Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
File:                     46AF3A717A403BC5489BF5532E8CB67721141841.mft (raw, json)
Hash identifier:          xOOemKGm5QvS6B2o+8pIF3Pgd0nSHebIyAuZUML6Xxg=
Subject key identifier:   C7:7D:1B:86:D2:C9:8F:93:D9:52:81:8D:57:35:D2:39:E9:6A:F8:5E
Authority key identifier: 46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41
Certificate issuer:       /CN=46AF3A717A403BC5489BF5532E8CB67721141841
Certificate serial:       701D9194B1C0D13062DDE480032015D5E44F41F5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
Manifest number:          B6
Signing time:             Wed 23 Sep 2026 04:31:35 +0000
Manifest this update:     Wed 23 Sep 2026 04:26:35 +0000
Manifest next update:     Thu 24 Sep 2026 06:17:35 +0000
Files and hashes:         1: 3231312e37362e3234302e302f32302d3234203d3e203138313835.roa (hash: I1YE3+FdBKoKjsHXEupZh96Yo/8ldeKJYx6VAVq02Hc=)
                          2: 323030313a6631383a3a2f33322d3634203d3e2039393136.roa (hash: 4fzQlK7Do1Cwvcdk+e0kfmflXXnhAsZ2G8TwcC4Ef3A=)
                          3: 46AF3A717A403BC5489BF5532E8CB67721141841.crl (hash: pu+gVh2d6k9oLse3HR9w4UdJLsrpTQ/ce2DehBk7VlQ=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl
                          rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 06:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1d:91:94:b1:c0:d1:30:62:dd:e4:80:03:20:15:d5:e4:4f:41:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46AF3A717A403BC5489BF5532E8CB67721141841
        Validity
            Not Before: Sep 23 04:26:35 2026 GMT
            Not After : Sep 24 06:17:35 2026 GMT
        Subject: CN=C77D1B86D2C98F93D952818D5735D239E96AF85E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d8:0f:d2:f8:7f:41:dc:d0:ab:74:b3:a0:23:
                    c4:ca:43:7b:78:c5:76:0f:f7:4e:f2:71:c7:f3:08:
                    9b:8d:54:10:2a:68:fd:6f:e4:fe:28:34:d4:d7:b6:
                    d2:56:e1:8e:61:9f:4e:17:2d:fe:30:df:5c:c7:7e:
                    1c:5f:a2:b0:e4:21:b6:f4:08:1c:fc:12:8e:a5:ae:
                    05:83:85:c4:e0:55:86:47:28:97:15:b6:eb:2f:ab:
                    a5:eb:3e:01:af:44:3b:3b:b8:5e:e0:d4:53:9c:f4:
                    a5:e6:b5:b4:73:ea:cd:98:51:64:36:c9:f9:86:a6:
                    f9:e7:98:91:be:12:b4:78:91:22:39:6c:97:66:ec:
                    b9:ec:2b:87:04:5b:14:63:24:9d:72:e6:78:29:06:
                    b5:55:d1:33:91:e6:85:02:86:41:09:eb:29:a7:3a:
                    2e:1a:ee:5a:05:15:91:fa:39:e6:7b:fe:b9:b9:ab:
                    04:a1:0d:a3:47:3e:c8:1c:a2:b4:b3:3a:c1:ce:2a:
                    0d:9e:7d:63:e6:6d:5d:c4:1f:31:66:5d:1f:c1:32:
                    13:8b:97:84:f7:17:c1:1a:9d:63:01:e6:a5:cd:64:
                    97:fa:01:78:82:a9:b1:d3:a2:db:af:82:ef:63:39:
                    04:d6:35:6f:d6:7f:8d:a7:33:fd:e4:e4:ba:5c:e2:
                    5b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:7D:1B:86:D2:C9:8F:93:D9:52:81:8D:57:35:D2:39:E9:6A:F8:5E
            X509v3 Authority Key Identifier:
