Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft
File:                     28E8C034945DF0971A657E251911BBA0B2819562.mft (raw, json)
Hash identifier:          Y9WTdqEKGAWMLiRZTSmJr5w/IcxMMm3uUJoKoJwnUiA=
Subject key identifier:   6E:6C:A3:88:FB:60:8C:11:DD:3F:0C:12:40:A4:A1:3F:A3:0D:22:62
Authority key identifier: 28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62
Certificate issuer:       /CN=28E8C034945DF0971A657E251911BBA0B2819562
Certificate serial:       60EB363A5818DDA19D17E7A8CB5843AB2736CEF2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft
Manifest number:          05
Signing time:             Mon 11 May 2026 17:15:43 +0000
Manifest this update:     Mon 11 May 2026 17:10:43 +0000
Manifest next update:     Tue 12 May 2026 19:51:43 +0000
Files and hashes:         1: 323430353a613063303a3a2f33322d3438203d3e20313331363731.roa (hash: 6HrkEzQ2Yg1WTlAGALA+Lw5WYBWkKQgOUE2P3VYv1e4=)
                          2: 3130332e3134362e3231322e302f32332d3234203d3e20313331363731.roa (hash: pMS5Ph8mPGJU3UpJ7IjmKfi+Ix8We0Zd68WwZnbms2Y=)
                          3: 28E8C034945DF0971A657E251911BBA0B2819562.crl (hash: VJXjclfFRBS6RuB8nIxO3kWzv13kSVZ4jGWPBJvX4+U=)
                          4: 3130332e3134362e3231332e302f32342d3234203d3e20313331363731.roa (hash: LYwHjGxEzckNqePKzYBLQw/Fecl7B+Zct0xOoyvOLzg=)
                          5: 3130332e3134362e3231322e302f32342d3234203d3e20313331363731.roa (hash: v0VyC7X7thLb1BBUBYlXdyclFoTUZxEmzXZ1GE31WD8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:eb:36:3a:58:18:dd:a1:9d:17:e7:a8:cb:58:43:ab:27:36:ce:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E8C034945DF0971A657E251911BBA0B2819562
        Validity
            Not Before: May 11 17:10:43 2026 GMT
            Not After : May 12 19:51:43 2026 GMT
        Subject: CN=6E6CA388FB608C11DD3F0C1240A4A13FA30D2262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9d:cd:e7:bb:27:a0:71:a8:a4:de:0a:4e:f9:
                    92:79:e8:e8:06:76:31:34:81:09:32:26:ba:f6:4c:
                    f6:75:91:12:f8:8a:3b:6b:14:b3:7a:eb:94:3b:b0:
                    5e:59:e7:c9:e4:46:2f:e4:6f:d5:af:ba:5c:58:6a:
                    d5:fb:81:e3:98:a5:49:3b:f0:55:12:cb:1f:54:14:
                    cf:34:88:90:52:00:9d:8a:a5:74:df:22:a4:75:c1:
                    88:78:a6:2b:14:97:cf:05:82:63:09:9a:63:9b:ca:
                    ba:84:09:9d:1a:e3:c2:09:77:9b:00:92:d5:07:f8:
                    f6:ce:14:3c:15:ce:ec:b2:89:91:3b:85:fd:53:9b:
                    80:46:9a:4f:65:b2:81:a4:13:98:bc:9b:0e:7e:cd:
                    e7:1f:dc:8a:7a:e9:0e:fb:aa:2d:68:2b:77:00:d2:
                    4e:54:08:84:90:4d:a6:4e:48:a7:77:1d:41:2e:7f:
                    64:04:69:b8:4d:8c:2c:82:7f:78:56:1d:ee:0b:90:
                    69:10:f1:67:17:cf:99:76:4b:8b:e2:73:e2:3b:92:
                    d1:7d:26:68:b8:64:14:00:dd:9c:61:44:1e:23:21:
                    91:1e:b1:00:f5:ff:ff:d0:17:49:1f:9a:9c:b6:eb:
