Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
File: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft (raw, json)
Hash identifier: y87Vnd4U4n4R5cQ51mMaDeLPixGVgBojt/sdKFbz7qE=
Subject key identifier: 10:A3:7C:6D:21:3D:72:CB:4C:91:00:8E:9E:B1:7B:4D:51:22:29:4F
Authority key identifier: 08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
Certificate issuer: /CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Certificate serial: 4E4633B10D1C3EEE915B1ACAA195765216038AE9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
Manifest number: 03
Signing time: Mon 11 May 2026 17:39:10 +0000
Manifest this update: Mon 11 May 2026 17:34:10 +0000
Manifest next update: Tue 12 May 2026 19:46:10 +0000
Files and hashes: 1: 08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl (hash: X4WqnWvwYbJXtDzORVsjKo+Z1JV8+9M0kKA6IM0sMTE=)
2: 3130332e33372e352e302f32342d3234203d3e2039363738.roa (hash: vq7Kkz8vi0K2HzkGDtDsKnFEZtHIaVtYlOC9mpxUIrQ=)
3: 3130332e33372e342e302f32342d3234203d3e2039363738.roa (hash: hQIZ2hKwplVh7xrppd5ykMhUFjuzMmmFpmHvfAwSwiU=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:46:33:b1:0d:1c:3e:ee:91:5b:1a:ca:a1:95:76:52:16:03:8a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE
Validity
Not Before: May 11 17:34:10 2026 GMT
Not After : May 12 19:46:10 2026 GMT
Subject: CN=10A37C6D213D72CB4C91008E9EB17B4D5122294F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:f5:62:a3:32:95:5d:a8:b2:59:7f:48:03:
ab:b4:07:76:c2:ae:e7:7d:1d:c0:dc:5b:ac:4a:60:
32:80:c2:fe:78:17:e5:32:44:2a:9b:45:c9:08:82:
5a:bf:da:e5:ca:23:22:3c:c9:d4:65:2a:01:44:2f:
1a:87:2f:5f:dc:7e:c3:45:e1:2c:4c:7f:0a:11:8b:
6c:2a:22:54:c1:1a:a7:88:06:45:f4:e2:8e:b0:f5:
23:5e:8a:2c:a1:a5:7a:3a:5b:4f:4c:7c:76:be:e8:
ad:4e:13:b2:b8:b2:fa:7d:3a:ec:29:0e:3a:84:e4:
fd:28:2f:e0:1e:99:57:33:ce:64:7b:79:78:f1:db:
b5:e1:35:6d:78:9a:05:d4:b0:80:54:6a:9e:20:3a:
f2:af:1c:a6:f2:64:0f:ba:b4:9a:5c:bb:ed:3d:b4:
2c:45:ff:d3:f7:a2:6a:e6:ab:70:6f:58:3f:d2:0a:
9c:67:cd:bb:e0:28:eb:f6:cf:e4:97:e4:4d:19:26:
50:1d:c9:94:f7:70:d8:cb:8d:44:1c:12:b9:ea:c3:
d4:c9:bf:b3:98:40:1f:3e:67:32:69:b3:2e:7b:24:
10:b4:f6:ab:b8:ee:30:d5:c1:72:98:15:7d:af:7a:
99:ad:db:b8:d5:aa:4d:66:a0:b3:11:e3:55:0e:43:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A3:7C:6D:21:3D:72:CB:4C:91:00:8E:9E:B1:7B:4D:51:22:29:4F
X509v3 Authority Key Identifier:
keyid:08:A0:3C:F9:C1:D3:AF:93:CF:DB:0A:2C:1D:87:8D:A6:02:75:D4:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SMTRTCH/0/08A03CF9C1D3AF93CFDB0A2C1D878DA60275D4FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4a:9e:96:29:20:ee:fa:d4:79:7c:50:df:1a:a9:e1:a4:55:
