this update:     Mon 11 May 2026 17:32:12 +0000
Manifest next update:     Tue 12 May 2026 18:26:12 +0000
Files and hashes:         1: 323430303a623061303a3a2f33322d3332203d3e203633393038.roa (hash: zreCdGN4BpY2/KXE7Xi0nbMj8CRAQTw3exmLLk8qka8=)
                          2: 3130332e31342e3137302e302f32332d3234203d3e20313334383233.roa (hash: GNYnz7E4zPrfGEpitBkpgKcXAY1dNLMFN8QmTypJQrA=)
                          3: 4CB3ABB1B4A024A701223CD715911D996706E3AA.crl (hash: WDE1iL3AEarGusABO0TfXL84u8vLwwpz1HCuddZqdgM=)
                          4: 3130332e31342e3137302e302f32332d3234203d3e20313532313739.roa (hash: 0yV6274hzedLbyBXIX24PIgFkE/qG4nC2HGR5DvDDRk=)
                          5: 3130332e31342e3137302e302f32332d3234203d3e203338303432.roa (hash: 5mtwz/x5xstPzEWwV0mjjdNtyAKuFHozbJj1pgp59P4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:87:b0:a9:a1:b6:29:ed:cb:07:c7:40:01:b2:cc:d2:ab:f2:97:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CB3ABB1B4A024A701223CD715911D996706E3AA
        Validity
            Not Before: May 11 17:32:12 2026 GMT
            Not After : May 12 18:26:12 2026 GMT
        Subject: CN=EC586B72789A65D7E6329A3E49E67D72B85A4859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:38:45:a7:fb:cd:87:3d:0b:12:a2:83:2d:76:
                    86:b1:d3:c4:b6:6a:bd:8f:72:a4:4f:35:85:4f:4a:
                    50:48:94:1b:9e:3d:85:58:d2:99:d4:d7:c7:e0:a7:
                    76:da:33:91:95:4f:f6:f1:92:ef:01:37:25:cc:33:
                    08:d1:dd:90:d4:b6:8f:03:d6:12:d2:0b:a3:dd:77:
                    11:94:6d:8a:74:3b:cb:c0:07:4d:f4:b3:d6:29:08:
                    a1:46:ac:f0:ce:c1:56:a8:70:6a:70:ca:82:fd:f8:
                    ef:3b:d0:df:89:14:bf:22:31:2b:a4:31:57:cd:83:
                    b3:cf:1c:4e:1e:5c:02:d1:3d:23:da:d3:01:f3:5f:
                    b9:28:83:0e:a6:42:4e:d2:05:b2:c0:33:a9:91:07:
                    93:d8:c4:88:6c:6a:05:84:e7:e2:79:f8:ef:f6:69:
                    be:77:5b:5d:96:ad:fc:f8:0f:73:f9:e9:6e:33:9e:
                    8e:76:9a:7b:37:42:24:89:c4:b7:7a:59:ee:4b:12:
                    cb:67:57:a0:44:69:0b:09:a3:ca:1f:a0:90:f8:8b:
                    f0:46:ed:42:39:fc:d5:65:24:b7:46:99:f1:0c:e1:
                    33:ec:bd:5f:01:2a:a1:62:5b:0d:fc:97:9d:a3:ff:
                    58:8e:26:4a:6b:92:83:ae:f8:27:69:f6:33:6b:63:
                    10:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:58:6B:72:78:9A:65:D7:E6:32:9A:3E:49:E6:7D:72:B8:5A:48:59
            X509v3 Authority Key Identifier:
                keyid:4C:B3:AB:B1:B4:A0:24:A7:01:22:3C:D7:15:91:1D:99:67:06:E3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4CB3ABB1B4A024A701223CD715911D996706E3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CPSYS/0/4CB3ABB1B4A024A701223CD715911D996706E3AA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ab:d9:41:fd:34:80:82:19:38:3b:09:d1:f5:c6:58:73:d3:
         0d:f8:bb:dd:6f:35:44:d8:c3:6b:46:87:91:04:8d:58:39:ac:
         18:ef:cc:b3:2d:86:fa:fc:9d:18:93:07:28:6d:7e:6d:e9:a3:
         a2:77:33:79:00:6e:37:e5:07:21:0d:77:e1:a4:2c:6f:6b:b8:
         c5:c6:0e:4d:7c:3e:85:cc:99:f5:39:20:ac:16:4c:84:03:bc:
         2a:1c:3c:06:42:f7:d6:83:49:30:f0:5d:2f:a3:7c:2a:bc:a5:
         22:f1:d1:eb:14:d8:b7:28:84:e9:84:61:ca:7a:d1:ca:45:72:
         8a:cd:fb:59:38:04:91:a3:3e:dc:c2:b8:36:fe:95:4e:a1:f3:
         f9:d1:22:1c:bb:a8:cb:95:62:af:e3:ea:08:1a:4c:a5:7e:61:
         26:24:74:7e:8d:2f:15:85:09:7a:1a:eb:d8:2c:55:57:fb:26:
         db:0a:59:ba:1e:02:33:61:a5:f6:28:52:9b:f8:3c:76:e6:d0:
         03:78:5b:29:51:8d:9e:f2:1c:70:5a:3b:50:81:7b:c0:42:a0:
         0b:0b:5c:32:b3:f2:dd:08:72:34:4c:8e:f8:7d:10:a4:58:8d:
         34:d0:0d:5c:16:81:e9:51:5c:93:61:83:c3:ad:c0:89:d2:45:
         36:17:1b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----