Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
File: 7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft (raw, json)
Hash identifier: wa8CsqMnypkp6IFQcRSmV1gTQ4RsmZ8xeSH04mD6nNc=
Subject key identifier: 43:A1:F1:5E:1E:39:57:DB:26:74:E8:45:21:76:2D:CD:3D:99:53:A7
Authority key identifier: 7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76
Certificate issuer: /CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
Certificate serial: 3BF6CD71252FE3C146ED757CB03129A9567704C8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
Manifest number: 02
Signing time: Mon 11 May 2026 17:37:59 +0000
Manifest this update: Mon 11 May 2026 17:32:59 +0000
Manifest next update: Tue 12 May 2026 19:49:59 +0000
Files and hashes: 1: 3130332e36392e34382e302f32332d3332203d3e20313331363432.roa (hash: o7B66t9SqLTxpoTquQyKEFqbdaVVWkZmLbtbMwzYiRQ=)
2: 7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl (hash: I9+PkFjeD3XXgaXZNo3a54k92gcLd8FJ+qXocl9LnOk=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f6:cd:71:25:2f:e3:c1:46:ed:75:7c:b0:31:29:a9:56:77:04:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CD85D0DDA75F492D954402BFEA819ED61FD5B76
Validity
Not Before: May 11 17:32:59 2026 GMT
Not After : May 12 19:49:59 2026 GMT
Subject: CN=43A1F15E1E3957DB2674E84521762DCD3D9953A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:98:85:a7:d1:71:c3:12:cd:f1:f1:fc:70:
3d:f7:a8:11:d3:0c:d3:44:77:2b:f8:f0:67:d6:ab:
1a:00:19:ff:0f:64:92:df:fa:1e:ac:08:fe:3d:fd:
fb:cf:83:61:65:ad:b9:af:e2:3e:81:0d:22:e6:6b:
d2:65:e0:57:d3:4c:a2:5a:0e:0f:22:37:f3:fb:0f:
c9:f0:3d:53:d9:54:c3:d4:a0:c5:5e:96:66:9e:98:
d5:57:12:7d:0c:51:dd:3f:87:0d:7d:b3:39:bb:61:
d2:fe:9b:92:57:5c:0f:48:78:1d:43:c2:10:7a:6b:
84:26:c3:5c:96:fc:94:d7:48:b0:00:4e:26:85:c6:
39:3d:d7:80:0b:44:bd:91:42:62:72:37:7a:8a:c0:
eb:7e:eb:31:47:2d:4a:05:f2:dd:7b:45:5c:3d:c9:
94:c9:3e:be:1c:7e:3c:e2:58:2a:9f:ac:9c:a9:cc:
c1:59:f1:77:88:20:da:ab:16:32:4b:df:8e:1f:c3:
b0:cc:83:5d:be:05:1a:a8:23:c6:bb:c0:61:6b:d3:
70:6d:65:45:a3:e5:a6:ca:d1:ef:56:d5:bc:ce:cd:
56:ab:c0:8f:8e:77:4d:12:ca:ed:9e:ac:b1:33:1b:
26:3a:e7:03:10:75:b1:56:a1:c3:25:90:53:6c:f2:
83:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A1:F1:5E:1E:39:57:DB:26:74:E8:45:21:76:2D:CD:3D:99:53:A7
X509v3 Authority Key Identifier:
keyid:7C:D8:5D:0D:DA:75:F4:92:D9:54:40:2B:FE:A8:19:ED:61:FD:5B:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/RENREN/0/7CD85D0DDA75F492D954402BFEA819ED61FD5B76.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:85:04:bb:98:b6:3a:45:72:bc:31:51:73:f4:6d:0d:19:93:
b3:63:5c:95:f4:72:ee:6f:17:2f:25:b5:84:d2:c8:4c:fd:1a:
11:84:a5:f9:a4:f3:8d:8a:7d:a9:c3:67:b0:d4:19:d2:7b:db:
16:16:18:22:2a:e5:18:32:09:0f:55:44:76:b7:18:ad:30:49:
7b:1c:4f:f4:33:75:a7:1d:52:7c:80:4b:c9:21:d6:6c:1a:8f:
eb:a5:d3:94:47:47:20:bb:75:31:08:38:38:27:60:97:c9:ca:
34:2c:c5:98:0e:b5:4f:20:ce:7e:71:a3:4a:de:84:af:75:07:
8a:e2:74:66:a1:c3:b1:e3:68:61:f2:7c:42:5a:25:c2:a6:38:
44:1b:ef:c5:7c:04:f7:97:57:58:87:ca:e7:d5:d7:b3:ac:28:
a8:2c:1d:d0:22:27:96:0f:36:2c:4c:6e:98:47:58:fd:dd:ea:
76:18:74:e0:ad:8d:47:f6:04:10:54:f5:f7:8b:fc:f0:c0:24:
ab:aa:7b:9c:f2:5a:c0:a0:4d:48:d2:85:09:9b:4d:6e:56:97:
3f:1a:95:07:0b:24:bc:c3:16:39:6c:ac:f8:04:34:ba:ae:51:
20:6e:8b:39:57:92:1e:d9:02:8f:2b:6d:20:8c:e8:dd:56:26:
22:f9:63:48
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUO/bNcSUv48FG7XV8sDEpqVZ3BMgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NEODVEMEREQTc1RjQ5MkQ5NTQ0MDJCRkVBODE5RUQ2
MUZENUI3NjAeFw0yNjA1MTExNzMyNTlaFw0yNjA1MTIxOTQ5NTlaMDMxMTAvBgNV
BAMTKDQzQTFGMTVFMUUzOTU3REIyNjc0RTg0NTIxNzYyRENEM0Q5OTUzQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88ZiFp9FxwxLN8fH8cD33qBHT
DNNEdyv48GfWqxoAGf8PZJLf+h6sCP49/fvPg2Flrbmv4j6BDSLma9Jl4FfTTKJa
Dg8iN/P7D8nwPVPZVMPUoMVelmaemNVXEn0MUd0/hw19szm7YdL+m5JXXA9IeB1D
whB6a4Qmw1yW/JTXSLAATiaFxjk914ALRL2RQmJyN3qKwOt+6zFHLUoF8t17RVw9
yZTJPr4cfjziWCqfrJypzMFZ8XeIINqrFjJL344fw7DMg12+BRqoI8a7wGFr03Bt
ZUWj5abK0e9W1bzOzVarwI+Od00Syu2erLEzGyY65wMQdbFWocMlkFNs8oOlAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUQ6HxXh45V9smdOhFIXYtzT2ZU6cwHwYDVR0j
BBgwFoAUfNhdDdp19JLZVEAr/qgZ7WH9W3YwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUkVOUkVO
LzAvN0NEODVEMEREQTc1RjQ5MkQ5NTQ0MDJCRkVBODE5RUQ2MUZENUI3Ni5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS83Q0Q4NUQwRERBNzVGNDkyRDk1NDQwMkJGRUE4
MTlFRDYxRkQ1Qjc2LmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvUkVOUkVOLzAvN0NEODVEMEREQTc1
RjQ5MkQ5NTQ0MDJCRkVBODE5RUQ2MUZENUI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHCFBLuYtjpF
crwxUXP0bQ0Zk7NjXJX0cu5vFy8ltYTSyEz9GhGEpfmk842KfanDZ7DUGdJ72xYW
GCIq5RgyCQ9VRHa3GK0wSXscT/QzdacdUnyAS8kh1mwaj+ul05RHRyC7dTEIODgn
YJfJyjQsxZgOtU8gzn5xo0rehK91B4ridGahw7HjaGHyfEJaJcKmOEQb78V8BPeX
V1iHyufV17OsKKgsHdAiJ5YPNixMbphHWP3d6nYYdOCtjUf2BBBU9feL/PDAJKuq
e5zyWsCgTUjShQmbTW5Wlz8alQcLJLzDFjlsrPgENLquUSBuizlXkh7ZAo8rbSCM
6N1WJiL5Y0g=
-----END CERTIFICATE-----
Generated at Tue May 12 23:55:23 2026 by rpki-client