Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
File:                     60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft (raw, json)
Hash identifier:          bK7g6g4tWZ/vRy6w/NrkRhE2qwWs9hHxWBxb2dnfo9I=
Subject key identifier:   38:09:BE:BF:C7:6B:70:46:30:DA:17:AA:2D:1A:E5:45:6B:68:FE:B7
Authority key identifier: 60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A
Certificate issuer:       /CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
Certificate serial:       5B21D8AE19AD25EC3D758C768CEE8B663D6DF81E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft
Manifest number:          1B
Signing time:             Mon 11 May 2026 17:56:36 +0000
Manifest this update:     Mon 11 May 2026 17:51:36 +0000
Manifest next update:     Tue 12 May 2026 21:54:36 +0000
Files and hashes:         1: 323430313a393563303a313166663a3a2f34382d3438203d3e2039363738.roa (hash: jA7qImHOv7W5Hv0XzY9Mbd/TM/moy4CN/D4CXy9sCok=)
                          2: 3130332e3135322e3135312e302f32342d3234203d3e2039363738.roa (hash: LbFNzufaEOVQ4W41Z1ykHx9k1X6VXBB6LVAO4NG2BwI=)
                          3: 3130332e3135302e33362e302f32342d3234203d3e2039363738.roa (hash: y8lVVRe/wuPGJ7dZ5+tF+pkbL0/La93cTqHjq66lkjQ=)
                          4: 323430313a393563303a3830383a3a2f34382d3438203d3e2039363738.roa (hash: LElF+wGt3liBgKlL8jsB3e1yEkuDOG6KHD56zZD0m1c=)
                          5: 3231312e37362e3137382e302f32342d3234203d3e2037353337.roa (hash: foejPoKcuDxhzrxrfI7Rz0hRH94Dv2l6Nq/p5J2gRpA=)
                          6: 323430313a393563303a663030313a3a2f34382d3438203d3e20323036373239.roa (hash: wMvsew2RnQ9XsFmTB5Pg7iVUsYQynUYE5w0hakYcv90=)
                          7: 60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl (hash: 2GfW2eC5uUd2kiiYrIHT72geaztGJD1v1y/bG7Xw2dU=)
                          8: 3130332e3135302e33372e302f32342d3234203d3e2039363738.roa (hash: MxntDIE2cC7tgxOjHnVFPeq1VqsxruW7k0jq8nNwz5o=)
                          9: 3130332e39382e37342e302f32342d3234203d3e2039363738.roa (hash: tNSrK+WNy+KySyf2yQ1NOrkH6iCaaiR2BeXjuVkFzh4=)
                          10: 323430313a393563303a3a2f33322d3332203d3e2039363738.roa (hash: jOtFlREhO9CilnpGChErgEs47lUXhbvvQOV2p/o59ZQ=)
                          11: 3231312e37362e3137392e302f32342d3234203d3e2039363738.roa (hash: /Zn6oV7/+JqyT/+9kwju4uQs6rJPmG9bibhYt4x/eW8=)
                          12: 323430313a393563303a313030303a3a2f33362d3336203d3e2039363738.roa (hash: XBZlZFNoLpm2lmpxhtAjCP6zIGu3Dhyf7TwvCzJtd+8=)
                          13: 323430313a393563303a3a2f33362d3336203d3e2039363738.roa (hash: FjgMbezCdZItwgd9u+UzAwlO2g/X8+irv7/pznEQ8ng=)
                          14: 3232332e32362e302e302f32342d3234203d3e2039363738.roa (hash: plplmJ8pwlLh3yGAxEbhFQEbbFuJ0mIf0eyJpVvTgks=)
                          15: 323430313a393563303a326430333a3a2f34382d3438203d3e2039363738.roa (hash: U2WVeAZZY+wJAf5675nkBmBhxC/RUJdThWhD5OYfiNQ=)
                          16: 3130332e39382e37352e302f32342d3234203d3e2039363738.roa (hash: lYN8XARBJdI1m3pygxieIjhCsA/S1lX7e1q8e4qctns=)
                          17: 3130332e3135322e3135302e302f32342d3234203d3e2039363738.roa (hash: 8BYEKNaCDqwjOiYLUizaV9F+Qamzecge9/ZWZ2nFg+8=)
                          18: 323430313a393563303a323030303a3a2f33362d3336203d3e2039363738.roa (hash: coQ2mjXXFKGhITP1RevV/iXW3F6uOj+d2bCuydrqi38=)
                          19: 3232332e32362e312e302f32342d3234203d3e2039363738.roa (hash: Lo7donP/9UA808jwU4s7KUQfGkcGM3kV2CfMe8JCTd8=)
