
$ rpki-client -vvf rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
File: F1F518BDB5085DA9DAA281C529D23491A72DA248.mft (raw, json)
Hash identifier: 26hp46NK+TOxaUZ0oNDoWl053rya+mt0fjoDjJttimw=
Subject key identifier: 8A:32:6C:70:EF:57:EF:58:36:E1:7F:80:6F:D3:9E:A1:5A:BB:37:5A
Authority key identifier: F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48
Certificate issuer: /CN=F1F518BDB5085DA9DAA281C529D23491A72DA248
Certificate serial: 4850F2018D3DACDBE5DE5DFA64BB88B5B53A724A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
Manifest number: 2F
Signing time: Fri 12 Jun 2026 14:26:58 +0000
Manifest this update: Fri 12 Jun 2026 14:21:58 +0000
Manifest next update: Sat 13 Jun 2026 16:41:58 +0000
Files and hashes: 1: 34332e3234382e31362e302f32322d3234203d3e203138303436.roa (hash: xJeTRYFTpaj0Hh3mWQfQMb0S7i3UbraCF9VeCrKQmyI=)
2: F1F518BDB5085DA9DAA281C529D23491A72DA248.crl (hash: vLQVHLMeBYm/i+mJbzFj4pN5saSHJ0hHEtzfqeuYDrs=)
3: 3130332e3233332e36382e302f32322d3234203d3e20313331363733.roa (hash: IQqTvMCBIJY6Msoqpe6u+k/x2PQIXfWBUEMY1IOks9o=)
4: 34332e3234382e31362e302f32322d3234203d3e20313331363733.roa (hash: yT6GkUFctFjsYfjkimVCCoYgqHwh9a8wPuU6HRbCaVY=)
5: 3130332e3233332e36382e302f32322d3234203d3e203138303436.roa (hash: ORpDWMmcXvXNpOQL2dVJ9nUGlzM0OrO03KuyZerYMOU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl
rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 16:41:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:50:f2:01:8d:3d:ac:db:e5:de:5d:fa:64:bb:88:b5:b5:3a:72:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1F518BDB5085DA9DAA281C529D23491A72DA248
Validity
Not Before: Jun 12 14:21:58 2026 GMT
Not After : Jun 13 16:41:58 2026 GMT
Subject: CN=8A326C70EF57EF5836E17F806FD39EA15ABB375A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:56:e0:78:93:9f:1c:32:cc:28:85:4d:b4:
61:9f:21:03:ec:3f:cd:20:52:c2:7f:4f:53:21:58:
29:48:9f:b2:de:4c:34:95:5c:3d:4f:2b:6b:73:cf:
e1:e4:e4:d4:61:1e:bf:7a:2a:f0:4e:76:3e:00:e6:
30:2f:59:19:83:70:ea:8b:bc:0d:c3:5f:f3:44:20:
df:0b:0a:f2:dc:8f:74:8e:26:69:4a:2f:a3:ce:cf:
49:35:4a:d1:65:46:60:47:c0:fa:47:a3:a5:f8:18:
00:77:ab:c8:96:4a:6a:1e:30:64:f9:92:c3:70:7d:
06:7a:ba:bc:67:e8:42:1e:ed:ef:16:8a:15:1f:87:
01:74:14:bb:1d:1b:2a:16:8d:2e:e4:6c:49:f8:30:
3a:17:fa:c8:0e:f8:28:4e:63:6a:0c:7a:f9:ee:04:
25:f5:90:1c:e3:ef:d0:20:1e:c1:e2:47:65:7d:7b:
ff:31:d4:15:b5:40:f3:81:30:ca:09:20:1f:f2:91:
21:0a:6d:a7:c2:e2:e2:d4:b9:95:41:f1:d3:e9:94:
6a:b8:1d:3c:2d:99:ee:d9:47:86:39:23:9d:09:a5:
e5:5a:7d:88:6a:4e:a6:44:f9:2e:5d:cf:03:11:10:
8a:f7:5c:a6:21:c2:4c:43:27:38:ab:15:3f:38:3c:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:32:6C:70:EF:57:EF:58:36:E1:7F:80:6F:D3:9E:A1:5A:BB:37:5A
X509v3 Authority Key Identifier:
keyid:F1:F5:18:BD:B5:08:5D:A9:DA:A2:81:C5:29:D2:34:91:A7:2D:A2:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F518BDB5085DA9DAA281C529D23491A72DA248.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CATVISP/0/F1F518BDB5085DA9DAA281C529D23491A72DA248.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ea:ba:22:5e:64:57:0d:41:9d:96:9c:93:32:d0:27:33:40:
ef:ca:c8:57:51:bf:df:1b:52:e2:b2:0a:a9:89:97:cc:42:4d:
ef:66:3c:d4:c1:e5:5d:7b:46:6c:fb:44:3c:a6:c0:25:78:b6:
7c:8d:ca:2e:1f:1b:47:8b:79:55:5e:b8:9f:a7:33:7e:11:65:
d6:90:5f:a9:94:75:25:ed:54:7a:7e:1e:90:81:1c:ac:14:ff:
04:02:3c:08:1f:0d:9c:99:0e:8b:c7:35:56:bb:d9:78:8b:7f:
19:e2:6a:5e:a4:ee:82:fa:bc:d8:38:ca:92:a9:c8:86:4a:c8:
76:17:cf:7f:ef:65:8a:44:08:56:8f:be:de:dc:ea:5a:22:dd:
b4:9a:ba:8a:c0:36:00:97:b0:e4:8f:ab:9f:01:e5:1e:51:6a:
fd:38:a2:bd:9a:f2:51:c4:95:c5:e1:e4:86:6b:05:ea:00:87:
2a:ba:da:12:92:ef:93:6b:89:42:3e:1b:51:84:bc:3b:2b:e1:
34:70:e7:59:24:47:92:b8:04:ab:db:b6:78:cc:83:bf:ca:40:
52:6c:3a:ad:61:df:43:89:4d:dc:44:9c:85:69:34:5f:83:5d:
d9:e8:5a:86:2a:b3:07:0c:b9:d9:a7:43:51:45:5f:b6:09:48:
a8:18:94:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:04:16 2026 by rpki-client