Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft
File:                     68C2C435D736FC21F07F0FD09824C8408E615E50.mft (raw, json)
Hash identifier:          YN/PfbyqOu/912gHrjYqayFGny8m1uuoVM62rxyBSgQ=
Subject key identifier:   F9:9F:06:8C:D2:99:25:29:5C:0D:30:D6:8C:B3:FD:22:A0:EA:C4:58
Authority key identifier: 68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50
Certificate issuer:       /CN=68C2C435D736FC21F07F0FD09824C8408E615E50
Certificate serial:       3F44A6E65E798330453E27660E47FE6D5D7BBD70
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft
Manifest number:          06
Signing time:             Mon 11 May 2026 17:58:15 +0000
Manifest this update:     Mon 11 May 2026 17:53:15 +0000
Manifest next update:     Tue 12 May 2026 21:11:15 +0000
Files and hashes:         1: 323430323a346465303a3a2f33322d3438203d3e20313432303436.roa (hash: utFWN+nIe6ybPW2ARjXAofwG1zRBUaKHEqvyyRToBOU=)
                          2: 68C2C435D736FC21F07F0FD09824C8408E615E50.crl (hash: zKNiK6HUNcjR3QX4VIf8rHqMnlMptNdFK3ycVFgbNEw=)
                          3: 323430323a346465303a3a2f33322d3438203d3e20313331363331.roa (hash: OfflDa5KhbNli0ingnwLTuILzm6N60MY2kq1CLNfkuU=)
                          4: 323430323a346465303a3a2f33322d3438203d3e20323135393933.roa (hash: hn8g2szDRcwiFI4NluomCU2oCcAtBWUgOMXavAqk71Y=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:44:a6:e6:5e:79:83:30:45:3e:27:66:0e:47:fe:6d:5d:7b:bd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C2C435D736FC21F07F0FD09824C8408E615E50
        Validity
            Not Before: May 11 17:53:15 2026 GMT
            Not After : May 12 21:11:15 2026 GMT
        Subject: CN=F99F068CD29925295C0D30D68CB3FD22A0EAC458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:d2:8f:74:64:54:9e:28:fa:4a:c8:0c:ac:
                    4f:28:ac:25:9e:9d:e7:5e:13:54:dc:db:64:b0:89:
                    48:75:0b:e5:18:8a:69:26:8a:ad:64:0b:6c:59:43:
                    8e:61:ae:8c:e7:88:65:2b:70:53:91:d5:6d:c5:c7:
                    a5:68:de:37:14:cc:9c:12:be:60:ca:24:41:74:78:
                    6e:49:63:97:46:b7:1a:86:21:43:82:d1:79:da:70:
                    e7:bb:d6:d8:ac:c8:ef:1b:c7:4b:df:ec:c3:03:53:
                    81:73:a6:ad:2c:76:73:90:44:58:15:e6:77:01:f2:
                    05:57:aa:c1:26:30:6c:fc:85:3c:30:30:6e:c9:8a:
                    db:99:ac:15:f0:76:1b:f9:c0:c1:a0:ad:a9:d3:fd:
                    c8:cb:ea:b1:19:be:10:8c:34:f9:c8:0a:ab:99:69:
                    c5:39:07:a8:e8:7d:cf:c1:e4:5d:71:ec:81:49:9c:
                    fd:48:60:2e:5d:53:75:9d:b7:92:de:a3:f7:2d:cd:
                    4f:d6:76:41:30:b1:30:64:d7:4b:da:bf:f7:75:2c:
                    cd:f0:7c:32:9b:ec:da:23:23:fd:bf:a5:92:d5:f3:
                    f9:88:76:ac:55:6f:05:04:71:39:15:11:35:48:b5:
                    57:90:aa:81:27:6c:9d:a9:d1:f0:c2:91:30:fd:28:
                    fb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9F:06:8C:D2:99:25:29:5C:0D:30:D6:8C:B3:FD:22:A0:EA:C4:58
            X509v3 Authority Key Identifier:
                keyid:68:C2:C4:35:D7:36:FC:21:F0:7F:0F:D0:98:24:C8:40:8E:61:5E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/68C2C435D736FC21F07F0FD09824C8408E615E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TW1033/0/68C2C435D736FC21F07F0FD09824C8408E615E50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:8c:c8:40:c5:25:c4:c4:64:1e:cf:70:c5:f5:46:05:dc:
         fa:ee:39:7d:01:be:18:4e:77:60:fc:d0:7d:59:fb:97:4e:67:
         58:fd:46:2a:cd:b9:3e:e9:82:78:e0:2b:90:01:55:3a:70:96:
         5a:01:29:0e:cc:9a:53:43:23:d3:f8:b3:15:69:97:ab:0c:a7:
         9c:84:a8:9e:6e:f6:76:95:c1:67:af:11:29:52:74:25:0b:2d:
         27:c8:54:3d:cc:8b:5b:92:71:80:d8:dd:56:8f:f9:06:2a:3b:
         f5:6a:4e:08:c3:f1:ef:1d:dc:20:d3:2e:4c:31:b5:2f:b1:04:
         7b:cf:6a:a5:28:71:6f:54:17:3f:2e:88:ab:77:a8:85:1a:78:
         bf:d2:72:8d:dc:a7:14:d1:92:7c:7b:39:cc:18:3e:28:af:d9:
         4e:ed:3c:95:49:35:5a:cd:ec:3a:03:4b:f2:af:63:17:7d:4e:
         54:c4:d7:c6:eb:a0:8f:9c:af:1c:cc:ab:a1:8d:0b:5b:00:63:
         29:52:f8:aa:85:ac:05:d6:83:3e:46:ec:26:f4:d7:1e:2a:1f:
         4f:10:f4:b8:c0:a7:73:b8:16:46:38:56:08:c3:d1:67:aa:aa:
         09:9b:21:48:d7:a0:49:f4:bf:2f:92:a3:03:f0:c6:36:50:80:
         b6:3b:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:25 2026 by rpki-client