
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
File: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft (raw, json)
Hash identifier: GkUryo9CwjBSFQdd6W5CIgBqFtkVJmANnMIDgXNwwls=
Subject key identifier: 6D:B8:E4:90:CB:C1:C9:1F:0F:D2:38:DF:1F:3D:4E:FF:21:15:44:BD
Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
Certificate issuer: /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Certificate serial: 33B424CEB068B9EF495AAEC7E3803E26E835DE33
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
Manifest number: 0A
Signing time: Wed 13 May 2026 06:12:16 +0000
Manifest this update: Wed 13 May 2026 06:07:16 +0000
Manifest next update: Thu 14 May 2026 06:37:16 +0000
Files and hashes: 1: 323430303a363161303a613035343a3a2f34382d3438203d3e203338303437.roa (hash: CqFIMI+phEk/TJh0hQHIrRWiqwd9Tib9RbiLAwUoHcI=)
2: 323430303a363161303a613030313a3a2f34382d3438203d3e203338303437.roa (hash: ClMyhImwoKQTPL6vpGbqnZIvxYBZtQoFI5NkM75vtlc=)
3: 3130332e3138332e37382e302f32342d3234203d3e203338303437.roa (hash: DeoItfam0DiP7V+IpPTGWpm2o5vfasSAOwVrx+6kDhk=)
4: 3130332e3138332e37392e302f32342d3234203d3e203338303437.roa (hash: LKb5JTrIhhb/+pCF3MiMwmxDGcflx3R3PPt1vbEW8Is=)
5: 3130332e3138332e37382e302f32332d3234203d3e203338303437.roa (hash: VCJh65xNZyWuR8N+DUeGOPmj5BTIWqqkZ0yjsvuy1Ds=)
6: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl (hash: aIYdbVZPY9qOCzm4QzPdfwrWSpgP8w4th3nabU8vgA4=)
7: 323430303a363161303a3a2f33322d3438203d3e203338303437.roa (hash: J5FZ9S8B0pYlsVGJstyO6n1c/aCGZycW6XgKo4yhN08=)
8: 323430303a363161303a613035353a3a2f34382d3438203d3e203338303437.roa (hash: riDRlwpNIoMR7hMkqTfgjfQkV7fOImY2Sij1WLjWE7w=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:37:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:b4:24:ce:b0:68:b9:ef:49:5a:ae:c7:e3:80:3e:26:e8:35:de:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Validity
Not Before: May 13 06:07:16 2026 GMT
Not After : May 14 06:37:16 2026 GMT
Subject: CN=6DB8E490CBC1C91F0FD238DF1F3D4EFF211544BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:46:64:1e:a6:43:c3:04:1f:57:16:97:ec:
3f:b7:d4:21:87:1f:1d:7c:8e:b2:74:eb:4c:e7:81:
c6:de:de:62:8b:72:45:54:07:ce:13:25:b3:e6:00:
e2:f7:80:6d:30:41:28:93:1c:c5:41:05:07:40:1c:
c3:69:4c:31:88:f3:e3:00:00:c4:00:f6:d9:d7:19:
4d:a7:9c:0a:3e:a0:9c:4c:f4:a2:73:f0:92:d8:08:
c5:04:64:8d:81:94:6c:43:86:b7:88:ac:64:f9:a5:
d4:3f:90:63:dc:9f:7b:65:c4:1d:1d:c3:b9:f5:ff:
ad:f4:d4:1f:7a:80:05:98:b8:27:24:90:ef:5b:19:
75:b0:f5:f1:47:10:4a:30:f6:c4:04:ab:38:e6:1d:
b0:9e:b0:25:d4:d0:3f:31:78:e1:07:52:03:8e:78:
31:76:09:f9:c6:27:77:c1:b8:68:e9:75:19:dd:45:
d3:a9:0a:60:28:7e:f7:fe:fc:9a:7f:ac:33:3f:70:
74:7c:94:7c:da:ae:f1:4f:98:47:58:8a:ae:d2:e5:
7b:f2:17:4b:7f:c6:7d:15:04:00:94:1d:5c:ad:23:
64:8b:d3:d3:69:a4:93:5e:64:24:e7:38:b4:b0:e4:
d8:cd:81:4c:2f:97:47:36:35:c7:d6:a7:38:c4:5f:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B8:E4:90:CB:C1:C9:1F:0F:D2:38:DF:1F:3D:4E:FF:21:15:44:BD
X509v3 Authority Key Identifier:
keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ea:10:6f:d9:c6:39:eb:0c:58:98:ca:ca:e8:6e:af:5f:58:
c8:93:07:0e:09:99:76:1c:cc:23:c5:a4:2a:9d:c6:ca:03:15:
b2:90:34:d3:89:63:24:5d:8d:0a:d3:e1:c5:02:78:20:bc:0a:
b5:1a:2f:e3:b0:91:cd:54:78:e7:03:4b:a2:cf:6d:a6:21:7d:
df:16:5d:02:af:b7:70:fd:6b:e2:da:cc:36:f6:41:b8:7e:22:
e3:e3:29:0e:fb:fb:1a:1c:03:f8:fe:8d:92:8b:ca:10:a4:8c:
31:3b:25:bf:1f:e1:66:26:61:47:42:1f:7a:d8:59:4f:1a:83:
00:ec:33:da:fe:d4:4c:4e:e0:85:0d:13:47:ea:cc:8b:89:d9:
70:33:70:7e:dc:e0:e8:49:2d:a7:8c:2a:28:66:7d:11:3c:60:
75:bd:bf:4a:57:fd:36:4a:69:59:01:78:c4:a4:71:d0:75:7c:
b1:f0:46:9e:ae:a1:3c:67:bb:f2:17:5c:6d:b6:46:48:bd:37:
8e:aa:d3:23:73:8a:7a:f6:72:e7:26:04:e6:72:54:d3:b9:ee:
8e:4a:c3:7f:44:76:85:12:13:3c:f4:d1:4e:a6:68:a3:f4:29:
cb:df:73:64:76:b9:e8:6c:dd:f2:47:67:6b:7c:ff:d9:15:c5:
45:12:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:33:45 2026 by rpki-client