Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
File:                     DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft (raw, json)
Hash identifier:          TjD7fjC0CldArsPvE7aeiJBwNGG/Vu2pf4XTFPWhbz8=
Subject key identifier:   34:E4:C6:B5:65:0B:36:5A:FD:5B:59:7A:21:61:CA:7A:81:7A:A9:62
Authority key identifier: DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66
Certificate issuer:       /CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166
Certificate serial:       7119F6131BE48F1BECEB4350F85B48053BE15131
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft
Manifest number:          01
Signing time:             Mon 11 May 2026 16:06:08 +0000
Manifest this update:     Mon 11 May 2026 16:01:08 +0000
Manifest next update:     Tue 12 May 2026 17:57:08 +0000
Files and hashes:         1: DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl (hash: MkTmQc/T8tKr7BJcUgoR35xA7dmMFWPOyOkoMDdabdg=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:19:f6:13:1b:e4:8f:1b:ec:eb:43:50:f8:5b:48:05:3b:e1:51:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF17A9D7D1F0BA49C098D57487B9782B1BC65166
        Validity
            Not Before: May 11 16:01:08 2026 GMT
            Not After : May 12 17:57:08 2026 GMT
        Subject: CN=34E4C6B5650B365AFD5B597A2161CA7A817AA962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:99:6e:f3:32:64:17:6d:30:92:2c:ee:47:
                    b4:50:ac:9a:5b:43:68:f7:98:41:3b:18:1a:a4:62:
                    eb:79:bd:36:02:40:3d:5c:fe:e0:86:7c:e3:f5:a2:
                    06:6c:fd:10:6e:f8:17:7b:f4:e8:0d:b8:ad:9b:8c:
                    c7:cc:da:08:e0:e8:e1:54:3b:b8:47:ec:6f:bd:ec:
                    1d:ec:79:0a:88:55:b3:77:5c:9b:28:c6:85:f5:e8:
                    51:24:4f:98:bc:b7:c4:e9:0d:af:54:7f:48:93:da:
                    12:5b:c4:69:d5:3d:1f:be:b8:08:ab:72:d1:83:07:
                    50:3b:ca:ce:d8:c2:73:c0:c2:bc:e0:cc:8b:f4:0a:
                    b5:cc:be:4e:c4:e5:07:11:94:2b:36:29:ee:62:2d:
                    66:23:a6:85:b5:89:4c:c5:a8:e8:69:b5:b9:5e:48:
                    f4:0f:ed:89:6c:d7:d5:34:94:94:2a:e0:b8:7c:c4:
                    12:3c:be:d9:80:bd:f7:ac:ed:c1:ee:c0:d4:b0:a0:
                    19:41:46:2b:65:d0:61:30:e9:00:3e:71:32:54:67:
                    48:19:14:42:4d:4f:26:3d:c7:c8:e4:b1:18:ee:29:
                    e7:57:d6:3e:ca:a4:6d:07:c1:0b:30:e3:82:49:5d:
                    c1:44:f5:a3:16:f0:e1:9c:27:99:8a:cd:93:21:bc:
                    30:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E4:C6:B5:65:0B:36:5A:FD:5B:59:7A:21:61:CA:7A:81:7A:A9:62
            X509v3 Authority Key Identifier:
                keyid:DF:17:A9:D7:D1:F0:BA:49:C0:98:D5:74:87:B9:78:2B:1B:C6:51:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/YUFENG/0/DF17A9D7D1F0BA49C098D57487B9782B1BC65166.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:97:2e:95:83:95:45:76:69:71:20:81:48:2d:53:c6:61:1a:
         b5:0d:80:b5:19:c9:d2:84:53:56:a9:2f:4b:27:57:35:df:ce:
         6c:c0:93:8e:f4:cf:bd:cb:23:d3:bb:2d:f3:d7:dc:61:d9:1e:
         5c:10:42:fe:99:87:fe:06:60:4f:9f:fd:1b:db:0a:47:4c:1e:
         52:e0:12:fe:4b:1d:a4:26:44:fb:f4:08:f0:db:91:5f:b6:b9:
         c4:de:d4:20:86:a3:14:7c:ec:77:f7:20:bc:0d:0e:22:ff:81:
         00:06:87:c1:41:b9:21:81:a8:a4:80:cd:ca:c3:ef:7a:fb:94:
         71:ff:96:9e:26:9b:9f:5d:3d:2e:4f:06:1f:f8:0b:d3:c1:76:
         50:f6:52:50:04:64:38:7f:52:ac:6a:15:15:0e:5d:83:02:c1:
         d2:ae:90:92:fa:ee:b1:91:61:cc:29:88:ad:26:c4:d1:0e:a5:
         44:d0:7a:72:e3:7f:11:6f:89:25:df:bd:90:09:58:fb:b0:65:
         4e:ed:99:7a:cb:dd:33:4d:90:3d:4f:26:26:98:c1:80:2e:4f:
         4b:75:56:15:07:d6:a0:2d:a9:c3:19:84:3f:ac:a8:76:29:22:
         f1:11:93:42:1b:cb:4c:69:6b:b0:5f:0f:89:e7:d4:ac:65:3c:
         02:65:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:04 2026 by rpki-client