                    30:28:2e:a3:64:8b:56:72:a2:ee:11:6b:0d:e5:c1:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6C:A3:88:FB:60:8C:11:DD:3F:0C:12:40:A4:A1:3F:A3:0D:22:62
            X509v3 Authority Key Identifier:
                keyid:28:E8:C0:34:94:5D:F0:97:1A:65:7E:25:19:11:BB:A0:B2:81:95:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/28E8C034945DF0971A657E251911BBA0B2819562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/FANTASY/0/28E8C034945DF0971A657E251911BBA0B2819562.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b4:cb:1a:ec:27:72:e7:e6:9e:88:c8:c7:5f:a5:ce:32:e6:
         12:a5:0c:ae:b9:83:67:f2:40:43:82:7b:1a:a1:00:4c:51:0a:
         8d:b8:a3:cf:9c:8f:6b:81:c5:85:c4:20:bc:ad:8e:39:c8:04:
         37:4a:5e:28:f3:c9:3b:99:0a:86:75:56:cb:80:67:12:3f:49:
         17:f2:5f:2c:66:c3:5a:b7:2f:17:bf:59:a6:7a:5f:86:52:9c:
         6e:3a:2a:24:97:06:92:b4:09:43:8e:05:a0:bc:b8:10:ad:b1:
         56:1b:f4:ce:2a:11:71:54:2d:7a:72:10:a5:91:46:78:da:07:
         f9:2b:70:2c:39:2b:ac:c0:38:c0:58:68:2f:90:b1:dd:e3:6d:
         74:dd:68:5c:cf:aa:d1:ed:c2:10:f9:56:51:98:d3:00:a8:ce:
         46:64:fc:a6:6e:70:54:08:c6:ee:84:18:93:4f:26:d8:df:3e:
         bb:0a:b5:bf:10:43:d6:ba:91:e2:0c:44:cb:77:56:12:bb:ad:
         19:03:76:a1:09:cc:ea:68:77:a1:f5:cb:51:0e:7c:b8:ff:ca:
         c3:95:8d:22:5b:b1:3b:72:d4:84:6b:63:45:08:d6:4b:7a:08:
         34:0b:43:ff:dd:d4:1e:d9:92:17:5e:9d:ec:dc:56:8c:55:e8:
         bb:07:aa:b0
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUYOs2OlgY3aGdF+eoy1hDqyc2zvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkxMUJCQTBC
MjgxOTU2MjAeFw0yNjA1MTExNzEwNDNaFw0yNjA1MTIxOTUxNDNaMDMxMTAvBgNV
BAMTKDZFNkNBMzg4RkI2MDhDMTFERDNGMEMxMjQwQTRBMTNGQTMwRDIyNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjnc3nuyegcaik3gpO+ZJ56OgG
djE0gQkyJrr2TPZ1kRL4ijtrFLN665Q7sF5Z58nkRi/kb9WvulxYatX7geOYpUk7
8FUSyx9UFM80iJBSAJ2KpXTfIqR1wYh4pisUl88FgmMJmmObyrqECZ0a48IJd5sA
ktUH+PbOFDwVzuyyiZE7hf1Tm4BGmk9lsoGkE5i8mw5+zecf3Ip66Q77qi1oK3cA
0k5UCISQTaZOSKd3HUEuf2QEabhNjCyCf3hWHe4LkGkQ8WcXz5l2S4vic+I7ktF9
Jmi4ZBQA3ZxhRB4jIZEesQD1///QF0kfmpy26zAoLqNki1Zyou4Raw3lwUSrAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUbmyjiPtgjBHdPwwSQKShP6MNImIwHwYDVR0j
BBgwFoAUKOjANJRd8JcaZX4lGRG7oLKBlWIwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvRkFOVEFT
WS8wLzI4RThDMDM0OTQ1REYwOTcxQTY1N0UyNTE5MTFCQkEwQjI4MTk1NjIuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMjhFOEMwMzQ5NDVERjA5NzFBNjU3RTI1MTkx
MUJCQTBCMjgxOTU2Mi5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0ZBTlRBU1kvMC8yOEU4QzAzNDk0
NURGMDk3MUE2NTdFMjUxOTExQkJBMEIyODE5NTYyLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLTLGuwn
cufmnojIx1+lzjLmEqUMrrmDZ/JAQ4J7GqEATFEKjbijz5yPa4HFhcQgvK2OOcgE
N0peKPPJO5kKhnVWy4BnEj9JF/JfLGbDWrcvF79ZpnpfhlKcbjoqJJcGkrQJQ44F
oLy4EK2xVhv0zioRcVQtenIQpZFGeNoH+StwLDkrrMA4wFhoL5Cx3eNtdN1oXM+q
0e3CEPlWUZjTAKjORmT8pm5wVAjG7oQYk08m2N8+uwq1vxBD1rqR4gxEy3dWErut
GQN2oQnM6mh3ofXLUQ58uP/Kw5WNIluxO3LUhGtjRQjWS3oINAtD/93UHtmSF16d
7NxWjFXouweqsA==
-----END CERTIFICATE-----