$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft File: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft (raw, json) Hash identifier: yqnxjqFmvYpoRjK+eWrOupZlvbjiGnW3jj5S6TGj1Ho= Subject key identifier: 65:FD:EF:7C:D0:F7:11:2A:49:ED:EB:0A:76:A0:4A:AF:64:3A:B4:58 Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45 Certificate issuer: /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45 Certificate serial: 5EACD0A6541B4DBBE80EAB6F4DE81A5D3C138538 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft Manifest number: BB Signing time: Mon 21 Sep 2026 14:42:22 +0000 Manifest this update: Mon 21 Sep 2026 14:37:22 +0000 Manifest next update: Tue 22 Sep 2026 15:19:22 +0000 Files and hashes: 1: 3130332e3138332e37382e302f32342d3234203d3e203338303437.roa (hash: DeoItfam0DiP7V+IpPTGWpm2o5vfasSAOwVrx+6kDhk=) 2: 323430303a363161303a613035353a3a2f34382d3438203d3e203338303437.roa (hash: riDRlwpNIoMR7hMkqTfgjfQkV7fOImY2Sij1WLjWE7w=) 3: 3130332e3136302e3231352e302f32342d3234203d3e203338303437.roa (hash: DVa6lflyFCE3PWvV287KtfNHuZRpwCib43B9QlWb9Mo=) 4: 3130332e3138332e37392e302f32342d3234203d3e203338303437.roa (hash: LKb5JTrIhhb/+pCF3MiMwmxDGcflx3R3PPt1vbEW8Is=) 5: 3130332e3138332e37382e302f32332d3234203d3e203338303437.roa (hash: VCJh65xNZyWuR8N+DUeGOPmj5BTIWqqkZ0yjsvuy1Ds=) 6: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl (hash: 3yoaQAafw7GPRsZf8qD39Ywi5a507AAdZzBk1oO6wFo=) 7: 323430303a363161303a3a2f33322d3438203d3e203338303437.roa (hash: J5FZ9S8B0pYlsVGJstyO6n1c/aCGZycW6XgKo4yhN08=) 8: 323430303a363161303a613035343a3a2f34382d3438203d3e203338303437.roa (hash: CqFIMI+phEk/TJh0hQHIrRWiqwd9Tib9RbiLAwUoHcI=) 9: 3130332e3136302e3231342e302f32332d3234203d3e203338303437.roa (hash: kLX8JWP5e8TfooxSrIQf/bTViGHZeimUz/lVy37AiIU=) 10: 323430303a363161303a613030313a3a2f34382d3438203d3e203338303437.roa (hash: ClMyhImwoKQTPL6vpGbqnZIvxYBZtQoFI5NkM75vtlc=) 11: 3130332e3136302e3231342e302f32342d3234203d3e203338303437.roa (hash: I/8oBrcA7D4gSHZsNUzYUMucmbnioIQjHYdj6J1h3lQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ac:d0:a6:54:1b:4d:bb:e8:0e:ab:6f:4d:e8:1a:5d:3c:13:85:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45 Validity Not Before: Sep 21 14:37:22 2026 GMT Not After : Sep 22 15:19:22 2026 GMT Subject: CN=65FDEF7CD0F7112A49EDEB0A76A04AAF643AB458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7f:04:6e:70:2c:39:03:18:ca:2d:86:58:4b: db:0f:d4:12:e4:2a:2c:48:5c:a3:54:bd:fb:2f:dc: b1:28:29:4f:bc:eb:45:f5:19:bf:1f:93:81:d8:9d: 44:35:b7:50:04:49:37:f4:10:ef:8e:b0:43:c8:4a: 9d:3a:13:4d:d1:c8:0a:0d:a1:3f:8b:44:f2:10:64: 71:ad:af:c8:f9:08:8b:6c:a5:3e:91:cd:35:0a:93: 32:a0:af:ec:31:fa:ae:47:75:65:ce:1a:8c:c4:97: 31:7b:bb:65:16:21:5c:dc:af:16:be:29:85:03:14: 1c:5a:6f:e8:c3:16:ac:0f:13:da:9e:9c:b4:35:8d: 22:81:dd:64:33:53:17:a1:58:c5:99:00:47:4a:73: 42:39:23:4d:9d:3e:d1:62:0b:bc:d8:b5:2a:a0:3c: 4f:a1:ce:6a:45:6b:c5:d7:98:82:cb:fe:3e:f6:c2: 