
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
File: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft (raw, json)
Hash identifier: Z9wVPr80OHF8YzTlH0PlWnOakMsEun/G5q0qmIpNj8Y=
Subject key identifier: 6E:AD:A9:9B:37:82:48:6A:96:06:64:2C:74:02:F5:F7:E3:C4:BF:71
Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
Certificate issuer: /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Certificate serial: 422FFDEE7524CA81900DC14366AD8D3406AB60C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
Manifest number: 89
Signing time: Fri 14 Aug 2026 21:03:29 +0000
Manifest this update: Fri 14 Aug 2026 20:58:29 +0000
Manifest next update: Sat 15 Aug 2026 23:35:29 +0000
Files and hashes: 1: 3130332e3138332e37392e302f32342d3234203d3e203338303437.roa (hash: LKb5JTrIhhb/+pCF3MiMwmxDGcflx3R3PPt1vbEW8Is=)
2: 3130332e3136302e3231342e302f32332d3234203d3e203338303437.roa (hash: kLX8JWP5e8TfooxSrIQf/bTViGHZeimUz/lVy37AiIU=)
3: 3130332e3138332e37382e302f32342d3234203d3e203338303437.roa (hash: DeoItfam0DiP7V+IpPTGWpm2o5vfasSAOwVrx+6kDhk=)
4: 323430303a363161303a3a2f33322d3438203d3e203338303437.roa (hash: J5FZ9S8B0pYlsVGJstyO6n1c/aCGZycW6XgKo4yhN08=)
5: 323430303a363161303a613035353a3a2f34382d3438203d3e203338303437.roa (hash: riDRlwpNIoMR7hMkqTfgjfQkV7fOImY2Sij1WLjWE7w=)
6: 3130332e3136302e3231352e302f32342d3234203d3e203338303437.roa (hash: DVa6lflyFCE3PWvV287KtfNHuZRpwCib43B9QlWb9Mo=)
7: 323430303a363161303a613035343a3a2f34382d3438203d3e203338303437.roa (hash: CqFIMI+phEk/TJh0hQHIrRWiqwd9Tib9RbiLAwUoHcI=)
8: 323430303a363161303a613030313a3a2f34382d3438203d3e203338303437.roa (hash: ClMyhImwoKQTPL6vpGbqnZIvxYBZtQoFI5NkM75vtlc=)
9: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl (hash: 87YWNGlaJ1SZxjpYN0vVFpnD4Twt/i/RNatTxmVzeq4=)
10: 3130332e3136302e3231342e302f32342d3234203d3e203338303437.roa (hash: I/8oBrcA7D4gSHZsNUzYUMucmbnioIQjHYdj6J1h3lQ=)
11: 3130332e3138332e37382e302f32332d3234203d3e203338303437.roa (hash: VCJh65xNZyWuR8N+DUeGOPmj5BTIWqqkZ0yjsvuy1Ds=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 23:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2f:fd:ee:75:24:ca:81:90:0d:c1:43:66:ad:8d:34:06:ab:60:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Validity
Not Before: Aug 14 20:58:29 2026 GMT
Not After : Aug 15 23:35:29 2026 GMT
Subject: CN=6EADA99B3782486A9606642C7402F5F7E3C4BF71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:89:51:63:93:61:04:01:ac:e3:db:c3:80:
88:aa:0f:f7:74:cc:8a:ff:95:9c:c1:a6:86:f5:f5:
e6:ed:ea:14:c2:cd:5c:f0:54:c9:1e:ee:89:32:56:
65:e3:cb:3a:e5:48:07:c3:10:44:62:9e:ed:45:8b:
89:17:27:1d:33:e4:a1:88:4d:ef:cd:27:88:6b:28:
c3:dc:3a:45:fd:e1:35:0c:96:08:d1:e4:05:87:bf:
98:cc:ac:f9:6a:73:ef:3d:e0:68:e3:66:84:fc:46:
2d:82:ad:4c:2c:0b:32:f6:65:61:37:0a:70:10:8d:
81:eb:db:ed:97:2e:bd:09:47:8e:f5:5e:31:3e:09:
32:1c:25:65:bd:7d:f1:14:4c:84:c1:29:24:15:47:
d8:e8:73:4c:04:86:43:c4:d1:65:de:a7:75:ea:21:
0f:36:28:10:c3:d7:8f:b9:40:c2:84:0a:5f:c3:93:
5e:5e:71:00:9c:47:1b:f1:05:03:25:e4:df:17:f5:
21:f3:99:6f:5e:04:c5:c7:80:c8:1b:07:df:9d:4a:
cd:99:8f:c2:ae:a5:25:69:1a:e1:78:be:f4:bf:1e:
34:4b:1e:21:5f:b9:25:18:cb:37:8d:09:e3:c5:34:
22:76:26:fb:6f:d3:b9:34:03:96:e1:a6:f1:f8:6e:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AD:A9:9B:37:82:48:6A:96:06:64:2C:74:02:F5:F7:E3:C4:BF:71
X509v3 Authority Key Identifier:
keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:48:4a:3f:f5:36:8b:fc:49:6b:45:72:02:59:4e:ee:65:cc:
5a:9a:b9:e9:63:07:b9:b2:7a:d7:9c:5b:eb:e9:a7:46:3c:69:
12:16:3c:ec:05:99:d5:15:d5:20:64:96:f0:7d:4a:9e:53:7b:
ba:be:fd:0a:2a:04:20:09:dd:ca:cb:86:b9:c9:9d:f5:e5:d0:
b9:34:24:4a:06:c8:f6:6b:8c:bf:38:9d:6c:46:9b:8a:64:b6:
06:05:6f:bf:27:db:df:a4:d6:24:a6:95:5f:90:e9:31:e2:5a:
63:08:2e:5b:1f:c9:29:ed:09:bb:e5:eb:13:b4:a2:31:7d:19:
5f:e8:ad:84:70:97:9f:54:be:8c:cd:c2:8c:c3:10:fb:ea:ec:
36:3b:f1:fd:d8:6b:63:7d:c1:b4:f2:ec:9b:49:a0:e3:3f:ad:
4f:b9:15:85:f2:e1:31:18:9c:83:18:24:3a:60:c4:6a:10:ca:
07:8a:eb:70:dc:19:8e:96:30:8f:a3:b0:1a:87:90:77:5e:20:
b6:7d:1d:67:4b:af:ed:56:55:ad:4d:95:eb:a3:73:b2:c0:20:
7b:ca:00:7b:aa:e3:72:cf:2d:a5:25:c5:cd:0b:70:2f:0f:6c:
41:a9:97:17:8f:94:32:0d:ec:42:59:ce:dc:da:96:d6:b6:ff:
84:8e:9e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:38 2026 by rpki-client