Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
File:                     56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft (raw, json)
Hash identifier:          0CzwgDSk+84NPDC3JDCdSrOrf6rJgRGadSkKgEoK5tI=
Subject key identifier:   6B:C0:4D:51:4C:BA:FB:4A:A6:49:6D:EB:41:E2:74:84:CB:AD:83:9F
Authority key identifier: 56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3
Certificate issuer:       /CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3
Certificate serial:       7F908122138EB81ECEAAE0938973B5D859BF4317
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft
Manifest number:          08
Signing time:             Mon 11 May 2026 17:57:45 +0000
Manifest this update:     Mon 11 May 2026 17:52:45 +0000
Manifest next update:     Tue 12 May 2026 20:06:45 +0000
Files and hashes:         1: 3130332e3132392e3134362e302f32342d3234203d3e20313331363339.roa (hash: CBt4aj49jAfK/FkdSCAEmu5FJcJ8ZBpytmS6xaMxItA=)
                          2: 3130332e3132392e3134372e302f32342d3234203d3e203230343733.roa (hash: jLHkK85y6D6I/P5jhpzcJkW6hQFZ18OruOJ4poV43Y8=)
                          3: 323430333a376634303a663030303a3a2f34382d3634203d3e20313331363339.roa (hash: ZRXaYx+Nrn2iAFlJIwnl9HLp8Eud4rItrm9qIQL8K3o=)
                          4: 3130332e3132392e3134342e302f32342d3234203d3e2035303635.roa (hash: r6atDIqgperuF3RfaudvB73QXSoXlYlurO9YxRuzsEo=)
                          5: 323430333a376634303a666630303a3a2f34382d3438203d3e203230343733.roa (hash: AfAX13SxCLnlMaK5dhRCuMKxU7A8dV/NgyypCpd1bdY=)
                          6: 56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl (hash: rcBgU3QoCMnamOiOJDvkGbzBA+W/m19wCmCn3YJoPdQ=)
                          7: 323430333a376634303a653030303a3a2f33362d3336203d3e203338323534.roa (hash: o6RGuHIfda02+Jk34ePKyhchsrC+xHDAy6BJ51uRReg=)
                          8: 3130332e3132392e3134352e302f32342d3234203d3e203338323534.roa (hash: xP411/3P+QncE7UBCG9FjIpMvagWAoQKRii7/7dwrps=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:90:81:22:13:8e:b8:1e:ce:aa:e0:93:89:73:b5:d8:59:bf:43:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3
        Validity
            Not Before: May 11 17:52:45 2026 GMT
            Not After : May 12 20:06:45 2026 GMT
        Subject: CN=6BC04D514CBAFB4AA6496DEB41E27484CBAD839F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:34:c4:cc:b7:dd:b4:79:e6:88:6a:de:87:
                    6e:de:fe:1c:fb:f1:b9:05:40:28:23:df:8d:f0:33:
                    c0:53:b1:92:11:b6:7b:21:70:29:f1:71:b9:24:f2:
                    3a:22:b0:84:e4:b0:71:c5:39:f5:d4:3f:a8:cb:c3:
                    47:b7:44:e0:0e:a9:4e:de:b0:95:5e:8b:ef:b2:65:
                    c3:7e:36:65:55:1e:6d:01:b1:2f:45:9d:e5:60:16:
                    de:32:6a:66:d7:cb:65:67:f9:57:12:7d:81:db:1e:
                    41:93:3a:47:e2:88:a3:85:45:a5:f4:eb:39:86:3b:
                    69:4a:a7:d0:d3:4b:71:51:9f:fb:33:b5:44:8f:15:
                    85:10:c0:ac:25:5a:90:14:61:13:a2:39:ef:d7:61:
                    7b:3d:4b:2d:1c:bd:b2:52:c2:3a:3b:e5:fb:79:f4:
                    c6:13:48:c8:9b:f4:ae:06:75:78:cb:1f:d1:94:41:
                    b1:21:f3:02:38:18:a7:81:f1:55:49:1f:c7:c9:11:
                    24:06:28:c2:d0:5f:05:de:30:75:a7:ea:52:26:83:
