
$ rpki-client -vvf rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
File: 46689F7EA6A6380B850E938D992174E5996FFA91.mft (raw, json)
Hash identifier: Il9UCirkOGdkf3APFNQdfQln6ysvtqzbKWS9RohRqYM=
Subject key identifier: F6:74:79:9B:6F:8C:6D:4D:3F:99:B4:E0:53:AF:DB:34:33:5E:EE:07
Authority key identifier: 46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91
Certificate issuer: /CN=46689F7EA6A6380B850E938D992174E5996FFA91
Certificate serial: 2DD7DB359CEACF7940DF07965BB51C12BAC5048D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
Manifest number: 03
Signing time: Tue 12 May 2026 10:25:08 +0000
Manifest this update: Tue 12 May 2026 10:20:08 +0000
Manifest next update: Wed 13 May 2026 13:37:08 +0000
Files and hashes: 1: 46689F7EA6A6380B850E938D992174E5996FFA91.crl (hash: lowfrU5ExWZgB/M+3wk8RlhKg6xSgTet9Wjc6Dy9EiY=)
2: 3230332e3131312e3230382e302f32302d3234203d3e2039363736.roa (hash: 2Hm8EQoLvpIpabJcBJrsVSGSxzCnsCBx0zKAGfh+LRM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl
rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 13:37:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d7:db:35:9c:ea:cf:79:40:df:07:96:5b:b5:1c:12:ba:c5:04:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46689F7EA6A6380B850E938D992174E5996FFA91
Validity
Not Before: May 12 10:20:08 2026 GMT
Not After : May 13 13:37:08 2026 GMT
Subject: CN=F674799B6F8C6D4D3F99B4E053AFDB34335EEE07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:94:9c:1f:e9:c3:6c:0e:14:35:af:74:91:fc:
40:d9:14:47:56:d5:22:3b:f5:dc:f5:95:27:cc:4b:
4d:88:ca:20:3c:7d:f4:4c:68:8a:58:03:cd:3d:34:
50:8e:74:0d:21:9c:66:fd:1c:26:6f:0c:eb:93:d1:
7f:6d:a0:f1:b3:0c:78:37:82:92:9b:3b:df:8c:96:
1d:39:6f:ea:d4:f4:28:ea:7f:7a:ec:ec:c8:a0:1d:
6c:d8:4d:a4:7e:ad:d4:7f:30:2d:10:57:2f:7b:27:
38:6a:4b:ad:00:54:ad:16:fc:fd:4f:9e:a3:f5:5f:
a0:fa:ee:c8:ed:fe:eb:80:62:3d:9e:b5:48:a6:53:
7a:6b:f3:a5:d4:15:06:42:a6:80:04:a6:df:b1:9d:
65:6e:b6:87:b7:11:bb:19:0d:45:c0:34:85:55:91:
e5:79:8b:8b:11:98:a8:31:ef:84:d5:5d:a6:5c:3a:
ab:41:37:bd:60:d1:e5:99:ba:04:0a:64:b9:fd:92:
2e:e5:f8:9f:ae:af:f3:c0:18:55:7e:0e:e8:2e:64:
df:ea:9a:1d:43:63:13:0b:95:d3:db:16:71:6f:20:
14:fd:26:42:90:85:f5:de:d2:99:36:1b:ab:14:9f:
ed:6d:38:44:2e:04:24:7c:20:ae:dd:fc:e2:c7:25:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:74:79:9B:6F:8C:6D:4D:3F:99:B4:E0:53:AF:DB:34:33:5E:EE:07
X509v3 Authority Key Identifier:
keyid:46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9e:4d:d4:d6:e3:cb:9f:87:d5:92:d1:c0:86:cf:68:25:86:
33:20:1e:c5:e9:22:37:c7:36:74:7c:29:e5:e1:67:34:07:05:
a4:ba:26:2d:58:b2:9f:cf:5f:e2:b9:a9:c9:53:aa:cc:a1:3a:
12:98:47:e0:d7:55:c0:40:29:1c:c2:18:3e:a1:0f:79:95:d9:
40:05:63:8a:cd:bc:60:7b:61:85:8a:19:b9:16:95:8d:3e:e3:
b4:25:5a:27:13:f1:cd:e2:47:d2:bd:25:b1:71:32:20:4d:4c:
91:ba:52:4a:fa:61:d5:f4:f8:ad:71:50:a4:98:bf:d9:18:06:
81:8f:02:12:f9:77:4d:b7:95:3b:36:d6:e4:9a:46:d7:df:c4:
92:c8:42:8f:97:a8:85:45:29:a9:2d:98:ae:13:76:c7:68:c5:
5b:16:22:8d:59:fd:a8:e5:0e:27:da:0d:a9:9c:9f:be:43:43:
69:56:29:94:b3:37:5d:95:db:78:f2:00:22:19:03:2b:02:1b:
8d:29:33:75:3d:46:f6:b2:46:9a:e5:be:5b:d6:2e:5d:42:34:
2b:b5:1d:ae:38:86:15:f3:2f:40:04:52:ca:b8:9e:f0:18:d6:
56:7f:83:90:12:1b:6c:9e:8f:ba:40:6e:e6:4d:54:7d:72:09:
33:33:49:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:27:04 2026 by rpki-client