
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
File: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft (raw, json)
Hash identifier: ODz43fUbahTec0fHcVvgi6YfNnKtJ9G4tittre2hO38=
Subject key identifier: C4:CA:F5:4C:AA:43:68:F7:FA:F4:5F:33:01:CB:DA:FD:EA:AE:31:E4
Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
Certificate issuer: /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Certificate serial: 4401EB92940D58393949C780B9E39D7B482F6144
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
Manifest number: 70
Signing time: Tue 28 Jul 2026 16:24:25 +0000
Manifest this update: Tue 28 Jul 2026 16:19:25 +0000
Manifest next update: Wed 29 Jul 2026 19:54:25 +0000
Files and hashes: 1: 323430303a363161303a3a2f33322d3438203d3e203338303437.roa (hash: J5FZ9S8B0pYlsVGJstyO6n1c/aCGZycW6XgKo4yhN08=)
2: 323430303a363161303a613035353a3a2f34382d3438203d3e203338303437.roa (hash: riDRlwpNIoMR7hMkqTfgjfQkV7fOImY2Sij1WLjWE7w=)
3: 323430303a363161303a613030313a3a2f34382d3438203d3e203338303437.roa (hash: ClMyhImwoKQTPL6vpGbqnZIvxYBZtQoFI5NkM75vtlc=)
4: 3130332e3138332e37392e302f32342d3234203d3e203338303437.roa (hash: LKb5JTrIhhb/+pCF3MiMwmxDGcflx3R3PPt1vbEW8Is=)
5: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl (hash: QNNMlLf1XxVZM1vN+c1lGhTBowONCkrprvOfleuhtWU=)
6: 323430303a363161303a613035343a3a2f34382d3438203d3e203338303437.roa (hash: CqFIMI+phEk/TJh0hQHIrRWiqwd9Tib9RbiLAwUoHcI=)
7: 3130332e3138332e37382e302f32342d3234203d3e203338303437.roa (hash: DeoItfam0DiP7V+IpPTGWpm2o5vfasSAOwVrx+6kDhk=)
8: 3130332e3138332e37382e302f32332d3234203d3e203338303437.roa (hash: VCJh65xNZyWuR8N+DUeGOPmj5BTIWqqkZ0yjsvuy1Ds=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:01:eb:92:94:0d:58:39:39:49:c7:80:b9:e3:9d:7b:48:2f:61:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Validity
Not Before: Jul 28 16:19:25 2026 GMT
Not After : Jul 29 19:54:25 2026 GMT
Subject: CN=C4CAF54CAA4368F7FAF45F3301CBDAFDEAAE31E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:01:38:c9:b7:5d:e5:4a:2d:d0:29:0e:5c:
78:4d:86:dd:c4:ac:b3:d0:03:8f:47:b7:21:9b:7b:
c9:92:86:ef:26:49:cf:64:3c:99:7e:37:a1:4f:5d:
2d:2c:b5:28:d3:0a:51:08:83:b1:d7:0c:40:aa:85:
6b:32:4e:aa:36:5b:9b:3a:1b:3c:69:51:c2:13:2c:
f3:82:05:12:43:0c:86:09:c5:8d:0e:ab:fd:81:02:
b4:41:11:0b:63:6d:69:57:7f:62:47:4c:c5:a8:46:
2e:47:59:78:15:0b:06:7d:c3:dd:5f:78:9a:7a:ee:
95:2f:d7:d2:1f:b4:84:ec:2b:d4:53:94:ff:7b:08:
c9:af:33:fc:b5:78:0d:b2:b2:b5:a5:21:71:d1:5d:
a3:d7:a4:8b:91:f2:20:a4:a7:02:55:7b:9e:19:78:
ad:79:91:21:5f:c1:d4:de:06:6b:7a:ad:9a:df:b3:
fd:b4:47:f3:78:ae:ad:82:89:37:b4:54:89:46:b1:
1f:fc:ea:78:4b:36:4e:c0:5b:af:2a:3d:bb:99:6e:
4e:4e:62:ed:60:f9:73:8a:e1:7c:6b:51:3a:d8:24:
c9:0a:58:2b:45:0c:9e:18:1f:d7:8c:1a:cc:f9:21:
3a:04:63:34:65:ca:ed:27:32:43:84:65:85:2c:37:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CA:F5:4C:AA:43:68:F7:FA:F4:5F:33:01:CB:DA:FD:EA:AE:31:E4
X509v3 Authority Key Identifier:
keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:50:94:71:32:41:a5:8d:84:18:ea:e6:f5:33:08:1a:11:13:
cb:dd:5f:b9:c6:24:fb:30:1f:aa:db:38:f0:a2:92:9d:e0:81:
42:80:8e:b0:03:3c:4f:30:3c:2d:ee:69:93:0d:c3:29:48:d9:
c4:fb:e0:b1:54:b1:2d:4f:ab:f8:04:2e:27:7c:c3:d2:ba:18:
5d:e2:6b:45:c1:85:ba:7a:c5:8f:fd:5d:7d:fc:a5:e6:d4:eb:
d6:0d:6b:ff:db:d8:6c:75:af:e8:9e:48:0f:a4:8f:21:0e:9b:
dc:5f:31:d8:3b:4c:94:02:fa:88:16:86:8c:74:98:b3:b9:cd:
8a:ac:56:ab:40:5c:0b:d1:76:ea:38:e1:36:1b:ee:43:3f:27:
ae:cd:e5:d8:52:48:02:72:0e:c2:a3:97:55:f5:bc:4b:41:76:
ed:20:91:2a:83:8f:54:36:a2:f2:48:18:88:4f:22:b7:1c:18:
30:b8:68:a7:fb:9e:17:f6:1a:ec:14:1e:3e:96:db:67:0c:64:
b6:3b:7f:6c:fd:08:3f:b3:fb:f0:6c:20:c6:7d:a2:23:d1:39:
3b:27:8b:90:ce:96:fd:d7:48:4a:b8:70:ee:88:33:be:01:ea:
92:fa:82:e8:5b:8a:75:aa:be:8c:45:82:19:22:87:e0:04:44:
de:dc:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:02 2026 by rpki-client