Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
File:                     46689F7EA6A6380B850E938D992174E5996FFA91.mft (raw, json)
Hash identifier:          Lvd2uvl4NEwhsgSv6njQV1+XKsSnODBJ4PcddAOvtYU=
Subject key identifier:   40:BC:80:05:20:B5:21:05:38:F7:AF:F2:A0:25:40:8F:DE:64:D9:EA
Authority key identifier: 46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91
Certificate issuer:       /CN=46689F7EA6A6380B850E938D992174E5996FFA91
Certificate serial:       7994155C888074F35105B39B86513D27345F6AB2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
Manifest number:          04
Signing time:             Wed 13 May 2026 05:37:08 +0000
Manifest this update:     Wed 13 May 2026 05:32:08 +0000
Manifest next update:     Thu 14 May 2026 07:07:08 +0000
Files and hashes:         1: 46689F7EA6A6380B850E938D992174E5996FFA91.crl (hash: 9ttNJZFz0HxByaKYaXdmk/xlzf7MxXqrmItYgpTkWJA=)
                          2: 3230332e3131312e3230382e302f32302d3234203d3e2039363736.roa (hash: 2Hm8EQoLvpIpabJcBJrsVSGSxzCnsCBx0zKAGfh+LRM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl
                          rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 07:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:94:15:5c:88:80:74:f3:51:05:b3:9b:86:51:3d:27:34:5f:6a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46689F7EA6A6380B850E938D992174E5996FFA91
        Validity
            Not Before: May 13 05:32:08 2026 GMT
            Not After : May 14 07:07:08 2026 GMT
        Subject: CN=40BC800520B5210538F7AFF2A025408FDE64D9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:0e:0e:3f:32:c9:b5:f8:d3:69:34:ad:7a:
                    14:10:cc:6a:07:54:4f:84:7a:44:b0:fc:ad:50:9a:
                    a9:cc:6d:8a:81:8e:5f:19:24:3e:bd:df:58:6d:fd:
                    04:eb:73:05:5e:79:d8:81:37:10:8d:44:f7:e2:d1:
                    f8:e7:1b:9c:71:10:da:56:ac:6c:93:b3:af:ea:f6:
                    01:a3:2c:4e:90:17:07:6c:a9:53:db:e4:d7:ee:39:
                    08:8f:f3:69:54:52:91:85:e3:f1:dd:82:13:6a:52:
                    bc:ee:58:0c:38:2d:6b:75:4b:0c:a7:ce:6c:d9:df:
                    9f:dd:90:ea:fc:42:a9:2a:de:86:60:e7:85:a0:9b:
                    31:3e:1e:e8:42:20:ed:8c:18:cd:27:1f:25:9a:67:
                    0f:29:b6:c0:cb:72:de:b5:f1:36:a1:49:6d:a3:a5:
                    b0:2b:ae:ac:e7:a4:16:05:60:bc:73:c7:73:f7:24:
                    7e:1f:ff:06:c7:58:32:b0:fb:46:53:e1:5d:3c:34:
                    07:a4:3b:fa:81:1e:1a:8e:ff:a8:04:22:79:23:1f:
                    d4:7c:6d:9e:00:53:74:fe:51:e8:c9:7f:63:47:2c:
                    f0:2c:e7:66:59:6a:96:d0:50:74:75:3b:22:c9:d5:
                    bf:73:42:2e:7a:55:a2:dc:c5:c2:a0:f7:90:eb:29:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BC:80:05:20:B5:21:05:38:F7:AF:F2:A0:25:40:8F:DE:64:D9:EA
            X509v3 Authority Key Identifier:
                keyid:46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9c:a2:4d:62:e8:9b:d3:25:b0:cc:f2:19:ef:fb:9e:42:24:
         ff:49:36:5d:f8:71:06:eb:6f:ed:39:1a:a9:08:fa:c9:da:b7:
         83:fd:c1:53:cc:96:1d:89:2f:79:a2:ad:1d:08:e7:fa:96:f6:
         0b:58:81:a2:12:98:1c:8d:08:42:cd:bf:c6:eb:2e:2b:fa:0f:
         28:60:56:70:aa:c7:65:ca:44:be:00:a3:8f:8c:84:0e:f0:fd:
         6f:8c:f7:38:6b:53:94:75:31:83:79:83:d0:69:90:1a:f9:46:
         ad:2a:2a:25:dd:e6:c6:e1:31:36:29:fb:02:f9:f3:b8:d7:92:
         93:a5:88:21:c2:4b:46:52:86:38:25:43:6d:3f:93:5d:9f:8d:
         2f:6c:68:a2:6c:8f:be:99:c6:12:9f:31:d5:91:ce:15:64:23:
         cb:bb:ee:4f:7e:91:88:8f:17:76:88:54:ef:c6:55:90:f5:19:
         b3:79:44:b1:67:af:fc:0a:30:26:22:43:08:cd:5f:cd:3d:ff:
         dd:e9:20:52:0e:e1:3e:27:da:88:b8:26:51:96:93:d9:50:41:
         4e:37:88:80:f7:e2:0a:33:b7:a8:ab:04:78:bf:7b:97:bb:04:
         eb:09:87:a9:72:7a:92:e1:61:bd:cd:41:32:8d:90:69:bc:48:
         56:fd:fb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:36:31 2026 by rpki-client