Manifest
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft
File: DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft (raw, json)
Hash identifier: 7Cy/RkK315BJd5ykkvtszQzLwLQsRZ/1ey3kjNgn00s=
Subject key identifier: DC:5C:F9:81:D0:B5:F6:EC:DD:48:51:ED:B3:DD:B3:DB:65:C3:38:EA
Authority key identifier: DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A
Certificate issuer: /CN=DB30CE9B7F8573BFA8C811B88BC979C9B537831A
Certificate serial: 2A57F3F6630366A7FCE5EFA44714A3CDF7FB4F13
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft
Manifest number: 01
Signing time: Mon 11 May 2026 16:03:14 +0000
Manifest this update: Mon 11 May 2026 15:58:14 +0000
Manifest next update: Tue 12 May 2026 16:21:14 +0000
Files and hashes: 1: DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl (hash: R4t+TSoMDHrBiYPCyPVt70x9Xavi4TbQoOZpTGFQuZQ=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:57:f3:f6:63:03:66:a7:fc:e5:ef:a4:47:14:a3:cd:f7:fb:4f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB30CE9B7F8573BFA8C811B88BC979C9B537831A
Validity
Not Before: May 11 15:58:14 2026 GMT
Not After : May 12 16:21:14 2026 GMT
Subject: CN=DC5CF981D0B5F6ECDD4851EDB3DDB3DB65C338EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:01:b6:e0:31:b9:90:48:ed:62:a6:e7:c5:
e6:88:03:4d:af:ec:85:c8:e0:96:55:43:9c:7e:5c:
a8:22:93:70:f6:19:09:f1:5e:4f:c4:ff:ad:dc:1f:
4a:74:4c:9b:56:f9:a6:41:0c:cc:7c:25:f7:64:ee:
7a:32:88:96:58:49:64:d8:0f:72:67:d2:00:51:84:
a2:8b:54:24:15:e8:36:90:70:d6:12:fc:24:d3:67:
f4:94:f0:5a:8e:13:1a:1c:cd:c6:c7:b8:0c:78:39:
e4:44:11:9f:c4:1d:7d:4d:32:5c:4f:c6:1c:90:bc:
35:24:29:01:a2:29:38:f3:9c:06:0f:e5:a5:bc:e9:
aa:27:2a:30:fc:53:6d:b4:79:05:7e:15:ad:61:c9:
44:13:8b:db:25:79:e6:d9:ad:69:34:c3:38:d5:f0:
2e:3a:b6:5b:d0:9b:ad:a5:81:95:e1:be:14:42:70:
fe:32:56:d7:f0:42:24:00:eb:6b:e8:f7:5b:f0:10:
60:63:9f:57:bf:52:7a:12:38:6d:02:d7:2b:f3:88:
88:9a:2a:7f:df:e9:aa:98:e6:cc:6e:cc:05:1a:a6:
23:90:88:d5:07:a8:51:10:ed:22:82:8e:30:e1:5f:
47:99:fd:82:65:74:0b:5c:0e:07:15:fd:62:57:36:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5C:F9:81:D0:B5:F6:EC:DD:48:51:ED:B3:DD:B3:DB:65:C3:38:EA
X509v3 Authority Key Identifier:
keyid:DB:30:CE:9B:7F:85:73:BF:A8:C8:11:B8:8B:C9:79:C9:B5:37:83:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNDC/0/DB30CE9B7F8573BFA8C811B88BC979C9B537831A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:34:33:63:6b:a0:5f:b9:47:e4:6e:ae:bd:2a:db:c8:b0:0f:
e6:2b:7e:c6:18:00:75:27:eb:01:df:3a:76:f4:9a:92:3e:d9:
ba:80:68:af:bd:f1:f7:81:46:ea:50:44:f8:71:7a:ca:46:13:
ae:79:99:03:c6:a4:d5:82:3b:9c:63:c3:d0:06:c1:7f:0c:10:
0a:b7:58:3c:06:40:8d:e0:6d:af:1a:99:ee:0b:8e:52:45:fd:
42:82:3f:77:22:df:64:e9:46:1e:1b:d0:90:ff:b2:4c:00:9b:
f6:08:ed:8d:27:1a:ad:9e:19:7d:d7:f1:e4:ac:69:61:9a:c6:
e3:b1:62:42:47:95:40:a4:bf:5c:f0:f3:8d:60:ad:ec:9b:cd:
7a:7b:f0:42:6b:8b:76:8d:1d:5f:7e:bb:67:c5:5e:c6:ee:03:
a7:61:31:91:7d:e0:97:81:b7:03:e5:5a:57:0d:38:9d:20:13:
9e:0c:22:92:8d:f6:6e:a0:db:69:99:2c:31:71:a6:2f:8a:c5:
50:88:b5:6d:1a:19:b5:fc:30:0b:56:18:e1:f0:43:04:e9:08:
bf:c3:15:e3:92:f5:ee:39:fe:bd:81:be:9e:57:15:53:9f:6e:
41:eb:b2:dd:54:e3:58:c6:95:c9:6a:66:87:74:6a:b5:f0:87:
99:81:73:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:06:41 2026 by rpki-client