Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
File:                     jCH-vEkP9giqCpuTTqr2g05UUms.mft (raw, json)
Hash identifier:          5W2CeqN2/gDhdtDox6Hr3hjbTxJek5IAto+OPs+Zyoc=
Subject key identifier:   6C:40:07:38:AD:52:C4:5C:95:3F:10:B8:25:79:EC:42:E9:74:F5:3B
Authority key identifier: 8C:21:FE:BC:49:0F:F6:08:AA:0A:9B:93:4E:AA:F6:83:4E:54:52:6B
Certificate issuer:       /CN=8C21FEBC490FF608AA0A9B934EAAF6834E54526B
Certificate serial:       022A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
Manifest number:          022A
Signing time:             Sun 19 Apr 2026 04:33:28 +0000
Manifest this update:     Sun 19 Apr 2026 04:33:28 +0000
Manifest next update:     Sun 19 Apr 2026 10:33:28 +0000
Files and hashes:         1: jCH-vEkP9giqCpuTTqr2g05UUms.crl (hash: iba+FFPA09Y2CxpeS80dQhZamKv0uJ1cgMo8i9+3rAM=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C21FEBC490FF608AA0A9B934EAAF6834E54526B
        Validity
            Not Before: Apr 19 04:33:28 2026 GMT
            Not After : Nov 12 15:30:20 2026 GMT
        Subject: CN=6C400738AD52C45C953F10B82579EC42E974F53B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:72:df:cc:fb:5b:90:95:4d:0e:e0:34:a0:
                    7b:8a:90:fc:fd:92:56:6f:13:85:b6:ce:9f:ef:ee:
                    9d:77:7a:45:15:c6:5f:9f:8d:5c:40:93:20:20:0a:
                    75:ad:b1:f0:f3:45:6e:a2:60:c5:12:31:2c:15:49:
                    5c:4e:23:f1:51:71:a0:6c:b1:46:e6:ba:c4:e1:b5:
                    cc:7d:7d:36:e6:9f:1f:bf:93:72:94:80:db:de:8c:
                    72:81:c7:a5:7d:64:32:20:f8:61:87:2d:27:b8:1f:
                    3e:e4:10:6a:bc:37:0c:87:cb:20:0c:10:84:e1:fa:
                    cd:8c:dc:6e:97:6d:d5:cf:ae:42:21:7d:b2:03:ee:
                    00:07:b8:bb:f2:a2:27:95:a1:2b:be:44:f4:b9:93:
                    7a:ec:52:84:a6:ee:f9:75:cf:2f:0d:ff:d7:84:55:
                    70:80:29:69:49:2e:bd:09:2c:11:d1:b4:2e:55:1a:
                    fc:db:07:5d:49:a2:42:61:b8:2d:27:59:78:e5:3c:
                    51:57:98:12:7d:5e:af:e3:33:03:fe:c5:9b:3c:b0:
                    2c:1b:98:3d:75:a2:52:f7:b7:62:75:ec:09:39:78:
                    52:13:47:bc:1e:18:cd:c3:71:86:69:0d:bf:68:f4:
                    1c:c4:b9:86:0b:a1:0c:96:1d:fa:b7:eb:99:a6:a4:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:40:07:38:AD:52:C4:5C:95:3F:10:B8:25:79:EC:42:E9:74:F5:3B
            X509v3 Authority Key Identifier:
                keyid:8C:21:FE:BC:49:0F:F6:08:AA:0A:9B:93:4E:AA:F6:83:4E:54:52:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/jCH-vEkP9giqCpuTTqr2g05UUms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GMICLOUD/jCH-vEkP9giqCpuTTqr2g05UUms.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:68:cd:f3:98:2d:c1:f7:a3:df:aa:5f:41:a3:80:d9:1b:3e:
         2e:aa:30:66:cc:0a:18:ee:cb:cc:bb:2e:31:de:bb:c4:f1:90:
         54:93:f2:85:43:aa:93:64:2f:80:82:c7:e2:6f:95:e8:8c:e6:
         4d:01:73:5c:04:42:3b:2f:a0:73:8d:bb:49:2c:ed:73:03:24:
         d9:09:d8:9e:69:b1:d2:e8:54:7d:60:5c:e6:98:76:5b:3b:62:
         11:4e:ed:7b:cc:96:be:04:b6:c0:c4:81:61:70:a1:46:77:56:
         36:83:2a:d4:d0:f9:1f:d5:d9:9d:2b:2e:7b:46:ca:71:2f:eb:
         50:42:50:a4:2b:38:29:54:46:fb:d3:b3:75:bd:e8:46:e6:bd:
         0c:2f:d3:b5:a5:d6:9b:75:af:e3:3d:9f:2b:e4:df:9f:18:ca:
         5a:90:b0:f2:e9:0a:4b:a4:46:3b:50:dc:ca:b8:ba:4b:e5:c7:
         24:9c:0d:f2:18:61:0c:2c:e8:c8:17:ee:d7:58:2a:1c:01:93:
         0b:8c:c6:3c:ee:21:c9:96:fd:4b:3b:01:86:09:0d:0b:ec:d5:
         7f:65:21:b4:20:d5:90:fb:80:c4:95:dc:5a:59:8a:7c:6b:aa:
         fc:48:7d:9e:0c:9c:0d:06:66:56:90:b4:16:bf:b6:7d:5b:c7:
         ed:90:66:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:54:20 2026 by rpki-client