Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
File:                     46689F7EA6A6380B850E938D992174E5996FFA91.mft (raw, json)
Hash identifier:          Il9UCirkOGdkf3APFNQdfQln6ysvtqzbKWS9RohRqYM=
Subject key identifier:   F6:74:79:9B:6F:8C:6D:4D:3F:99:B4:E0:53:AF:DB:34:33:5E:EE:07
Authority key identifier: 46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91
Certificate issuer:       /CN=46689F7EA6A6380B850E938D992174E5996FFA91
Certificate serial:       2DD7DB359CEACF7940DF07965BB51C12BAC5048D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
Manifest number:          03
Signing time:             Tue 12 May 2026 10:25:08 +0000
Manifest this update:     Tue 12 May 2026 10:20:08 +0000
Manifest next update:     Wed 13 May 2026 13:37:08 +0000
Files and hashes:         1: 46689F7EA6A6380B850E938D992174E5996FFA91.crl (hash: lowfrU5ExWZgB/M+3wk8RlhKg6xSgTet9Wjc6Dy9EiY=)
                          2: 3230332e3131312e3230382e302f32302d3234203d3e2039363736.roa (hash: 2Hm8EQoLvpIpabJcBJrsVSGSxzCnsCBx0zKAGfh+LRM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl
                          rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 13:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d7:db:35:9c:ea:cf:79:40:df:07:96:5b:b5:1c:12:ba:c5:04:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46689F7EA6A6380B850E938D992174E5996FFA91
        Validity
            Not Before: May 12 10:20:08 2026 GMT
            Not After : May 13 13:37:08 2026 GMT
        Subject: CN=F674799B6F8C6D4D3F99B4E053AFDB34335EEE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:9c:1f:e9:c3:6c:0e:14:35:af:74:91:fc:
                    40:d9:14:47:56:d5:22:3b:f5:dc:f5:95:27:cc:4b:
                    4d:88:ca:20:3c:7d:f4:4c:68:8a:58:03:cd:3d:34:
                    50:8e:74:0d:21:9c:66:fd:1c:26:6f:0c:eb:93:d1:
                    7f:6d:a0:f1:b3:0c:78:37:82:92:9b:3b:df:8c:96:
                    1d:39:6f:ea:d4:f4:28:ea:7f:7a:ec:ec:c8:a0:1d:
                    6c:d8:4d:a4:7e:ad:d4:7f:30:2d:10:57:2f:7b:27:
                    38:6a:4b:ad:00:54:ad:16:fc:fd:4f:9e:a3:f5:5f:
                    a0:fa:ee:c8:ed:fe:eb:80:62:3d:9e:b5:48:a6:53:
                    7a:6b:f3:a5:d4:15:06:42:a6:80:04:a6:df:b1:9d:
                    65:6e:b6:87:b7:11:bb:19:0d:45:c0:34:85:55:91:
                    e5:79:8b:8b:11:98:a8:31:ef:84:d5:5d:a6:5c:3a:
                    ab:41:37:bd:60:d1:e5:99:ba:04:0a:64:b9:fd:92:
                    2e:e5:f8:9f:ae:af:f3:c0:18:55:7e:0e:e8:2e:64:
                    df:ea:9a:1d:43:63:13:0b:95:d3:db:16:71:6f:20:
                    14:fd:26:42:90:85:f5:de:d2:99:36:1b:ab:14:9f:
                    ed:6d:38:44:2e:04:24:7c:20:ae:dd:fc:e2:c7:25:
                    25:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:74:79:9B:6F:8C:6D:4D:3F:99:B4:E0:53:AF:DB:34:33:5E:EE:07
            X509v3 Authority Key Identifier:
                keyid:46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9e:4d:d4:d6:e3:cb:9f:87:d5:92:d1:c0:86:cf:68:25:86:
         33:20:1e:c5:e9:22:37:c7:36:74:7c:29:e5:e1:67:34:07:05:
         a4:ba:26:2d:58:b2:9f:cf:5f:e2:b9:a9:c9:53:aa:cc:a1:3a:
         12:98:47:e0:d7:55:c0:40:29:1c:c2:18:3e:a1:0f:79:95:d9:
         40:05:63:8a:cd:bc:60:7b:61:85:8a:19:b9:16:95:8d:3e:e3:
         b4:25:5a:27:13:f1:cd:e2:47:d2:bd:25:b1:71:32:20:4d:4c:
         91:ba:52:4a:fa:61:d5:f4:f8:ad:71:50:a4:98:bf:d9:18:06:
         81:8f:02:12:f9:77:4d:b7:95:3b:36:d6:e4:9a:46:d7:df:c4:
         92:c8:42:8f:97:a8:85:45:29:a9:2d:98:ae:13:76:c7:68:c5:
         5b:16:22:8d:59:fd:a8:e5:0e:27:da:0d:a9:9c:9f:be:43:43:
         69:56:29:94:b3:37:5d:95:db:78:f2:00:22:19:03:2b:02:1b:
         8d:29:33:75:3d:46:f6:b2:46:9a:e5:be:5b:d6:2e:5d:42:34:
         2b:b5:1d:ae:38:86:15:f3:2f:40:04:52:ca:b8:9e:f0:18:d6:
         56:7f:83:90:12:1b:6c:9e:8f:ba:40:6e:e6:4d:54:7d:72:09:
         33:33:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:04 2026 by rpki-client