Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
File:                     8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft (raw, json)
Hash identifier:          IV7h5UDQlQxqjB5N/6B7KxzOvoNXn5nxP8jRdOmw3U0=
Subject key identifier:   A2:77:9F:65:7B:EF:4E:35:65:A6:6A:E3:83:96:F9:3B:DA:40:3C:1B
Authority key identifier: 82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C
Certificate issuer:       /CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
Certificate serial:       3B8C9F56028B9AFF5C511041609CD24532EC94B3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft
Manifest number:          01
Signing time:             Mon 11 May 2026 15:50:06 +0000
Manifest this update:     Mon 11 May 2026 15:45:06 +0000
Manifest next update:     Tue 12 May 2026 18:27:06 +0000
Files and hashes:         1: 8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl (hash: P3zDFukDrXj1TRy/s9hB2BQYNZxXzl5KLs8xraEAIJU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8c:9f:56:02:8b:9a:ff:5c:51:10:41:60:9c:d2:45:32:ec:94:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8257DED1A3AE20532C5A9F8135AF34B9476B685C
        Validity
            Not Before: May 11 15:45:06 2026 GMT
            Not After : May 12 18:27:06 2026 GMT
        Subject: CN=A2779F657BEF4E3565A66AE38396F93BDA403C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:db:95:97:14:8d:d0:cd:d7:3f:6e:e2:16:
                    4d:32:1f:60:c8:04:f1:0b:ca:9e:00:be:b1:e6:cd:
                    67:58:79:f8:4d:08:7d:a5:e3:ec:e6:03:5b:c4:04:
                    04:ae:cf:b1:9e:05:7e:d2:ef:75:3b:de:b1:b8:a5:
                    84:7f:8c:f8:5b:26:a6:3f:8b:82:41:d9:d2:94:da:
                    8d:84:77:17:9b:16:25:1e:90:aa:1c:f7:66:04:88:
                    3b:1d:2d:94:33:a4:99:a1:14:3d:6a:cb:3a:6d:0c:
                    48:0e:4e:c6:0f:66:51:a2:15:92:88:45:93:65:33:
                    5c:b2:ec:7a:ce:63:e0:e9:85:8d:ae:1d:59:89:ee:
                    f5:24:aa:e4:57:2e:54:d3:d5:89:29:ce:f8:ab:f8:
                    a1:0f:72:fc:51:14:c9:e4:43:9d:45:40:4f:d6:37:
                    da:b1:68:90:e9:c0:45:59:e6:11:d8:9f:18:cc:52:
                    d2:ef:b4:d7:5d:a9:03:ef:52:ed:f5:af:af:6c:80:
                    bc:f2:37:fa:0f:ea:7b:c0:9c:8c:02:1e:fc:e5:df:
                    87:74:b8:9d:38:11:88:0f:b9:57:6b:ae:b1:1e:17:
                    0e:8c:f5:c0:3e:67:b4:dd:f9:a3:28:8d:fc:29:c4:
                    14:ea:7b:bd:31:b5:39:07:55:5a:c1:57:97:fe:d2:
                    36:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:77:9F:65:7B:EF:4E:35:65:A6:6A:E3:83:96:F9:3B:DA:40:3C:1B
            X509v3 Authority Key Identifier:
