Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
File:                     9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft (raw, json)
Hash identifier:          ewHwtANxH7eF6UD6HA2U1gtI5+eIifLCc1CIi1y/yOU=
Subject key identifier:   9B:87:30:95:55:9C:B0:EC:23:C9:5F:75:73:8E:25:3A:A0:09:A8:E5
Authority key identifier: 9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5
Certificate issuer:       /CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
Certificate serial:       56DA808BA2F23859A7F837DA0CFE8BCBA4B1F816
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft
Manifest number:          A9
Signing time:             Mon 11 May 2026 17:58:56 +0000
Manifest this update:     Mon 11 May 2026 17:53:56 +0000
Manifest next update:     Tue 12 May 2026 19:51:56 +0000
Files and hashes:         1: AS20940.roa (hash: 1RosFopazmJlrHrL/JjHf3/ozT0fK1MvWHP571CYGz4=)
                          2: AS9924.roa (hash: r3fsGgFVN/8oQIX0mHv7W+GL7anAJUUTvQhEsNy2APg=)
                          3: AS131628.roa (hash: Y9kc8B+Z+pn3XEL2DISILZAM1tomlSiZFJWaZWGFzik=)
                          4: AS133747.roa (hash: sYTVDtshx/FPq+n+PqCFHtr6Z60U3spY948bL/gvNKg=)
                          5: AS24158.roa (hash: oSamXs2ONWSTZysY+Q9Qf9zAoLqjdYSQalFFnMeIIfs=)
                          6: AS18049.roa (hash: imAPk9R9jVyd99WO7kKgIQi9HdZOdv8Ferlvd6YDpo8=)
                          7: AS135596.roa (hash: caNPIPRF85PksNjls2RzJz6sn1rtan+Qq+rGyhDOvrA=)
                          8: AS24163.roa (hash: 9lSdpz0zEsjYqlA3fg9asDJRD27zJFvKpKMcTzg3usY=)
                          9: AS4662.roa (hash: lHIuLtTj83mFjYPzEwOiNcz0ICSbQuNvvLN4QS9Hg8s=)
                          10: AS131611.roa (hash: mvKazFQTqWEYfFel9UNSPzchLE55lx9ddNLi4292dQY=)
                          11: AS24164.roa (hash: emjsjnNx4a98FkY0YlgYFKbr6Cj7Q2Ztt9CWalYN91I=)
                          12: AS13335.roa (hash: KqL6uWmq2coJQx1vKzz61SKNsd0orrId3UgpDtG9ZEM=)
                          13: AS3911.roa (hash: 04MUBmX9Txx4oAnl8VJRVeR34OAhrsKOU9XnmsvvQnQ=)
                          14: 9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl (hash: 8k+JMmT0AALnII21zZGi0Aw46IWf+eIy6VBPJSOav8Q=)
                          15: AS131634.roa (hash: 7LDJ695va58I/1dPohOKBdAdgf4UvABfbWVL7H+yXhY=)
                          16: AS19551.roa (hash: K42R6DMDmIcWxpBPO/uVl2iyVu3yapsM7yn/fxqw9OY=)
                          17: AS131602.roa (hash: c8PBaVi8xGWite7/HXu2sVqC0IX6KfOc8Tk7zANSpMs=)
                          18: AS24165.roa (hash: 9jt/4zU4+ts0o/vd18Ywb3wr2Nts54vHZqoTaw78B4k=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:da:80:8b:a2:f2:38:59:a7:f8:37:da:0c:fe:8b:cb:a4:b1:f8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5
        Validity
            Not Before: May 11 17:53:56 2026 GMT
            Not After : May 12 19:51:56 2026 GMT
        Subject: CN=9B873095559CB0EC23C95F75738E253AA009A8E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:17:cb:53:91:89:31:52:64:43:0d:fc:97:2f:
                    5d:6f:39:4c:b0:2f:6a:9f:db:65:39:57:1f:c7:62:
                    28:cb:2e:d6:1d:40:62:ae:bf:68:8c:04:ae:a4:ce:
                    6c:db:c4:e1:26:80:33:2e:9e:3b:71:53:c6:1a:9b:
                    ec:47:5d:58:4d:50:1d:1a:8c:cc:df:d9:7d:9d:19:
                    7b:b8:3d:76:9f:3a:62:41:8b:47:c2:1a:58:e6:32:
                    2f:ee:99:eb:30:53:ac:ef:49:08:77:44:f1:c0:02:
                    a5:aa:b1:1a:46:dc:c9:17:4b:89:70:f1:b8:e0:bd:
                    82:5f:13:a8:8d:96:09:1f:4f:23:14:af:b0:32:7d:
                    76:2b:59:1c:c5:c7:73:96:7b:52:f6:57:94:df:da:
                    a7:e5:42:89:de:58:26:8e:e8:17:d1:f7:a3:ff:e6:
                    e5:30:32:42:84:44:33:de:d1:f0:3c:aa:59:0f:52:
                    47:6f:71:3f:e1:ae:f3:96:05:a7:b3:1c:95:d0:ee:
                    61:bd:9f:82:44:ca:bb:7d:89:55:d1:2c:8c:d2:50:
                    fc:25:18:d9:af:03:84:22:a6:96:b3:38:a4:1f:b7:
                    0b:4a:86:75:a6:b2:81:6d:c9:70:82:30:76:83:17:
                    4f:7c:fb:17:12:11:bd:d2:c0:e2:95:01:40:bb:c3:
                    c2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:87:30:95:55:9C:B0:EC:23:C9:5F:75:73:8E:25:3A:A0:09:A8:E5
            X509v3 Authority Key Identifier:
                keyid:9B:01:D5:A4:96:75:5D:F6:9A:C9:2F:EC:3B:D6:4F:FE:4A:EA:51:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/PROFOND/0/9B01D5A496755DF69AC92FEC3BD64FFE4AEA51F5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:07:91:fd:17:42:aa:f6:8e:35:88:de:ed:0f:d2:9d:e6:16:
         99:a2:9a:53:01:14:bb:b8:13:50:4c:a4:31:bf:d1:13:9d:53:
         2b:35:c0:3a:0f:ad:a6:20:7f:fd:69:ad:57:c2:2a:08:25:e7:
         83:72:62:74:77:44:82:f1:46:98:ae:a2:c8:37:53:0f:fa:7d:
         ee:d4:04:91:2a:35:f4:dd:e3:c9:54:69:72:53:62:df:59:f1:
         d6:f8:02:15:7b:ea:ac:c1:bb:fa:5f:9d:98:b6:89:54:4a:33:
         51:77:3c:ac:fb:35:78:55:19:10:60:82:ad:4f:94:c0:53:1f:
         2c:d9:99:22:26:e6:9d:68:ca:46:15:73:c1:40:38:4d:87:d7:
         24:06:a8:5a:d9:6e:fc:f5:03:e1:18:6b:28:fd:47:fc:6b:2a:
         f8:60:ef:17:5e:95:50:6f:78:08:ed:3b:9b:87:96:3a:c1:af:
         20:a1:08:64:19:4e:5e:15:21:c5:54:2f:58:eb:15:0b:1a:7b:
         d5:7e:8f:73:60:e5:d8:51:ab:e2:3d:b0:77:ec:0b:0e:4a:40:
         4d:69:db:5a:db:41:84:77:98:31:5a:87:1b:06:20:2b:47:5c:
         ce:79:1f:94:39:9a:56:91:ed:22:1c:6a:ca:04:c9:f2:d1:b0:
         ae:67:e9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:39:39 2026 by rpki-client