Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
File: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft (raw, json)
Hash identifier: +voOVPBvWOnIKK4rEFuEdZfoksU9J6dSTguheA2ozTA=
Subject key identifier: 21:7C:B5:8E:07:E6:6D:A1:B7:8B:82:8C:8B:43:BD:1A:49:69:FF:3A
Authority key identifier: 4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
Certificate issuer: /CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Certificate serial: 7EE3494ACA1EBA9A916DC6526395376428279448
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
Manifest number: 05
Signing time: Mon 11 May 2026 17:58:20 +0000
Manifest this update: Mon 11 May 2026 17:53:20 +0000
Manifest next update: Tue 12 May 2026 20:11:20 +0000
Files and hashes: 1: 4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl (hash: 5JhvlPRmnH5p/QqpRsmo/3dtyXI2ye9CryxoXZhP4zg=)
2: 3130332e3139382e3135322e302f32332d3234203d3e203231383539.roa (hash: cAZa+9mLNLRFrGmQjJmou8jCTgH3y1HwgtvgIKtzlGk=)
3: 3130332e3139382e3135322e302f32332d3234203d3e2037353336.roa (hash: RqA+16NcNPgMT4YMF2BTGjQjH/2+48khaUyObZRFtRE=)
4: 3130332e3139382e3135322e302f32332d3234203d3e2037353338.roa (hash: lozDj5Lx5lP+vcH1OuWHc2uSVB3sN9/AJEBNfjtjdxc=)
5: 3130332e3139382e3135322e302f32332d3234203d3e2037343833.roa (hash: uG7CGWdeS5uhveRrD2X7qwANEb3T2edbHmVXjF6fXlg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e3:49:4a:ca:1e:ba:9a:91:6d:c6:52:63:95:37:64:28:27:94:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6
Validity
Not Before: May 11 17:53:20 2026 GMT
Not After : May 12 20:11:20 2026 GMT
Subject: CN=217CB58E07E66DA1B78B828C8B43BD1A4969FF3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:fb:ed:97:6d:59:a7:f7:ad:1d:e0:41:69:
e8:b3:63:90:0a:be:65:e2:ea:24:57:30:0f:3f:b2:
ed:ae:b5:77:cb:b7:bc:3d:74:ef:b3:5f:2c:c2:f9:
a7:00:08:eb:fa:3c:2e:bb:f6:b8:00:d9:c9:f3:be:
60:65:d6:92:4e:73:3c:22:dc:d4:43:da:08:96:1d:
e8:79:8b:8a:2f:a1:99:ed:cc:68:1f:d5:29:6a:35:
43:69:24:78:45:6c:74:ac:43:4a:8b:7e:1e:2b:37:
ae:e1:da:a6:5e:c6:a6:33:5e:d4:6e:56:7d:0c:2c:
03:4a:c7:fb:2c:5f:79:7e:f3:88:72:6b:ba:f1:fc:
5a:2e:74:2f:35:87:b6:f7:d3:be:3d:5a:38:ec:2f:
81:fe:60:67:e2:c0:96:f7:70:a8:4d:d7:0a:4c:37:
a7:af:7f:d5:7f:92:34:6c:8b:4b:36:61:ab:55:6a:
46:74:45:80:7e:bb:64:46:cf:2f:29:d8:91:3b:d9:
bb:41:2f:d7:c7:4b:77:3b:ea:27:b0:ab:3e:40:b1:
33:cc:1b:a3:37:5d:c4:f6:8d:bf:bc:38:3c:7c:56:
ce:0c:7e:64:41:c8:82:e3:1c:76:2b:b4:fa:9c:76:
6b:c7:a6:9e:91:f1:de:61:14:24:c5:cb:cf:ed:bc:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7C:B5:8E:07:E6:6D:A1:B7:8B:82:8C:8B:43:BD:1A:49:69:FF:3A
X509v3 Authority Key Identifier:
keyid:4D:4D:BD:28:BB:EB:89:20:B3:7A:A6:04:8A:C2:7D:52:46:6A:C7:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SECUNET/0/4D4DBD28BBEB8920B37AA6048AC27D52466AC7E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:68:b7:06:4d:d3:2f:7d:62:cb:0a:75:ba:37:28:b3:2d:98:
7b:ca:d2:fa:9f:b5:c5:b2:d4:40:84:74:ad:e0:bf:3e:5b:2d:
0d:2e:07:46:c3:95:aa:88:4a:8f:26:59:23:5f:fa:57:8f:8a:
24:b5:92:ff:a8:8b:ca:8c:10:65:26:82:6e:56:66:c1:fc:33:
c7:c0:7c:0d:e3:b4:37:61:50:db:f8:10:7c:76:13:bc:c8:8e:
a9:59:02:7d:ea:d0:27:79:22:a0:ec:ad:d9:0b:1c:03:32:13:
2f:b0:13:99:d5:e4:d6:f0:33:12:a3:76:06:60:1c:5b:4e:1f:
5b:af:1f:eb:66:43:52:f9:82:5e:74:eb:d7:b9:f9:df:45:ee:
36:1f:05:0d:7f:b9:cb:e4:45:3d:50:85:c9:81:c1:54:ab:d2:
5f:6d:ad:58:e1:fc:fc:ac:21:bc:ef:1b:25:c4:e5:90:b4:4b:
ef:75:6f:48:29:ac:4f:92:e8:76:10:91:2c:e2:04:6a:66:a5:
6f:bd:8e:c8:83:8f:27:cf:63:ed:52:a3:a3:fb:05:32:f8:34:
a1:a0:91:1c:81:cf:06:8f:34:c6:63:04:d1:49:c6:ec:e0:96:
3a:6d:05:92:63:60:64:a7:64:0a:6f:e3:87:03:0b:c2:91:ac:
9b:ef:1d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:46:39 2026 by rpki-client