Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft
File:                     42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft (raw, json)
Hash identifier:          ZJjrLIeMUyTzI9GZ6ypy2Ohw9HRRkFA4zL6Lbsl2Bsw=
Subject key identifier:   93:36:9D:6C:26:66:D9:39:AB:67:59:EC:56:71:C9:6E:BD:A5:B9:3B
Authority key identifier: 42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62
Certificate issuer:       /CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162
Certificate serial:       1969CBE4010C14DB5D029A214F72E0F5D48A6438
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft
Manifest number:          05
Signing time:             Mon 11 May 2026 17:09:48 +0000
Manifest this update:     Mon 11 May 2026 17:04:48 +0000
Manifest next update:     Tue 12 May 2026 17:46:48 +0000
Files and hashes:         1: 3130332e3134392e36342e302f32332d3234203d3e20313331363737.roa (hash: U1mFwcarBwcENEkbti0C1yVEmBtDzRAAAqYz8mcIUOg=)
                          2: 3130332e3134392e36342e302f32332d3234203d3e20313331363734.roa (hash: GSRooEfHneMScmMay9/suUawwfISd9M2Zp/oSqWxd5c=)
                          3: 42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl (hash: seyTcDmyQPIVqgtIVtFm+9IQUeC2TQoEQD4Jf/GkEAc=)
                          4: 323430353a653463303a3a2f33322d3634203d3e20313331363737.roa (hash: 81X32lIDsqpLyEd5Xpy3ESJVHUbt39R1tegiSMqE1PY=)
                          5: 323430353a653463303a3a2f33322d3634203d3e20313331363734.roa (hash: R5XmHRGNRbL/JzVgicSjGM6c3avdhtCi9gHhhibn8Iw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:69:cb:e4:01:0c:14:db:5d:02:9a:21:4f:72:e0:f5:d4:8a:64:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162
        Validity
            Not Before: May 11 17:04:48 2026 GMT
            Not After : May 12 17:46:48 2026 GMT
        Subject: CN=93369D6C2666D939AB6759EC5671C96EBDA5B93B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:84:81:68:24:f2:fc:2a:90:04:3c:77:1b:0d:
                    00:98:c3:0b:b1:a3:34:bc:7d:82:95:17:76:03:38:
                    4b:e2:25:a1:54:87:44:c6:39:71:5e:05:d8:f7:d4:
                    7a:f6:87:ca:de:5d:ae:e8:a4:9f:4b:6d:09:8d:1d:
                    19:da:94:7e:c1:b5:e0:bf:66:ba:93:38:a2:56:e0:
                    2b:e5:76:18:bb:9b:79:b2:4a:01:12:3e:9d:95:64:
                    2e:aa:a1:48:13:c8:e1:54:8e:d7:b2:20:d4:3f:44:
                    2d:da:67:53:11:bd:c8:f5:8b:3c:a7:3b:95:53:9f:
                    e1:97:61:f6:6b:59:6d:f9:22:75:b5:b9:98:94:39:
                    18:56:86:df:76:8f:08:e0:25:11:68:a4:c5:51:27:
                    b1:a1:9d:ea:1c:6d:0e:5d:c8:2a:e7:f2:a3:9c:b6:
                    8e:0e:0a:c1:d4:ad:8d:b2:3d:ca:b8:64:36:d0:8a:
                    71:20:81:b4:cb:54:5e:fc:b5:0c:0c:7f:b6:49:1e:
                    e8:3e:e5:6a:74:61:4a:cc:25:71:53:c6:4c:74:d5:
                    2f:30:5d:40:19:3d:af:40:ee:23:94:60:37:38:b2:
                    28:95:84:f4:6c:f7:8f:73:f2:16:6c:93:32:c9:22:
                    ba:99:03:f6:06:bf:f4:7a:ee:50:f2:4c:76:3c:71:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:36:9D:6C:26:66:D9:39:AB:67:59:EC:56:71:C9:6E:BD:A5:B9:3B
            X509v3 Authority Key Identifier:
                keyid:42:C7:F7:8E:9F:DA:00:B9:CA:3E:2D:1D:DF:5E:08:DE:A8:62:01:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/OPENFOR/0/42C7F78E9FDA00B9CA3E2D1DDF5E08DEA8620162.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:fb:39:57:32:aa:fc:52:e7:6d:ac:74:85:2b:c4:4b:49:4f:
         1d:9e:c1:91:d2:7a:8e:12:71:b0:03:64:e7:c5:67:4b:60:0b:
         6e:bb:65:97:26:ee:10:2c:df:8c:b2:ff:87:33:5e:35:67:24:
         d9:99:73:d0:e0:86:69:6a:f4:bc:95:aa:12:e7:03:bd:41:f9:
         e2:08:30:25:52:71:67:c4:87:d3:ea:a7:ef:50:27:d2:4a:58:
         4b:fd:3a:85:d0:5b:49:72:42:fa:b1:b6:44:e0:c0:bc:8e:ab:
         20:a0:29:7f:63:1c:92:87:46:e2:00:2c:7b:5c:3c:2a:cb:01:
         7b:7c:85:85:04:24:3c:4f:12:68:3d:9d:67:7e:a1:ea:06:eb:
         84:8d:0f:d0:a6:ad:ec:bd:59:7b:e6:80:5b:f1:70:76:2e:96:
         b7:98:3c:c4:0f:0d:f8:e7:b0:61:06:d4:7f:66:36:e8:58:df:
         e4:ab:b7:0c:77:7f:77:af:7d:08:dc:d8:40:54:d3:33:6a:4c:
         db:24:a4:8c:29:9b:29:0a:c9:8c:33:40:c7:e5:77:5e:19:f3:
         98:81:34:aa:8d:bf:98:f8:9a:e4:4f:80:c1:22:1b:f3:c8:47:
         1a:68:80:cf:ab:a7:50:61:e8:b6:86:88:37:ad:89:80:62:61:
         48:b6:16:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----