
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
File: 8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft (raw, json)
Hash identifier: zmQc1V/V6Uc43oKFV7huzfbdkFCzlLlLb3j7shbNPfk=
Subject key identifier: C7:75:54:AC:87:BB:DB:14:B9:A7:CD:78:27:62:C2:4F:A1:55:B0:DC
Authority key identifier: 8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB
Certificate issuer: /CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
Certificate serial: 712F84223DEAA46C708699AAD052A8DFE5E071C5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
Manifest number: B5
Signing time: Mon 21 Sep 2026 09:46:50 +0000
Manifest this update: Mon 21 Sep 2026 09:41:50 +0000
Manifest next update: Tue 22 Sep 2026 12:35:50 +0000
Files and hashes: 1: 3136332e3132382e3137322e302f32332d3234203d3e2037353338.roa (hash: 76RD3PmOiizKI22CSgQ9dTiLJ8WL3ONkwXT5okUfmeg=)
2: 3136332e3132382e3137332e302f32342d3234203d3e2037353338.roa (hash: lN0c+zrFUM9A+yATR6PI6urDIFbSXfGahlIg9B4NXNw=)
3: 3136332e3132382e3137322e302f32342d3234203d3e2037353338.roa (hash: A4fXLq8miS4G/8CbEaXF5/ip5/2biJF6BwCxn18qXtg=)
4: 8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl (hash: 9kZipS2FSbLOBTHgLL1VSj4BB5eio3yehlzC1FdtDmw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl
rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:2f:84:22:3d:ea:a4:6c:70:86:99:aa:d0:52:a8:df:e5:e0:71:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
Validity
Not Before: Sep 21 09:41:50 2026 GMT
Not After : Sep 22 12:35:50 2026 GMT
Subject: CN=C77554AC87BBDB14B9A7CD782762C24FA155B0DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dc:7c:96:fd:f4:3f:82:5d:0c:46:fd:6e:6e:
7a:c4:25:f2:57:aa:2a:92:33:d7:28:e6:e4:cf:5a:
ad:56:1b:b5:3a:9a:53:bc:d4:8b:ab:8b:a3:6f:52:
f4:3d:78:1d:6b:55:b2:99:0c:48:81:72:29:a4:26:
7c:3f:27:63:08:48:f8:94:79:b6:a4:c7:87:59:87:
40:08:44:ba:99:09:b8:85:46:26:79:31:8f:16:d1:
31:fa:77:53:c3:cf:96:b2:ad:9c:b1:a1:00:0b:d2:
d3:bc:0a:2f:a0:52:3c:ba:d2:56:46:b8:de:43:2f:
57:ed:62:10:3d:cb:79:f8:98:b8:fb:1e:d7:37:39:
f9:1e:c1:b1:f0:ec:35:df:bf:e2:dc:58:ef:d7:89:
01:c6:e4:c0:0d:06:a0:b7:5f:79:b5:b7:a7:d5:db:
d3:ca:20:f5:98:54:23:7f:2a:eb:78:2f:5c:60:85:
88:c8:9d:a9:63:dc:2e:4c:38:ed:81:10:89:fc:b4:
a1:e1:cb:dd:c4:61:61:94:ba:45:46:c8:dc:5e:aa:
e7:4b:03:16:a7:dd:d8:8f:e0:77:ea:79:6f:57:de:
80:5f:56:39:4e:21:b3:f6:65:76:1e:16:2e:8a:84:
b6:a3:2f:89:77:a7:b0:00:9a:f7:ab:d3:61:e4:dd:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:75:54:AC:87:BB:DB:14:B9:A7:CD:78:27:62:C2:4F:A1:55:B0:DC
X509v3 Authority Key Identifier:
keyid:8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ac:a1:61:a6:73:39:83:5e:2e:10:4f:60:e7:f5:92:f7:bc:
6e:a7:42:72:33:b5:e2:6c:98:f4:cb:f1:d3:9c:5e:93:3f:22:
b7:48:68:60:19:0a:26:3e:06:f6:18:c9:d6:d5:d8:0b:c3:d5:
a2:56:73:b7:ea:24:22:d6:6e:86:53:b5:23:b2:40:06:0f:da:
0e:e7:ca:20:a0:b3:28:ee:fa:9c:a6:4e:e5:54:9c:24:0d:97:
5f:6e:2e:c1:96:29:97:94:7f:4f:d1:de:ed:bd:24:ee:c9:fc:
15:f4:29:83:c6:ba:aa:9a:83:da:a3:4a:a2:ed:ac:fb:d6:6b:
db:81:1c:ab:81:1e:45:61:ea:ac:cd:13:97:d3:e5:cc:ad:2f:
1f:36:ae:d5:9c:ca:38:95:70:bb:67:17:0d:a2:90:85:f4:1c:
24:82:d4:3c:37:8e:05:d5:31:49:e3:f0:9e:55:70:0a:ed:ba:
9f:ef:64:44:6a:aa:61:bc:ee:c7:08:e0:5e:de:ca:f5:cf:9d:
ff:c0:61:d8:a3:d6:08:80:3e:bd:0d:02:5e:1e:da:98:91:e6:
82:dc:b4:75:68:f3:bd:06:58:33:e5:88:de:b9:f9:18:28:f4:
2e:22:86:0d:f8:46:ef:11:f4:d8:e0:e5:81:2d:eb:1b:c7:b3:
19:ec:78:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:43:42 2026 by rpki-client