Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
File:                     9F4621BE2CEB15DD74809D52692588598490FABF.mft (raw, json)
Hash identifier:          kDCeqT5wI7rjzW8Tkry2kp35L2tgwQBdzU25SxvWpsA=
Subject key identifier:   C2:2C:9E:3F:54:5D:E5:24:B9:D7:D6:3C:C7:91:73:9A:E5:15:45:42
Authority key identifier: 9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF
Certificate issuer:       /CN=9F4621BE2CEB15DD74809D52692588598490FABF
Certificate serial:       75D58E86B0710FF637B20657060A7D0122ABD94A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft
Manifest number:          08
Signing time:             Mon 11 May 2026 17:58:38 +0000
Manifest this update:     Mon 11 May 2026 17:53:38 +0000
Manifest next update:     Tue 12 May 2026 21:38:38 +0000
Files and hashes:         1: 323430353a636463303a3a2f33322d313234203d3e20313331363432.roa (hash: B+rZIPiEbFPdUxH0aia2ffpZrMmBBOdtjQ5TGrFZI/g=)
                          2: 3130332e3133372e36322e302f32332d3332203d3e20313331363432.roa (hash: Om14eoHT5IhomeKnYkvjKpVL1HxviUxm8BBB1REH3/4=)
                          3: 3130332e3133372e3234362e302f32332d3332203d3e20313331363432.roa (hash: taJQRTDQ90UxXadAvWM0GS41DZC0w4SutBUxh10g3Ls=)
                          4: 3130332e3135372e34322e302f32332d3332203d3e20323033353438.roa (hash: nYR+Ml8lrCk7Dl21maH1wtxMxSe7KjzyLwH7FozLC7o=)
                          5: 3230322e3134382e3232322e302f32332d3332203d3e20313331363432.roa (hash: QSozWjihGPRSxS1l+02abUaaKtc4iDRAVQB/oWLei3c=)
                          6: 3130332e3134382e37322e302f32332d3332203d3e20313331363432.roa (hash: OLaMU17HmXpsMBlzaeBhODO2N7nOliRaF32TUtfckJg=)
                          7: 3231312e37362e3137362e302f32332d3332203d3e20313331363432.roa (hash: Neacdwz6usPvpnxdcJO7WdPsbmwrbKBYPAqd9PXlS3o=)
                          8: 9F4621BE2CEB15DD74809D52692588598490FABF.crl (hash: qL5mHcYxhSMhnW6VyRnsojjB+MyoZuRvDpq7Uzku8uI=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d5:8e:86:b0:71:0f:f6:37:b2:06:57:06:0a:7d:01:22:ab:d9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F4621BE2CEB15DD74809D52692588598490FABF
        Validity
            Not Before: May 11 17:53:38 2026 GMT
            Not After : May 12 21:38:38 2026 GMT
        Subject: CN=C22C9E3F545DE524B9D7D63CC791739AE5154542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:3a:91:43:68:fb:78:90:d5:79:ca:fc:70:
                    52:0d:92:1b:d0:59:78:56:50:29:da:34:fd:aa:a3:
                    c0:67:eb:62:c2:8d:8f:0d:ea:40:ba:12:52:da:2b:
                    42:5a:45:1f:e3:fd:20:01:69:7a:4a:a6:e5:af:67:
                    a5:1f:51:cb:af:bd:97:9f:2e:e8:70:f2:c7:2d:2b:
                    10:16:78:03:75:ec:4f:c2:a0:39:5a:40:1b:0d:9b:
                    e4:c4:e9:a9:26:de:96:88:6b:fb:fe:c4:b8:cc:e4:
                    af:75:d5:07:38:d8:d4:a4:fe:dc:13:2a:61:76:61:
                    de:82:49:32:82:92:81:83:18:05:5f:16:ce:8c:fd:
                    46:92:6a:0e:72:c8:72:f3:d1:9a:d2:60:fc:1b:5f:
                    d8:96:f9:95:de:8d:15:0e:1d:bc:24:61:e6:0c:fb:
                    49:65:92:02:7e:35:e7:f7:30:d3:c3:0a:c1:bb:ad:
                    9c:d8:d7:cb:a2:0f:ae:8d:2a:68:80:03:6c:5e:f3:
                    f2:ca:3a:f8:57:6b:6c:e8:85:34:a2:9a:65:7a:0f:
                    a7:3a:79:51:11:e1:ab:f9:8c:c7:f7:6d:60:79:75:
                    be:ee:6f:d1:a0:ac:92:cf:b7:d9:23:51:5d:d3:e0:
                    3e:60:50:c8:3d:f3:bc:0a:e0:c9:5c:40:22:a2:9e:
                    0e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2C:9E:3F:54:5D:E5:24:B9:D7:D6:3C:C7:91:73:9A:E5:15:45:42
            X509v3 Authority Key Identifier:
                keyid:9F:46:21:BE:2C:EB:15:DD:74:80:9D:52:69:25:88:59:84:90:FA:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9F4621BE2CEB15DD74809D52692588598490FABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PNI/0/9F4621BE2CEB15DD74809D52692588598490FABF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:15:5f:1b:fd:82:7a:32:62:1e:ff:d4:fc:65:f0:ac:92:9b:
         78:bc:ee:02:51:3a:2b:d4:09:45:3a:b9:3d:67:9a:d9:2b:df:
         08:fa:77:cb:18:67:02:5d:d3:71:fa:49:37:66:2e:36:8f:e1:
         eb:ee:e5:ec:ad:67:f7:f1:69:01:1b:6e:d5:90:8a:eb:ec:5c:
         d6:b1:ce:78:1b:a9:8c:37:b5:04:ee:95:e2:e5:7f:04:26:a1:
         7d:a6:ec:bf:52:ed:23:6a:83:bd:c3:9a:9c:07:7c:49:82:e7:
         50:aa:13:9f:8f:56:ab:84:e5:1c:1a:c3:f1:d8:f7:36:7b:e3:
         fe:66:ea:bc:21:7a:0c:9c:50:8c:23:c0:75:0a:f4:33:b8:20:
         36:c0:c2:f2:00:35:76:1f:47:1a:3f:1f:a0:ba:33:b0:11:53:
         e3:c6:1a:e8:91:69:66:73:ea:32:dc:b7:6b:06:6e:e5:24:2d:
         d5:ac:7a:77:4d:bd:31:81:8b:ff:e3:01:46:bc:f0:48:ca:29:
         fe:3e:25:41:48:03:02:3c:bf:22:e2:01:84:33:32:3e:b4:77:
         95:53:7a:e8:6f:30:2f:0c:56:92:a9:dd:66:2c:67:e7:7c:d0:
         9c:36:dd:40:6e:d9:96:3f:ed:81:22:ff:e4:00:28:71:6f:d7:
         4b:e6:40:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----