Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
File: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft (raw, json)
Hash identifier: yt4YmqmndLv5SeWM6uZQiyVf60RS1dGBlmD083MEJgY=
Subject key identifier: 9D:56:E0:01:1C:DB:F9:31:02:B9:20:D8:EC:53:F9:3A:A6:C9:07:BC
Authority key identifier: 9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF
Certificate issuer: /CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
Certificate serial: 17DDC37C673A1CF4905572C541BBE7C2BD9C348D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
Manifest number: 02
Signing time: Mon 11 May 2026 17:11:41 +0000
Manifest this update: Mon 11 May 2026 17:06:41 +0000
Manifest next update: Tue 12 May 2026 19:45:41 +0000
Files and hashes: 1: 9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl (hash: QTeKjxbwv+XWGJPiF5QH+dyPzwwwM1hWvd0WCvgKP2o=)
2: 3130332e3134382e36382e302f32332d3234203d3e20313331363138.roa (hash: BACFnkZaw8ZPpbq3IkwDxSxDzFcQk+Vm9o3aE8Vt++E=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:dd:c3:7c:67:3a:1c:f4:90:55:72:c5:41:bb:e7:c2:bd:9c:34:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C6C404D96BB112984EB14C46BE0526514B6BFBF
Validity
Not Before: May 11 17:06:41 2026 GMT
Not After : May 12 19:45:41 2026 GMT
Subject: CN=9D56E0011CDBF93102B920D8EC53F93AA6C907BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:42:e8:9e:ac:fe:f1:bc:65:60:1d:f0:15:
ce:ef:da:31:a3:1f:34:cd:6b:2f:de:21:66:49:5b:
47:55:20:4a:90:93:24:c0:5c:bf:ee:19:5d:d3:8c:
6d:c3:fd:5c:a2:d5:6d:f3:98:d6:b6:52:f2:5c:b5:
80:55:dd:10:dc:e2:55:a0:47:52:60:0c:ee:6a:56:
9f:1b:57:5f:9f:64:e6:5b:6b:ee:0c:5a:5c:7e:91:
a7:7c:32:7d:00:0e:c2:5c:c5:35:54:8a:1f:0d:b1:
ad:ef:3d:79:8c:0d:69:3b:2b:5d:39:fb:a9:ac:c0:
2f:60:a3:fa:24:75:80:c3:29:11:c3:a3:7f:85:12:
6f:ab:8e:78:ea:63:79:12:9a:81:54:93:c1:e2:07:
62:d9:1b:6d:8c:c2:e6:14:ce:55:51:93:6d:54:ca:
12:5e:54:c9:47:fa:d8:fc:2e:9f:f5:cf:a3:5e:4e:
31:7e:7d:2f:ca:83:9e:81:ba:00:10:ca:16:7b:32:
90:dc:1f:e8:bc:f0:7a:d5:31:9a:7d:fc:32:bf:22:
dd:f6:74:e9:6b:9f:ff:d8:1b:58:c5:45:f3:f9:2b:
77:31:e9:d4:c6:e0:e8:dd:38:d1:9f:04:72:ec:6f:
f1:a0:f2:6a:c5:0e:e0:87:50:f8:a1:a9:81:58:91:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:56:E0:01:1C:DB:F9:31:02:B9:20:D8:EC:53:F9:3A:A6:C9:07:BC
X509v3 Authority Key Identifier:
keyid:9C:6C:40:4D:96:BB:11:29:84:EB:14:C4:6B:E0:52:65:14:B6:BF:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9C6C404D96BB112984EB14C46BE0526514B6BFBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/MCK/0/9C6C404D96BB112984EB14C46BE0526514B6BFBF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8f:ef:90:ab:e0:e0:98:0f:71:04:26:8a:a4:cf:70:5f:fb:
c5:29:a5:74:51:12:66:4b:1c:36:f0:16:cf:0e:37:d7:2f:c5:
82:6d:13:14:09:d3:fa:0e:37:05:51:3f:b5:1a:6c:0d:c2:4d:
0b:19:2c:4a:2c:65:42:eb:5a:df:fc:ea:12:50:23:2e:b8:a2:
f5:75:56:bd:e2:32:a0:20:ae:aa:aa:45:51:4a:66:3e:79:47:
21:74:ff:6f:8e:6d:63:07:6e:d8:5a:65:24:c2:98:36:a7:ff:
89:c6:a8:f6:99:6e:c0:c6:28:f8:6d:e2:1d:e8:d4:b7:39:e8:
fe:35:0b:eb:2a:9d:b3:d9:d1:c5:31:24:d6:07:54:99:e5:ff:
bc:c7:7e:66:c1:18:6e:9d:ee:52:c3:e1:ab:b6:2b:e4:c8:98:
81:bb:df:05:7b:cd:a5:d4:ce:fe:aa:d3:4a:8a:71:2b:15:cd:
d7:d5:10:a7:38:a3:90:ff:fb:74:10:67:a7:4e:c5:78:11:e9:
47:e7:69:4d:93:e4:f7:57:3e:13:56:26:44:84:fc:79:2c:ea:
ac:9c:e7:2f:aa:51:97:cb:5b:ad:e7:bd:ad:1f:8f:e4:7e:12:
f9:4f:66:e1:96:bd:1a:3c:e5:1f:c2:f9:fe:f5:7d:ba:fb:26:
e7:12:ec:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:33 2026 by rpki-client