                          20: 3130332e39382e37322e302f32342d3234203d3e2039363738.roa (hash: +QkVrz2UrUc1xKgslAqv4U092I7kUGBfoilfgqBhzdM=)
                          21: 323430313a393563303a3130313a3a2f34382d3438203d3e2039363738.roa (hash: 0FEWrUNjLY/F3gseUIYDxYlgFXVH+ROPTSUAvafGyeU=)
                          22: 34352e3132332e3131372e302f32342d3234203d3e2039363738.roa (hash: 82X06y/IQI1U7QhH2lytUIOSUSyVA1T9xDh0/oPZYg0=)
                          23: 3130332e39382e37332e302f32342d3234203d3e2039363738.roa (hash: iTc2gRx4ebXsP1eOWz4bPAEExZXDn5MuL/PjqBhmxRc=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:21:d8:ae:19:ad:25:ec:3d:75:8c:76:8c:ee:8b:66:3d:6d:f8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A6F20E39E81962FD3770C4C44C5E10DFD32D2A
        Validity
            Not Before: May 11 17:51:36 2026 GMT
            Not After : May 12 21:54:36 2026 GMT
        Subject: CN=3809BEBFC76B704630DA17AA2D1AE5456B68FEB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:b9:fb:89:61:48:0f:d2:ac:c6:f8:a0:1b:
                    76:fc:90:3f:8d:fd:9a:3c:08:72:62:6f:58:e2:43:
                    27:de:c2:dd:ed:f4:ca:99:e8:08:33:d6:4f:85:2d:
                    ae:8e:2a:5a:64:7d:7c:8b:6a:9f:00:b5:10:51:8e:
                    f2:e7:77:89:11:87:83:2a:bc:11:6b:36:d0:c6:e8:
                    e0:10:b5:19:09:cf:1f:71:2e:a2:5e:4c:ca:dc:84:
                    8a:cd:55:fb:7d:4b:f8:86:85:38:73:03:22:14:99:
                    88:72:c1:99:38:f5:b4:9a:2e:b0:0f:50:60:15:98:
                    d2:5e:de:7e:2d:e9:09:47:d4:36:35:24:79:13:03:
                    af:eb:28:d5:1f:9c:f8:d1:a8:20:3b:4c:5d:18:09:
                    73:ba:97:40:e9:fe:9a:bf:60:b7:3a:27:85:7e:bc:
                    2c:f3:ef:cd:8f:36:55:0a:be:0b:22:87:65:66:ea:
                    15:03:56:26:75:c8:fb:44:5c:d7:b9:2c:59:9c:67:
                    08:9c:21:85:04:05:e7:8b:e8:74:ee:98:f2:46:a1:
                    6f:d1:d9:37:75:61:2a:33:bb:32:cc:53:99:e5:e5:
                    b6:b7:a7:e2:2c:9f:c4:05:5c:26:0d:65:b5:5e:57:
                    ea:01:2f:fd:26:34:9f:2e:d8:05:df:6d:60:cc:48:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:09:BE:BF:C7:6B:70:46:30:DA:17:AA:2D:1A:E5:45:6B:68:FE:B7
            X509v3 Authority Key Identifier:
                keyid:60:A6:F2:0E:39:E8:19:62:FD:37:70:C4:C4:4C:5E:10:DF:D3:2D:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/HOSTIN/0/60A6F20E39E81962FD3770C4C44C5E10DFD32D2A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:6f:0c:43:6e:dc:23:a2:02:24:86:77:e0:66:c5:e3:44:46:
         2a:88:5d:95:1b:93:c7:08:86:a2:df:04:35:35:53:7f:92:48:
         b3:4a:f1:40:2d:b7:34:46:ca:9e:aa:2f:3d:1f:50:a6:d8:7b:
         2b:e1:a1:e9:ad:19:23:ae:83:37:0d:aa:b6:28:10:19:68:60:
         d3:c4:dd:8d:18:58:f3:41:60:cc:8c:e9:3c:2d:49:c1:66:f6:
         46:72:47:ad:08:bd:46:ab:44:99:64:ba:42:36:7b:20:c6:d9:
         68:56:c4:1b:5a:43:80:c9:8d:ce:c4:92:fa:fb:78:aa:9f:e1:
         8a:3e:12:03:46:21:82:81:08:bc:d1:15:8c:66:cb:af:88:19:
         0a:15:d7:69:74:f7:59:50:7c:1d:0d:f0:f8:4f:84:f8:00:e0:
         2d:35:22:a8:8d:16:fd:31:bd:50:ae:b1:5b:a6:54:bb:76:de:
         c5:ed:7b:c0:2f:b3:5d:bf:91:9c:ed:ac:94:16:8c:04:ff:58:
         b0:0e:16:be:16:3e:2b:8c:98:2f:70:49:94:d2:d2:f0:f0:33:
         04:fa:61:97:eb:ba:c1:ed:49:ce:97:bf:70:36:e1:21:df:f4:
         e6:5d:83:2c:dd:0b:d2:9d:06:2f:ec:7f:70:b8:b8:ea:d1:e6:
         e4:f9:fd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:31:18 2026 by rpki-client