Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/INITRISE/0/7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7.mft
File:                     7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7.mft (raw, json)
Hash identifier:          M5hAPdIxn6F8Y8Ts1mFPu+6DFm11pAbAUqmRH6+aoq8=
Subject key identifier:   DB:19:81:0B:34:7A:9E:76:60:12:31:FF:3F:A8:EC:7E:0D:0C:95:76
Authority key identifier: 70:94:DB:DA:EA:D8:89:7E:EC:2B:AC:1D:B4:BC:58:EA:A4:57:BC:B7
Certificate issuer:       /CN=7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7
Certificate serial:       0CE4EEF2702470E999EB5A3E71A69C39B7B7C710
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/INITRISE/0/7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7.mft
Manifest number:          01
Signing time:             Mon 11 May 2026 15:52:05 +0000
Manifest this update:     Mon 11 May 2026 15:47:05 +0000
Manifest next update:     Tue 12 May 2026 16:25:05 +0000
Files and hashes:         1: 7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7.crl (hash: OzoArRGV6a3g2nY7mTVcBWO7b+H40F8q7I4bm5GgEuQ=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e4:ee:f2:70:24:70:e9:99:eb:5a:3e:71:a6:9c:39:b7:b7:c7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7
        Validity
            Not Before: May 11 15:47:05 2026 GMT
            Not After : May 12 16:25:05 2026 GMT
        Subject: CN=DB19810B347A9E76601231FF3FA8EC7E0D0C9576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:4e:54:c8:33:af:49:0f:55:7b:39:3d:34:
                    9e:38:20:07:6a:2c:ae:a7:76:f0:47:71:a4:44:e7:
                    d7:db:25:90:66:99:20:28:71:e8:7a:05:e1:3b:e4:
                    2a:eb:64:22:a4:02:08:e1:df:8c:15:bf:6f:a7:e3:
                    6e:62:85:f4:e0:33:86:cd:08:9c:a8:16:cf:5d:1d:
                    06:80:8c:cb:4c:7d:6f:dc:c9:1d:40:25:f4:d3:cb:
                    bb:a8:79:fd:21:0a:7c:27:e2:b5:ba:0b:50:0d:38:
                    b7:4f:4b:e6:f9:b1:4a:15:30:8d:1c:2d:57:27:6c:
                    56:b8:5d:6a:e2:8f:7a:71:43:dd:ee:22:26:17:56:
                    97:b4:3d:a9:be:44:cc:c0:e7:77:67:16:4d:9f:de:
                    b5:53:f9:40:4c:9c:5f:7b:39:97:3f:73:12:1b:e7:
                    c0:ff:24:23:40:80:87:3c:c0:38:5f:dc:fa:7c:ea:
                    c0:7d:30:f0:8f:17:a2:06:8d:1a:bb:44:6c:b4:0d:
                    84:90:5f:de:1a:30:c6:dc:ad:1e:bd:9a:ef:de:dc:
                    dd:95:e8:fc:ae:f1:0b:a9:a8:2b:e3:29:2b:15:84:
                    9c:49:49:5a:7a:33:0f:b2:51:c2:e8:ae:0a:58:92:
                    e9:48:57:96:27:b9:ec:14:a6:08:ea:74:d9:9a:4f:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:19:81:0B:34:7A:9E:76:60:12:31:FF:3F:A8:EC:7E:0D:0C:95:76
            X509v3 Authority Key Identifier:
                keyid:70:94:DB:DA:EA:D8:89:7E:EC:2B:AC:1D:B4:BC:58:EA:A4:57:BC:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/INITRISE/0/7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/INITRISE/0/7094DBDAEAD8897EEC2BAC1DB4BC58EAA457BCB7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:02:02:86:a5:67:75:29:a0:ac:7b:67:b0:ff:4a:d8:f5:c1:
         83:0d:25:4c:b1:f8:ff:54:69:49:34:4a:e0:ca:78:18:e4:84:
         7e:00:e9:83:5b:6e:40:f7:fa:4c:29:c2:ce:72:4a:65:10:41:
         cc:fa:af:52:c0:60:10:bb:48:78:5e:9a:24:aa:69:ed:d8:88:
         80:76:f7:30:b9:8f:54:c3:e5:79:93:13:32:82:89:da:74:a7:
         42:7a:d8:70:14:55:4f:3e:28:dd:54:2e:27:1e:44:e3:93:e6:
         8b:84:b4:b5:f0:cd:cf:b9:a9:35:e2:15:b6:43:39:b9:b5:a5:
         d7:de:cb:10:e0:e4:25:56:69:21:68:ba:e7:88:91:b1:76:97:
         6d:d5:68:71:a9:3f:42:0d:31:5e:62:4b:4f:64:5d:60:46:62:
         b3:72:b2:b1:51:57:41:99:30:44:02:d6:67:4f:e1:91:79:19:
         9f:55:8f:c0:5f:a1:23:60:a9:d2:9e:33:08:38:a1:09:5a:20:
         e9:b2:b1:eb:3f:20:dd:3b:24:e6:8f:2b:b6:0e:d5:7d:81:9a:
         c7:24:35:e9:da:a1:a8:c9:9d:40:00:57:15:93:09:a6:c3:77:
         e8:23:d0:93:77:35:a8:f3:f3:00:d3:38:bb:61:fc:04:d7:2e:
         cf:67:9b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:56 2026 by rpki-client