Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.mft
File:                     29663E2ACD53191459F334EE521FAAAABE4930ED.mft (raw, json)
Hash identifier:          lnxTpujYDw3FhAnR0ogyI9aDVWcTtkD+ip6WD8mDj+g=
Subject key identifier:   7D:9E:51:AD:8F:88:67:49:31:47:05:A3:C7:B5:85:23:C3:BB:8C:66
Authority key identifier: 29:66:3E:2A:CD:53:19:14:59:F3:34:EE:52:1F:AA:AA:BE:49:30:ED
Certificate issuer:       /CN=29663E2ACD53191459F334EE521FAAAABE4930ED
Certificate serial:       413265EE59DD90CA2141B2975E4B3915194AE5CF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.mft
Manifest number:          05
Signing time:             Mon 11 May 2026 16:33:52 +0000
Manifest this update:     Mon 11 May 2026 16:28:52 +0000
Manifest next update:     Tue 12 May 2026 16:36:52 +0000
Files and hashes:         1: 3130332e3131362e39382e302f32342d3234203d3e20313331363139.roa (hash: vB78JeXzEIoLQiYpw0x+ezfTYtefp/jMfHOSSelfvok=)
                          2: 3130332e3131362e39362e302f32342d3234203d3e20313331363139.roa (hash: UaKYusfbQq14jtksCxK2CbIiFuahrOYiKDtCnF6A974=)
                          3: 3130332e3131362e39372e302f32342d3234203d3e20313331363139.roa (hash: CH3QbLk0/qbEK/EUtq0OeWcQdKVrjc4fx65CJOAhNOc=)
                          4: 29663E2ACD53191459F334EE521FAAAABE4930ED.crl (hash: 9B4QODMxhqmmlfT+oIowGyjSfWTNyWDIw8wVJR/Umdg=)
                          5: 3130332e3131362e39392e302f32342d3234203d3e20313331363139.roa (hash: xXNeaO4C8aKEBhmN2JoffMBnVtAHrRBzBfB76rl23+E=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:32:65:ee:59:dd:90:ca:21:41:b2:97:5e:4b:39:15:19:4a:e5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29663E2ACD53191459F334EE521FAAAABE4930ED
        Validity
            Not Before: May 11 16:28:52 2026 GMT
            Not After : May 12 16:36:52 2026 GMT
        Subject: CN=7D9E51AD8F886749314705A3C7B58523C3BB8C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4c:31:29:89:ea:69:48:95:c9:15:7e:ac:8f:
                    91:97:ae:2b:7e:ee:cc:c2:cb:fb:8a:b7:15:5d:2a:
                    18:d0:f4:b7:b7:33:a2:42:a8:e4:97:4d:1a:f1:f2:
                    16:ae:f0:ac:cd:43:08:8a:af:58:39:4b:4c:67:ce:
                    8f:13:56:26:76:ce:39:a9:cf:83:6c:fd:ab:8e:c3:
                    c5:eb:8e:b9:01:65:26:3c:e1:5c:db:8b:71:00:13:
                    02:4c:b6:7d:30:d3:41:51:26:cf:04:84:fe:52:1e:
                    e9:a7:9a:5b:57:80:fd:b5:a3:db:8f:86:2c:d8:57:
                    04:d2:a5:e8:1a:1f:0d:9a:ef:38:8c:40:b6:dd:12:
                    12:aa:75:ce:74:de:0f:82:4f:1d:ec:ec:a2:21:86:
                    d3:8f:c4:7b:f2:f2:64:7f:ee:71:31:41:d6:8e:7f:
                    26:dd:42:6f:5a:1f:e9:25:e7:6d:2b:85:66:33:1e:
                    f3:40:85:76:a3:af:e7:8e:b6:e5:29:b7:9d:82:f0:
                    e3:23:4b:60:77:d9:a3:68:3b:21:5e:22:25:03:ab:
                    05:62:81:3f:e6:98:f5:e9:2f:13:fe:74:68:4c:31:
                    67:e4:bb:b8:b5:b2:31:40:4d:a3:79:28:d3:ab:d7:
                    e8:e7:2f:6e:ce:58:ed:33:71:6f:ba:0a:1d:be:22:
                    32:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9E:51:AD:8F:88:67:49:31:47:05:A3:C7:B5:85:23:C3:BB:8C:66
            X509v3 Authority Key Identifier:
                keyid:29:66:3E:2A:CD:53:19:14:59:F3:34:EE:52:1F:AA:AA:BE:49:30:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/29663E2ACD53191459F334EE521FAAAABE4930ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/JIGENTEC/0/29663E2ACD53191459F334EE521FAAAABE4930ED.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e8:0a:dc:3a:08:7e:cb:74:34:12:f1:73:56:ca:86:2c:e7:
         37:b6:b7:dd:0e:1c:1b:b7:3e:a7:0e:40:c6:8e:dc:1f:88:1d:
         7c:47:3e:04:aa:a5:01:3c:90:73:5d:84:5c:49:60:7a:1c:a8:
         7c:18:94:fd:2c:42:3c:3e:5f:24:d1:2a:9f:02:fb:6a:56:07:
         e1:47:de:83:d7:d5:a6:b2:5d:0c:8b:c0:0c:94:4d:01:c4:1a:
         c7:14:75:97:39:38:21:6e:ba:59:2c:bc:da:bd:c9:b7:b8:be:
         83:8b:5c:e4:0e:dc:97:5e:41:2f:7f:0b:ba:53:c4:c8:c5:2c:
         a9:b7:42:93:ef:0d:e2:66:1e:2f:36:b4:9b:b3:67:d4:64:21:
         5d:88:2b:5a:ae:a7:81:16:73:36:71:67:e2:4f:b2:59:cc:7e:
         d9:ee:ec:0d:f8:de:c9:de:44:c7:c7:84:1f:71:4a:10:26:82:
         d5:27:60:af:b6:e1:35:4d:7f:07:24:f4:46:d0:32:63:92:af:
         a9:98:76:92:be:9d:b0:bb:4e:85:14:69:f9:8a:6f:a9:76:c3:
         d0:1e:a8:e9:46:9f:4f:b6:64:64:ab:a6:9f:14:b3:c8:9e:a1:
         64:34:f2:66:08:94:b4:82:26:ec:84:f3:c4:7e:f6:1d:fd:bd:
         d1:ac:47:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----