Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
File:                     4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft (raw, json)
Hash identifier:          XSe7xm/biEPteC+69IerzpFmOEi0LFFZ/cgQ2l9dVnc=
Subject key identifier:   85:DF:B1:26:BB:4A:73:9C:7A:51:2D:3C:4B:61:3B:23:79:81:7D:E9
Authority key identifier: 4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F
Certificate issuer:       /CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
Certificate serial:       3A79A2DA118CC899CAE2AE1968BC177FD18E3677
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft
Manifest number:          03
Signing time:             Mon 11 May 2026 16:50:19 +0000
Manifest this update:     Mon 11 May 2026 16:45:19 +0000
Manifest next update:     Tue 12 May 2026 20:09:19 +0000
Files and hashes:         1: 4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl (hash: 1P6SKFYvz99LXX5v3iSpkCJqGfjU9MkO3RtEeN38BWA=)
                          2: 3230332e36352e3132382e302f31392d3139203d3e2034373832.roa (hash: mjDMiNdATFHdMEjP66ppJ/Z0/1InOOtWemdYwazOi5A=)
                          3: 3230332e36352e302e302f31372d3137203d3e2034373832.roa (hash: aPv3bOG1weQWYPDGkDtRVOrTNA4jAzlE7y9bBkzaAf8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:79:a2:da:11:8c:c8:99:ca:e2:ae:19:68:bc:17:7f:d1:8e:36:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D7FACF5E4861DAF455F31BCAEBB761339B8145F
        Validity
            Not Before: May 11 16:45:19 2026 GMT
            Not After : May 12 20:09:19 2026 GMT
        Subject: CN=85DFB126BB4A739C7A512D3C4B613B2379817DE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:8a:18:20:5b:56:00:b5:c7:d6:1c:c0:dc:
                    09:41:d6:0a:a4:db:5b:ab:0a:35:63:c1:8f:05:73:
                    b8:10:dc:cb:6c:e5:ee:6c:bc:4d:ba:02:72:f1:72:
                    cf:88:4c:1d:c8:4c:fe:c7:ff:fc:c1:86:fd:53:c7:
                    5d:83:85:3a:f9:f4:26:1f:6c:63:fc:d0:60:fd:33:
                    95:49:0a:9c:eb:7c:e7:38:ce:37:7e:ba:35:c3:6b:
                    f5:19:e7:60:7a:a2:33:13:89:ba:bb:7b:9d:de:15:
                    a7:38:0c:24:f8:57:b8:6c:83:a6:12:21:fa:de:8c:
                    dc:8f:70:54:65:8c:03:95:51:cd:25:33:85:da:37:
                    0c:98:ed:18:2b:f9:14:49:9e:16:b5:f0:a3:d0:eb:
                    e2:d1:90:f7:54:a8:59:1e:a8:49:60:f1:d8:40:cb:
                    b9:30:66:bb:c3:6d:e3:b4:9e:4f:67:bc:eb:03:ac:
                    e3:c2:d4:52:aa:07:3e:9b:5b:fa:0f:18:f9:6f:26:
                    71:1b:51:e8:57:d1:e5:d4:2b:9c:85:99:10:5c:fe:
                    5f:25:15:e5:2f:23:62:c6:e4:ab:be:50:1d:05:3e:
                    f8:be:ba:c1:c5:fe:4e:db:8f:0f:fa:04:71:66:11:
                    20:61:34:4c:a3:38:83:d9:71:ed:0a:5e:1e:56:6a:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DF:B1:26:BB:4A:73:9C:7A:51:2D:3C:4B:61:3B:23:79:81:7D:E9
