Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft
File: 34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft (raw, json)
Hash identifier: 9Wk99d5vShrwQjbyPhGXpl1+9DlRj1bRZ9GzbQzWAZc=
Subject key identifier: 2C:A8:18:F9:B2:8A:73:47:D5:38:2B:CC:15:74:9D:5D:68:A7:A4:C3
Authority key identifier: 34:DC:43:57:C9:2F:21:89:45:C1:FA:7B:D9:A8:04:84:41:D4:AB:ED
Certificate issuer: /CN=34DC4357C92F218945C1FA7BD9A8048441D4ABED
Certificate serial: 1D1A96F5250DFD3DFCF5C80BC343F2D37725CB6E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/34DC4357C92F218945C1FA7BD9A8048441D4ABED.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft
Manifest number: 08
Signing time: Mon 11 May 2026 17:39:39 +0000
Manifest this update: Mon 11 May 2026 17:34:39 +0000
Manifest next update: Tue 12 May 2026 20:48:39 +0000
Files and hashes: 1: 34DC4357C92F218945C1FA7BD9A8048441D4ABED.crl (hash: toykWs/Pp9/LYblJWS2sp8WQBf9dHTB8pjbph+Tq1O4=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1a:96:f5:25:0d:fd:3d:fc:f5:c8:0b:c3:43:f2:d3:77:25:cb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DC4357C92F218945C1FA7BD9A8048441D4ABED
Validity
Not Before: May 11 17:34:39 2026 GMT
Not After : May 12 20:48:39 2026 GMT
Subject: CN=2CA818F9B28A7347D5382BCC15749D5D68A7A4C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9e:3d:39:15:53:60:8e:73:1c:eb:c3:3c:97:
96:32:9b:8c:54:f9:48:d2:44:e9:48:e5:a2:61:88:
85:36:64:96:55:f4:ed:38:ed:52:42:df:9d:9d:2d:
a0:b6:96:70:0d:ed:b9:a5:d4:3c:88:58:36:bb:a0:
01:d3:51:a3:b2:43:37:b8:9e:2b:60:0b:8c:08:af:
19:39:f0:09:a8:9c:92:da:bd:94:63:b4:aa:16:7c:
4f:91:26:fa:90:d1:78:be:9f:72:59:f1:e8:26:90:
f9:62:59:18:5d:36:e3:ff:c2:01:e2:06:33:13:02:
b5:b1:a6:c6:3d:ef:55:f5:8d:35:07:52:5f:4c:42:
64:f2:d8:d6:a7:17:b3:ab:e5:bb:d7:ea:de:24:77:
1f:d5:29:b0:a7:54:3e:0c:7b:34:b4:2c:43:21:b1:
3c:02:82:64:48:1d:43:86:0d:d9:5a:33:2b:31:1d:
f2:00:39:37:c9:26:79:7c:3a:52:a7:f7:d4:da:c2:
70:96:03:db:86:bd:7b:18:df:3e:1c:53:29:d4:be:
6f:97:96:06:e7:c2:d1:22:f0:e2:02:92:45:02:b8:
a9:90:ee:db:a0:73:d0:bf:74:8b:8c:ae:c0:7a:a1:
8c:23:8a:9f:8b:ff:71:64:85:08:8d:1c:b6:cd:46:
4e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A8:18:F9:B2:8A:73:47:D5:38:2B:CC:15:74:9D:5D:68:A7:A4:C3
X509v3 Authority Key Identifier:
keyid:34:DC:43:57:C9:2F:21:89:45:C1:FA:7B:D9:A8:04:84:41:D4:AB:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/34DC4357C92F218945C1FA7BD9A8048441D4ABED.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NCCC/0/34DC4357C92F218945C1FA7BD9A8048441D4ABED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6c:cd:37:fa:e8:a8:af:ea:4c:52:11:aa:72:15:b2:90:37:
91:e8:57:12:a2:62:fe:e8:2f:51:20:46:ec:2e:fe:56:83:f8:
ff:07:cf:85:6a:20:11:4b:bb:4b:7a:30:b9:b8:a8:62:32:2e:
47:50:ca:9f:a3:6f:48:77:c4:c2:ef:9a:b7:42:20:b0:0e:10:
7a:55:53:0b:b9:00:92:57:be:06:e8:7d:b4:27:83:9d:2f:82:
d6:e6:6e:f0:9c:3b:a2:83:e4:ac:28:e2:ec:61:a5:d8:ee:3e:
be:e9:42:60:77:53:fc:d0:07:d6:35:5b:57:56:09:8b:1e:3a:
0e:86:2f:ce:42:3b:49:47:30:c2:cb:51:57:07:33:59:8f:6e:
6c:58:67:b5:85:c0:f6:b2:39:3a:74:8d:84:53:d8:94:7f:39:
8e:e3:7d:dd:60:3b:fb:63:45:a3:f0:a4:c3:5a:c4:d1:6b:76:
93:c4:83:96:45:74:85:d0:a8:e9:93:9d:64:66:3b:76:76:ac:
47:87:ca:08:8c:e4:53:f3:bf:8e:b2:5b:f2:74:97:29:ad:3d:
64:5a:71:fd:dc:0e:c3:8e:f0:b6:97:ff:8c:be:40:d2:5e:d7:
54:9d:42:6c:b9:8a:1b:77:98:45:20:7d:7d:df:63:35:3a:f3:
18:07:75:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:13 2026 by rpki-client