Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft
File:                     3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft (raw, json)
Hash identifier:          zlNA5bzNj9gf0eXVq5i+iJEd+WBKmacisYL1IrUl75I=
Subject key identifier:   C2:55:8B:14:75:40:58:B9:D6:A4:FC:13:A0:03:16:3C:DA:05:B0:03
Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE
Certificate issuer:       /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE
Certificate serial:       258573C7E9EE245B578FDA67D195F8215C9272F6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft
Manifest number:          0B
Signing time:             Mon 11 May 2026 17:58:59 +0000
Manifest this update:     Mon 11 May 2026 17:53:59 +0000
Manifest next update:     Tue 12 May 2026 18:25:59 +0000
Files and hashes:         1: 323430323a346632303a313a3a2f34382d3438203d3e20313331363330.roa (hash: Oh96VvwrLrCqa8vzhQmqU/GuluZDVdXi8dtZT8NxrMk=)
                          2: 323430323a346632303a333a3a2f34382d3438203d3e20313331363330.roa (hash: ozfaF6UNRXIJr4rje21YQkFsoy4ZzNiP2wPtA0erUeY=)
                          3: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl (hash: 8i+yj8fWB9d7JAtnXpA+Vyp2VuM2BQtX9XZFE3Q2bBQ=)
                          4: 323430323a346632303a343a3a2f34382d3438203d3e20313331363330.roa (hash: K1744UKAf+z71qZv3nHhgAju8M4LXcw6dU0movyAPhI=)
                          5: 323430323a346632303a353a3a2f34382d3438203d3e20313331363330.roa (hash: bU1HQDuT0IRVu34E/RZMoTgSImGbDCROI5x6EQPDfzA=)
                          6: 323430323a346632303a323a3a2f34382d3438203d3e20323133343238.roa (hash: s9oKXRbmyMlcGoDwcLYZ0mRlXD27VylhFpYrWppG6Cs=)
                          7: 323430323a346632303a3a2f34382d3438203d3e20313331363330.roa (hash: KzekJ1FxCbwk5Zs9JehhAtPibWkOWnoBzdyUiRP/X0w=)
                          8: 323430323a346632303a3a2f33322d3332203d3e20313331363330.roa (hash: 1HkzZ8xzmy/OZUVsiQY7oTz8Rgw5reF3WYzze2HTWVI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:85:73:c7:e9:ee:24:5b:57:8f:da:67:d1:95:f8:21:5c:92:72:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE
        Validity
            Not Before: May 11 17:53:59 2026 GMT
            Not After : May 12 18:25:59 2026 GMT
        Subject: CN=C2558B14754058B9D6A4FC13A003163CDA05B003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:25:19:24:71:df:c3:ea:87:71:70:72:4d:84:
                    26:57:ab:a2:4c:83:c9:ba:5f:83:71:d8:58:a6:a0:
                    e1:69:fb:44:09:77:36:ed:17:80:2d:79:23:a5:35:
                    ad:81:55:6e:09:d2:9f:13:d6:cd:74:3c:02:c4:64:
                    43:2d:32:20:f6:79:e8:fb:03:7c:f5:09:0b:80:40:
                    48:cb:6a:e1:f0:c8:12:35:8b:09:da:28:e5:bc:24:
                    cb:54:ab:a9:71:f0:4a:d2:1a:44:88:a0:41:a2:31:
                    4d:86:fe:4e:e2:dc:ac:42:c6:2e:9a:45:f0:64:c8:
                    13:5a:58:be:2c:bb:81:86:32:75:69:b2:72:b7:4b:
                    af:d9:32:fb:30:68:77:86:99:be:42:8a:2d:d8:b4:
                    f8:fc:31:19:ab:c3:ce:71:57:0c:68:f8:8b:6a:1f:
                    78:50:7b:da:20:71:b1:7d:50:45:54:dc:9d:f5:af:
                    01:95:a6:60:e7:a4:e0:c2:78:a5:8c:35:4f:3e:05:
                    ea:19:f7:b8:e5:5e:71:0d:7b:38:d4:75:5e:6c:9c:
                    c5:17:07:51:72:b7:d3:52:e7:06:a7:bd:a0:31:0e:
                    3b:77:07:52:29:c7:91:65:9b:ac:fe:6e:0b:bf:40:
                    f5:24:0a:f8:ca:80:02:48:e2:a2:34:64:16:b6:a4:
                    a9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:55:8B:14:75:40:58:B9:D6:A4:FC:13:A0:03:16:3C:DA:05:B0:03
            X509v3 Authority Key Identifier:
                keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:59:68:f6:5b:be:1a:db:89:bc:4c:de:89:2f:c4:b9:37:93:
         f4:2f:ea:9f:a2:80:7a:fe:08:f4:0d:b5:1b:08:fd:b8:ce:d2:
         7f:3c:c4:55:c5:b4:05:1a:a0:7d:a8:d5:1d:f9:7f:ac:39:47:
         c4:12:72:9c:27:fa:f6:ce:73:80:c5:b6:a8:0f:c2:94:c0:be:
         a8:b7:b9:6a:18:22:33:20:24:bf:04:e2:5f:25:cb:80:f1:ee:
         46:ae:2f:39:28:a0:96:34:7b:90:f4:bc:9d:62:88:3e:3f:02:
         e5:29:cd:f2:ab:78:0c:62:ad:75:98:64:0d:e2:ed:17:97:78:
         95:57:c2:99:14:01:4e:aa:f2:4a:02:ee:41:de:74:62:87:da:
         c0:ec:e6:3a:b4:6c:c9:67:84:55:50:a1:c0:d5:4d:ed:a9:0d:
         ad:0c:11:6e:11:d5:ae:47:d8:ac:74:5e:d0:a2:a2:4a:c0:48:
         bf:d9:79:08:d5:f2:4b:a7:f4:96:c2:9f:21:5d:33:46:f3:37:
         59:24:f8:6c:8d:f8:47:74:81:31:a3:44:0b:0d:13:f0:ec:1d:
         b2:cd:c0:4f:5c:b4:b4:90:be:e5:9d:d4:4c:5e:3e:3c:da:3f:
         8a:a0:19:69:23:2c:f4:98:b9:11:12:69:32:f6:de:ea:8e:d8:
         21:11:58:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----