Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
File:                     F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft (raw, json)
Hash identifier:          Z9wVPr80OHF8YzTlH0PlWnOakMsEun/G5q0qmIpNj8Y=
Subject key identifier:   6E:AD:A9:9B:37:82:48:6A:96:06:64:2C:74:02:F5:F7:E3:C4:BF:71
Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
Certificate issuer:       /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Certificate serial:       422FFDEE7524CA81900DC14366AD8D3406AB60C3
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
Manifest number:          89
Signing time:             Fri 14 Aug 2026 21:03:29 +0000
Manifest this update:     Fri 14 Aug 2026 20:58:29 +0000
Manifest next update:     Sat 15 Aug 2026 23:35:29 +0000
Files and hashes:         1: 3130332e3138332e37392e302f32342d3234203d3e203338303437.roa (hash: LKb5JTrIhhb/+pCF3MiMwmxDGcflx3R3PPt1vbEW8Is=)
                          2: 3130332e3136302e3231342e302f32332d3234203d3e203338303437.roa (hash: kLX8JWP5e8TfooxSrIQf/bTViGHZeimUz/lVy37AiIU=)
                          3: 3130332e3138332e37382e302f32342d3234203d3e203338303437.roa (hash: DeoItfam0DiP7V+IpPTGWpm2o5vfasSAOwVrx+6kDhk=)
                          4: 323430303a363161303a3a2f33322d3438203d3e203338303437.roa (hash: J5FZ9S8B0pYlsVGJstyO6n1c/aCGZycW6XgKo4yhN08=)
                          5: 323430303a363161303a613035353a3a2f34382d3438203d3e203338303437.roa (hash: riDRlwpNIoMR7hMkqTfgjfQkV7fOImY2Sij1WLjWE7w=)
                          6: 3130332e3136302e3231352e302f32342d3234203d3e203338303437.roa (hash: DVa6lflyFCE3PWvV287KtfNHuZRpwCib43B9QlWb9Mo=)
                          7: 323430303a363161303a613035343a3a2f34382d3438203d3e203338303437.roa (hash: CqFIMI+phEk/TJh0hQHIrRWiqwd9Tib9RbiLAwUoHcI=)
                          8: 323430303a363161303a613030313a3a2f34382d3438203d3e203338303437.roa (hash: ClMyhImwoKQTPL6vpGbqnZIvxYBZtQoFI5NkM75vtlc=)
                          9: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl (hash: 87YWNGlaJ1SZxjpYN0vVFpnD4Twt/i/RNatTxmVzeq4=)
                          10: 3130332e3136302e3231342e302f32342d3234203d3e203338303437.roa (hash: I/8oBrcA7D4gSHZsNUzYUMucmbnioIQjHYdj6J1h3lQ=)
                          11: 3130332e3138332e37382e302f32332d3234203d3e203338303437.roa (hash: VCJh65xNZyWuR8N+DUeGOPmj5BTIWqqkZ0yjsvuy1Ds=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
                          rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 15 Aug 2026 23:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2f:fd:ee:75:24:ca:81:90:0d:c1:43:66:ad:8d:34:06:ab:60:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
        Validity
            Not Before: Aug 14 20:58:29 2026 GMT
            Not After : Aug 15 23:35:29 2026 GMT
        Subject: CN=6EADA99B3782486A9606642C7402F5F7E3C4BF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:89:51:63:93:61:04:01:ac:e3:db:c3:80:
                    88:aa:0f:f7:74:cc:8a:ff:95:9c:c1:a6:86:f5:f5:
                    e6:ed:ea:14:c2:cd:5c:f0:54:c9:1e:ee:89:32:56:
                    65:e3:cb:3a:e5:48:07:c3:10:44:62:9e:ed:45:8b:
                    89:17:27:1d:33:e4:a1:88:4d:ef:cd:27:88:6b:28:
                    c3:dc:3a:45:fd:e1:35:0c:96:08:d1:e4:05:87:bf:
                    98:cc:ac:f9:6a:73:ef:3d:e0:68:e3:66:84:fc:46:
                    2d:82:ad:4c:2c:0b:32:f6:65:61:37:0a:70:10:8d:
                    81:eb:db:ed:97:2e:bd:09:47:8e:f5:5e:31:3e:09:
                    32:1c:25:65:bd:7d:f1:14:4c:84:c1:29:24:15:47:
                    d8:e8:73:4c:04:86:43:c4:d1:65:de:a7:75:ea:21:
                    0f:36:28:10:c3:d7:8f:b9:40:c2:84:0a:5f:c3:93:
                    5e:5e:71:00:9c:47:1b:f1:05:03:25:e4:df:17:f5:
                    21:f3:99:6f:5e:04:c5:c7:80:c8:1b:07:df:9d:4a:
                    cd:99:8f:c2:ae:a5:25:69:1a:e1:78:be:f4:bf:1e:
                    34:4b:1e:21:5f:b9:25:18:cb:37:8d:09:e3:c5:34:
                    22:76:26:fb:6f:d3:b9:34:03:96:e1:a6:f1:f8:6e:
                    a1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AD:A9:9B:37:82:48:6A:96:06:64:2C:74:02:F5:F7:E3:C4:BF:71
            X509v3 Authority Key Identifier:
                keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:48:4a:3f:f5:36:8b:fc:49:6b:45:72:02:59:4e:ee:65:cc:
         5a:9a:b9:e9:63:07:b9:b2:7a:d7:9c:5b:eb:e9:a7:46:3c:69:
         12:16:3c:ec:05:99:d5:15:d5:20:64:96:f0:7d:4a:9e:53:7b:
         ba:be:fd:0a:2a:04:20:09:dd:ca:cb:86:b9:c9:9d:f5:e5:d0:
         b9:34:24:4a:06:c8:f6:6b:8c:bf:38:9d:6c:46:9b:8a:64:b6:
         06:05:6f:bf:27:db:df:a4:d6:24:a6:95:5f:90:e9:31:e2:5a:
         63:08:2e:5b:1f:c9:29:ed:09:bb:e5:eb:13:b4:a2:31:7d:19:
         5f:e8:ad:84:70:97:9f:54:be:8c:cd:c2:8c:c3:10:fb:ea:ec:
         36:3b:f1:fd:d8:6b:63:7d:c1:b4:f2:ec:9b:49:a0:e3:3f:ad:
         4f:b9:15:85:f2:e1:31:18:9c:83:18:24:3a:60:c4:6a:10:ca:
         07:8a:eb:70:dc:19:8e:96:30:8f:a3:b0:1a:87:90:77:5e:20:
         b6:7d:1d:67:4b:af:ed:56:55:ad:4d:95:eb:a3:73:b2:c0:20:
         7b:ca:00:7b:aa:e3:72:cf:2d:a5:25:c5:cd:0b:70:2f:0f:6c:
         41:a9:97:17:8f:94:32:0d:ec:42:59:ce:dc:da:96:d6:b6:ff:
         84:8e:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:38 2026 by rpki-client