Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft
File:                     31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft (raw, json)
Hash identifier:          fiA90BqnQAZrIKmD857fOwaJdZFIROVOMxsyWSyMAVs=
Subject key identifier:   80:8F:7C:02:48:17:E0:5F:61:58:F3:28:C0:79:31:A2:33:75:59:07
Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68
Certificate issuer:       /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
Certificate serial:       3B100E2FC10F5782A4D74F5392B112CD7BE6C09C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft
Manifest number:          0A
Signing time:             Mon 11 May 2026 17:57:51 +0000
Manifest this update:     Mon 11 May 2026 17:52:51 +0000
Manifest next update:     Tue 12 May 2026 21:04:51 +0000
Files and hashes:         1: 3130332e3135392e38382e302f32332d3234203d3e203331393732.roa (hash: uBJCL+hDXsrLzypekl61CYTy6y1oooM7hy7D2SecWcY=)
                          2: 3230322e3134382e3231322e302f32332d3234203d3e20313332333639.roa (hash: SzGBARnHtav0Ll1lD5uijTPk6wrNJCucq/5lsmn01uE=)
                          3: 3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa (hash: 83VaupmQcP8aGjwKicONhsZqmG/0fmQWoqtdQ72vsQk=)
                          4: 323430363a636534303a3a2f33322d3634203d3e203331393732.roa (hash: BKJtx+GIQaqxKG+F8DcrnUzVLRxDmkAefIfDjo2DHGY=)
                          5: 3231312e37392e3130382e302f32332d3234203d3e203331393732.roa (hash: XaWYO4EF8GCnSH9lm/3LpGTaiFlYA9VmdfI3S945iIY=)
                          6: 3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa (hash: /IijmvgF3E5df29RTHQ7h6ytu6VbgcNgJM8iMgAjKe0=)
                          7: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl (hash: 4kRhBd5RyGdq/fyq9uF+G+6brRGqTMsJqCtToeAP/ow=)
                          8: 3231312e37392e3130382e302f32332d3234203d3e20313332333639.roa (hash: 4OBGIBLB7koiOTORDKBpRQmErNmgCxAih0H1Dz5yNJU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:10:0e:2f:c1:0f:57:82:a4:d7:4f:53:92:b1:12:cd:7b:e6:c0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68
        Validity
            Not Before: May 11 17:52:51 2026 GMT
            Not After : May 12 21:04:51 2026 GMT
        Subject: CN=808F7C024817E05F6158F328C07931A233755907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:07:04:d5:00:40:b3:97:ed:4a:62:ea:d3:
                    b1:c1:d8:d2:60:b0:bf:e8:ba:fa:5f:af:c5:5e:23:
                    9a:85:be:89:8c:d4:fc:34:da:8b:ea:4a:01:d1:e9:
                    8c:86:a8:55:73:19:68:7d:64:d8:9a:dc:0d:60:ba:
                    23:a1:93:b1:71:b4:4b:de:9f:4c:bd:5d:6f:20:bf:
                    24:ed:26:14:88:d9:15:0b:69:f4:63:ae:6c:3c:3f:
                    20:24:d4:15:d9:a2:9f:b1:a5:7d:00:d5:3c:ec:1b:
                    6c:db:77:a0:76:b2:24:af:79:e4:1a:b9:eb:08:11:
                    09:fa:73:16:cd:89:33:6c:dc:19:5d:9a:d5:0e:90:
                    be:9d:18:f4:b2:21:99:7a:6b:bc:9d:35:5c:c8:e1:
                    20:13:8e:36:4c:cd:fe:d8:05:03:ed:a5:9c:b2:08:
                    ba:26:9a:86:99:45:5f:c2:ae:b9:08:6d:16:2d:72:
                    4f:3c:cb:86:91:c9:1c:65:b6:40:1b:f4:c8:02:fa:
                    8f:7d:b5:17:4e:3b:9e:68:a2:a0:eb:a7:33:e3:bb:
                    24:b4:44:08:b6:c6:61:cc:bc:cb:ff:27:41:b0:8f:
                    9c:c9:b0:a0:2d:cf:40:48:25:7c:53:e0:76:0e:0a:
                    63:43:a0:59:5b:4f:62:cd:58:fb:56:bc:d1:c2:45:
                    05:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8F:7C:02:48:17:E0:5F:61:58:F3:28:C0:79:31:A2:33:75:59:07
            X509v3 Authority Key Identifier:
                keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:80:84:d9:1d:b9:28:6e:54:96:65:4f:8f:b8:ab:70:4b:d6:
         51:a7:98:b0:85:b4:aa:8d:74:5b:8e:79:42:0e:d1:10:65:4e:
         81:dd:ba:4b:40:42:b0:c2:30:6f:1b:02:41:1c:a8:61:58:34:
         14:ff:28:f3:25:b6:b0:e4:64:a6:4c:9a:15:ae:a8:d3:93:0a:
         24:95:1c:e6:65:b8:3a:56:a9:d8:56:55:a5:05:64:09:48:42:
         bd:6f:6c:84:80:a0:6a:4b:fd:cf:44:fa:d1:e6:60:11:a6:c3:
         07:dd:3f:e7:96:eb:89:a1:64:e4:d0:34:4b:86:1e:20:3e:a0:
         3a:a9:23:91:49:58:42:8e:c5:24:b7:69:c7:0e:87:d7:6f:55:
         73:5a:83:2a:8b:e0:bc:24:1a:dc:c1:c6:50:20:b7:9e:d8:83:
         a1:15:00:62:6d:46:47:0e:01:34:57:1a:04:3e:28:cf:3c:ce:
         6a:0d:b3:5b:af:cd:24:e9:e4:30:c8:4c:fa:fa:2b:e4:5f:a6:
         d7:4e:a8:7b:06:3b:ef:39:06:7c:01:16:6d:25:23:b3:5c:87:
         4b:fa:eb:66:7e:cf:20:dd:f5:13:38:8e:fd:1d:05:b7:7c:52:
         68:50:5b:bf:70:2f:e7:9d:e6:8b:04:d3:d7:34:cb:21:ed:82:
         87:90:57:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:54 2026 by rpki-client