Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
File:                     _HUspZ646u8j0iXcZ6oIUgHx95w.mft (raw, json)
Hash identifier:          gQNMjGBMGOU9ZbZ1+7iUM+r5g0azCbhBic1mtVIWKR4=
Subject key identifier:   DE:FF:81:41:E2:DE:64:B1:11:89:27:32:8C:2D:59:C6:62:78:E5:9D
Authority key identifier: FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C
Certificate issuer:       /CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
Certificate serial:       0219
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
Manifest number:          01F2
Signing time:             Thu 26 Mar 2026 15:58:05 +0000
Manifest this update:     Thu 26 Mar 2026 15:58:05 +0000
Manifest next update:     Thu 26 Mar 2026 21:58:05 +0000
Files and hashes:         1: 3PbsONAF8Oxd3AhCARaD-i-6Z_s.roa (hash: iZUQwaC0nT3Sb0rk+mOFsjWPIihT2yT1106ISBL95As=)
                          2: 5PX3XPInRwLdrxjNJFjpDmV_YWE.roa (hash: oZRkpZSmBjyDmZ2aKyrQVa9J3wZO7SNOQisdVK+47NQ=)
                          3: 5R7-cVCAF-siafJrsFpLMo5QwAI.roa (hash: TNahB6rZrA74mKx05W5b/7mY0h3f5HFKLhMN37gRl+Q=)
                          4: FI_l4-13QP9OGl6Mb5mklqo6scA.roa (hash: 6XXI7Jhd9lXAImf1MeS6P7d+O2EVvcvFLkcH2BaNDoU=)
                          5: KIITV7eWhVy2oyjflPz5VX2jgW4.roa (hash: lWCYvPowyiiCW0rJqficFkjP3myn6ivGv6yghD3b/2M=)
                          6: Q1DqTbMpiir5UFRuTi2BE-qhMfg.roa (hash: 4HAZnLXTMzSOAfi5Mx9kchZON+HKCUChxcmYzfMF+NU=)
                          7: QRnbkM5AcAl5FgR7GO9y9QtvHIc.roa (hash: RrTZzOTPCCr5VdsUJACfpPtRGltHjXfTFa3k7aCF36U=)
                          8: QlJRPkwzvFSkzFyqNqAHw2qpp8o.roa (hash: sLB/lAuXpVWxEYttjxjEfkV/SwqGJLAlO66H053YWyQ=)
                          9: _HUspZ646u8j0iXcZ6oIUgHx95w.crl (hash: 8M0xadWGPHw2GUME2TgIwnXQKoN8+ATikl8myuQm7zg=)
                          10: tpH271p44tFxIoooS8Y6JbCVsC4.roa (hash: Z0Kbx5ZrwKvQdCFKt2vuEDClyylwA8Wh7Aymeh8HVtk=)
                          11: wIyQlwEgFUCdOzwbu5mIPgsVv4Y.roa (hash: 36N1FeAVuZE8eI+ldZfqvGhEClJE27XR+yAWiFk5XZA=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537 (0x219)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC752CA59EB8EAEF23D225DC67AA085201F1F79C
        Validity
            Not Before: Mar 26 15:58:05 2026 GMT
            Not After : Dec 30 15:30:20 2026 GMT
        Subject: CN=DEFF8141E2DE64B1118927328C2D59C66278E59D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:4e:5c:da:be:9e:de:b7:29:af:72:f2:25:
                    5d:77:d2:2d:f8:c9:e6:cb:72:b1:9b:a4:cd:57:f6:
                    36:0f:be:04:d2:08:d2:3b:b2:40:d9:05:22:dc:e6:
                    ab:90:56:72:d2:20:d6:b0:cf:3c:33:9f:34:e7:d9:
                    fd:56:0e:28:f3:4a:e2:5e:13:23:56:26:80:01:ce:
                    e5:1a:04:81:b4:72:54:19:1f:cb:0d:c1:2d:40:a9:
                    68:21:e0:89:87:35:3e:d3:ac:06:dd:58:3e:46:96:
                    a6:fd:60:eb:26:b8:fa:d6:64:74:bb:cc:de:ed:a1:
                    5d:28:d6:1d:26:ac:65:65:66:2b:8d:42:7a:85:a0:
                    f7:cf:13:d8:12:d5:cd:88:f2:ba:0f:40:52:24:ef:
                    23:eb:93:bc:40:a0:74:2c:ff:26:16:d9:52:ea:e2:
                    0d:de:e7:e8:ca:4c:08:80:c3:60:5a:26:13:0f:9a:
                    7f:cc:ce:42:81:55:a3:d0:52:b3:fe:a9:65:43:8d:
