Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
File:                     46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft (raw, json)
Hash identifier:          lk6wEWGWZc44UkD3rzupwtWzUpZo2XYchOP5MeuwNOQ=
Subject key identifier:   1D:9D:6B:13:3C:81:38:86:03:F7:17:51:6C:B1:14:DE:C8:12:F7:AB
Authority key identifier: 46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3
Certificate issuer:       /CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3
Certificate serial:       72896C7FC08A920DE119DAA7AC3B8489589EE466
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
Manifest number:          F6
Signing time:             Tue 10 Nov 2026 13:03:52 +0000
Manifest this update:     Tue 10 Nov 2026 12:58:52 +0000
Manifest next update:     Wed 11 Nov 2026 16:31:52 +0000
Files and hashes:         1: 46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl (hash: HJaGstCAj4CraI25C8REhS3CK6L804wFbwd7A13j0ns=)
                          2: 323430303a353061303a3a2f33322d3634203d3e203633383933.roa (hash: TnjJryb+Qul3lN6BZH0PnHfwQC0HukNIzPm52sh0EhY=)
                          3: 3130332e3138302e31362e302f32332d3234203d3e203633383933.roa (hash: 5tICSwbzk1GhyxpTua1hBI7Pmc3s/aXZo1jpw+tiEn0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl
                          rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 02:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:89:6c:7f:c0:8a:92:0d:e1:19:da:a7:ac:3b:84:89:58:9e:e4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B3BED406C1C960F5CFACC01A7EE79C741FB3A3
        Validity
            Not Before: Nov 10 12:58:52 2026 GMT
            Not After : Nov 11 16:31:52 2026 GMT
        Subject: CN=1D9D6B133C81388603F717516CB114DEC812F7AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:b1:1d:e9:e8:6f:a1:a1:ca:f5:65:c0:f9:
                    75:93:23:8a:16:eb:1f:39:f2:84:72:1d:86:df:40:
                    fe:92:f1:f3:57:5f:3d:00:a6:4c:25:cf:6b:b0:1c:
                    e5:31:52:04:ac:a6:8e:49:18:8a:bb:76:41:47:82:
                    4e:82:9e:78:bc:b4:d7:81:9d:e0:2e:b4:a8:7b:55:
                    0b:7c:05:6d:e1:39:76:8c:e4:37:e0:49:74:b6:7a:
                    12:c0:62:9d:9e:7f:25:04:e5:d0:b6:8e:b7:f2:38:
                    df:6d:57:6c:a5:04:02:14:ae:fa:bc:c0:91:cb:01:
                    08:81:43:52:2e:53:41:24:c6:65:99:be:a7:23:cf:
                    13:bc:00:f0:dd:6d:33:8f:1a:9e:1c:31:38:b9:b3:
                    a0:66:92:84:8e:48:75:5d:4c:46:1e:53:b1:61:07:
                    7c:2e:38:7b:47:53:86:9c:00:a7:39:9d:71:89:de:
                    84:a7:04:bb:b6:d1:b4:4b:8b:1c:6f:25:78:67:04:
                    3d:2b:24:13:57:42:90:41:7a:b4:e6:9c:69:f1:91:
                    41:3c:ce:c2:bb:31:9b:87:79:85:f2:33:5d:e1:a2:
                    f0:e3:f2:d2:a6:be:25:24:f6:10:72:96:c5:d8:90:
                    77:a9:fd:38:98:2c:fa:a0:37:b4:bb:96:08:9e:71:
