Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
File:                     46689F7EA6A6380B850E938D992174E5996FFA91.mft (raw, json)
Hash identifier:          g0U8n6t8NaT/N3g08Vm8F7dM+6vdnJYG/HbDX7ZXJig=
Subject key identifier:   D8:51:BE:A1:D7:20:76:D6:08:8E:33:1B:84:B1:B7:4E:01:D9:77:D3
Authority key identifier: 46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91
Certificate issuer:       /CN=46689F7EA6A6380B850E938D992174E5996FFA91
Certificate serial:       2A15E966DC7C6C454E8A09E96E1F44AAD41B3E22
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
Manifest number:          FB
Signing time:             Sat 14 Nov 2026 21:21:28 +0000
Manifest this update:     Sat 14 Nov 2026 21:16:28 +0000
Manifest next update:     Sun 15 Nov 2026 21:58:28 +0000
Files and hashes:         1: 46689F7EA6A6380B850E938D992174E5996FFA91.crl (hash: DEAANnFcjY30pxllRdyTNItwzimPp39bG4COluE0H14=)
                          2: 3230332e3131312e3230382e302f32302d3234203d3e2039363736.roa (hash: 2Hm8EQoLvpIpabJcBJrsVSGSxzCnsCBx0zKAGfh+LRM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl
                          rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 21:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:15:e9:66:dc:7c:6c:45:4e:8a:09:e9:6e:1f:44:aa:d4:1b:3e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46689F7EA6A6380B850E938D992174E5996FFA91
        Validity
            Not Before: Nov 14 21:16:28 2026 GMT
            Not After : Nov 15 21:58:28 2026 GMT
        Subject: CN=D851BEA1D72076D6088E331B84B1B74E01D977D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:1f:9b:2f:24:37:95:10:84:6e:48:7f:25:
                    d2:93:25:b0:42:06:c8:bf:2e:b8:57:05:db:21:a0:
                    03:01:d8:b4:7a:f8:9b:7d:2e:36:9e:06:43:e7:0b:
                    e8:7b:86:39:cb:d2:ef:6c:f7:ff:4e:cf:b6:57:a4:
                    20:ca:58:c2:80:7e:64:8f:d1:70:c6:4c:2a:71:ad:
                    82:22:f1:8f:a3:88:66:54:22:58:a3:22:8a:69:ff:
                    ae:85:0b:64:d6:69:23:48:13:8a:c5:7e:92:1b:4b:
                    bd:04:49:ad:bf:83:92:f2:af:ee:63:29:0a:6e:03:
                    94:36:f6:d9:c0:8c:3f:7d:bc:86:ab:59:23:8c:a2:
                    a8:b9:6c:3a:09:43:5d:25:33:a7:51:f2:3f:cc:50:
                    10:92:9f:62:c4:3b:bd:58:6b:e6:f8:e9:9b:82:a2:
                    ae:75:b3:9c:9e:b6:5d:7c:53:c6:11:f8:83:b8:87:
                    8c:a5:68:a1:12:d3:95:1f:c5:8a:b2:28:4a:a6:18:
                    b8:b3:62:09:bf:35:44:7c:f3:4e:58:4a:47:00:1c:
                    d9:b9:09:c3:81:19:dc:d8:bb:46:a1:5c:1c:78:ad:
                    47:9c:6c:16:4e:df:97:81:31:fa:a1:79:36:60:49:
                    32:92:3a:6d:0b:f9:57:c9:fc:9a:b1:7d:df:2f:15:
