
$ rpki-client -vvvf rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
File: 46689F7EA6A6380B850E938D992174E5996FFA91.mft (raw, json)
Hash identifier: g0U8n6t8NaT/N3g08Vm8F7dM+6vdnJYG/HbDX7ZXJig=
Subject key identifier: D8:51:BE:A1:D7:20:76:D6:08:8E:33:1B:84:B1:B7:4E:01:D9:77:D3
Authority key identifier: 46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91
Certificate issuer: /CN=46689F7EA6A6380B850E938D992174E5996FFA91
Certificate serial: 2A15E966DC7C6C454E8A09E96E1F44AAD41B3E22
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
Manifest number: FB
Signing time: Sat 14 Nov 2026 21:21:28 +0000
Manifest this update: Sat 14 Nov 2026 21:16:28 +0000
Manifest next update: Sun 15 Nov 2026 21:58:28 +0000
Files and hashes: 1: 46689F7EA6A6380B850E938D992174E5996FFA91.crl (hash: DEAANnFcjY30pxllRdyTNItwzimPp39bG4COluE0H14=)
2: 3230332e3131312e3230382e302f32302d3234203d3e2039363736.roa (hash: 2Hm8EQoLvpIpabJcBJrsVSGSxzCnsCBx0zKAGfh+LRM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl
rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 21:58:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:15:e9:66:dc:7c:6c:45:4e:8a:09:e9:6e:1f:44:aa:d4:1b:3e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46689F7EA6A6380B850E938D992174E5996FFA91
Validity
Not Before: Nov 14 21:16:28 2026 GMT
Not After : Nov 15 21:58:28 2026 GMT
Subject: CN=D851BEA1D72076D6088E331B84B1B74E01D977D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:1f:9b:2f:24:37:95:10:84:6e:48:7f:25:
d2:93:25:b0:42:06:c8:bf:2e:b8:57:05:db:21:a0:
03:01:d8:b4:7a:f8:9b:7d:2e:36:9e:06:43:e7:0b:
e8:7b:86:39:cb:d2:ef:6c:f7:ff:4e:cf:b6:57:a4:
20:ca:58:c2:80:7e:64:8f:d1:70:c6:4c:2a:71:ad:
82:22:f1:8f:a3:88:66:54:22:58:a3:22:8a:69:ff:
ae:85:0b:64:d6:69:23:48:13:8a:c5:7e:92:1b:4b:
bd:04:49:ad:bf:83:92:f2:af:ee:63:29:0a:6e:03:
94:36:f6:d9:c0:8c:3f:7d:bc:86:ab:59:23:8c:a2:
a8:b9:6c:3a:09:43:5d:25:33:a7:51:f2:3f:cc:50:
10:92:9f:62:c4:3b:bd:58:6b:e6:f8:e9:9b:82:a2:
ae:75:b3:9c:9e:b6:5d:7c:53:c6:11:f8:83:b8:87:
8c:a5:68:a1:12:d3:95:1f:c5:8a:b2:28:4a:a6:18:
b8:b3:62:09:bf:35:44:7c:f3:4e:58:4a:47:00:1c:
d9:b9:09:c3:81:19:dc:d8:bb:46:a1:5c:1c:78:ad:
47:9c:6c:16:4e:df:97:81:31:fa:a1:79:36:60:49:
32:92:3a:6d:0b:f9:57:c9:fc:9a:b1:7d:df:2f:15:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:51:BE:A1:D7:20:76:D6:08:8E:33:1B:84:B1:B7:4E:01:D9:77:D3
X509v3 Authority Key Identifier:
keyid:46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6f:dc:7a:dd:ba:f9:d3:9b:29:2f:45:ff:93:1a:22:ec:6c:
13:2e:27:76:72:49:be:52:a9:17:b4:28:1a:9d:40:12:11:d5:
0c:d8:f7:13:56:d3:41:96:a2:79:42:6b:53:fb:71:88:df:7a:
4f:5e:ac:a1:a0:46:0f:74:aa:b5:be:27:a9:80:32:5d:73:8e:
2c:65:26:0d:aa:08:f1:8c:c1:20:c9:02:be:58:0a:0c:87:78:
41:a4:98:a1:35:6b:a6:03:bd:9d:d4:b1:5e:07:05:03:48:4a:
3b:06:30:75:6d:a6:db:4c:e9:e2:98:68:ed:ff:b3:bb:32:73:
18:d5:91:b9:db:25:ea:80:db:9d:16:78:4d:86:c1:ac:78:e5:
8f:e0:8b:79:1d:7e:72:6f:fa:94:56:17:c8:71:b3:a7:2b:3a:
2d:0e:1e:a3:1e:55:13:ac:62:65:b8:98:51:9c:c6:04:71:db:
ab:67:85:6e:98:16:14:ee:77:16:74:b7:13:c2:40:7f:ab:81:
97:f5:47:88:a5:67:ca:f5:4f:10:dd:90:6e:82:df:88:86:ab:
6c:a8:92:90:92:78:7b:63:33:ff:f3:a1:d3:38:95:7e:c7:94:
9e:79:54:e5:62:c5:75:a6:8e:8e:60:b2:ff:02:8d:c3:eb:6f:
bb:ba:7d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:11:35 2026 by rpki-client