                keyid:46:AF:3A:71:7A:40:3B:C5:48:9B:F5:53:2E:8C:B6:77:21:14:18:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46AF3A717A403BC5489BF5532E8CB67721141841.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNCTU/0/46AF3A717A403BC5489BF5532E8CB67721141841.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:3f:fa:38:4f:a7:a2:24:99:83:68:3f:85:4e:fe:d2:0c:4c:
         37:9c:85:cc:9c:b8:05:62:ef:38:48:0a:4f:56:6a:6b:b3:1c:
         8f:bd:56:cb:2c:43:6b:b3:6f:ea:0d:09:c3:d4:2d:b1:cc:0e:
         1c:89:21:90:81:b5:d5:04:13:59:52:f2:5e:8c:d1:68:bf:35:
         e4:dc:e1:60:db:3f:3d:f6:31:da:c1:d1:f1:41:8a:80:4c:ab:
         26:33:b1:aa:e7:ad:4f:dc:04:15:91:db:ba:85:a1:65:c2:e1:
         37:7d:fc:29:58:e3:2c:d6:1c:3f:ca:d4:ea:de:59:d5:36:11:
         3b:15:97:8d:6b:ba:8d:c0:2e:a1:5d:b5:3c:d1:64:1f:d9:12:
         18:01:34:03:e6:7b:db:ee:d2:80:5f:f6:32:61:7c:53:63:d0:
         bc:13:9e:d6:72:e8:14:a4:c8:16:23:94:7c:3b:47:2a:3c:28:
         99:cd:17:d8:33:41:18:3e:b5:fa:f8:23:bb:ce:73:8b:9d:b7:
         34:8c:f4:4f:4e:cf:18:94:85:53:85:4e:03:04:12:29:77:70:
         7d:27:c5:aa:f2:d0:12:b7:94:d0:1c:fd:83:0e:3e:7e:26:52:
         15:7c:10:16:76:64:74:47:f0:dc:e2:8b:60:8e:82:30:8f:6a:
         dc:a6:f3:2a
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUcB2RlLHA0TBi3eSAAyAV1eRPQfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZBRjNBNzE3QTQwM0JDNTQ4OUJGNTUzMkU4Q0I2Nzcy
MTE0MTg0MTAeFw0yNjA5MjMwNDI2MzVaFw0yNjA5MjQwNjE3MzVaMDMxMTAvBgNV
BAMTKEM3N0QxQjg2RDJDOThGOTNEOTUyODE4RDU3MzVEMjM5RTk2QUY4NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL2A/S+H9B3NCrdLOgI8TKQ3t4
xXYP907yccfzCJuNVBAqaP1v5P4oNNTXttJW4Y5hn04XLf4w31zHfhxforDkIbb0
CBz8Eo6lrgWDhcTgVYZHKJcVtusvq6XrPgGvRDs7uF7g1FOc9KXmtbRz6s2YUWQ2
yfmGpvnnmJG+ErR4kSI5bJdm7LnsK4cEWxRjJJ1y5ngpBrVV0TOR5oUChkEJ6ymn
Oi4a7loFFZH6OeZ7/rm5qwShDaNHPsgcorSzOsHOKg2efWPmbV3EHzFmXR/BMhOL
l4T3F8EanWMB5qXNZJf6AXiCqbHTotuvgu9jOQTWNW/Wf42nM/3k5Lpc4luZAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUx30bhtLJj5PZUoGNVzXSOelq+F4wHwYDVR0j
BBgwFoAURq86cXpAO8VIm/VTLoy2dyEUGEEwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOQ1RV
LzAvNDZBRjNBNzE3QTQwM0JDNTQ4OUJGNTUzMkU4Q0I2NzcyMTE0MTg0MS5jcmww
bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p
Yy50dy9ycGtpL1RXTklDQ0EvMS80NkFGM0E3MTdBNDAzQkM1NDg5QkY1NTMyRThD
QjY3NzIxMTQxODQxLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz
eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOQ1RVLzAvNDZBRjNBNzE3QTQw
M0JDNTQ4OUJGNTUzMkU4Q0I2NzcyMTE0MTg0MS5tZnQwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABo/+jhPp6Ik
mYNoP4VO/tIMTDechcycuAVi7zhICk9WamuzHI+9VsssQ2uzb+oNCcPULbHMDhyJ
IZCBtdUEE1lS8l6M0Wi/NeTc4WDbPz32MdrB0fFBioBMqyYzsarnrU/cBBWR27qF
oWXC4Td9/ClY4yzWHD/K1OreWdU2ETsVl41ruo3ALqFdtTzRZB/ZEhgBNAPme9vu
0oBf9jJhfFNj0LwTntZy6BSkyBYjlHw7Ryo8KJnNF9gzQRg+tfr4I7vOc4udtzSM
9E9OzxiUhVOFTgMEEil3cH0nxary0BK3lNAc/YMOPn4mUhV8EBZ2ZHRH8Nzii2CO
gjCPatym8yo=
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:33:02 2026 by rpki-client