Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
File:                     KUthydo1hCdBgvogr4Ym4a6oHzI.mft (raw, json)
Hash identifier:          NQgScAyNbhyyirp02RT7oK6j7WC2Th14TCdBI7xDi3E=
Subject key identifier:   F9:17:1C:46:A9:29:0B:99:6E:70:83:C2:12:3E:3B:A4:53:2C:4E:BF
Authority key identifier: 29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32
Certificate issuer:       /CN=294B61C9DA3584274182FA20AF8626E1AEA81F32
Certificate serial:       02F6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
Manifest number:          02F4
Signing time:             Sun 01 Mar 2026 16:23:49 +0000
Manifest this update:     Sun 01 Mar 2026 16:23:49 +0000
Manifest next update:     Sun 01 Mar 2026 22:23:49 +0000
Files and hashes:         1: KUthydo1hCdBgvogr4Ym4a6oHzI.crl (hash: TpYJ5sP/0pwfo6E/+gX5PP+EFoKzQtwW6lcx2dpJ4HA=)
                          2: vX2zurKcZq6uHugr79Vj7CluX8U.roa (hash: GdVPCwO2JcoPshr3Z+ad1hPe/GxgIs2qP3IuU8IWvC8=)
                          3: zyeCTH0u4dPBpS48vPaM1qbh0ZQ.roa (hash: 4WOxoLw0W96yUmxJv3ac7DDaLuuI/40+Ms3ofP7ccYE=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758 (0x2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294B61C9DA3584274182FA20AF8626E1AEA81F32
        Validity
            Not Before: Mar  1 16:23:49 2026 GMT
            Not After : Oct  7 15:30:20 2026 GMT
        Subject: CN=F9171C46A9290B996E7083C2123E3BA4532C4EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:57:1d:e2:25:7a:e7:4c:1b:a5:3d:69:90:
                    57:e6:08:f1:fe:0f:74:cd:35:79:17:aa:5e:f5:40:
                    cd:15:26:32:57:c1:20:f8:7f:67:2c:dd:3a:8d:62:
                    58:52:09:3d:2f:25:b6:68:52:b9:f2:94:86:6e:c8:
                    3f:14:d5:a8:da:78:ae:c9:30:59:e7:c7:11:30:c3:
                    1b:e1:26:1e:d2:9b:c3:95:d4:62:d4:06:17:1f:84:
                    b1:c1:29:a3:d6:9b:7e:2e:b0:bb:b7:39:90:c4:f2:
                    12:97:2b:24:46:3d:7c:8b:00:6b:dd:42:43:2a:e9:
                    e9:d4:f9:91:d8:9b:d2:77:19:2b:b7:e9:e9:f9:7c:
                    20:1a:15:51:da:5a:f7:d6:51:ea:c7:d2:c2:46:c4:
                    dd:76:42:75:b5:40:ed:04:e1:62:da:89:f5:25:46:
                    be:6d:50:2e:fd:52:5b:15:6e:a4:1d:03:85:12:cd:
                    cb:25:45:9a:9b:87:0e:35:c3:e5:49:b5:07:92:d5:
                    34:3b:ca:8d:36:25:2f:30:fb:b6:88:7b:3e:e2:36:
                    f2:9d:07:3f:19:31:f7:b5:3f:ac:47:85:a8:04:52:
                    11:f4:1d:d7:8d:09:54:ce:dd:d5:ea:87:79:8d:4d:
                    56:c5:fd:6f:29:1d:82:dc:c9:7e:a7:f4:7c:ae:47:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:17:1C:46:A9:29:0B:99:6E:70:83:C2:12:3E:3B:A4:53:2C:4E:BF
            X509v3 Authority Key Identifier:
                keyid:29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:9d:34:1f:14:b0:a2:b0:ac:78:e7:44:3a:52:09:fb:c0:e6:
         3b:f4:0d:4c:bb:0b:b2:62:c3:1a:5a:a2:29:0a:c9:79:f2:ed:
         5d:56:b1:a6:ef:c4:e7:49:6e:ae:35:07:e6:f1:85:3f:4e:2e:
         8d:03:ba:34:a0:ff:19:5f:7f:a1:d3:f5:98:b8:1c:17:71:cf:
         3c:40:5a:ba:c7:01:3e:a6:04:aa:32:90:35:69:bb:b5:5a:8c:
         70:98:b8:79:cc:13:67:ad:09:c7:95:b1:14:b3:fb:36:93:97:
         cc:13:da:05:f3:84:4d:59:62:de:73:52:eb:63:d2:7d:1e:e8:
         d3:f7:ac:21:a8:f8:5c:41:11:bb:9a:56:77:57:e0:48:db:1a:
         ac:97:36:aa:17:20:3e:27:cb:d6:c2:e3:01:69:8f:3d:31:fb:
         33:e0:8e:58:4a:7d:dd:74:5f:9e:3e:7a:08:79:01:60:21:fa:
         17:49:0b:e3:db:b0:c8:2f:de:74:89:41:4d:73:86:b3:66:44:
         44:f4:e5:16:33:31:47:73:17:5d:13:0e:58:9d:fa:bd:86:16:
         92:d5:82:86:22:b8:a0:90:2b:77:b0:ff:92:09:e4:67:72:d6:
         42:1c:a3:ff:01:a1:05:13:ea:93:f4:15:1b:19:a1:36:dd:48:
         62:9b:95:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:06 2026 by rpki-client