Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
File: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft (raw, json)
Hash identifier: PjviauL/x/nM7FChNEnG3/+9iYCCXUw3aI09hppCE7U=
Subject key identifier: DB:67:38:CC:EE:B8:87:16:22:C3:4B:2B:82:1D:DA:6D:5B:6E:F1:97
Authority key identifier: E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
Certificate issuer: /CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Certificate serial: 457F66E58352A376AF0561196FF9A951CB5406AF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
Manifest number: 07
Signing time: Mon 11 May 2026 17:40:30 +0000
Manifest this update: Mon 11 May 2026 17:35:30 +0000
Manifest next update: Tue 12 May 2026 18:33:30 +0000
Files and hashes: 1: 323430313a383432303a3a2f33322d3438203d3e203332353935.roa (hash: 7IK6gvzs6uMwoViSpBOdjJrk5WxLH5pe447RiZaITJY=)
2: 323430313a383432303a3a2f33322d3438203d3e2039393233.roa (hash: mAMCDxxdS5D0xlBjJmg5NjQv1GONdD1Fp7YNezXC9T8=)
3: E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl (hash: sYSBlj5J4gg0uoV/UlEGIfGzM56YQjhi5qdpnLHjB5I=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:7f:66:e5:83:52:a3:76:af:05:61:19:6f:f9:a9:51:cb:54:06:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB
Validity
Not Before: May 11 17:35:30 2026 GMT
Not After : May 12 18:33:30 2026 GMT
Subject: CN=DB6738CCEEB8871622C34B2B821DDA6D5B6EF197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:7d:97:ff:ae:06:86:72:21:14:3d:1b:2d:
98:3e:f5:33:24:ae:b5:41:05:54:25:d5:7c:54:92:
6d:ed:a5:cc:75:0b:a3:08:03:fb:57:c3:48:e2:4b:
f9:de:a9:63:6d:2e:a6:92:7f:11:6c:29:c0:11:68:
f7:5e:58:8d:bd:c1:d0:9b:9d:9c:9e:f6:7f:74:6f:
37:14:b4:aa:75:63:76:ed:c1:b5:9a:b6:22:9a:b7:
80:d1:14:b5:c7:38:a6:6b:6d:17:c6:23:2a:a7:a9:
4a:b2:65:91:a0:70:fc:76:84:b5:eb:c6:bf:08:f4:
95:e0:e3:a8:a7:27:3b:49:0e:72:89:16:25:e7:65:
64:37:f5:e1:2f:e4:6a:5c:33:61:6f:55:3a:fb:87:
9e:20:89:b2:85:2a:98:0e:7f:cf:af:82:d9:7b:e2:
67:9d:24:e1:1e:7f:f8:d5:4a:4a:fe:6a:7e:c4:4a:
0f:ae:89:19:fb:87:02:1b:35:0b:e2:d2:34:9e:9c:
77:c1:90:9f:30:60:37:98:46:9c:f8:a0:7d:8e:72:
31:69:50:67:31:6a:b5:64:82:a5:75:34:e2:44:f7:
6d:84:55:e4:fb:69:0b:f0:85:c8:ce:a4:4d:31:98:
e3:7d:f7:2d:72:d9:9d:4f:c1:5b:64:ec:0a:03:7e:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:67:38:CC:EE:B8:87:16:22:C3:4B:2B:82:1D:DA:6D:5B:6E:F1:97
X509v3 Authority Key Identifier:
keyid:E5:AA:3B:0F:9F:58:C9:34:21:C6:48:20:4A:B4:31:A4:AD:C4:B0:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/M2NIM/0/E5AA3B0F9F58C93421C648204AB431A4ADC4B0CB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c3:a2:49:94:d3:2a:1b:19:9d:64:e4:0d:4d:99:8c:b0:74:
e8:2b:f8:2a:b8:7f:3c:b6:52:de:00:7c:66:e2:45:4d:5f:ca:
e3:63:ce:0f:3b:73:b5:67:f8:39:53:0e:fd:f0:c2:df:d1:c7:
9b:db:0b:28:52:d2:ac:df:93:e2:b0:5e:0b:44:de:cd:05:b0:
e5:30:9a:28:5c:30:97:a3:bc:05:83:ae:89:7a:89:33:7a:2f:
dc:36:90:b6:e8:6e:87:26:2b:92:ed:e8:d8:b1:07:8f:48:8c:
39:f1:37:c6:6f:3b:7d:8b:04:a9:6e:29:1e:f1:33:da:68:78:
a7:2b:cb:b8:cf:10:cd:7e:41:1b:78:77:40:14:42:96:fa:1c:
d0:30:04:1e:d1:15:e0:87:d5:d9:6d:1c:fe:49:2a:c4:3c:d5:
df:e5:fd:3a:d1:0e:7f:e7:45:bb:d8:17:ad:c4:44:29:6c:f8:
bf:94:a7:05:6d:b7:d5:6c:64:7a:8c:75:c9:68:8d:9e:7c:34:
10:8c:97:ae:5b:96:dd:14:9c:2f:c1:62:a9:b6:0a:60:1a:f7:
98:ca:e4:bb:30:74:a2:ef:85:3e:84:7b:37:3f:70:e0:77:e0:
38:f8:62:f9:a0:e9:74:ee:bd:5e:41:51:c0:63:07:3c:e4:ae:
e5:59:44:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:15:19 2026 by rpki-client