Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
File:                     35904BA082DF1690711D4866CC0E87AF00FA998D.mft (raw, json)
Hash identifier:          NbB2PwcwiSyLm3OBlJ3rqhGTcw2Os5kJJxf3gGPnb1k=
Subject key identifier:   2D:2E:9C:43:35:39:0B:13:56:97:61:6F:C2:4F:DF:19:42:7B:7C:41
Authority key identifier: 35:90:4B:A0:82:DF:16:90:71:1D:48:66:CC:0E:87:AF:00:FA:99:8D
Certificate issuer:       /CN=35904BA082DF1690711D4866CC0E87AF00FA998D
Certificate serial:       65AD6BD7D55C61F3EB9BB80F8D70BBD1288C9911
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft
Manifest number:          01
Signing time:             Mon 11 May 2026 16:02:13 +0000
Manifest this update:     Mon 11 May 2026 15:57:13 +0000
Manifest next update:     Tue 12 May 2026 18:39:13 +0000
Files and hashes:         1: 35904BA082DF1690711D4866CC0E87AF00FA998D.crl (hash: lmbfTIO2mQtkU4a8STdDez4EbqIsNQgY14veywBeGvU=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ad:6b:d7:d5:5c:61:f3:eb:9b:b8:0f:8d:70:bb:d1:28:8c:99:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35904BA082DF1690711D4866CC0E87AF00FA998D
        Validity
            Not Before: May 11 15:57:13 2026 GMT
            Not After : May 12 18:39:13 2026 GMT
        Subject: CN=2D2E9C4335390B135697616FC24FDF19427B7C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:45:27:e8:d5:3c:39:da:0d:2c:c6:0f:91:
                    a8:33:3a:33:94:d8:86:05:19:94:87:29:f1:67:5d:
                    40:9a:3e:de:93:04:f9:79:b2:67:39:0a:f6:35:eb:
                    0d:43:ea:75:cc:f0:83:3b:83:9c:ec:67:60:4a:cb:
                    91:b4:c2:ab:34:90:0e:1e:7b:f9:62:68:e0:5d:e5:
                    11:64:d8:37:76:78:fb:7b:3d:4e:16:61:bd:24:64:
                    28:13:cb:f2:42:30:01:2c:11:f5:2d:2b:18:a1:d8:
                    54:0d:82:12:d7:f5:28:e3:9f:16:c2:35:17:02:c3:
                    48:d6:aa:b1:63:a9:ab:f1:7b:84:96:21:9e:40:b3:
                    37:0e:3c:dc:96:b5:e3:7a:c9:64:52:15:eb:c1:b6:
                    9d:90:6b:61:0f:d8:03:19:72:b5:8d:20:01:ff:dd:
                    97:52:3f:2f:c8:12:2a:19:12:40:fc:14:de:be:68:
                    df:2b:e1:e4:3f:20:c6:8e:55:48:a4:30:2e:c5:cd:
                    f1:88:d3:eb:75:67:2c:a3:bd:c4:73:71:8d:3f:56:
                    03:d8:b4:df:1a:a1:ea:a7:34:90:a2:14:f0:f1:68:
                    35:6a:df:83:ef:01:ef:1a:bd:56:5a:78:b1:aa:0c:
                    33:6c:a1:1a:46:27:da:b6:68:dd:dc:a1:d4:24:3b:
                    4f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2E:9C:43:35:39:0B:13:56:97:61:6F:C2:4F:DF:19:42:7B:7C:41
            X509v3 Authority Key Identifier:
                keyid:35:90:4B:A0:82:DF:16:90:71:1D:48:66:CC:0E:87:AF:00:FA:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/35904BA082DF1690711D4866CC0E87AF00FA998D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STARCLOUD/0/35904BA082DF1690711D4866CC0E87AF00FA998D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:19:a1:bf:24:b6:40:4b:1e:1a:3a:52:15:f7:ba:42:5f:a4:
         ff:aa:61:85:25:a0:91:8e:3f:36:e4:7e:be:6e:52:f6:9e:24:
         c4:57:bf:78:f5:3a:d3:1f:a2:a4:f5:3f:74:82:25:f2:6f:cf:
         88:8d:e9:a5:ab:ea:df:51:60:0a:f3:da:cb:fe:6f:02:fc:bf:
         96:a0:62:5c:65:83:83:65:7e:83:70:6f:c3:59:87:e7:5e:58:
         6a:82:00:bf:f3:74:f7:12:3b:41:bc:f7:d5:55:e0:d4:1e:64:
         78:74:c7:98:29:60:19:10:ce:28:30:b6:6f:32:4b:74:be:3d:
         95:4d:9b:c9:70:73:2f:b3:fd:74:63:3b:dd:7f:06:3f:fa:d5:
         f0:59:3f:88:2e:f8:e9:09:2d:59:8c:a4:df:e5:07:e3:88:c1:
         bb:2a:58:7d:1b:64:b3:f7:d2:d0:c6:a8:d5:b1:9c:3b:47:ae:
         ac:12:02:af:37:07:28:b0:47:09:c1:f2:6d:72:20:35:01:4e:
         09:02:be:18:7b:e1:58:1c:17:9c:b7:62:f0:3e:ca:bc:aa:d1:
         39:3a:a4:37:27:d8:c9:30:b9:dc:29:30:cb:10:57:53:36:44:
         7a:cb:6f:36:b2:8a:37:f7:07:11:74:91:3a:73:39:8e:8a:94:
         f8:79:4b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:39:39 2026 by rpki-client