                    e3:0f:5b:d9:8f:7e:1e:a0:24:93:4e:b2:74:c6:3a:
                    44:e4:91:6a:49:a2:df:12:5c:16:19:0a:8b:a1:52:
                    15:ea:d3:80:87:8a:52:fe:7e:ba:af:44:4b:8f:a7:
                    17:97:d9:e4:1c:90:20:b3:32:c9:ca:0e:6d:f7:5f:
                    93:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FF:81:41:E2:DE:64:B1:11:89:27:32:8C:2D:59:C6:62:78:E5:9D
            X509v3 Authority Key Identifier:
                keyid:FC:75:2C:A5:9E:B8:EA:EF:23:D2:25:DC:67:AA:08:52:01:F1:F7:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_HUspZ646u8j0iXcZ6oIUgHx95w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AOTERNET/_HUspZ646u8j0iXcZ6oIUgHx95w.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:b3:c7:27:b5:b8:1d:e7:4c:c0:82:a4:5c:b3:6b:fe:c6:
         b4:7a:e6:a3:c9:5d:7d:03:2c:82:da:65:67:c3:18:7f:47:c6:
         87:4f:69:1b:c6:21:18:da:20:4f:72:78:e0:87:d1:d6:66:9b:
         9d:31:f8:98:38:92:65:2e:82:ab:25:c4:21:de:1d:d3:de:35:
         10:1b:1e:b8:61:a0:34:50:9c:e9:59:88:e9:8f:3e:26:fa:e0:
         6a:9c:69:77:9e:b8:7e:dd:cb:f2:57:39:d6:d0:40:9b:da:d2:
         bc:37:59:88:90:01:3c:bc:3a:2a:fa:c6:b7:d7:02:3d:ef:77:
         8c:b9:87:c9:6e:6e:14:8c:39:59:b8:90:1d:3e:d7:41:50:b3:
         02:bd:13:cc:a0:df:88:aa:0d:70:c1:f2:de:2f:95:31:69:41:
         0e:b4:ed:52:97:89:99:3b:91:49:6e:b6:ff:e3:d3:86:fb:7f:
         40:e5:5c:29:81:b2:4c:9d:a1:f6:b7:d8:65:f0:bd:8a:cc:79:
         e0:f4:6d:1e:38:21:f9:4f:13:65:0f:28:d0:a1:15:2b:9d:d8:
         21:c4:71:50:79:3b:26:47:14:1a:93:cc:a2:48:f4:7d:89:3d:
         17:03:2a:07:b4:9a:cb:a2:5e:63:86:c8:74:c2:d6:b3:04:73:
         7d:12:a8:cc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkM3
NTJDQTU5RUI4RUFFRjIzRDIyNURDNjdBQTA4NTIwMUYxRjc5QzAeFw0yNjAzMjYx
NTU4MDVaFw0yNjEyMzAxNTMwMjBaMDMxMTAvBgNVBAMTKERFRkY4MTQxRTJERTY0
QjExMTg5MjczMjhDMkQ1OUM2NjI3OEU1OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAV05c2r6e3rcpr3LyJV130i34yebLcrGbpM1X9jYPvgTSCNI7
skDZBSLc5quQVnLSINawzzwznzTn2f1WDijzSuJeEyNWJoABzuUaBIG0clQZH8sN
wS1AqWgh4ImHNT7TrAbdWD5Glqb9YOsmuPrWZHS7zN7toV0o1h0mrGVlZiuNQnqF
oPfPE9gS1c2I8roPQFIk7yPrk7xAoHQs/yYW2VLq4g3e5+jKTAiAw2BaJhMPmn/M
zkKBVaPQUrP+qWVDjeMPW9mPfh6gJJNOsnTGOkTkkWpJot8SXBYZCouhUhXq04CH
ilL+frqvREuPpxeX2eQckCCzMsnKDm33X5P9AgMBAAGjggILMIICBzAdBgNVHQ4E
FgQU3v+BQeLeZLERiScyjC1ZxmJ45Z0wHwYDVR0jBBgwFoAU/HUspZ646u8j0iXc
Z6oIUgHx95wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQU9URVJO
RVQvX0hVc3BaNjQ2dThqMGlYY1o2b0lVZ0h4OTV3LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9fSFVzcFo2NDZ1OGowaVhjWjZvSVVnSHg5NXcuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9BT1RFUk5FVC9fSFVzcFo2NDZ1OGow
aVhjWjZvSVVnSHg5NXcubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABOSzxye1uB3nTMCCpFyza/7GtHrmo8ldfQMsgtplZ8MYf0fGh09pG8YhGNog
T3J44IfR1mabnTH4mDiSZS6CqyXEId4d0941EBseuGGgNFCc6VmI6Y8+Jvrgapxp
d564ft3L8lc51tBAm9rSvDdZiJABPLw6KvrGt9cCPe93jLmHyW5uFIw5WbiQHT7X
QVCzAr0TzKDfiKoNcMHy3i+VMWlBDrTtUpeJmTuRSW62/+PThvt/QOVcKYGyTJ2h
9rfYZfC9isx54PRtHjgh+U8TZQ8o0KEVK53YIcRxUHk7JkcUGpPMokj0fYk9FwMq
B7Say6JeY4bIdMLWswRzfRKozA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:01:05 2026 by rpki-client