Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
File:                     707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft (raw, json)
Hash identifier:          BLgvbPgH0g5Fux5RYJlwDUWl7ZQohzGUCYihsKFoJTg=
Subject key identifier:   C9:FA:9B:5E:8A:FE:C0:24:92:25:6B:2C:53:CE:92:E6:8C:2A:8E:5A
Authority key identifier: 70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D
Certificate issuer:       /CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D
Certificate serial:       738305315898A4A7E5303B5B9E3FCAF47149EBC9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft
Manifest number:          04
Signing time:             Mon 11 May 2026 17:56:42 +0000
Manifest this update:     Mon 11 May 2026 17:51:42 +0000
Manifest next update:     Tue 12 May 2026 21:35:42 +0000
Files and hashes:         1: 3232332e32362e31342e302f32332d3234203d3e2037343833.roa (hash: EeYUqixDoPSEeN8sw/ZeQjCxnACjgv6gNGFQp+CTsoM=)
                          2: 3130332e3137352e3139342e302f32332d3234203d3e2037343833.roa (hash: 5l2+J4Wo84X5+Yl5nqEN6UeiO9PszuY1Tb4AzIBJh3U=)
                          3: 707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl (hash: XOlIrepLrchVEXundI+2XLQWfXnVraFQDvJfJhl4MLc=)
                          4: 3232332e32362e31342e302f32332d3234203d3e203231383539.roa (hash: BY1QUUCw56EnMeP3kjSRx3onJmeURrOTVkZdX+EuukE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:83:05:31:58:98:a4:a7:e5:30:3b:5b:9e:3f:ca:f4:71:49:eb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=707C05DC06891EB4A2BEB186A8BB61C4DCD6141D
        Validity
            Not Before: May 11 17:51:42 2026 GMT
            Not After : May 12 21:35:42 2026 GMT
        Subject: CN=C9FA9B5E8AFEC02492256B2C53CE92E68C2A8E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e2:97:9e:44:53:ba:33:fe:17:ae:81:57:bc:
                    81:99:3b:17:1c:18:a5:b2:f9:c6:44:36:bc:52:56:
                    1f:bb:c9:03:83:67:26:e5:74:60:0f:08:67:59:3d:
                    fe:87:e5:6d:e9:cf:78:6a:5e:05:c1:37:51:8d:3d:
                    4c:b7:47:68:2d:8b:cd:ea:a0:d1:11:c4:a7:16:fc:
                    6e:96:ac:28:46:04:b1:83:4d:70:f7:05:c2:57:57:
                    27:02:f9:43:4d:ae:a6:42:de:b3:b6:d5:cd:77:a8:
                    90:e2:71:88:55:f4:44:63:9a:fc:5a:f6:4f:e3:fd:
                    85:24:9d:81:b2:86:bd:20:3c:65:6f:98:48:f2:99:
                    78:82:56:1e:5f:fa:9f:0d:b1:c9:63:fa:e7:e5:84:
                    0a:7c:dc:5f:58:d1:f8:dd:10:cc:0f:e8:7c:4f:78:
                    de:e8:f4:74:b4:5d:32:1c:85:94:7c:fc:c2:92:3f:
                    37:b6:87:6f:af:61:bb:b0:ac:4d:fd:9b:51:37:bd:
                    d7:8b:df:ce:67:57:57:e5:e0:ad:ac:5f:d0:aa:2a:
                    f6:e5:6a:ce:c6:85:1b:fa:2d:5a:3b:86:e4:9c:7a:
                    f2:b3:c3:e0:d9:fe:20:b8:20:98:0c:a9:e7:48:0a:
                    0f:ba:b1:13:eb:7a:0c:53:12:77:b5:49:23:bc:2f:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FA:9B:5E:8A:FE:C0:24:92:25:6B:2C:53:CE:92:E6:8C:2A:8E:5A
            X509v3 Authority Key Identifier:
                keyid:70:7C:05:DC:06:89:1E:B4:A2:BE:B1:86:A8:BB:61:C4:DC:D6:14:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MAGICCUBE/0/707C05DC06891EB4A2BEB186A8BB61C4DCD6141D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4d:97:58:57:dc:f7:bb:74:ad:31:69:6f:73:c9:d0:9a:d5:
         31:9c:66:c8:74:7d:f5:13:b4:a4:f8:25:7f:87:bb:81:d8:c5:
         c6:db:bf:49:9d:33:d0:5b:8e:e8:d4:65:54:0b:99:c8:d1:b9:
         32:f0:ed:8c:0c:89:ee:88:38:b6:fe:cd:9d:17:48:85:1a:32:
         e7:dd:5a:bc:4d:aa:4a:4c:6d:c3:2b:a8:5a:c1:3b:2e:db:61:
         72:58:a0:8d:07:e9:c3:2a:24:6f:1b:98:14:e9:08:3d:00:46:
         a8:78:20:d3:3d:53:51:26:0c:b3:dc:30:64:a3:5a:14:83:7f:
         79:99:1a:0a:bc:98:7e:42:a8:bc:15:9b:e2:99:b9:e5:4e:33:
         86:b6:c5:22:ec:ab:1e:16:38:43:d2:ae:b8:f9:b8:07:c7:da:
         9e:9f:c7:b5:f9:d9:c6:72:91:99:f0:58:7a:cf:aa:bf:dd:cd:
         42:0a:71:dd:23:7b:08:9b:4e:b6:a1:fe:25:a1:b3:fe:9b:78:
         78:60:60:ab:d7:b4:5f:49:1b:c0:10:ec:54:25:42:1c:07:99:
         9d:3d:16:41:22:f4:59:1d:75:50:97:5e:23:39:5c:fd:37:0f:
         6d:70:a1:e5:47:73:db:4c:7f:ca:4e:cb:95:2c:ae:1a:ab:be:
         42:6c:d8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:28 2026 by rpki-client