23:89:6c:95:7b:ea:04:a2:ad:e0:4a:8e:ff:2b:01: ef:d6:c5:ac:26:3c:3e:3e:73:ea:25:40:c6:49:f1: d9:84:d4:18:8b:ff:63:ec:ab:44:88:d2:4b:e4:a9: 1c:12:cd:84:ba:ab:00:3b:15:52:e8:da:a2:9c:d2: 82:7c:c9:01:4f:43:9e:9e:95:c5:54:21:b6:26:16: cf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FD:EF:7C:D0:F7:11:2A:49:ED:EB:0A:76:A0:4A:AF:64:3A:B4:58 X509v3 Authority Key Identifier: keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:19:63:b1:46:50:6f:ab:34:e7:80:ed:4b:3c:b7:b5:60:a4: 5e:83:a6:82:1b:73:35:1e:0e:bf:bd:37:76:d1:15:44:23:22: 3b:77:9d:80:44:45:fd:81:2c:19:2b:67:33:ad:c0:e4:3e:db: 0a:9a:1b:7f:27:8a:e9:da:e6:1b:56:c3:ec:0c:43:72:ec:ae: 14:4e:5d:03:07:d5:50:32:04:f6:3e:d8:3e:7d:c3:ff:4a:43: f2:99:5d:c5:a5:94:58:b4:06:9c:5d:07:76:e8:0d:47:43:52: 9b:63:8c:9b:b0:5b:57:99:df:11:a9:d6:f8:e0:b1:dc:fd:5b: 38:55:86:7b:18:ef:5a:8d:30:2c:cf:cb:34:fc:d2:52:a3:8f: 8e:42:87:9d:8f:0f:e5:68:da:e2:e9:ac:b9:46:1a:d1:2c:8d: 42:2f:dc:03:1f:5b:5f:23:c9:25:c0:ed:b3:51:8c:75:d3:48: 08:e9:ab:3a:e2:e2:a3:f5:ab:21:3f:9a:e3:64:0a:ca:68:8a: 9e:e9:d3:a6:1b:3f:de:64:22:90:d1:31:e9:9b:55:67:c5:33: 84:56:5b:f7:93:9d:1b:ac:57:d8:52:d3:d1:4a:84:0e:66:0e: fb:d8:c9:bf:41:bf:a4:c5:5c:8a:e0:74:7e:db:60:5a:a0:f2: 45:34:a3:ea -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUXqzQplQbTbvoDqtvTegaXTwThTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBNTU0Q0Y2RDk4QTRBRUU3QkIzOTk5MzJCNDYzQjcy RjNGNEI0NTAeFw0yNjA5MjExNDM3MjJaFw0yNjA5MjIxNTE5MjJaMDMxMTAvBgNV BAMTKDY1RkRFRjdDRDBGNzExMkE0OUVERUIwQTc2QTA0QUFGNjQzQUI0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkfwRucCw5AxjKLYZYS9sP1BLk KixIXKNUvfsv3LEoKU+860X1Gb8fk4HYnUQ1t1AESTf0EO+OsEPISp06E03RyAoN oT+LRPIQZHGtr8j5CItspT6RzTUKkzKgr+wx+q5HdWXOGozElzF7u2UWIVzcrxa+ KYUDFBxab+jDFqwPE9qenLQ1jSKB3WQzUxehWMWZAEdKc0I5I02dPtFiC7zYtSqg PE+hzmpFa8XXmILL/j72wiOJbJV76gSireBKjv8rAe/WxawmPD4+c+olQMZJ8dmE 1BiL/2Psq0SI0kvkqRwSzYS6qwA7FVLo2qKc0oJ8yQFPQ56elcVUIbYmFs8bAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUZf3vfND3ESpJ7esKdqBKr2Q6tFgwHwYDVR0j BBgwFoAU8qVUz22YpK7nuzmZMrRjty8/S0UwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFU RUwvMC9GMkE1NTRDRjZEOThBNEFFRTdCQjM5OTkzMkI0NjNCNzJGM0Y0QjQ1LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0YyQTU1NENGNkQ5OEE0QUVFN0JCMzk5OTMy QjQ2M0I3MkYzRjRCNDUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElOQVRFTC8wL0YyQTU1NENG NkQ5OEE0QUVFN0JCMzk5OTMyQjQ2M0I3MkYzRjRCNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6GWOx RlBvqzTngO1LPLe1YKReg6aCG3M1Hg6/vTd20RVEIyI7d52AREX9gSwZK2czrcDk PtsKmht/J4rp2uYbVsPsDENy7K4UTl0DB9VQMgT2Ptg+fcP/SkPymV3FpZRYtAac XQd26A1HQ1KbY4ybsFtXmd8Rqdb44LHc/Vs4VYZ7GO9ajTAsz8s0/NJSo4+OQoed jw/laNri6ay5RhrRLI1CL9wDH1tfI8klwO2zUYx100gI6as64uKj9ashP5rjZArK aIqe6dOmGz/eZCKQ0THpm1VnxTOEVlv3k50brFfYUtPRSoQOZg772Mm/Qb+kxVyK 4HR+22BaoPJFNKPq -----END CERTIFICATE-----Generated at Mon Sep 21 21:30:36 2026 by rpki-client