Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
File:                     65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft (raw, json)
Hash identifier:          p5+yz4IXLNddwyQLkSIFcu7GK3KQcnvgHwyojoEJY4E=
Subject key identifier:   1F:4B:3C:55:97:EE:EB:28:7C:C4:79:F1:5B:A2:F4:38:DA:B4:64:86
Authority key identifier: 65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94
Certificate issuer:       /CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
Certificate serial:       7C0FA1E4D19C2F74B53EF1FB42E5C526476885A3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft
Manifest number:          0F
Signing time:             Mon 11 May 2026 17:40:42 +0000
Manifest this update:     Mon 11 May 2026 17:35:42 +0000
Manifest next update:     Tue 12 May 2026 20:49:42 +0000
Files and hashes:         1: 65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl (hash: ojlz86WIwDHR+mqf96fmiHKcJEUWW1ShJKWhWS3NJuo=)
                          2: 3135392e3131372e36342e302f31392d3234203d3e203138303436.roa (hash: BnOw5LV6cVAcgowH1P0wBRFgURzOj7EomMXHxAWHT28=)
                          3: 3135392e3131372e38342e302f32342d3234203d3e203138303436.roa (hash: k6/jJKCg7k9igf9mXdOBVLZ2L1gd68NXx+o3im+bxhY=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0f:a1:e4:d1:9c:2f:74:b5:3e:f1:fb:42:e5:c5:26:47:68:85:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94
        Validity
            Not Before: May 11 17:35:42 2026 GMT
            Not After : May 12 20:49:42 2026 GMT
        Subject: CN=1F4B3C5597EEEB287CC479F15BA2F438DAB46486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:00:ff:4c:a2:b7:0f:53:95:27:3c:f4:8a:8b:
                    1b:9d:45:7f:29:1d:39:54:cc:23:ae:35:cb:d0:c6:
                    15:be:29:10:15:2c:2b:8e:11:7d:7b:25:ca:02:0e:
                    8e:d6:c6:a7:91:d2:7d:38:26:79:03:9c:15:68:2a:
                    de:8b:83:5e:48:fa:34:ae:3e:99:9f:af:91:3b:c0:
                    09:b5:2c:63:2f:33:d2:b4:5e:10:10:97:a2:77:d4:
                    bb:85:f0:fd:01:59:aa:9c:38:91:f6:6b:c1:e4:3e:
                    80:75:f7:74:18:92:32:18:17:1c:ca:11:ef:24:f5:
                    d6:72:fb:0d:bf:27:56:8d:22:16:77:9e:ea:a1:91:
                    66:ec:a0:11:2f:00:a3:b1:1b:17:3d:a5:83:c1:c2:
                    23:e8:48:18:8b:94:6b:0f:94:bc:9f:e4:58:68:87:
                    e5:42:bb:bc:a1:ea:fa:4c:f7:08:64:f3:21:7e:53:
                    65:d2:74:3f:e4:46:c0:9b:81:1b:ee:2f:86:62:af:
                    55:9d:48:1b:0c:66:69:80:fb:3c:2b:45:c0:c4:03:
                    ae:a9:99:b3:da:31:96:af:9e:78:83:d2:e5:bd:0d:
                    9f:f4:a6:e6:3a:77:d4:8a:6f:72:78:bc:96:1e:56:
                    d9:96:44:7f:d3:bc:1f:73:8f:5c:bb:3d:a1:1d:d5:
                    90:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4B:3C:55:97:EE:EB:28:7C:C4:79:F1:5B:A2:F4:38:DA:B4:64:86
