Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
File:                     B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft (raw, json)
Hash identifier:          MdxA+j35Yjf/Cxa4cgn54H2esMZnPxCYk/pK/jLnIq4=
Subject key identifier:   FF:BA:6C:2A:73:3D:A1:9F:6C:08:09:C6:90:7F:B5:A7:0B:CD:7B:D1
Authority key identifier: B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D
Certificate issuer:       /CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
Certificate serial:       08B7D4FBC1A433C5CBC232BCE60F2265F3E1AE67
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft
Manifest number:          0F
Signing time:             Mon 11 May 2026 17:40:42 +0000
Manifest this update:     Mon 11 May 2026 17:35:42 +0000
Manifest next update:     Tue 12 May 2026 17:55:42 +0000
Files and hashes:         1: 323430313a313738303a313331363a3a2f34382d3536203d3e20313331363131.roa (hash: EyVEKIuSDsU3abS750Haxq/6YfUpoWKjN/hJ7IOd7vA=)
                          2: 36312e36352e3233362e302f32322d3234203d3e203138303436.roa (hash: rVt6jn0s+ctjCC9zbc3cMEHz3yfZQjGH0puX8gX3+zQ=)
                          3: B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl (hash: RDJK35B2KyJWUz86YKrlX2DVXpkfLv7vo25ushc0DbM=)
                          4: 36312e36352e3232342e302f31392d3234203d3e203138303436.roa (hash: JGQ3yop/vcm2FdY2UjF6jt7SjOXxYwxRnvwb/oHXEkE=)
                          5: 36312e36352e3233322e302f32322d3234203d3e203138303436.roa (hash: 4oDLlStFpYWmcHhVH0rDWkfLPTd3MKc2HN4akzyILSg=)
                          6: 3130332e3233342e37362e302f32322d3234203d3e203338383531.roa (hash: 5s6AN+2Y6dfxR89CSPIb2iNJHpRbEix7TIPfn85Lhig=)
                          7: 36312e36352e3232342e302f32312d3234203d3e203138303436.roa (hash: w2jQpkleagjWlo8dAGXSxXIFgAbKDZGiikpvzVunK6o=)
                          8: 323430313a313738303a3a2f33322d3438203d3e203138303436.roa (hash: 0EFkqKD7ENQj+JBIgZG7N70LecdiL6GqV21vyg7+bY4=)
                          9: 3135302e3130372e35362e302f32322d3234203d3e203138303436.roa (hash: j4TKKZtnXETI7fmK4gTE3z6+J+BOZ8wy9XuoYkODtNE=)
                          10: 36312e36352e3234302e302f32302d3234203d3e203338383531.roa (hash: 5xy/K2z2rPvYuOxb1Rs438nXfizUFVoGlYRajsSBm10=)
                          11: 3131362e35302e33322e302f32302d3234203d3e203138303436.roa (hash: LZibNAZn+nBssflpOgfwTQ3pTcbmpuQyETsySkNRzUY=)
                          12: 3130332e3233342e37362e302f32322d3234203d3e203138303436.roa (hash: YrCtHUqv6m3Qzl36rYUrmmVsWpnVUXUHwX65HZhrRmI=)
                          13: 3131362e35302e34312e302f32342d3234203d3e203138303436.roa (hash: FWuMIJD8kL6duLcYGMHNJEXNuVAUCl3kGteH4/paG04=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b7:d4:fb:c1:a4:33:c5:cb:c2:32:bc:e6:0f:22:65:f3:e1:ae:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B407C8B8FAB2AF785E449F6959A343C11F3C2F7D
        Validity
            Not Before: May 11 17:35:42 2026 GMT
            Not After : May 12 17:55:42 2026 GMT
        Subject: CN=FFBA6C2A733DA19F6C0809C6907FB5A70BCD7BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:66:75:e5:bf:2d:03:df:2d:fe:7b:a8:63:
                    c5:4d:e0:42:49:35:b2:e9:69:29:a2:85:1f:d6:18:
                    17:05:86:14:fe:22:94:be:9e:bc:35:a8:04:c8:1a:
                    35:59:bf:9e:a2:62:99:fa:ca:ab:4d:f8:1c:a1:c7:
                    2e:cb:70:45:ac:cf:8f:37:53:75:b2:19:ce:76:11:
                    24:7e:37:a1:01:91:71:29:56:47:ee:e0:3b:61:10:
                    0b:2d:47:91:a3:4d:27:77:d6:7d:15:6b:e8:c1:45:
                    79:6b:d1:94:3f:10:80:14:c6:7e:e4:dd:3c:37:66:
                    cd:5f:c2:0f:e5:45:e0:67:4f:00:ca:e3:a5:7b:df:
                    36:21:45:a0:98:3d:c8:cd:23:42:27:dd:05:d4:ff:
                    a2:71:88:56:16:3b:75:7c:ff:a0:7a:e0:42:fa:93:
                    25:8a:cb:a1:8e:0a:a0:2c:be:bc:5a:a0:d1:aa:87:
                    80:6f:75:03:36:48:ef:b8:a5:67:e2:26:27:85:fe:
                    37:e0:14:2a:a9:2f:dd:4f:50:9f:bb:eb:9f:d6:fc:
                    70:ae:40:66:62:2b:3e:1c:a6:ea:94:00:ea:bc:43:
                    60:c1:b8:2a:e4:46:27:0d:3e:49:cf:54:ae:21:ff:
                    81:ec:75:d2:26:72:55:ec:24:0e:7d:cc:e1:30:21:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BA:6C:2A:73:3D:A1:9F:6C:08:09:C6:90:7F:B5:A7:0B:CD:7B:D1
            X509v3 Authority Key Identifier:
                keyid:B4:07:C8:B8:FA:B2:AF:78:5E:44:9F:69:59:A3:43:C1:1F:3C:2F:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/0/B407C8B8FAB2AF785E449F6959A343C11F3C2F7D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e3:0b:78:88:4a:54:d0:58:2f:78:11:28:f0:ad:63:60:d6:
         ca:cb:1f:a8:ab:39:c5:05:e0:a9:1d:65:92:f3:00:44:3f:67:
         63:9b:8d:79:69:10:a7:3b:a3:37:49:b6:3c:90:c8:f3:4a:49:
         95:04:9d:a0:1d:f5:1a:7c:9b:6b:1c:a7:ef:3b:68:44:5f:48:
         9f:af:ec:6b:e4:4c:06:84:95:83:d9:59:77:2e:05:5d:d9:63:
         e2:da:ff:df:c4:18:b5:be:0b:44:5d:89:c3:23:e7:b5:bc:6a:
         6e:66:1d:7b:20:07:e1:cb:62:1a:7b:b8:28:99:58:ea:76:c3:
         72:23:a6:78:43:bc:5f:05:f0:af:b3:4b:2a:49:06:23:4d:f3:
         d4:92:8a:db:c6:0c:ed:7c:d2:59:af:12:61:18:e3:72:89:e2:
         82:ba:75:91:68:71:b2:40:41:7b:5c:2e:6a:66:ef:0b:23:62:
         3d:91:00:50:78:2e:27:9f:eb:b7:26:a6:c9:04:02:2b:aa:fe:
         2b:9d:7f:57:8a:e3:e1:3d:99:a2:23:b4:94:d6:72:79:6d:35:
         46:54:76:ca:93:44:a2:eb:ba:e6:ea:c9:1f:a4:9f:47:17:6f:
         7e:4a:45:ad:04:e3:c7:90:ad:94:3c:b9:d9:06:24:36:a2:57:
         f5:00:08:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:38 2026 by rpki-client