Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
File:                     059E0652FCBAC895061A57FE0566CF353F3E43CA.mft (raw, json)
Hash identifier:          7cs/NUFAppcqGOe1m8p6drhG20+wjCX2tML809R3xFM=
Subject key identifier:   76:08:1D:20:77:28:F5:4E:B8:F6:DB:88:DD:08:69:5B:CC:03:6F:9D
Authority key identifier: 05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
Certificate issuer:       /CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Certificate serial:       0B5513A1BB0A62075C91B65679C62227F9FBBF3B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
Manifest number:          0C
Signing time:             Mon 11 May 2026 17:44:50 +0000
Manifest this update:     Mon 11 May 2026 17:39:50 +0000
Manifest next update:     Tue 12 May 2026 18:58:50 +0000
Files and hashes:         1: 3130332e3132332e3132382e302f32322d3234203d3e203230343733.roa (hash: 6k3KfUgMebFRM4pC7r1QhCv5uspLzr3pEAjgiqAAQyA=)
                          2: 3130332e3132332e3132382e302f32322d3234203d3e20313331363632.roa (hash: sNOioi06yxe+llEteV6NhBO021ATEGtMJoxqCD1yvEs=)
                          3: 3130332e3133352e31392e302f32342d3234203d3e20313338313435.roa (hash: hiUuE+JZDNJG0Ktu2U25SQe8A2H7nBcP9/QC/B02NR0=)
                          4: 3130332e3132332e3133302e302f32342d3234203d3e203136353039.roa (hash: oEX0nga4YWiRVwCH+XEdCpAnEZhmruGPpOo/+P0AeeY=)
                          5: 323430333a613263303a3a2f33322d3438203d3e203230343733.roa (hash: m4c1iJtK8aN6J3lEQoStd8FFVOYzM3grbyfplvzUybo=)
                          6: 323430333a613263303a3a2f33322d3438203d3e20313331363632.roa (hash: 7bh7DLlqJphbWWAVyIde+HRB1Ap1WWUebp+RFOyy+Ms=)
                          7: 3130332e3133352e31382e302f32342d3234203d3e20313331363632.roa (hash: ICVXFGJ9lMHRN69DsRxhyvyG84k8PzJafwcpKMd81Og=)
                          8: 3130332e3132332e3133302e302f32342d3234203d3e203134363138.roa (hash: Z+uz749mg+ZrLlWw12y0B3Ll+9VkgYTQP5LOcpJblvs=)
                          9: 059E0652FCBAC895061A57FE0566CF353F3E43CA.crl (hash: OVof9/cg0GGdkpvvZLvaSS5ZGqP78EIEFndRFBUKu6Q=)
                          10: 3130332e3133352e31372e302f32342d3234203d3e20313331363632.roa (hash: p3/JFj7x3ARP4jNwPc+pLHDD3Q/+iNNDoVFuKzGU7/M=)
                          11: 3130332e3132332e3133312e302f32342d3234203d3e20333936393832.roa (hash: QqBGfQ7BdcX4jk0myPQHJHO1V9xzygncrdNvKEsMmnA=)
                          12: 3130332e3133352e31362e302f32342d3234203d3e20313338313435.roa (hash: km9qPDZIa8WiGvNcHuKf7su6Q2TEjTKsJ/KYkaeqv2E=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:55:13:a1:bb:0a:62:07:5c:91:b6:56:79:c6:22:27:f9:fb:bf:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
        Validity
            Not Before: May 11 17:39:50 2026 GMT
            Not After : May 12 18:58:50 2026 GMT
        Subject: CN=76081D207728F54EB8F6DB88DD08695BCC036F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e8:d4:86:d0:26:89:84:59:57:ab:52:52:a8:
                    d8:d0:8d:ed:66:94:63:0f:51:dd:2e:3b:82:79:9e:
                    88:cc:ca:7d:94:af:8a:22:7d:d1:04:be:93:f5:86:
                    3a:fa:4e:86:ed:20:ba:6d:6b:fb:84:bf:13:f4:be:
                    ae:10:63:fa:63:26:b7:27:90:0b:48:1d:69:0a:10:
                    e7:f8:ec:f0:fc:c2:6f:73:1a:84:71:92:36:d7:fb:
                    14:0f:fc:20:12:73:e4:06:6f:91:05:fd:ad:37:22:
                    8c:fd:11:ba:c9:c7:3a:45:72:fb:e0:b3:94:b9:c3:
                    52:63:06:cf:6b:c1:98:99:b1:64:14:a2:dc:05:00:
                    68:fe:f7:14:f8:3c:b1:7c:99:ad:28:7a:3e:ce:2a:
                    06:f1:c3:50:10:ff:56:96:5b:7b:d6:17:ff:f4:8d:
                    58:42:90:d1:50:e5:95:de:e6:e7:1b:58:a8:4f:16:
                    6d:6c:12:4a:ea:08:c2:b1:0e:85:e1:fb:93:ba:ea:
                    f6:b0:61:5f:40:8a:30:c5:a0:bf:ca:65:bb:46:12:
                    dc:77:1a:82:3d:c7:ff:af:a6:9e:4c:dc:8c:0c:da:
                    8a:dd:fd:a0:ff:7c:d0:e1:0a:6d:a4:f3:cc:df:c9:
                    8c:c2:11:fb:8a:9d:29:0e:f7:29:ad:22:98:ac:bc:
                    95:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:08:1D:20:77:28:F5:4E:B8:F6:DB:88:DD:08:69:5B:CC:03:6F:9D
            X509v3 Authority Key Identifier:
                keyid:05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fc:c7:5e:b3:b8:15:57:8b:2d:80:26:f3:be:2c:f1:56:e7:
         6e:9b:47:69:29:c2:2c:6b:9c:22:ca:4f:a5:fd:36:ae:49:bf:
         68:8b:3b:16:7f:96:4e:0a:9b:fb:aa:9c:8d:c4:9f:7d:82:95:
         c2:d9:f8:f8:6a:d5:d2:4c:7f:c3:0d:93:71:66:72:68:f5:ac:
         02:e7:fa:d1:f6:08:57:5d:7b:b7:16:8f:df:87:d6:02:c8:80:
         65:12:47:bc:99:12:d4:c2:3f:91:89:0f:37:8a:da:22:48:0a:
         44:1c:1c:7d:d3:ea:7c:56:44:0e:88:58:51:a5:98:7c:7d:60:
         d5:7f:e1:2a:91:0c:c3:35:52:15:9f:68:ee:75:dd:66:4f:f6:
         7e:1c:34:37:18:9e:01:df:46:b2:02:86:7e:34:9a:21:a8:0f:
         17:a3:61:a2:41:23:26:05:03:8c:9c:61:e6:cf:95:f7:ac:5e:
         18:f5:03:0f:d6:69:49:98:22:b3:fa:a3:86:b1:30:b3:7d:5e:
         23:4e:59:65:1e:19:51:ce:88:0c:da:ec:1e:70:6a:38:e8:77:
         dd:6b:34:05:bc:a1:7a:a8:77:ad:08:2b:aa:96:4f:c0:32:a1:
         3e:5d:0b:87:37:b1:37:65:a8:0d:95:b3:f4:fb:d8:ca:b8:8d:
         1e:d2:75:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:12 2026 by rpki-client