Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
File: DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft (raw, json)
Hash identifier: QBeIuO6tH+MtC+gzGYKDk+sbz7WdtCk/XGGvT4gMOyo=
Subject key identifier: 3D:9B:3B:DB:82:99:0B:41:34:79:31:7D:EE:B1:5C:BE:15:79:65:E0
Authority key identifier: DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13
Certificate issuer: /CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
Certificate serial: 4134A91D973871B93D06E72CCDDF8CEF6F898167
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
Manifest number: 02
Signing time: Mon 11 May 2026 17:57:27 +0000
Manifest this update: Mon 11 May 2026 17:52:27 +0000
Manifest next update: Tue 12 May 2026 18:32:27 +0000
Files and hashes: 1: DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl (hash: 5z40a6gu6OCK+tAUKX0nELHa87MfvjvJBsCwd3of/Fw=)
2: 3133382e3235322e3139322e302f32342d3234203d3e20313331363736.roa (hash: H0K1ntuYrqGyMmjMc0VSqf2iYE6epJACiPRZPRlBzDo=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:34:a9:1d:97:38:71:b9:3d:06:e7:2c:cd:df:8c:ef:6f:89:81:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13
Validity
Not Before: May 11 17:52:27 2026 GMT
Not After : May 12 18:32:27 2026 GMT
Subject: CN=3D9B3BDB82990B413479317DEEB15CBE157965E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:e1:79:39:8c:6f:c2:4d:cb:cf:bb:db:cc:
c0:90:e5:40:44:52:64:fa:2b:83:40:0e:b4:fa:eb:
0a:e0:6b:3f:33:46:40:19:d3:93:09:c1:a4:8e:7b:
e1:64:72:7a:a3:d7:e3:79:9b:22:28:32:d2:46:35:
36:ba:ca:f7:90:55:10:41:f0:0d:15:73:bd:4a:e1:
8a:d9:56:4d:ed:d0:2d:ad:52:4c:c2:41:d9:b2:53:
31:04:3a:3b:8a:b7:99:27:ae:e9:c5:86:66:47:b1:
8f:9c:e2:be:a6:4d:40:3d:c9:22:37:45:51:e2:b8:
0e:32:0d:09:c5:6c:f1:b8:e6:bd:f1:2e:52:1d:66:
3b:bc:bb:2b:38:2a:a7:c4:0f:9d:e2:46:09:f5:90:
2c:ef:43:50:e4:8c:47:ea:35:29:d4:d5:a2:d7:51:
a9:07:7e:03:5a:b9:11:f6:20:63:e7:ec:d1:4a:8b:
ed:8f:b9:5b:a0:ef:64:d3:19:a3:ce:65:8c:4f:cc:
67:98:0c:fe:b9:3f:68:5c:a5:0c:96:2a:ce:e2:66:
c0:5e:5e:c7:10:8c:74:e1:0d:29:3e:49:a6:28:62:
d5:0b:18:13:6a:dc:18:af:88:ac:ee:e1:23:94:99:
39:58:9a:83:19:4b:e5:8a:5b:5b:75:fd:11:2c:a6:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9B:3B:DB:82:99:0B:41:34:79:31:7D:EE:B1:5C:BE:15:79:65:E0
X509v3 Authority Key Identifier:
keyid:DE:E3:AB:4A:D2:7A:A4:EE:D0:9C:8E:47:40:E9:00:F2:B1:5A:8F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD/1/DEE3AB4AD27AA4EED09C8E4740E900F2B15A8F13.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:42:f3:79:53:4f:6f:80:0c:6c:3a:99:64:f4:3c:58:11:62:
e3:cb:72:65:b0:fd:b6:9a:13:d2:16:66:cd:21:2c:77:38:f8:
fc:d3:79:67:93:05:fb:6a:50:2d:31:9a:20:f8:16:bd:6a:c9:
09:ce:b9:fa:d7:d6:7b:0c:6d:70:51:f6:e1:68:09:37:e7:e2:
f2:08:1f:93:8d:f8:38:1a:c3:bb:2d:6d:72:39:58:7d:50:41:
f9:ee:d6:bf:9c:b4:4e:8c:de:b8:25:48:67:6c:31:3f:0a:f8:
68:9e:86:84:3d:7e:f3:3c:eb:eb:14:5f:e3:05:ad:e2:f3:9a:
bd:0a:34:e3:92:ef:ef:a7:14:15:8f:4c:43:54:bf:55:b7:b6:
fc:2e:3d:3d:62:df:85:24:fb:3b:42:b7:8f:71:e3:a0:04:07:
b4:69:19:9d:b8:a8:5b:9f:7f:a4:64:47:dd:b5:ac:ac:66:a7:
93:5f:62:4e:c1:d2:ac:5f:cc:db:60:94:04:34:d9:80:38:e7:
3a:38:d8:89:4d:63:36:00:cd:01:d1:93:06:48:e1:13:3a:40:
05:da:f1:ab:e4:75:07:29:e3:f6:e7:79:a4:5f:8d:59:0c:93:
38:9e:b0:b0:6c:37:93:3f:17:a8:92:2b:7b:9b:26:de:ce:e6:
2e:07:97:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:58 2026 by rpki-client