            X509v3 Authority Key Identifier:
                keyid:4D:7F:AC:F5:E4:86:1D:AF:45:5F:31:BC:AE:BB:76:13:39:B8:14:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HEALTHNET/0/4D7FACF5E4861DAF455F31BCAEBB761339B8145F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0c:c3:21:0d:45:51:04:6c:90:70:9c:5b:22:d5:fe:3d:1f:
         5a:63:54:22:4e:82:bf:96:7c:83:10:98:42:55:ba:dc:19:ac:
         57:42:22:ad:18:09:9e:7c:f4:79:64:c8:9c:76:fc:6a:0b:58:
         29:59:bb:f3:e4:29:f1:f4:ed:58:32:2c:89:c2:8a:81:7a:7a:
         e8:9b:c4:9c:f8:8d:27:ba:ea:b8:cb:f8:5b:8b:ee:16:c9:32:
         ec:ee:10:f6:14:f9:e1:b7:04:da:e7:04:d4:c9:2a:ab:97:91:
         6d:e2:ee:da:47:79:ac:dc:48:1e:3e:69:cf:ed:01:8b:c2:87:
         25:8e:8b:4a:d3:26:57:6f:5d:91:40:75:ca:dd:fe:b9:28:48:
         dc:9f:c2:26:bc:34:77:d1:64:d6:f0:74:0f:ff:e4:31:92:58:
         3f:ed:f5:dd:bf:40:60:91:8e:b1:11:78:75:19:e5:4a:d4:33:
         23:da:fc:d6:c9:e3:cb:05:c9:d9:5e:d8:5a:c1:09:36:c2:9c:
         ee:ac:83:a0:3d:6c:de:1e:f8:56:6b:ca:85:11:d3:be:d2:ba:
         40:bd:ad:76:fc:39:24:3f:03:ac:bb:96:01:32:2b:41:18:57:
         9e:03:dd:a1:6d:5d:5d:39:1b:88:97:d3:ae:ec:27:cc:e8:8a:
         78:3f:3c:81
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUOnmi2hGMyJnK4q4ZaLwXf9GONncwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMz
OUI4MTQ1RjAeFw0yNjA1MTExNjQ1MTlaFw0yNjA1MTIyMDA5MTlaMDMxMTAvBgNV
BAMTKDg1REZCMTI2QkI0QTczOUM3QTUxMkQzQzRCNjEzQjIzNzk4MTdERTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8YoYIFtWALXH1hzA3AlB1gqk
21urCjVjwY8Fc7gQ3Mts5e5svE26AnLxcs+ITB3ITP7H//zBhv1Tx12DhTr59CYf
bGP80GD9M5VJCpzrfOc4zjd+ujXDa/UZ52B6ojMTibq7e53eFac4DCT4V7hsg6YS
IfrejNyPcFRljAOVUc0lM4XaNwyY7Rgr+RRJnha18KPQ6+LRkPdUqFkeqElg8dhA
y7kwZrvDbeO0nk9nvOsDrOPC1FKqBz6bW/oPGPlvJnEbUehX0eXUK5yFmRBc/l8l
FeUvI2LG5Ku+UB0FPvi+usHF/k7bjw/6BHFmESBhNEyjOIPZce0KXh5WauozAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUhd+xJrtKc5x6US08S2E7I3mBfekwHwYDVR0j
BBgwFoAUTX+s9eSGHa9FXzG8rrt2Ezm4FF8wDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRI
TkVULzAvNEQ3RkFDRjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RDdGQUNGNUU0ODYxREFGNDU1RjMxQkNB
RUJCNzYxMzM5QjgxNDVGLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG
VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvSEVBTFRITkVULzAvNEQ3RkFD
RjVFNDg2MURBRjQ1NUYzMUJDQUVCQjc2MTMzOUI4MTQ1Ri5tZnQwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH0M
wyENRVEEbJBwnFsi1f49H1pjVCJOgr+WfIMQmEJVutwZrFdCIq0YCZ589HlkyJx2
/GoLWClZu/PkKfH07VgyLInCioF6euibxJz4jSe66rjL+FuL7hbJMuzuEPYU+eG3
BNrnBNTJKquXkW3i7tpHeazcSB4+ac/tAYvChyWOi0rTJldvXZFAdcrd/rkoSNyf
wia8NHfRZNbwdA//5DGSWD/t9d2/QGCRjrEReHUZ5UrUMyPa/NbJ48sFydle2FrB
CTbCnO6sg6A9bN4e+FZryoUR077SukC9rXb8OSQ/A6y7lgEyK0EYV54D3aFtXV05
G4iX067sJ8zoing/PIE=
-----END CERTIFICATE-----
Generated at Wed May 13 00:35:25 2026 by rpki-client