
$ rpki-client -vvf rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
File: 46689F7EA6A6380B850E938D992174E5996FFA91.mft (raw, json)
Hash identifier: QmqM+PrBwiP/upxpr9VBsiiazRPDalQ0BbBtIvpxsLk=
Subject key identifier: 01:6C:2E:54:C2:A7:87:67:73:21:5C:75:57:C4:E2:35:3B:FD:A7:0E
Authority key identifier: 46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91
Certificate issuer: /CN=46689F7EA6A6380B850E938D992174E5996FFA91
Certificate serial: 536E24AC1685B3DA88EA70B09FD5E0D48B77847F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
Manifest number: 2C
Signing time: Fri 12 Jun 2026 19:37:57 +0000
Manifest this update: Fri 12 Jun 2026 19:32:57 +0000
Manifest next update: Sat 13 Jun 2026 19:42:57 +0000
Files and hashes: 1: 3230332e3131312e3230382e302f32302d3234203d3e2039363736.roa (hash: 2Hm8EQoLvpIpabJcBJrsVSGSxzCnsCBx0zKAGfh+LRM=)
2: 46689F7EA6A6380B850E938D992174E5996FFA91.crl (hash: HP7sCPhub7ptirW6pMN35tSNNDxgdOG32RUaRmZoafw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl
rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 19:42:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:6e:24:ac:16:85:b3:da:88:ea:70:b0:9f:d5:e0:d4:8b:77:84:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46689F7EA6A6380B850E938D992174E5996FFA91
Validity
Not Before: Jun 12 19:32:57 2026 GMT
Not After : Jun 13 19:42:57 2026 GMT
Subject: CN=016C2E54C2A7876773215C7557C4E2353BFDA70E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:09:35:90:71:ce:83:f6:74:ae:eb:9d:b7:
3c:d8:a0:3d:03:25:7c:3c:b7:08:22:a1:43:3c:ab:
3d:d2:87:a4:78:28:75:c3:5c:8a:63:77:e9:0e:9d:
b3:ff:d0:72:b3:39:ca:98:61:ad:75:7a:a7:97:48:
ca:da:ee:7a:d1:38:db:77:c7:be:24:73:5a:f4:fc:
54:90:d0:fd:a0:34:a2:b6:f4:08:44:ab:a1:ee:e1:
03:b5:d6:85:17:b4:63:a3:34:52:57:bb:17:a7:f9:
42:77:33:6c:8c:ad:27:37:67:5b:e0:e3:03:6c:22:
58:64:5c:df:f6:63:69:18:11:95:4d:74:fb:69:6d:
bd:9a:c4:fc:f4:d0:26:02:a0:f5:b6:4f:33:32:0b:
99:9a:26:4f:04:69:44:0a:db:fc:fa:8e:20:1e:5f:
0c:9c:d6:b9:66:32:8c:8b:97:38:60:c7:1c:1c:38:
92:fa:8c:fc:4a:e3:96:37:e5:5a:8e:cb:19:ae:2a:
d0:4d:f1:38:11:95:1d:71:07:9f:c8:e6:8b:da:c1:
3c:46:ef:18:3b:37:2d:86:14:7e:04:84:98:39:25:
f3:28:d1:7a:9f:ec:f0:a5:bd:9f:dd:38:da:b0:0c:
ce:68:b7:02:47:0c:68:38:01:5d:ff:7c:9f:e0:34:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6C:2E:54:C2:A7:87:67:73:21:5C:75:57:C4:E2:35:3B:FD:A7:0E
X509v3 Authority Key Identifier:
keyid:46:68:9F:7E:A6:A6:38:0B:85:0E:93:8D:99:21:74:E5:99:6F:FA:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/46689F7EA6A6380B850E938D992174E5996FFA91.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TYCATV/0/46689F7EA6A6380B850E938D992174E5996FFA91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:db:54:3d:bb:46:0a:43:a7:5b:77:a3:d5:99:e7:1c:49:aa:
c2:7e:93:1f:c1:82:82:d6:b3:96:d0:50:5d:bd:36:92:cb:bf:
66:bd:f8:8b:6c:a2:89:63:8e:2c:17:62:c3:ad:aa:52:e1:0f:
0d:64:8f:dc:a4:dc:89:3d:c9:97:6e:d1:2b:8c:31:da:5e:3d:
0c:03:27:c6:90:73:f3:45:d5:fd:5f:27:21:36:53:05:a0:ef:
8e:3f:da:ad:a2:50:0f:11:93:57:68:64:a5:bf:f9:72:4b:fe:
98:8e:a6:a4:d8:96:76:0d:e3:a9:12:87:7a:12:57:da:4b:5b:
d3:96:c2:a3:16:df:f9:b3:73:0f:36:cb:67:19:36:6d:b4:91:
d0:2f:8b:dd:db:86:ba:ba:7b:da:9b:56:04:b2:4c:68:67:f2:
cb:ea:2a:60:08:27:62:cd:36:49:a5:e0:4c:33:ed:a4:fe:53:
f8:0b:04:52:52:f5:70:f3:3b:a4:0b:e8:69:a4:fa:e1:cb:15:
71:06:90:70:13:f8:fc:a0:60:c1:0e:24:69:48:f4:04:05:02:
2e:29:61:e4:92:44:f1:d3:dc:da:4b:b2:30:f5:18:ae:fc:0f:
8f:69:d4:ca:32:54:8b:0e:93:ea:58:18:be:5c:1b:1d:2c:b7:
77:4e:6a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:01 2026 by rpki-client