Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
File:                     46689F7EA6A6380B850E938D992174E5996FFA91.mft (raw, json)
Hash identifier:          XGZOOPeXP4YEpFG028QZsMeo4wmOXfsrJl3sv5WHRM8=
Subject key identifier:   1B:E4:FF:AE:29:34:8A:EC:FE:7E:C6:A4:C4:10:09:9A:7D:96:54:45
Authority key identifier: 46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91
Certificate issuer:       /CN=46689F7EA6A6380B850E938D992174E5996FFA91
Certificate serial:       57A09E8CE56AF85C19B4E18AFC0683FBAB1B1D1B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
Manifest number:          44
Signing time:             Tue 30 Jun 2026 09:33:36 +0000
Manifest this update:     Tue 30 Jun 2026 09:28:36 +0000
Manifest next update:     Wed 01 Jul 2026 09:43:36 +0000
Files and hashes:         1: 46689F7EA6A6380B850E938D992174E5996FFA91.crl (hash: 1/E53ZrQzYgjQQU84aDwJL+Wcgn6+uZWSg8C4NqxlK4=)
                          2: 3230332e3131312e3230382e302f32302d3234203d3e2039363736.roa (hash: 2Hm8EQoLvpIpabJcBJrsVSGSxzCnsCBx0zKAGfh+LRM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl
                          rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Jul 2026 09:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a0:9e:8c:e5:6a:f8:5c:19:b4:e1:8a:fc:06:83:fb:ab:1b:1d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46689F7EA6A6380B850E938D992174E5996FFA91
        Validity
            Not Before: Jun 30 09:28:36 2026 GMT
            Not After : Jul  1 09:43:36 2026 GMT
        Subject: CN=1BE4FFAE29348AECFE7EC6A4C410099A7D965445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:f9:b4:d2:7b:13:00:55:0f:98:85:3d:08:
                    c0:51:70:52:cb:ce:3b:d8:be:74:03:a0:d7:c8:97:
                    30:79:dd:36:27:ea:4a:a0:59:84:7d:16:17:90:ac:
                    5f:b3:3a:1f:b6:76:5d:53:e6:56:04:ac:a4:25:2d:
                    c8:6d:1e:f9:15:e9:27:34:e8:ac:2c:82:42:0a:b0:
                    07:60:cc:c0:d9:e2:f9:aa:95:39:3c:b8:1a:1d:dd:
                    d3:dd:35:05:f8:83:5f:f6:f3:21:69:9c:f2:97:ce:
                    1f:ad:ae:ea:89:62:e2:05:0d:a8:be:fb:54:8c:3f:
                    3c:34:99:54:2c:ca:c6:9f:0f:81:ec:d5:92:8c:b8:
                    5d:f1:82:b9:26:ab:ad:be:26:d1:8d:1f:95:ff:34:
                    5c:4d:ef:be:83:9a:3a:51:e2:d3:32:3a:50:84:58:
                    ee:4b:3b:63:36:ef:d2:9a:b1:3e:50:0c:96:2c:51:
                    39:b3:84:40:17:d1:ec:61:71:84:ba:dd:c7:b7:f4:
                    e3:85:14:1e:37:99:b7:fd:e6:c6:f3:e9:69:80:b2:
                    e9:c8:87:ab:87:37:e2:4a:df:64:8f:6b:dc:2d:b3:
                    53:57:48:a3:73:2f:09:93:6b:bb:1b:62:fc:db:8a:
                    64:c0:ba:6f:93:5c:4f:34:b6:40:2c:32:97:49:3d:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E4:FF:AE:29:34:8A:EC:FE:7E:C6:A4:C4:10:09:9A:7D:96:54:45
            X509v3 Authority Key Identifier:
                keyid:46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c5:e1:32:8f:f4:eb:6b:4c:4e:d8:04:62:27:12:9f:f5:49:
         c9:7a:53:db:a8:e3:03:d1:e4:fe:86:29:79:b3:ee:5b:97:fd:
         6f:ba:6b:7f:35:c0:da:f4:60:d8:50:fb:ac:54:ab:c6:14:bf:
         ae:37:22:5e:67:d5:9f:50:b6:04:61:90:f8:f1:18:cc:5a:50:
         a0:33:5b:22:46:16:cf:19:bd:30:7f:80:77:e2:1b:49:90:79:
         e0:f7:fa:14:b9:55:89:69:73:c1:9e:ae:ed:04:0f:ea:7c:8a:
         86:98:00:a8:f0:5e:42:90:56:dc:e9:6e:bc:93:33:01:e2:98:
         7a:fa:9b:8f:2c:1e:0d:99:76:bc:40:47:16:92:51:5f:27:da:
         22:3f:d3:8e:8f:3d:17:58:ba:1e:e9:f9:bc:72:00:31:2d:fa:
         52:c8:68:3e:b4:83:29:e3:db:b5:20:7e:46:83:60:68:eb:ba:
         87:34:6d:fc:68:46:ed:66:7b:19:d7:60:4a:16:2a:89:83:62:
         1a:56:22:40:90:24:85:52:0d:8d:f8:52:b3:1f:42:69:12:02:
         77:f7:a1:d2:9d:eb:9c:ef:6c:cc:82:be:d4:80:72:e8:c1:ba:
         9d:9a:d3:40:9d:dd:34:34:4c:e2:77:88:1e:2c:4b:82:3c:ae:
         f7:e5:ef:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:57 2026 by rpki-client