dd:91:30:34:a6:52:fa:04:b0:5c:77:f3:82:e2:e9:52:38:ad:
35:50:e2:bc:a5:1d:71:83:ae:c7:3d:2c:42:a6:19:a5:4b:70:
8c:8f:c8:93:e6:c5:1b:8f:b1:0e:49:b3:8a:8d:d6:34:10:62:
24:a5:df:35:ff:99:9a:2a:89:26:74:b9:fa:19:d9:7a:db:88:
04:dc:4b:4c:39:df:44:7b:78:85:75:c0:65:eb:b5:c4:3c:47:
64:df:15:da:54:11:c3:b4:c8:8a:f1:9a:1f:71:f4:e1:c3:d0:
84:5c:f5:e4:2d:42:0a:a1:0d:e3:f1:fa:9a:54:21:5e:99:5f:
70:df:1d:47:68:69:cc:2a:01:0b:38:e8:99:ca:12:49:c5:d9:
b0:04:7f:5b:d5:24:25:61:45:82:90:e5:89:2b:07:e1:22:df:
e7:32:f5:77:97:c0:64:06:4f:2d:d6:f1:c2:ba:bc:9c:e1:95:
17:7a:08:db:af:3b:10:2e:27:21:73:fa:ec:c1:5e:8e:71:e0:
31:cb:af:9b:83:59:28:92:b6:ef:48:dd:f8:a5:18:4e:c0:cc:
2f:43:6b:ec:4e:dd:f9:b2:30:85:05:a0:b5:c7:60:57:f6:33:
05:39:6a:95
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUTkYzsQ0cPu6RWxrKoZV2UhYDiukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhBMDNDRjlDMUQzQUY5M0NGREIwQTJDMUQ4NzhEQTYw
Mjc1RDRGRTAeFw0yNjA1MTExNzM0MTBaFw0yNjA1MTIxOTQ2MTBaMDMxMTAvBgNV
BAMTKDEwQTM3QzZEMjEzRDcyQ0I0QzkxMDA4RTlFQjE3QjRENTEyMjI5NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe3/ViozKVXaiyWX9IA6u0B3bC
rud9HcDcW6xKYDKAwv54F+UyRCqbRckIglq/2uXKIyI8ydRlKgFELxqHL1/cfsNF
4SxMfwoRi2wqIlTBGqeIBkX04o6w9SNeiiyhpXo6W09MfHa+6K1OE7K4svp9Ouwp
DjqE5P0oL+AemVczzmR7eXjx27XhNW14mgXUsIBUap4gOvKvHKbyZA+6tJpcu+09
tCxF/9P3omrmq3BvWD/SCpxnzbvgKOv2z+SX5E0ZJlAdyZT3cNjLjUQcErnqw9TJ
v7OYQB8+ZzJpsy57JBC09qu47jDVwXKYFX2vepmt27jVqk1moLMR41UOQ0KHAgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQUEKN8bSE9cstMkQCOnrF7TVEiKU8wHwYDVR0j
BBgwFoAUCKA8+cHTr5PP2wosHYeNpgJ11P4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU01UUlRD
SC8wLzA4QTAzQ0Y5QzFEM0FGOTNDRkRCMEEyQzFEODc4REE2MDI3NUQ0RkUuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMDhBMDNDRjlDMUQzQUY5M0NGREIwQTJDMUQ4
NzhEQTYwMjc1RDRGRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1NNVFJUQ0gvMC8wOEEwM0NGOUMx
RDNBRjkzQ0ZEQjBBMkMxRDg3OERBNjAyNzVENEZFLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUqelikg
7vrUeXxQ3xqp4aRV3ZEwNKZS+gSwXHfzguLpUjitNVDivKUdcYOuxz0sQqYZpUtw
jI/Ik+bFG4+xDkmzio3WNBBiJKXfNf+ZmiqJJnS5+hnZetuIBNxLTDnfRHt4hXXA
Zeu1xDxHZN8V2lQRw7TIivGaH3H04cPQhFz15C1CCqEN4/H6mlQhXplfcN8dR2hp
zCoBCzjomcoSScXZsAR/W9UkJWFFgpDliSsH4SLf5zL1d5fAZAZPLdbxwrq8nOGV
F3oI2687EC4nIXP67MFejnHgMcuvm4NZKJK270jd+KUYTsDML0Nr7E7d+bIwhQWg
tcdgV/YzBTlqlQ==
-----END CERTIFICATE-----
Generated at Tue May 12 22:52:29 2026 by rpki-client