Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft
File:                     E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft (raw, json)
Hash identifier:          KSFVOMt/IWH3KeDtHZjsQlSi9bbb8EY5wAqwLYPt/1U=
Subject key identifier:   EA:49:FE:FC:87:98:2F:77:B1:7C:94:05:04:C5:BD:5C:EB:B0:F9:9E
Authority key identifier: E9:65:3D:7A:C7:DC:7D:52:AB:2A:18:D7:A1:E5:34:78:38:23:C3:E8
Certificate issuer:       /CN=E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8
Certificate serial:       575B5BB9AFD2D0B89EF1E59482BEB2A4EA0B67D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft
Manifest number:          01
Signing time:             Mon 11 May 2026 15:52:07 +0000
Manifest this update:     Mon 11 May 2026 15:47:07 +0000
Manifest next update:     Tue 12 May 2026 18:54:07 +0000
Files and hashes:         1: E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.crl (hash: Otzx/sB63Llu9V/UfQEhECq+8ZjzK40BrThZQNXCuWk=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5b:5b:b9:af:d2:d0:b8:9e:f1:e5:94:82:be:b2:a4:ea:0b:67:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8
        Validity
            Not Before: May 11 15:47:07 2026 GMT
            Not After : May 12 18:54:07 2026 GMT
        Subject: CN=EA49FEFC87982F77B17C940504C5BD5CEBB0F99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:8c:81:01:15:50:cc:ed:e3:27:ef:5a:0e:
                    ef:1e:a2:f6:90:d4:18:61:f9:db:00:c5:5b:ef:85:
                    8d:83:00:75:1e:6f:dc:98:1e:c6:97:fe:71:dc:9d:
                    18:ad:27:21:6e:08:73:bf:0c:72:74:c9:be:5b:b2:
                    cc:06:14:28:8e:7b:1d:c3:eb:c6:6f:75:f2:cf:d3:
                    4f:42:36:7e:26:f0:fc:01:39:0e:2b:57:1d:85:73:
                    02:a9:10:04:99:b4:c0:ce:ba:5a:31:58:0e:e0:d9:
                    1a:b8:9e:48:dd:4f:70:f0:73:1a:c7:9e:11:5d:94:
                    e5:9e:04:e5:63:a3:32:4b:96:32:ba:71:1d:20:b5:
                    15:0b:57:72:ca:93:16:0f:29:f1:09:8e:79:78:82:
                    a2:ae:e6:2b:7b:11:d4:ff:0b:e9:c7:27:7d:de:1e:
                    66:97:c9:cd:82:46:75:18:0a:66:28:5f:bb:a6:03:
                    b6:6c:21:c4:72:90:50:68:bf:15:16:5a:15:64:d7:
                    46:8f:b3:82:65:8b:a4:55:db:bd:e0:29:a6:62:16:
                    98:98:02:f0:32:a9:bb:68:5e:e3:28:24:a4:41:2a:
                    b2:e1:77:3e:ac:98:30:71:b3:34:86:e4:19:a0:b6:
                    5d:fe:53:4c:d9:32:5f:cc:30:f3:e9:e7:8c:6c:84:
                    30:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:49:FE:FC:87:98:2F:77:B1:7C:94:05:04:C5:BD:5C:EB:B0:F9:9E
            X509v3 Authority Key Identifier:
                keyid:E9:65:3D:7A:C7:DC:7D:52:AB:2A:18:D7:A1:E5:34:78:38:23:C3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/IONET/0/E9653D7AC7DC7D52AB2A18D7A1E534783823C3E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e3:54:11:2c:18:2f:aa:9b:e7:a4:7d:15:54:0f:32:97:05:
         9d:46:f3:33:01:36:3c:ed:e6:c8:28:98:64:32:63:45:a6:78:
         47:9a:9f:93:67:3c:ef:6d:eb:c1:48:9d:4e:58:dd:06:c6:bd:
         b0:cd:22:b5:46:3b:cf:83:0b:e8:70:b5:40:33:f8:04:ee:51:
         3a:bb:2d:d6:3d:a7:21:bc:b6:10:66:3e:50:58:41:1f:fe:e7:
         d2:73:1f:02:74:e5:ec:d1:e1:bd:6a:c8:96:40:f4:35:07:01:
         8a:92:26:12:e7:0c:1b:a0:b3:c2:36:24:c1:81:4b:94:c2:e9:
         79:be:cc:df:01:0f:81:ba:57:43:97:43:af:87:cd:f6:59:4c:
         73:27:20:55:16:0a:eb:a8:d7:c1:00:d1:ea:f1:68:85:71:5f:
         9d:02:ff:87:9e:55:59:2e:e3:88:2b:d8:c6:6b:97:22:c5:14:
         a2:c8:46:f0:7d:dc:17:c5:15:a0:66:29:99:3d:66:8d:a8:40:
         58:11:22:ab:41:6c:b8:d2:46:2b:e0:69:85:5d:43:84:b7:69:
         ad:d4:47:61:60:be:c4:7b:b8:75:1c:fc:02:44:7d:c8:91:8c:
         e8:12:32:7c:ec:74:47:1a:ca:4e:e5:55:19:2d:ed:84:a3:ae:
         a4:88:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:15:06 2026 by rpki-client