Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
File:                     4116665BE4ABEC579625EB8F93706D8A5D25D811.mft (raw, json)
Hash identifier:          g4Ip+JuzEn9jTHcYKfokX7gHPIsnO1x2vMMj17tz37w=
Subject key identifier:   01:8B:A6:05:6F:82:C1:9A:D8:D0:8E:43:78:49:8C:A5:92:D4:38:3D
Authority key identifier: 41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11
Certificate issuer:       /CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
Certificate serial:       08C809826E226755A7261462C51109D51F19A9AD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft
Manifest number:          09
Signing time:             Mon 11 May 2026 17:56:48 +0000
Manifest this update:     Mon 11 May 2026 17:51:48 +0000
Manifest next update:     Tue 12 May 2026 18:16:48 +0000
Files and hashes:         1: 323430313a653365303a3a2f34382d3438203d3e20313532363139.roa (hash: EKluDgUWuNPYLOL9EW7U6TRfKnY+emx5Mxp9x96Yono=)
                          2: 323430313a653365303a3330303a3a2f34342d3438203d3e20313938393534.roa (hash: +MPj1+FqsGNNfrSwLB7ceVoBXHWs1y8m+Mu4VImaW80=)
                          3: 323430313a653365303a35333a3a2f34382d3438203d3e20313532363139.roa (hash: inMxOGvmxhpz+t2U+aw17poC114ZD09uaitT0n/sR38=)
                          4: 323430313a653365303a3930303a3a2f34342d3438203d3e20313939323033.roa (hash: 08KENw26rpbLh+PQlIfO2TkhmZXEARMLbNYiVllfdSo=)
                          5: 323430313a653365303a663a3a2f34382d3438203d3e20313532363139.roa (hash: 2niirm1c1f/SapiThm2nh9vCjN+JRzuRNRhF3OjVLM4=)
                          6: 323430313a653365303a323a3a2f34382d3438203d3e20313532363139.roa (hash: jCyDqTwyynUAj0Cq2T29ZHOBjRuvY31Wq/Ivps7Y/mI=)
                          7: 4116665BE4ABEC579625EB8F93706D8A5D25D811.crl (hash: OO53tl4j1MHVUspuTmeOpH4EoakRyrTzENxWpnddNTk=)
                          8: 323430313a653365303a313a3a2f34382d3438203d3e20313532363139.roa (hash: Vbn0DlkAIJGfZ7fXrVFA39Q+4YeR+96LAdOV3sxu/Z8=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c8:09:82:6e:22:67:55:a7:26:14:62:c5:11:09:d5:1f:19:a9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4116665BE4ABEC579625EB8F93706D8A5D25D811
        Validity
            Not Before: May 11 17:51:48 2026 GMT
            Not After : May 12 18:16:48 2026 GMT
        Subject: CN=018BA6056F82C19AD8D08E4378498CA592D4383D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:22:d6:fc:9c:bf:03:8f:75:5f:f4:bf:9e:4d:
                    ab:ec:94:15:02:b4:a8:4a:69:2a:02:59:17:c6:42:
                    9b:cf:bc:7d:b2:0b:24:66:79:e1:54:56:f8:e9:ad:
                    64:3f:ff:0e:c9:0a:ca:9a:78:ce:60:fe:50:d4:fe:
                    54:69:87:35:7a:39:92:d4:d0:49:13:84:10:6c:9d:
                    c4:51:66:28:8c:09:a8:3c:29:a2:93:db:85:b3:f4:
                    a3:f3:66:09:db:5b:29:79:63:47:54:6e:b8:6f:a9:
                    c8:b8:72:00:ad:78:71:1c:d7:80:55:3d:11:17:9b:
                    88:a4:da:7a:88:35:a5:f4:69:34:1e:3e:03:11:0f:
                    de:8a:fa:9e:f0:41:86:d8:fe:1d:81:ff:ab:ec:37:
                    9e:8a:a0:b3:85:f4:9c:1d:95:e2:aa:e8:c9:6c:c2:
                    37:fd:6e:c1:90:9d:6e:30:d7:bc:e8:17:02:92:0d:
                    2f:ca:ae:c4:0c:13:0e:0e:6f:3a:cd:8c:a1:d2:c0:
                    79:16:14:c6:6e:ed:ca:52:9d:b6:f9:c2:d6:46:33:
                    1c:6f:1d:b4:52:7e:7e:73:d3:35:c9:7f:1c:64:23:
                    cb:09:86:aa:1c:cb:fc:4f:45:cd:1e:7a:7a:36:1f:
                    1d:06:c6:4a:34:21:74:e2:e4:59:b0:e9:71:c5:21:
                    0c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8B:A6:05:6F:82:C1:9A:D8:D0:8E:43:78:49:8C:A5:92:D4:38:3D
            X509v3 Authority Key Identifier:
                keyid:41:16:66:5B:E4:AB:EC:57:96:25:EB:8F:93:70:6D:8A:5D:25:D8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4116665BE4ABEC579625EB8F93706D8A5D25D811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VERYFAST/0/4116665BE4ABEC579625EB8F93706D8A5D25D811.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:36:8a:40:66:cd:36:65:5c:e7:b8:ec:8f:8f:05:98:19:80:
         c6:81:b7:e7:73:89:b1:97:fe:d8:6f:de:34:10:29:dd:25:e4:
         b9:79:57:99:a2:cc:4d:03:7e:59:d6:e6:a8:52:a9:76:c0:7a:
         a9:fb:b6:c4:74:b2:5a:f4:d9:de:d8:44:24:31:f2:2e:25:78:
         f1:4d:58:61:08:91:c1:5e:85:c2:b2:d3:e7:b1:ea:68:73:ee:
         35:cf:c8:d6:5f:e8:b7:cf:0c:86:5c:e7:21:1b:78:78:35:2c:
         04:24:69:a0:b7:1e:c2:f6:e8:bf:ab:45:84:d3:a8:b1:48:7e:
         71:46:ff:8b:69:28:84:48:1f:b8:ff:8a:68:c4:55:35:91:89:
         af:70:d2:bd:1d:14:3b:f7:5c:f9:38:38:40:ba:8c:b3:ed:94:
         41:83:28:bf:0d:d4:2b:d9:cf:89:08:65:2c:11:d4:e3:04:c2:
         6e:e4:e8:86:50:c9:04:f4:69:cb:40:43:58:7c:8d:9e:ec:91:
         61:c2:ab:f1:e5:2b:4b:5b:f4:d7:02:73:f8:0e:34:03:94:65:
         36:d8:4b:ad:ce:c8:d0:aa:e9:21:83:4d:9b:b2:e8:b8:80:df:
         f9:d7:43:ed:df:6f:1a:d9:a4:72:70:5f:c8:0b:75:a8:8a:23:
         23:9c:73:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----