                    7e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:51:BE:A1:D7:20:76:D6:08:8E:33:1B:84:B1:B7:4E:01:D9:77:D3
            X509v3 Authority Key Identifier:
                keyid:46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6f:dc:7a:dd:ba:f9:d3:9b:29:2f:45:ff:93:1a:22:ec:6c:
         13:2e:27:76:72:49:be:52:a9:17:b4:28:1a:9d:40:12:11:d5:
         0c:d8:f7:13:56:d3:41:96:a2:79:42:6b:53:fb:71:88:df:7a:
         4f:5e:ac:a1:a0:46:0f:74:aa:b5:be:27:a9:80:32:5d:73:8e:
         2c:65:26:0d:aa:08:f1:8c:c1:20:c9:02:be:58:0a:0c:87:78:
         41:a4:98:a1:35:6b:a6:03:bd:9d:d4:b1:5e:07:05:03:48:4a:
         3b:06:30:75:6d:a6:db:4c:e9:e2:98:68:ed:ff:b3:bb:32:73:
         18:d5:91:b9:db:25:ea:80:db:9d:16:78:4d:86:c1:ac:78:e5:
         8f:e0:8b:79:1d:7e:72:6f:fa:94:56:17:c8:71:b3:a7:2b:3a:
         2d:0e:1e:a3:1e:55:13:ac:62:65:b8:98:51:9c:c6:04:71:db:
         ab:67:85:6e:98:16:14:ee:77:16:74:b7:13:c2:40:7f:ab:81:
         97:f5:47:88:a5:67:ca:f5:4f:10:dd:90:6e:82:df:88:86:ab:
         6c:a8:92:90:92:78:7b:63:33:ff:f3:a1:d3:38:95:7e:c7:94:
         9e:79:54:e5:62:c5:75:a6:8e:8e:60:b2:ff:02:8d:c3:eb:6f:
         bb:ba:7d:a8
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUKhXpZtx8bEVOignpbh9EqtQbPiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY2ODlGN0VBNkE2MzgwQjg1MEU5MzhEOTkyMTc0RTU5
OTZGRkE5MTAeFw0yNjExMTQyMTE2MjhaFw0yNjExMTUyMTU4MjhaMDMxMTAvBgNV
BAMTKEQ4NTFCRUExRDcyMDc2RDYwODhFMzMxQjg0QjFCNzRFMDFEOTc3RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Vh+bLyQ3lRCEbkh/JdKTJbBC
Bsi/LrhXBdshoAMB2LR6+Jt9LjaeBkPnC+h7hjnL0u9s9/9Oz7ZXpCDKWMKAfmSP
0XDGTCpxrYIi8Y+jiGZUIlijIopp/66FC2TWaSNIE4rFfpIbS70ESa2/g5Lyr+5j
KQpuA5Q29tnAjD99vIarWSOMoqi5bDoJQ10lM6dR8j/MUBCSn2LEO71Ya+b46ZuC
oq51s5yetl18U8YR+IO4h4ylaKES05UfxYqyKEqmGLizYgm/NUR8805YSkcAHNm5
CcOBGdzYu0ahXBx4rUecbBZO35eBMfqheTZgSTKSOm0L+VfJ/Jqxfd8vFX4lAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQU2FG+odcgdtYIjjMbhLG3TgHZd9MwHwYDVR0j
BBgwFoAURmiffqamOAuFDpONmSF05Zlv+pEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFlDQVRW
LzAvNDY2ODlGN0VBNkE2MzgwQjg1MEU5MzhEOTkyMTc0RTU5OTZGRkE5MS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS80NjY4OUY3RUE2QTYzODBCODUwRTkzOEQ5OTIx
NzRFNTk5NkZGQTkxLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFlDQVRWLzAvNDY2ODlGN0VBNkE2
MzgwQjg1MEU5MzhEOTkyMTc0RTU5OTZGRkE5MS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI5v3HrduvnT
mykvRf+TGiLsbBMuJ3ZySb5SqRe0KBqdQBIR1QzY9xNW00GWonlCa1P7cYjfek9e
rKGgRg90qrW+J6mAMl1zjixlJg2qCPGMwSDJAr5YCgyHeEGkmKE1a6YDvZ3UsV4H
BQNISjsGMHVtpttM6eKYaO3/s7sycxjVkbnbJeqA250WeE2Gwax45Y/gi3kdfnJv
+pRWF8hxs6crOi0OHqMeVROsYmW4mFGcxgRx26tnhW6YFhTudxZ0txPCQH+rgZf1
R4ilZ8r1TxDdkG6C34iGq2yokpCSeHtjM//zodM4lX7HlJ55VOVixXWmjo5gsv8C
jcPrb7u6fag=
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:11:35 2026 by rpki-client