Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
File: 8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft (raw, json)
Hash identifier: +n4dThSKkfwnzNgHU7JibvpIw8irt0YN4eFl1qe+41M=
Subject key identifier: A4:60:88:B3:F0:6B:B5:79:7A:E0:25:79:6B:EC:D6:A6:15:C6:D6:74
Authority key identifier: 8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF
Certificate issuer: /CN=8E72F95D12197A83EB3E4E8DDB385B148EAA04FF
Certificate serial: 11277F074DCB61D9EE8ADF451962F9AADF3F6F38
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
Manifest number: 01
Signing time: Mon 11 May 2026 16:01:09 +0000
Manifest this update: Mon 11 May 2026 15:56:09 +0000
Manifest next update: Tue 12 May 2026 17:20:09 +0000
Files and hashes: 1: 8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl (hash: WgPABXQpzUXBLA8kB87mP0+bQZU/vAJR+T8M8098wUY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:27:7f:07:4d:cb:61:d9:ee:8a:df:45:19:62:f9:aa:df:3f:6f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E72F95D12197A83EB3E4E8DDB385B148EAA04FF
Validity
Not Before: May 11 15:56:09 2026 GMT
Not After : May 12 17:20:09 2026 GMT
Subject: CN=A46088B3F06BB5797AE025796BECD6A615C6D674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3d:22:44:d0:87:9d:13:36:35:ee:25:93:a8:
cf:63:0a:44:03:95:94:8f:32:3f:41:7e:56:f4:8f:
0b:19:3d:7e:30:81:0e:0d:a3:81:34:1f:f1:e4:a5:
a8:e5:80:f5:13:53:72:8a:5b:e7:83:3a:9e:a6:fd:
b3:2d:34:f3:f2:ff:b1:1d:9b:d1:08:df:76:7d:5a:
f3:3b:8a:ff:45:bd:34:ef:35:62:b9:91:6c:2a:2e:
96:dd:b0:d9:52:0b:c1:f0:e0:0b:10:b8:cc:04:02:
79:11:8c:66:81:c6:23:72:e5:f4:fa:ed:bb:da:a6:
56:56:4c:9a:f2:09:2e:83:61:c8:45:e2:d0:28:5b:
bb:c1:bf:42:04:e0:c6:fa:77:74:de:d6:fe:33:98:
79:7a:71:f7:f4:d0:c4:68:f8:0d:7a:fa:21:2f:b3:
10:ae:b7:eb:8e:25:29:b7:76:50:e0:a3:6b:06:e0:
a7:b0:c6:18:cf:0c:87:39:34:0f:cc:68:56:89:bc:
cb:10:a7:0c:ca:9e:46:d8:9d:87:69:1b:52:6b:df:
e2:40:49:fb:64:5a:b9:b6:e7:8e:f3:82:7e:e6:85:
fa:37:e5:ef:2c:92:6e:7c:32:5e:1b:e9:b5:dd:b1:
34:5c:e6:cc:fe:78:3c:51:57:32:e3:b2:ed:f0:4e:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:60:88:B3:F0:6B:B5:79:7A:E0:25:79:6B:EC:D6:A6:15:C6:D6:74
X509v3 Authority Key Identifier:
keyid:8E:72:F9:5D:12:19:7A:83:EB:3E:4E:8D:DB:38:5B:14:8E:AA:04:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RAID/0/8E72F95D12197A83EB3E4E8DDB385B148EAA04FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7a:ea:56:bb:c9:6b:36:f4:c3:b9:71:d4:d3:5f:58:0d:cd:
1c:53:8f:ab:8c:9d:e3:bb:11:53:ab:d7:1c:9a:e9:c1:f2:ef:
9f:98:b5:d1:f2:fe:9d:6a:4b:73:35:88:53:d4:05:0c:85:ed:
65:7e:f4:06:55:cd:13:59:16:bb:31:01:f0:04:1c:96:ab:2a:
b5:77:c8:2d:da:71:d2:f4:63:84:c0:bb:f4:1a:cc:ec:e6:4d:
6d:9a:98:6d:83:e7:8d:0b:fc:0a:89:44:15:44:63:f9:7e:e2:
6d:7c:c2:4b:9b:e7:87:57:ea:65:08:28:e1:d3:b8:d7:b6:02:
a9:b5:eb:18:5a:31:c6:3f:6f:d4:e6:34:13:c9:0d:b5:56:5e:
22:f8:43:b0:84:86:e5:2e:fa:0c:9c:53:cc:7c:f9:90:d1:a5:
1c:a7:e1:49:18:a7:6d:5b:06:43:d7:7f:fd:37:54:21:42:87:
e0:3c:1d:4c:bd:d5:c4:55:84:9c:c4:52:fa:f4:10:74:a3:1d:
60:c8:35:2a:ac:d1:3f:c6:4d:24:cf:fc:a1:12:d1:e3:34:04:
30:2f:4e:a0:d9:49:a6:db:db:93:83:ce:06:c8:34:9a:b7:7b:
ae:ab:fb:b3:d7:a0:6b:96:24:78:06:6d:cd:8d:18:2e:65:c0:
e1:c5:fa:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:46:44 2026 by rpki-client