Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
File:                     E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft (raw, json)
Hash identifier:          A9Lmc/o1t/8o8hphj/pBdYXHsNJw62fj13N2Ukg3eRs=
Subject key identifier:   6C:E4:1C:ED:82:89:78:4D:41:58:10:51:36:87:A5:10:69:5E:4E:4D
Authority key identifier: E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5
Certificate issuer:       /CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
Certificate serial:       6385B63B14B604D00B505B4183F520CF5FEEE2B3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft
Manifest number:          06
Signing time:             Mon 11 May 2026 17:26:34 +0000
Manifest this update:     Mon 11 May 2026 17:21:34 +0000
Manifest next update:     Tue 12 May 2026 19:42:34 +0000
Files and hashes:         1: 3130332e3136302e3138302e302f32332d3234203d3e203338313336.roa (hash: vXSGvfe4/SHzbgc1FGIm8W7fF4FtlTo17+zWJlbEFVI=)
                          2: 3130332e3136302e3138302e302f32332d3234203d3e203536383530.roa (hash: RzAPn5btTcxQ4JmMexqs2Z3tgOn6EwRXUMKi5on2EDg=)
                          3: E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl (hash: ynxRQU9Eh9KYIClsN4QOmp3Gv63g31IBgdPqrmnIccc=)
                          4: 323430363a656534303a3a2f33322d3438203d3e203138303431.roa (hash: ENdF+FZ/wshSwMngi/LeNYAxqnXtTR+JIbUWvzMtjvg=)
                          5: 3130332e3136302e3138302e302f32332d3234203d3e203138303431.roa (hash: 18NWi1veGokF/mTHx158Mqd+r/PzLz4vX21G5OQonx8=)
                          6: 3130332e3136302e3138302e302f32332d3234203d3e20393833.roa (hash: bSmO+jTWr7YOoJ4NGhuYgKT8sLNYWbbxkJfWN+8zotE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:85:b6:3b:14:b6:04:d0:0b:50:5b:41:83:f5:20:cf:5f:ee:e2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E65F87C3415B74DFBBCBE0909A320835EE88E6E5
        Validity
            Not Before: May 11 17:21:34 2026 GMT
            Not After : May 12 19:42:34 2026 GMT
        Subject: CN=6CE41CED8289784D415810513687A510695E4E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b8:b3:11:c1:39:93:2b:eb:72:df:be:06:a2:
                    a8:d9:9d:fd:52:cf:1a:e0:ee:64:f0:38:d0:fd:f5:
                    dd:d5:e0:45:2d:a5:0d:60:4e:58:60:3e:bf:29:86:
                    06:52:ee:97:b6:3f:ee:96:b7:0f:36:b8:db:5c:83:
                    92:ab:7d:e4:47:16:3e:63:03:cf:bd:a1:de:94:2f:
                    06:7a:aa:00:90:86:85:b1:67:4e:28:fd:18:f7:b2:
                    03:1b:48:2e:16:d1:96:e4:e6:d5:50:3f:34:83:37:
                    21:34:f8:01:78:3d:3c:a1:60:27:fd:a4:ff:20:96:
                    77:84:94:c2:8f:03:fd:54:5a:d4:f1:59:a3:db:44:
                    33:51:5b:c7:d4:9a:d3:16:e7:de:f8:c4:85:f6:97:
                    8c:01:5b:fb:57:c3:b2:c6:c7:ad:b2:65:a0:de:7f:
                    b1:5f:83:43:83:df:30:1e:e4:02:0a:0c:2a:78:a4:
                    15:75:0f:4d:08:61:16:07:e0:3d:d1:1f:d9:04:77:
                    50:0f:a3:b5:29:95:f4:f6:7b:e5:67:95:56:4f:b2:
                    a4:02:cf:1d:a9:1f:47:02:25:a7:5f:4e:0e:e9:04:
                    1a:2f:09:97:9f:2c:38:92:a4:a5:c8:8b:46:f5:e3:
                    9f:7f:4e:58:45:c7:7d:bb:5b:02:4e:e4:d5:77:db:
                    b5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E4:1C:ED:82:89:78:4D:41:58:10:51:36:87:A5:10:69:5E:4E:4D
            X509v3 Authority Key Identifier:
                keyid:E6:5F:87:C3:41:5B:74:DF:BB:CB:E0:90:9A:32:08:35:EE:88:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ERAYINFO/0/E65F87C3415B74DFBBCBE0909A320835EE88E6E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:20:24:dc:bd:84:77:c8:5d:36:7a:0f:c4:70:6b:af:a3:f1:
         8a:6e:ce:bf:ae:3f:e4:77:03:28:99:a4:eb:82:30:ef:d0:9a:
         bb:51:34:f0:02:d4:ad:7c:92:1a:47:cd:9f:93:cc:7c:96:0b:
         98:5c:32:8d:8d:da:ac:21:ba:e2:3b:d9:0f:df:7c:e1:99:e1:
         71:7b:3b:d4:23:78:e2:33:5a:cc:2a:30:5e:c5:cf:a4:5f:ec:
         31:99:58:0a:d1:74:9e:73:05:d1:43:c2:e1:9c:96:6b:e5:c5:
         2f:38:31:9e:21:2a:ee:a6:02:49:24:a0:88:16:eb:51:cd:40:
         3a:4a:48:f1:d9:e0:85:15:3e:2f:9f:cc:67:2c:4a:9d:f6:a9:
         6c:a1:b5:dd:ff:3c:45:3c:38:c8:cb:d1:25:c7:3a:b4:f9:5a:
         d3:0a:5a:f8:a8:4b:b8:d0:8b:38:a7:2e:ed:38:ff:cc:7d:ec:
         a6:30:57:ed:61:f8:3f:4d:d7:71:30:18:f4:04:66:5d:00:d7:
         f1:79:88:07:a4:9c:e8:18:b2:53:be:eb:6e:f1:26:59:69:99:
         d1:9c:90:33:68:d2:c8:93:17:38:4e:14:56:ac:ee:00:77:fe:
         33:5c:64:aa:e4:d6:3d:d7:b6:1f:47:c8:92:26:9b:85:03:e3:
         82:95:55:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----