Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
File:                     0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft (raw, json)
Hash identifier:          GMLyWoHeDUjPWczZCkCz/HFzKTlayVZKDSEf4dUBmJg=
Subject key identifier:   7A:56:6B:C1:04:FB:B9:18:DE:B0:4B:CC:65:20:1D:CA:B8:FC:DF:84
Authority key identifier: 0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67
Certificate issuer:       /CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
Certificate serial:       061DAB487F39B860144027BBE183E60593DC8A5F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft
Manifest number:          03
Signing time:             Mon 11 May 2026 16:48:56 +0000
Manifest this update:     Mon 11 May 2026 16:43:56 +0000
Manifest next update:     Tue 12 May 2026 19:22:56 +0000
Files and hashes:         1: 323030313a6564383a3a2f33322d3536203d3e203138343232.roa (hash: Xt2JiIyAeWDi9a4QRWUHvmXeXOlqKybS5a3x4Jwl6ss=)
                          2: 36312e36312e3234302e302f32302d3234203d3e203138343232.roa (hash: OENg2dUxKfNMtI2u30bsu1HnbjPScDlxxKzl3KfntJg=)
                          3: 0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl (hash: 1EQgO63N2RI/tSxibaYGSGv+P6HHuOf2SDac3pE7wK8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1d:ab:48:7f:39:b8:60:14:40:27:bb:e1:83:e6:05:93:dc:8a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AEFBFCC5266222C8453FE5B468C367C095C8F67
        Validity
            Not Before: May 11 16:43:56 2026 GMT
            Not After : May 12 19:22:56 2026 GMT
        Subject: CN=7A566BC104FBB918DEB04BCC65201DCAB8FCDF84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7b:8b:94:1c:29:8f:7e:5e:a4:d4:61:24:f7:
                    56:77:72:88:92:05:5d:17:55:eb:46:96:a6:f9:1e:
                    e8:27:63:ad:c5:a8:9a:71:03:2b:3b:e4:be:46:16:
                    22:b9:cc:0d:ab:0f:4c:73:3b:57:43:6b:59:0a:1b:
                    34:51:a8:34:35:1e:d1:38:30:c1:3e:99:9b:ba:0a:
                    bc:f1:7e:29:92:55:65:9a:55:bc:23:61:af:b1:a6:
                    e0:14:19:0a:57:3a:f6:8a:57:6d:b9:a3:f1:c4:ca:
                    95:72:36:62:09:aa:b0:95:bd:9a:bf:06:3b:3e:fc:
                    dc:20:9b:00:1c:61:65:ed:45:2a:43:65:bc:db:f1:
                    50:b6:10:ae:c4:38:ec:ce:a3:b5:a0:46:b8:a0:f4:
                    68:92:c8:2b:28:ec:74:ab:be:b8:22:ce:ea:e4:1d:
                    52:87:d1:3a:17:42:a8:eb:46:a3:15:a3:5e:da:90:
                    6a:1f:0a:e2:d1:a7:30:fa:fc:ef:b5:6c:f4:f7:ed:
                    9f:95:4c:a1:d1:e0:0f:a4:17:1a:07:a6:51:9e:c8:
                    4d:eb:94:89:a9:a4:99:73:5e:72:a3:88:6d:6e:70:
                    e4:40:60:c3:cf:e5:d4:fa:d0:2b:93:83:85:06:83:
                    e9:60:74:3d:88:9f:eb:99:81:e4:a5:64:5c:29:cf:
                    0b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:56:6B:C1:04:FB:B9:18:DE:B0:4B:CC:65:20:1D:CA:B8:FC:DF:84
            X509v3 Authority Key Identifier:
                keyid:0A:EF:BF:CC:52:66:22:2C:84:53:FE:5B:46:8C:36:7C:09:5C:8F:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/0AEFBFCC5266222C8453FE5B468C367C095C8F67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ITRINET/0/0AEFBFCC5266222C8453FE5B468C367C095C8F67.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b5:1b:98:e0:ce:bd:d3:26:6f:f6:dc:e8:3f:2b:7a:3d:3f:
         6e:54:bc:19:93:19:07:ac:a2:a8:a5:c9:5d:f3:bb:a4:62:46:
         13:12:77:99:60:69:d8:04:87:fa:3d:f9:53:54:8f:57:87:d2:
         cc:1a:ae:f8:f8:7d:83:ed:8f:b0:15:4c:ae:59:77:56:c7:23:
         9c:00:e2:bb:83:1a:46:a4:c1:be:27:0b:89:e5:9a:39:c4:fc:
         a2:bb:c9:fb:f6:3a:1b:50:fe:d0:55:d2:0e:5d:bb:36:ac:d0:
         b4:13:db:6e:ad:ed:c8:b4:e0:4b:59:53:1f:da:c6:95:6c:56:
         e5:9e:7c:e9:80:34:87:ec:dd:da:98:35:97:b9:4f:49:f8:4a:
         8a:fb:dd:91:2a:8f:cd:ed:37:e4:4b:e0:3c:98:0d:72:31:1a:
         63:57:8d:5d:97:5d:c0:fc:f1:5b:a1:69:82:dc:f6:3d:8f:09:
         be:c6:29:d0:e9:88:41:ec:7d:fb:1f:50:58:fc:52:ed:25:01:
         1a:71:a0:a3:26:4e:95:48:27:53:4f:70:df:b4:a4:1e:33:c2:
         77:34:5d:5a:51:e9:a7:f7:16:ac:a6:f4:88:79:3e:21:95:19:
         0e:85:e3:fa:57:7c:4a:6d:72:a5:c7:d7:25:9f:36:69:2c:85:
         26:95:dc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:43:58 2026 by rpki-client