Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft
File:                     3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft (raw, json)
Hash identifier:          P4Pz7pyaeGhg3Kg7pKMsA/Xe8/3GMXi3ok6tQMo6GKs=
Subject key identifier:   3D:B5:27:ED:23:C0:A7:4C:DF:6F:F3:84:69:7E:3F:7D:C7:73:52:61
Authority key identifier: 3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF
Certificate issuer:       /CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
Certificate serial:       2A92317FDFC6711705F1A4FE07DE03AFE9A7F616
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft
Manifest number:          17
Signing time:             Mon 11 May 2026 17:38:15 +0000
Manifest this update:     Mon 11 May 2026 17:33:15 +0000
Manifest next update:     Tue 12 May 2026 18:45:15 +0000
Files and hashes:         1: 36312e36342e36342e302f31382d3234203d3e203138313832.roa (hash: ZufTl96QJSTGjjHHnlV902JYYFFNTIDFxh070LDkULs=)
                          2: 33392e312e33322e302f32312d3234203d3e2039393232.roa (hash: VNQcRXeOE/j/rdkFQwcA1LclvGgGVBSj6YxVH+Y+B5E=)
                          3: 33392e312e302e302f32302d3234203d3e2039393232.roa (hash: XsN+8OXikSiKwT554Z/8JtJMRKlDNFZ1zHxkg1sQLrI=)
                          4: 33392e312e34372e302f32342d3234203d3e2039393232.roa (hash: Drtv5JpDCKBUTLlwm2QdYijdfjd//4f1UxcFzmvf4Yg=)
                          5: 33392e312e34382e302f32302d3234203d3e2039393232.roa (hash: TTEoeJ1Nt73LCduyQM6y6wzx3+jdUSQumP9bhes2+UY=)
                          6: 3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl (hash: w9mwqRXQufKan8JKBY4SEvG8UkX8uOXD4Mu3HPYWREo=)
                          7: 33392e312e34302e302f32322d3234203d3e2039393232.roa (hash: z5CRvkmrV5KJFcdljtPbVmXZST0Ame/3ck3rEFg8aGM=)
                          8: 33392e312e34362e302f32342d3234203d3e2039393232.roa (hash: onwq6khytNt8j9JeiESYQPMZkrctbzkf2UmQhqWpjYw=)
                          9: 36312e36342e3132382e302f31372d3234203d3e203138313832.roa (hash: AP04YgE4U4X0DbCKpFBdjCNZlauxNQuycSDnxfq2LBo=)
                          10: 33392e312e39362e302f32302d3234203d3e203138343139.roa (hash: W4A9R2ruP8BpTxaCGm9udnAE3yQmyw/+pOzjhpIfz0Y=)
                          11: 323430343a38303a3a2f32382d3438203d3e203138313832.roa (hash: gD1x4xXT4Z6eEJ+bwB2oDJNQCUbNjWpPyKuQClgUoNQ=)
                          12: 32372e3130352e38322e302f32342d3234203d3e203332373837.roa (hash: 1sg7Wk2e/ZdonH5PhiuzAv6jLByDCAyoVpPFtRuPk6A=)
                          13: 33392e312e31362e302f32302d3234203d3e2039393232.roa (hash: o5tck8QLFY02tn9jNvUElQeuTpHy+ammIuF39TN/Cn4=)
                          14: 3231392e38352e302e302f31362d3234203d3e203138313832.roa (hash: TkTwJY6tgXdxY0w+yf0JfiJDrdGZLKSEjlzpI3ieJUU=)
                          15: 36312e36322e302e302f31362d3234203d3e203138313832.roa (hash: ifIFQrYUhM297jse0mQ1w+HqkUSGHCWju3weIN7aUQs=)
                          16: 33392e312e34342e302f32342d3234203d3e2039393232.roa (hash: dh03y3MeArVsb+oESUBRNDxrsrn5jbUmgM4ZXBS0tXU=)
                          17: 33392e312e36342e302f32302d3234203d3e2039393232.roa (hash: juMnZBysyILQxgKPuDDStLHZSQ2rmujkQS4MrnwwJ/s=)
                          18: 33392e312e302e302f31362d3234203d3e203138313832.roa (hash: CffvCFfDEQybZwp62g5aXFZex+pvcH1gSZG/H/2FRO0=)
                          19: 3231392e38342e302e302f31362d3234203d3e203138313832.roa (hash: 8fiqTkiu9MOMh1suF5MiCOJuDwIsVQ34W7YS4b6Ylb8=)
