Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
File:                     46689F7EA6A6380B850E938D992174E5996FFA91.mft (raw, json)
Hash identifier:          8tnOqSku93jxUL63uAR8cdaShfkf5LxJyMo+7BEIpFU=
Subject key identifier:   50:23:04:0D:4D:7C:F3:D2:2C:7D:29:6D:3E:A0:CF:43:3E:2D:30:52
Authority key identifier: 46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91
Certificate issuer:       /CN=46689F7EA6A6380B850E938D992174E5996FFA91
Certificate serial:       50117088FA91948117F686DE9F5B866546A142CB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
Manifest number:          C4
Signing time:             Sun 04 Oct 2026 12:45:33 +0000
Manifest this update:     Sun 04 Oct 2026 12:40:33 +0000
Manifest next update:     Mon 05 Oct 2026 12:48:33 +0000
Files and hashes:         1: 3230332e3131312e3230382e302f32302d3234203d3e2039363736.roa (hash: 2Hm8EQoLvpIpabJcBJrsVSGSxzCnsCBx0zKAGfh+LRM=)
                          2: 46689F7EA6A6380B850E938D992174E5996FFA91.crl (hash: slwSxEACqXek4Xf8zJ7CQq9gNflaFB5AWxcTIwkJqP0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl
                          rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 12:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:11:70:88:fa:91:94:81:17:f6:86:de:9f:5b:86:65:46:a1:42:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46689F7EA6A6380B850E938D992174E5996FFA91
        Validity
            Not Before: Oct  4 12:40:33 2026 GMT
            Not After : Oct  5 12:48:33 2026 GMT
        Subject: CN=5023040D4D7CF3D22C7D296D3EA0CF433E2D3052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:9d:b9:87:9f:b3:1e:3d:95:a7:59:89:99:
                    28:15:95:c4:ae:57:28:63:59:45:a9:40:ac:67:a8:
                    a9:49:8b:b2:b6:1e:4c:df:17:4f:da:81:87:dc:c4:
                    43:02:5d:0e:06:07:6e:60:1b:ad:c0:7f:dc:ec:ad:
                    ee:01:56:73:85:8a:9f:4e:d0:2f:23:31:29:b8:bd:
                    eb:83:80:a2:de:9f:71:91:fe:9f:b3:d4:58:d9:e9:
                    d5:54:8b:46:fc:e1:03:d1:ca:1a:78:75:f1:0a:44:
                    6d:90:47:4b:05:a5:53:6c:a8:d3:b4:4b:8d:20:e9:
                    89:f2:33:25:26:d0:c5:35:aa:9b:b7:ad:48:32:64:
                    22:38:06:69:1a:96:ac:25:cc:d6:7d:e9:dd:b4:b8:
                    f9:c9:78:f6:dc:23:e9:e3:2f:6d:73:15:4d:6c:79:
                    28:7b:43:c5:50:33:52:8d:d8:fb:b9:a1:c7:ca:56:
                    25:11:fc:d9:83:a7:c9:fe:5b:84:c1:87:03:b1:89:
                    6b:cc:68:14:0b:35:74:86:3e:00:49:5a:2d:94:37:
                    47:a4:05:61:24:77:bb:17:6c:be:f7:b3:ca:a0:b6:
                    8b:6d:30:83:e1:27:f8:6d:95:bb:bd:56:2c:f6:f9:
                    e9:c8:44:65:62:f8:a4:11:9c:93:02:d0:b6:6f:5f:
                    c0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:23:04:0D:4D:7C:F3:D2:2C:7D:29:6D:3E:A0:CF:43:3E:2D:30:52
            X509v3 Authority Key Identifier:
                keyid:46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:fe:ec:10:2e:91:1f:13:9e:6f:bd:43:67:44:e1:df:8c:e5:
         64:5f:3b:11:7a:cf:d9:d2:02:37:a1:4d:b6:3b:60:60:ed:91:
         1a:76:ee:58:10:ee:c8:01:a5:46:bf:03:12:2b:ab:a9:10:0c:
         db:0b:5f:3d:b2:37:f0:26:cd:53:cc:b4:cc:87:85:ee:d9:56:
         2e:b1:29:3d:c5:1a:d5:4e:a1:88:b6:c0:5e:a2:25:2f:03:ed:
         e4:be:81:29:82:e9:36:ec:3c:96:66:73:4d:bf:74:3c:e8:68:
         dc:2c:72:ad:b5:f5:51:34:9a:f5:c1:98:4a:b3:f5:73:92:7b:
         2b:03:21:70:af:04:90:00:83:6c:49:40:ad:20:6c:5d:43:a1:
         2a:93:27:2a:7c:4d:9c:b3:d2:06:49:ca:25:f2:5a:30:8f:ec:
         99:0a:3d:69:d0:a1:76:0f:c5:1e:20:7c:c5:fc:50:7c:6a:74:
         af:ca:7b:2c:fc:65:ef:f9:7f:e5:4f:5d:97:ce:12:75:c1:19:
         16:34:80:e2:7e:e5:f9:91:f9:3b:0b:f7:5b:57:b1:fd:5e:54:
         2e:33:7a:ac:ce:26:12:5b:9f:47:58:ec:07:a4:38:ec:93:e8:
         93:aa:2e:60:5b:b6:db:4b:53:72:e7:8d:f2:5a:d2:eb:0a:77:
         a9:62:d3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:40:22 2026 by rpki-client