                    42:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:9D:6B:13:3C:81:38:86:03:F7:17:51:6C:B1:14:DE:C8:12:F7:AB
            X509v3 Authority Key Identifier:
                keyid:46:B3:BE:D4:06:C1:C9:60:F5:CF:AC:C0:1A:7E:E7:9C:74:1F:B3:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CCP1138480/0/46B3BED406C1C960F5CFACC01A7EE79C741FB3A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:38:cf:40:c1:09:a1:d5:59:d6:bc:df:7a:0f:9e:9d:e1:e0:
         7a:fa:3a:45:cb:39:dd:19:3f:66:a0:9c:2b:f3:f1:7e:fb:ec:
         24:8d:4b:e5:e7:78:51:43:56:6c:52:3c:e8:7d:63:6f:9a:7d:
         fa:8f:49:33:e8:3d:6f:5c:fa:08:1e:23:d8:bd:30:64:08:0f:
         aa:2c:c9:be:13:ab:92:f1:2c:d3:a6:0e:1d:6e:57:20:66:31:
         03:f3:05:bf:7d:eb:6c:4b:8a:01:91:61:1a:81:28:11:0c:01:
         94:3c:ca:7f:e5:3f:99:93:dc:70:89:7a:d0:1c:3a:79:b0:63:
         fb:38:f4:a8:f7:36:7b:2d:a4:86:01:c1:be:1c:19:e2:99:2b:
         48:28:af:5e:b8:76:80:d1:64:db:55:f2:c2:8d:d1:e6:f8:81:
         9e:4f:77:3c:75:a2:67:ad:85:41:ed:5b:64:24:3f:ab:89:3b:
         8b:12:3c:d5:54:f6:c4:75:72:74:3b:83:8f:a4:0b:ad:44:f8:
         4a:54:a1:ff:4b:36:66:cc:39:bc:ba:50:52:47:e4:74:ec:d7:
         2e:52:a4:ee:e8:4a:35:8d:34:b1:29:9e:a6:15:b6:ef:1a:61:
         9c:96:cb:e7:87:0f:6f:97:bc:94:eb:c2:dc:de:08:9c:0c:1d:
         9e:1d:5c:ba
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUcolsf8CKkg3hGdqnrDuEiVie5GYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZCM0JFRDQwNkMxQzk2MEY1Q0ZBQ0MwMUE3RUU3OUM3
NDFGQjNBMzAeFw0yNjExMTAxMjU4NTJaFw0yNjExMTExNjMxNTJaMDMxMTAvBgNV
BAMTKDFEOUQ2QjEzM0M4MTM4ODYwM0Y3MTc1MTZDQjExNERFQzgxMkY3QUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJa7Ed6ehvoaHK9WXA+XWTI4oW
6x858oRyHYbfQP6S8fNXXz0Apkwlz2uwHOUxUgSspo5JGIq7dkFHgk6Cnni8tNeB
neAutKh7VQt8BW3hOXaM5DfgSXS2ehLAYp2efyUE5dC2jrfyON9tV2ylBAIUrvq8
wJHLAQiBQ1IuU0EkxmWZvqcjzxO8APDdbTOPGp4cMTi5s6BmkoSOSHVdTEYeU7Fh
B3wuOHtHU4acAKc5nXGJ3oSnBLu20bRLixxvJXhnBD0rJBNXQpBBerTmnGnxkUE8
zsK7MZuHeYXyM13hovDj8tKmviUk9hBylsXYkHep/TiYLPqgN7S7lgiecUKdAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUHZ1rEzyBOIYD9xdRbLEU3sgS96swHwYDVR0j
BBgwFoAURrO+1AbByWD1z6zAGn7nnHQfs6MwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0NQMTEz
ODQ4MC8wLzQ2QjNCRUQ0MDZDMUM5NjBGNUNGQUNDMDFBN0VFNzlDNzQxRkIzQTMu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzEvNDZCM0JFRDQwNkMxQzk2MEY1Q0ZBQ0Mw
MUE3RUU3OUM3NDFGQjNBMy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0NDUDExMzg0ODAvMC80NkIz
QkVENDA2QzFDOTYwRjVDRkFDQzAxQTdFRTc5Qzc0MUZCM0EzLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
gjjPQMEJodVZ1rzfeg+eneHgevo6Rcs53Rk/ZqCcK/PxfvvsJI1L5ed4UUNWbFI8
6H1jb5p9+o9JM+g9b1z6CB4j2L0wZAgPqizJvhOrkvEs06YOHW5XIGYxA/MFv33r
bEuKAZFhGoEoEQwBlDzKf+U/mZPccIl60Bw6ebBj+zj0qPc2ey2khgHBvhwZ4pkr
SCivXrh2gNFk21Xywo3R5viBnk93PHWiZ62FQe1bZCQ/q4k7ixI81VT2xHVydDuD
j6QLrUT4SlSh/0s2Zsw5vLpQUkfkdOzXLlKk7uhKNY00sSmephW27xphnJbL54cP
b5e8lOvC3N4InAwdnh1cug==
-----END CERTIFICATE-----
Generated at Tue Nov 10 16:52:23 2026 by rpki-client