                keyid:82:57:DE:D1:A3:AE:20:53:2C:5A:9F:81:35:AF:34:B9:47:6B:68:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8257DED1A3AE20532C5A9F8135AF34B9476B685C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DLER/0/8257DED1A3AE20532C5A9F8135AF34B9476B685C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:11:69:54:44:c4:eb:53:33:25:b7:43:13:4f:bd:da:ee:d2:
         38:7a:3b:af:60:c0:9d:c5:ea:92:27:12:4f:c9:9c:d3:c6:d2:
         7d:3a:99:71:c8:84:0f:aa:a5:12:b9:bd:ea:9f:4c:4e:52:f6:
         3a:76:5b:63:ff:ca:de:4e:22:24:cc:af:80:6e:0a:d2:dc:ba:
         2e:8a:4e:87:be:e4:08:26:79:51:0f:dc:8f:0b:66:98:1d:dc:
         d3:71:93:67:a8:97:f0:db:9b:cc:a4:85:cd:eb:9b:83:37:4e:
         ee:19:9e:5b:07:16:93:9c:96:23:1a:d6:35:d4:f8:57:af:76:
         63:dc:0c:4b:5d:b4:cf:4f:fa:be:4b:70:2a:ba:50:bc:e3:62:
         cd:66:18:e1:cf:1a:9b:b3:f2:4d:0e:b3:91:1b:68:d2:3f:5d:
         9a:fe:89:6d:7c:d9:f6:19:1b:90:08:46:1f:d3:24:8b:7d:9c:
         aa:35:e0:2c:44:27:2b:19:13:17:d0:85:66:61:77:34:41:46:
         a3:92:cb:61:93:0f:d6:48:55:15:bd:44:d4:35:20:30:11:39:
         72:bc:41:61:3f:09:70:d2:3e:5f:29:32:4e:36:b1:f1:75:bb:
         1f:80:f7:7d:61:31:15:af:0d:25:a1:1a:56:e2:92:9e:79:6d:
         69:3b:89:df
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUO4yfVgKLmv9cURBBYJzSRTLslLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI1N0RFRDFBM0FFMjA1MzJDNUE5RjgxMzVBRjM0Qjk0
NzZCNjg1QzAeFw0yNjA1MTExNTQ1MDZaFw0yNjA1MTIxODI3MDZaMDMxMTAvBgNV
BAMTKEEyNzc5RjY1N0JFRjRFMzU2NUE2NkFFMzgzOTZGOTNCREE0MDNDMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKEduVlxSN0M3XP27iFk0yH2DI
BPELyp4AvrHmzWdYefhNCH2l4+zmA1vEBASuz7GeBX7S73U73rG4pYR/jPhbJqY/
i4JB2dKU2o2EdxebFiUekKoc92YEiDsdLZQzpJmhFD1qyzptDEgOTsYPZlGiFZKI
RZNlM1yy7HrOY+DphY2uHVmJ7vUkquRXLlTT1Ykpzvir+KEPcvxRFMnkQ51FQE/W
N9qxaJDpwEVZ5hHYnxjMUtLvtNddqQPvUu31r69sgLzyN/oP6nvAnIwCHvzl34d0
uJ04EYgPuVdrrrEeFw6M9cA+Z7Td+aMojfwpxBTqe70xtTkHVVrBV5f+0jbRAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUonefZXvvTjVlpmrjg5b5O9pAPBswHwYDVR0j
BBgwFoAUglfe0aOuIFMsWp+BNa80uUdraFwwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRExFUi8w
LzgyNTdERUQxQTNBRTIwNTMyQzVBOUY4MTM1QUYzNEI5NDc2QjY4NUMuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvODI1N0RFRDFBM0FFMjA1MzJDNUE5RjgxMzVBRjM0
Qjk0NzZCNjg1Qy5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0RMRVIvMC84MjU3REVEMUEzQUUyMDUz
MkM1QTlGODEzNUFGMzRCOTQ3NkI2ODVDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxFpVETE61MzJbdD
E0+92u7SOHo7r2DAncXqkicST8mc08bSfTqZcciED6qlErm96p9MTlL2OnZbY//K
3k4iJMyvgG4K0ty6LopOh77kCCZ5UQ/cjwtmmB3c03GTZ6iX8NubzKSFzeubgzdO
7hmeWwcWk5yWIxrWNdT4V692Y9wMS120z0/6vktwKrpQvONizWYY4c8am7PyTQ6z
kRto0j9dmv6JbXzZ9hkbkAhGH9Mki32cqjXgLEQnKxkTF9CFZmF3NEFGo5LLYZMP
1khVFb1E1DUgMBE5crxBYT8JcNI+XykyTjax8XW7H4D3fWExFa8NJaEaVuKSnnlt
aTuJ3w==
-----END CERTIFICATE-----
Generated at Wed May 13 00:13:37 2026 by rpki-client