                    6d:09:97:cb:7d:96:8c:6d:d2:05:57:fe:5a:e8:32:
                    7f:0a:e5:ce:26:b9:5f:c9:c9:73:33:c6:23:92:0a:
                    6c:36:23:16:f8:bc:aa:b2:b7:28:f3:9a:bc:c1:87:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C0:4D:51:4C:BA:FB:4A:A6:49:6D:EB:41:E2:74:84:CB:AD:83:9F
            X509v3 Authority Key Identifier:
                keyid:56:D2:E2:5E:40:9F:E9:56:A1:4A:8F:5A:5C:0E:EA:69:CC:F5:0E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TIH/0/56D2E25E409FE956A14A8F5A5C0EEA69CCF50EA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:94:37:85:e6:83:2d:ff:e8:10:73:75:91:27:42:c6:e4:e4:
         e2:d7:fe:9d:88:ac:76:20:3b:c9:91:93:bc:01:1a:69:b2:4a:
         8e:7b:e1:31:8c:45:0c:4a:74:58:77:f7:b3:74:26:a4:cc:c8:
         f0:06:c2:7c:8e:5c:68:fd:4d:02:2e:13:82:16:70:29:51:8e:
         9d:ac:d2:c7:d9:63:48:45:f7:70:fb:eb:ef:59:90:3b:63:76:
         b5:17:25:d6:f8:0f:72:bd:4d:18:99:0c:32:88:b0:81:be:6b:
         48:d3:aa:67:bc:4a:54:e3:d8:0f:08:8e:ee:5a:4c:b3:50:02:
         98:93:46:74:f0:9f:8b:96:1f:ca:4a:d3:a5:0e:c7:78:86:0d:
         f0:08:59:d3:12:ab:58:c9:9c:0e:ff:37:af:03:4d:5e:e2:93:
         ee:88:96:43:b7:80:70:15:07:2c:6e:2a:4f:6b:4a:99:dd:fa:
         42:a9:16:68:b4:7c:d7:7c:4d:0b:69:c4:b7:3e:49:b8:29:ba:
         30:c2:5c:25:f4:b8:20:46:f7:02:0c:65:8b:b5:0b:26:09:48:
         5f:5b:ea:f9:7c:67:b7:5b:da:ef:e2:8c:62:f5:de:3e:c5:61:
         0a:a8:22:c0:69:51:cd:e8:e1:71:0e:9e:65:93:c0:af:43:b0:
         ba:7d:58:14
-----BEGIN CERTIFICATE-----
MIIE3jCCA8agAwIBAgIUf5CBIhOOuB7OquCTiXO12Fm/QxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlD
Q0Y1MEVBMzAeFw0yNjA1MTExNzUyNDVaFw0yNjA1MTIyMDA2NDVaMDMxMTAvBgNV
BAMTKDZCQzA0RDUxNENCQUZCNEFBNjQ5NkRFQjQxRTI3NDg0Q0JBRDgzOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPozTEzLfdtHnmiGreh27e/hz7
8bkFQCgj343wM8BTsZIRtnshcCnxcbkk8joisITksHHFOfXUP6jLw0e3ROAOqU7e
sJVei++yZcN+NmVVHm0BsS9FneVgFt4yambXy2Vn+VcSfYHbHkGTOkfiiKOFRaX0
6zmGO2lKp9DTS3FRn/sztUSPFYUQwKwlWpAUYROiOe/XYXs9Sy0cvbJSwjo75ft5
9MYTSMib9K4GdXjLH9GUQbEh8wI4GKeB8VVJH8fJESQGKMLQXwXeMHWn6lImg20J
l8t9loxt0gVX/lroMn8K5c4muV/JyXMzxiOSCmw2Ixb4vKqytyjzmrzBh4WJAgMB
AAGjggHoMIIB5DAdBgNVHQ4EFgQUa8BNUUy6+0qmSW3rQeJ0hMutg58wHwYDVR0j
BBgwFoAUVtLiXkCf6VahSo9aXA7qacz1DqMwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAv
NTZEMkUyNUU0MDlGRTk1NkExNEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5jcmwwbwYI
KwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25pYy50
dy9ycGtpL1RXTklDQ0EvMS81NkQyRTI1RTQwOUZFOTU2QTE0QThGNUE1QzBFRUE2
OUNDRjUwRUEzLmNlcjBrBggrBgEFBQcBCwRfMF0wWwYIKwYBBQUHMAuGT3JzeW5j
Oi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElILzAvNTZEMkUyNUU0MDlGRTk1NkEx
NEE4RjVBNUMwRUVBNjlDQ0Y1MEVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF
BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG2UN4Xmgy3/6BBzdZEn
Qsbk5OLX/p2IrHYgO8mRk7wBGmmySo574TGMRQxKdFh397N0JqTMyPAGwnyOXGj9
TQIuE4IWcClRjp2s0sfZY0hF93D76+9ZkDtjdrUXJdb4D3K9TRiZDDKIsIG+a0jT
qme8SlTj2A8Iju5aTLNQApiTRnTwn4uWH8pK06UOx3iGDfAIWdMSq1jJnA7/N68D
TV7ik+6IlkO3gHAVByxuKk9rSpnd+kKpFmi0fNd8TQtpxLc+SbgpujDCXCX0uCBG
9wIMZYu1CyYJSF9b6vl8Z7db2u/ijGL13j7FYQqoIsBpUc3o4XEOnmWTwK9DsLp9
WBQ=
-----END CERTIFICATE-----