                          20: 32372e3130352e3230362e302f32342d3234203d3e203435343734.roa (hash: 9Cuads8Xj/H3SUpgMMXmElqrysGMLgLQcPn8+WPxZaA=)
                          21: 36312e35362e3132382e302f31392d3234203d3e203138313832.roa (hash: Wz4YbIAlDY3Rql9HeEh2BYj6+M1ftVPyXgPvQ2mi8EE=)
                          22: 32372e3130352e302e302f31362d3234203d3e203138313832.roa (hash: LmAW7PeQcegNvt2M9HNQbyVlYetXrEvSkZVhVCt+ooY=)
                          23: 33392e312e34352e302f32342d3234203d3e2039393232.roa (hash: ryqYKYb9ZEnNDprKt9KNFJe6hMX8qggWXnAtJIFQzic=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:92:31:7f:df:c6:71:17:05:f1:a4:fe:07:de:03:af:e9:a7:f6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF
        Validity
            Not Before: May 11 17:33:15 2026 GMT
            Not After : May 12 18:45:15 2026 GMT
        Subject: CN=3DB527ED23C0A74CDF6FF384697E3F7DC7735261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:38:40:b7:1f:53:02:d3:a9:c9:3d:23:c1:
                    5f:a4:c9:ca:01:bf:48:54:40:ed:7a:ee:ef:bf:49:
                    48:58:ec:26:08:b6:db:9a:23:82:2e:e3:fe:a7:17:
                    26:99:6b:d4:7c:b3:78:b2:5a:bc:9f:42:29:77:f9:
                    0d:55:fd:a8:6b:1d:c9:99:cc:bb:e7:dd:72:6e:8a:
                    7f:15:05:70:ea:6f:4e:23:76:98:ed:24:75:f2:39:
                    7c:34:e3:e2:02:8f:bf:51:1a:45:5b:1b:d8:97:03:
                    fa:86:4d:78:c9:0d:65:fc:95:3e:36:33:d9:fc:30:
                    b2:8d:a0:b0:c2:13:29:41:e7:c6:de:4d:87:64:90:
                    b5:55:1b:42:9b:db:ed:2c:c7:79:59:2d:10:f9:ac:
                    d2:ef:09:86:a6:ce:7e:25:37:8a:34:6c:5c:7f:69:
                    50:b5:6c:04:7d:a3:f4:a0:83:74:10:ac:eb:71:8b:
                    90:d9:1e:4c:8d:67:1b:42:94:65:7e:bc:3f:46:6c:
                    18:65:90:37:5e:0f:d5:61:72:a7:d9:b5:97:0e:e3:
                    cc:a5:98:13:01:3a:0d:d2:41:99:ab:73:82:df:4b:
                    92:e3:bb:87:a8:0f:2e:46:89:30:55:2b:31:1d:4b:
                    c1:bd:9d:1a:a0:60:0f:b3:31:34:20:5f:a7:08:7a:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B5:27:ED:23:C0:A7:4C:DF:6F:F3:84:69:7E:3F:7D:C7:73:52:61
            X509v3 Authority Key Identifier:
                keyid:3F:6D:33:C9:B3:9C:FC:95:0A:2D:3D:BC:78:13:1E:1A:AF:8C:C8:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SONET/0/3F6D33C9B39CFC950A2D3DBC78131E1AAF8CC8EF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ed:46:b0:4c:e3:19:5b:cb:27:1a:49:ef:1b:74:71:f0:89:
         e3:61:98:2e:9d:c6:51:a4:28:9e:93:69:9a:6b:9d:c4:5d:bd:
         28:f2:aa:71:3f:bb:b1:3f:b4:22:54:c6:b4:4c:63:71:31:f6:
         6d:28:98:7d:b7:bf:5b:6c:5a:36:8e:f8:93:e5:39:70:ce:ee:
         c5:57:85:8e:8a:60:41:c1:be:4c:d6:50:c6:9f:1d:f4:9e:57:
         51:e6:e6:9a:ba:d8:2f:15:a5:1d:11:f8:15:fe:1b:b6:23:66:
         41:48:13:45:30:23:47:5a:fd:77:68:a2:25:49:a9:74:ac:d1:
         4b:22:ab:51:7e:8d:b8:93:50:7c:67:31:98:f8:4d:28:b5:2d:
         7c:5f:b1:f6:dd:64:4b:9a:e2:d2:a3:8e:f8:02:a8:8e:e3:1c:
         d8:a0:0a:3c:6c:31:5b:d3:fa:b6:fa:87:b2:31:18:10:11:ef:
         bf:89:8d:fa:c8:4c:65:7e:7a:09:de:34:a6:11:61:43:21:68:
         65:0b:f7:84:11:8d:31:5b:98:51:47:19:2e:5a:84:9a:73:5e:
         3e:78:97:10:01:6c:f1:bc:4d:31:d1:10:ca:02:3c:37:89:18:
         7d:ed:f4:b9:d7:40:37:76:3e:cd:ea:91:d8:a2:72:9f:7c:f4:
         aa:cb:81:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:46:44 2026 by rpki-client