            X509v3 Authority Key Identifier:
                keyid:65:E9:4C:77:89:AD:A7:E5:F5:40:FD:BE:95:82:D8:EA:7A:A4:6A:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DONGFONG/1/65E94C7789ADA7E5F540FDBE9582D8EA7AA46A94.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:36:5b:3d:7e:7c:b3:2b:ec:cc:bb:31:6a:44:8b:f2:cd:0c:
         41:ad:ae:6a:be:8e:48:cf:9f:c1:10:5e:33:6e:c9:9b:93:4e:
         7c:f9:17:48:fe:2d:a0:13:4d:4e:c5:55:73:08:76:eb:36:d4:
         55:38:eb:b1:fc:87:2f:b6:02:be:34:ac:fd:04:ef:b2:1a:ee:
         b0:f7:f9:7f:5b:97:9a:36:f5:11:f3:be:f7:eb:c2:75:ab:9e:
         94:95:d4:ab:2f:27:09:9e:0c:11:4b:17:07:38:19:7b:f4:78:
         62:05:72:ab:22:c7:87:69:28:37:8a:68:3d:dc:e6:e6:29:00:
         b0:a3:6c:cd:b9:b5:99:9e:2c:35:17:6d:df:a2:82:8d:fd:a8:
         dd:54:1c:4a:bf:28:de:d4:59:d6:be:15:e9:cd:bc:d0:3b:3a:
         8e:49:85:61:58:52:f3:f1:c3:4d:be:62:77:2e:ee:b4:fd:db:
         a6:98:35:64:16:7b:19:3e:a9:69:d9:74:fb:88:e5:3d:4a:8c:
         09:24:33:df:2d:a1:60:67:88:a4:33:d2:46:7f:f8:10:55:bb:
         2b:ed:1e:ec:cf:c3:14:e5:7d:ed:4a:4c:96:ba:5f:bd:8d:3c:
         09:c0:28:72:82:f0:d1:bc:34:65:86:b5:df:47:e4:80:fd:ea:
         29:05:a1:e9
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUfA+h5NGcL3S1PvH7QuXFJkdohaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVFOTRDNzc4OUFEQTdFNUY1NDBGREJFOTU4MkQ4RUE3
QUE0NkE5NDAeFw0yNjA1MTExNzM1NDJaFw0yNjA1MTIyMDQ5NDJaMDMxMTAvBgNV
BAMTKDFGNEIzQzU1OTdFRUVCMjg3Q0M0NzlGMTVCQTJGNDM4REFCNDY0ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYAP9MorcPU5UnPPSKixudRX8p
HTlUzCOuNcvQxhW+KRAVLCuOEX17JcoCDo7WxqeR0n04JnkDnBVoKt6Lg15I+jSu
Ppmfr5E7wAm1LGMvM9K0XhAQl6J31LuF8P0BWaqcOJH2a8HkPoB193QYkjIYFxzK
Ee8k9dZy+w2/J1aNIhZ3nuqhkWbsoBEvAKOxGxc9pYPBwiPoSBiLlGsPlLyf5Fho
h+VCu7yh6vpM9whk8yF+U2XSdD/kRsCbgRvuL4Zir1WdSBsMZmmA+zwrRcDEA66p
mbPaMZavnniD0uW9DZ/0puY6d9SKb3J4vJYeVtmWRH/TvB9zj1y7PaEd1ZABAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUH0s8VZfu6yh8xHnxW6L0ONq0ZIYwHwYDVR0j
BBgwFoAUZelMd4mtp+X1QP2+lYLY6nqkapQwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRE9OR0ZP
TkcvMS82NUU5NEM3Nzg5QURBN0U1RjU0MEZEQkU5NTgyRDhFQTdBQTQ2QTk0LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzY1RTk0Qzc3ODlBREE3RTVGNTQwRkRCRTk1
ODJEOEVBN0FBNDZBOTQuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9ET05HRk9ORy8xLzY1RTk0Qzc3
ODlBREE3RTVGNTQwRkRCRTk1ODJEOEVBN0FBNDZBOTQubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQNls9
fnyzK+zMuzFqRIvyzQxBra5qvo5Iz5/BEF4zbsmbk058+RdI/i2gE01OxVVzCHbr
NtRVOOux/IcvtgK+NKz9BO+yGu6w9/l/W5eaNvUR877368J1q56UldSrLycJngwR
SxcHOBl79HhiBXKrIseHaSg3img93ObmKQCwo2zNubWZniw1F23fooKN/ajdVBxK
vyje1FnWvhXpzbzQOzqOSYVhWFLz8cNNvmJ3Lu60/dummDVkFnsZPqlp2XT7iOU9
SowJJDPfLaFgZ4ikM9JGf/gQVbsr7R7sz8MU5X3tSkyWul+9jTwJwChygvDRvDRl
hrXfR+SA/eopBaHp
-----END CERTIFICATE-----
Generated at Tue May 12 23:46:01 2026 by rpki-client