Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft
File:                     FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft (raw, json)
Hash identifier:          pz+/HRQ2Cmj4MWQETuX1UhRWYuXkgbUvZZg7DmjKPyQ=
Subject key identifier:   AF:8D:FD:43:FD:E9:FF:F4:19:40:10:72:18:11:98:72:36:90:06:4B
Authority key identifier: FB:7C:91:F7:E5:33:43:F5:CF:24:F9:F8:21:2F:28:A8:BE:2E:F8:74
Certificate issuer:       /CN=FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874
Certificate serial:       2352E0D8E1013CCC01F19B6AFB9DECECCDAC8595
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft
Manifest number:          03
Signing time:             Mon 11 May 2026 17:56:11 +0000
Manifest this update:     Mon 11 May 2026 17:51:11 +0000
Manifest next update:     Tue 12 May 2026 20:14:11 +0000
Files and hashes:         1: FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.crl (hash: HqyCCvR/qtQp1OgS4HDt58vLxu2Vd12y6RNPnhlEbT4=)
                          2: 3136312e3234382e3136302e302f32342d3234203d3e203633383937.roa (hash: jKx2LGW2OnV91lTfg/6Tk6smI31nkyG3PHeGMr/XEew=)
                          3: 3136312e3234382e3136312e302f32342d3234203d3e203633383937.roa (hash: 2l7F3xR6CEzktzgJrO3SJv5piK3jtEcJIxeyuIWLklM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:52:e0:d8:e1:01:3c:cc:01:f1:9b:6a:fb:9d:ec:ec:cd:ac:85:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874
        Validity
            Not Before: May 11 17:51:11 2026 GMT
            Not After : May 12 20:14:11 2026 GMT
        Subject: CN=AF8DFD43FDE9FFF419401072181198723690064B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:b0:93:ea:4c:8a:05:7e:8b:e8:49:5b:1a:
                    f0:d6:c0:d1:f1:12:89:85:07:39:bf:54:18:f7:4c:
                    df:33:2c:93:04:23:94:aa:7c:75:18:16:4f:f2:4f:
                    94:c9:8f:d0:c3:56:1d:6c:6a:cf:7e:cb:d5:03:4e:
                    18:99:0e:54:a2:3a:97:bf:ca:99:a4:e6:44:6b:8f:
                    26:f6:e8:eb:e4:d7:b7:c7:b5:a4:52:df:9c:b8:02:
                    17:9f:85:4d:a9:76:cf:a5:64:92:b5:bf:36:a7:61:
                    13:f0:d6:c0:24:62:f3:aa:ff:02:2f:fc:89:87:a4:
                    9c:46:11:cd:e8:a3:ce:30:49:a9:a4:08:e7:0d:83:
                    fe:a1:67:bf:87:05:87:15:77:ee:ed:1a:af:5b:34:
                    0b:47:f8:ea:79:88:f7:34:ba:e0:4e:31:ac:ae:1b:
                    db:08:35:07:19:6b:03:bc:16:6e:1a:08:85:32:a5:
                    39:6c:36:ee:14:e7:cd:72:ad:05:c1:01:e5:cf:a1:
                    05:15:17:81:02:11:76:07:b0:a6:e5:dd:2d:c8:84:
                    71:72:62:5c:da:74:0a:c1:5b:cf:90:0c:3f:51:6b:
                    e7:b6:44:58:a7:6f:2a:f0:75:f6:6b:60:2a:af:1f:
                    c2:8f:db:1e:48:2f:f3:2d:39:ae:63:a4:b5:77:6c:
                    6c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8D:FD:43:FD:E9:FF:F4:19:40:10:72:18:11:98:72:36:90:06:4B
            X509v3 Authority Key Identifier:
                keyid:FB:7C:91:F7:E5:33:43:F5:CF:24:F9:F8:21:2F:28:A8:BE:2E:F8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/STW/1/FB7C91F7E53343F5CF24F9F8212F28A8BE2EF874.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:26:f2:e9:6c:46:30:de:ab:b9:31:db:ea:46:89:9d:c1:9f:
         28:0b:53:fa:56:a3:a9:03:02:bc:26:b3:a3:97:b2:b0:b3:fe:
         33:67:c0:ac:f1:b7:e1:d6:8a:89:7e:68:65:88:b0:2f:36:97:
         79:52:63:1b:de:2d:c9:12:10:a5:cb:6b:15:94:e4:b7:9d:a0:
         bc:75:ad:6e:31:b8:63:d5:d2:39:cf:7d:de:db:19:a3:ee:fd:
         ba:c0:81:fe:da:3d:1e:47:3d:41:8e:76:a1:35:40:eb:ea:c9:
         7c:14:f3:2f:a7:70:5a:34:7a:97:d7:a6:5d:57:49:cc:2a:41:
         01:0c:5b:a6:92:c5:2c:65:a0:c3:06:30:6a:82:f0:99:e9:bb:
         58:72:2e:6a:d4:19:a4:ae:ba:7c:ad:bf:d4:39:1f:c2:30:c6:
         7d:c0:e1:98:28:32:c2:ce:51:19:64:d7:fc:1e:46:1b:6b:7f:
         f0:20:2e:2b:a7:14:00:91:d5:c9:2a:62:fc:31:86:c9:70:6c:
         1c:44:ce:01:7b:a8:59:cc:f3:59:2b:f4:49:65:74:86:04:24:
         88:b0:59:b6:1b:a0:0e:db:12:39:68:7c:9e:4d:ff:6d:5a:6d:
         de:ea:ea:bf:ec:b3:f6:66:64:82:c0:f3:3a:58:22:f0:b7:80:
         cd:77:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:47:23 2026 by rpki-client