Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft
File:                     SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft (raw, json)
Hash identifier:          hOR0ZHoAJnA3RGhqPEdJTk1Av627ZDMop+R4InmxuYI=
Subject key identifier:   F4:9C:52:50:57:A5:F2:37:9E:FB:80:26:89:97:DF:0D:56:5A:A5:FF
Authority key identifier: 4A:C2:9E:B9:19:D0:71:91:6D:74:46:65:F2:93:41:B0:0A:03:62:97
Certificate issuer:       /CN=4AC29EB919D071916D744665F29341B00A036297
Certificate serial:       038C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/SsKeuRnQcZFtdEZl8pNBsAoDYpc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft
Manifest number:          038A
Signing time:             Sun 01 Mar 2026 19:53:44 +0000
Manifest this update:     Sun 01 Mar 2026 19:53:44 +0000
Manifest next update:     Mon 02 Mar 2026 01:53:44 +0000
Files and hashes:         1: -rM84dFnltLzFCWPl4AGxt3d70o.roa (hash: OBYLVbSP/fiL5gNwYlwz1qku0qGFB8y4odJJJJFQvN8=)
                          2: Nqa0Qhn4yvrq5vNhQmcCw7hAdSE.roa (hash: Y5nBa0ULJqBAX+uCNVgjgWDOtFmo25XLO+BS2Ijf5+0=)
                          3: SsKeuRnQcZFtdEZl8pNBsAoDYpc.crl (hash: U7yBUYoDOw/yjaggjOoMVNPInRi9tS6+q6S1jRFQJC4=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AC29EB919D071916D744665F29341B00A036297
        Validity
            Not Before: Mar  1 19:53:44 2026 GMT
            Not After : Sep  9 15:30:21 2026 GMT
        Subject: CN=F49C525057A5F2379EFB80268997DF0D565AA5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:56:80:7b:34:42:0e:d7:d1:dc:e6:32:8e:60:
                    41:68:d1:15:3a:4b:a5:91:8c:ea:07:06:b6:bf:3c:
                    46:7a:76:2b:dc:f2:32:23:e1:6c:c7:7f:ae:65:4d:
                    af:22:24:f2:cb:97:ec:f0:b6:fd:2a:79:e1:5d:2e:
                    e5:84:c4:5f:4f:df:87:44:dd:80:34:32:6c:64:9b:
                    d9:d1:74:07:ac:53:fe:9a:6c:2d:ce:1e:aa:ba:97:
                    8d:72:49:e6:14:43:de:12:db:32:df:4f:3a:bf:94:
                    9c:fe:83:8b:98:04:e7:b7:08:ef:b8:d1:45:eb:44:
                    a6:62:82:ca:76:e3:f4:3d:53:0a:22:65:95:0e:3c:
                    46:d9:03:f9:ac:56:21:67:aa:98:c9:1f:49:00:06:
                    94:09:88:d4:1d:48:d6:89:47:6d:61:a0:79:05:34:
                    2d:10:19:b9:69:5a:bb:99:3b:81:b2:75:cb:e3:e0:
                    98:62:13:04:21:eb:be:fa:fd:24:ec:54:55:ee:c7:
                    73:ce:aa:bd:b8:ff:81:a7:5b:26:ba:1c:c9:1e:e8:
                    de:b2:55:4b:b6:b2:a6:65:e9:50:33:fd:50:84:ba:
                    e6:9b:df:0a:72:9d:a6:a8:27:8a:f0:8a:c3:6a:d5:
                    42:c3:f2:5c:cb:75:c3:36:d6:3b:c1:52:14:3d:f6:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9C:52:50:57:A5:F2:37:9E:FB:80:26:89:97:DF:0D:56:5A:A5:FF
            X509v3 Authority Key Identifier:
                keyid:4A:C2:9E:B9:19:D0:71:91:6D:74:46:65:F2:93:41:B0:0A:03:62:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SsKeuRnQcZFtdEZl8pNBsAoDYpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIAOCORP/SsKeuRnQcZFtdEZl8pNBsAoDYpc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:97:bd:c9:9e:6b:8e:d6:30:de:34:06:cb:fb:e5:33:92:6d:
         1d:27:c9:84:de:64:27:46:13:8b:cd:0f:c3:ae:9b:8b:75:67:
         e1:bc:a8:8a:01:be:3e:02:ca:c2:ad:9f:6b:e5:bf:5e:e0:cf:
         18:cc:e8:d3:34:df:03:33:e9:6d:c6:14:9f:5d:fd:3a:54:e8:
         eb:65:3a:99:9a:da:c3:47:5f:b3:a7:25:e7:ec:77:0c:85:61:
         b4:d1:ad:9c:5e:e1:71:6f:31:17:bb:f3:d4:27:b1:f8:b0:9d:
         c1:29:40:0b:4a:5a:80:a8:97:96:22:ce:47:e5:d0:f9:26:3e:
         0f:a2:ea:92:2a:f6:ae:97:55:20:77:a0:e1:c5:0b:ad:c2:ec:
         09:b7:46:a0:97:eb:2a:33:fb:da:5b:f2:70:3c:57:37:af:c1:
         8f:2e:12:6b:6d:4c:af:cf:76:7f:4a:76:05:ef:04:48:83:3d:
         4b:ac:32:6c:6b:7d:f5:f5:e6:c0:b6:96:31:d3:d6:37:18:41:
         e7:85:d2:60:57:2a:80:94:0e:6d:c9:c0:20:a1:aa:71:fe:dc:
         10:34:82:d6:30:1b:11:45:0b:2f:6b:55:5b:0f:dc:6c:c8:fb:
         9a:c7:55:dc:97:53:49:df:db:ec:a1:2b:7d:9e:46:d3:8a:75:
         06:1f:41:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:55:05 2026 by rpki-client