Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
File:                     9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft (raw, json)
Hash identifier:          O3EEvUPYcMTY9Q+1fW69/nGF1JZnq2ZOrqoVJPP3ZQc=
Subject key identifier:   96:65:A3:99:AE:25:85:9B:77:F7:1C:37:23:1C:8D:2D:7E:3C:17:87
Authority key identifier: 9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60
Certificate issuer:       /CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
Certificate serial:       6CF15ABF30A2DF928F91356B8296660DB5449D8C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft
Manifest number:          07
Signing time:             Mon 11 May 2026 17:55:37 +0000
Manifest this update:     Mon 11 May 2026 17:50:37 +0000
Manifest next update:     Tue 12 May 2026 18:18:37 +0000
Files and hashes:         1: 3231302e312e3233342e302f32342d3332203d3e20313334383233.roa (hash: dFGbPuZUVl9n4NEFbEpxmNgTeCxq+xPVEQs+VbBbgw8=)
                          2: 3231302e312e3233342e302f32332d3332203d3e20313334383233.roa (hash: HWI5VQZaFjKYV+LScUBkUhCoJacVyotR7e1ayxfccA8=)
                          3: 3231302e312e3233352e302f32342d3332203d3e20313331363537.roa (hash: RLXRr3oaU8tfZv8c58D+ZW+I4V/4m7eEXGAKJ8n/Gpk=)
                          4: 3231302e312e3233352e302f32342d3332203d3e20313334383233.roa (hash: 1dxx2UnOoxxG5IvdlSa/CJUvxkuNs3hW+sxUCu3CP4M=)
                          5: 3231302e312e3233342e302f32342d3332203d3e20313331363537.roa (hash: pYVK17zAbMWT4djhepdkPZ+a4SmhzlWvmNCdXixNe1Y=)
                          6: 3231302e312e3233342e302f32332d3332203d3e20313331363537.roa (hash: XhpQ+C1tVRKngGZ94cXlaeW9/WXKoL5qCwvg98P9HFY=)
                          7: 9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl (hash: +YxwP7gH7EI/agXdrElAHHHtKjJdAwJxJtGdvOdOqjY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f1:5a:bf:30:a2:df:92:8f:91:35:6b:82:96:66:0d:b5:44:9d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D0F6D536F053C3BB5233E68E0636F8A6FADA460
        Validity
            Not Before: May 11 17:50:37 2026 GMT
            Not After : May 12 18:18:37 2026 GMT
        Subject: CN=9665A399AE25859B77F71C37231C8D2D7E3C1787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:00:ba:1f:5b:00:9f:3f:ff:17:1a:99:88:
                    78:06:08:68:8a:4e:5f:8c:af:69:61:f9:91:b5:42:
                    da:9c:2b:94:9d:5a:0d:36:92:d7:28:d8:af:14:72:
                    df:45:1d:d8:de:8a:cb:b2:98:97:bf:4b:45:9c:99:
                    ec:dd:ad:8e:bd:f0:0f:ed:78:56:17:56:cb:d8:6a:
                    04:29:c7:e6:36:43:8c:88:36:27:91:c7:3b:69:7f:
                    bc:2b:f6:e7:94:0b:97:f1:8e:60:7a:b2:33:95:b4:
                    0c:98:19:b3:59:d0:ce:a4:66:cd:8a:e5:d4:a7:08:
                    26:58:0f:d0:0d:81:be:53:90:7b:6c:b3:9d:06:aa:
                    b6:a8:ed:e5:d5:85:f3:68:be:93:42:d4:b2:7f:8b:
                    17:43:6c:88:c1:ad:c1:75:13:40:fd:4d:e0:ce:1b:
                    9e:af:c5:49:9b:e3:39:f0:6c:ff:7e:e5:79:ff:7b:
                    7c:87:c5:33:c5:5b:3e:4a:ed:d8:03:ab:70:78:d6:
                    a6:90:d4:87:3e:4c:6e:2d:29:2c:af:c0:4e:77:e7:
                    cf:0d:51:15:64:54:85:43:66:19:5a:68:0b:c0:27:
                    71:59:f3:3c:e0:81:3b:97:56:3f:7a:f2:ce:48:ef:
                    da:04:f9:f5:23:c0:37:c3:f0:99:fd:c4:8a:6d:3b:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:65:A3:99:AE:25:85:9B:77:F7:1C:37:23:1C:8D:2D:7E:3C:17:87
            X509v3 Authority Key Identifier:
                keyid:9D:0F:6D:53:6F:05:3C:3B:B5:23:3E:68:E0:63:6F:8A:6F:AD:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DAFU/0/9D0F6D536F053C3BB5233E68E0636F8A6FADA460.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:63:29:7a:ad:29:29:4a:c2:a0:e7:64:49:b6:13:e3:bd:71:
         59:9d:d0:41:a9:fb:a7:90:d2:4e:be:54:50:2e:c2:c5:76:b2:
         23:0e:40:7e:bb:e9:28:fa:50:be:86:2b:b5:69:ca:17:dc:46:
         67:40:91:a9:d9:c0:56:f0:10:fe:ba:cf:db:32:1c:bc:a3:a2:
         37:a8:ce:46:bd:a6:44:68:53:4c:1f:68:55:e9:b9:fc:60:7d:
         44:e1:9b:4c:c1:ce:90:65:e9:15:95:71:d8:10:38:bb:ff:4b:
         ca:63:af:78:6c:b7:5f:ca:70:af:7b:c7:c5:14:a3:c2:59:98:
         3f:84:e4:36:a7:3e:ee:9e:d7:2d:16:3b:88:74:0f:41:13:3f:
         b0:c5:7f:9e:71:2f:f9:92:3f:15:0e:ba:64:a1:9f:15:3d:21:
         06:ca:1e:4f:4a:9e:d3:36:ac:41:6f:5d:be:5b:c1:b2:f2:9b:
         01:c3:42:15:22:1a:3f:a6:8a:2d:2d:1b:6b:a7:71:67:34:e8:
         c6:7c:be:bf:dc:e6:ec:77:ff:fc:1a:d9:2f:50:78:b4:c5:84:
         a0:d8:0f:92:45:56:e4:ca:78:8f:fa:44:21:57:bd:bf:39:f9:
         2b:20:09:11:b1:fa:c1:bb:2a:e8:b7:76:76:a5:72:65:89:7f:
         04:c6:d1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:25 2026 by rpki-client