Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
File:                     F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft (raw, json)
Hash identifier:          ODz43fUbahTec0fHcVvgi6YfNnKtJ9G4tittre2hO38=
Subject key identifier:   C4:CA:F5:4C:AA:43:68:F7:FA:F4:5F:33:01:CB:DA:FD:EA:AE:31:E4
Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
Certificate issuer:       /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Certificate serial:       4401EB92940D58393949C780B9E39D7B482F6144
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
Manifest number:          70
Signing time:             Tue 28 Jul 2026 16:24:25 +0000
Manifest this update:     Tue 28 Jul 2026 16:19:25 +0000
Manifest next update:     Wed 29 Jul 2026 19:54:25 +0000
Files and hashes:         1: 323430303a363161303a3a2f33322d3438203d3e203338303437.roa (hash: J5FZ9S8B0pYlsVGJstyO6n1c/aCGZycW6XgKo4yhN08=)
                          2: 323430303a363161303a613035353a3a2f34382d3438203d3e203338303437.roa (hash: riDRlwpNIoMR7hMkqTfgjfQkV7fOImY2Sij1WLjWE7w=)
                          3: 323430303a363161303a613030313a3a2f34382d3438203d3e203338303437.roa (hash: ClMyhImwoKQTPL6vpGbqnZIvxYBZtQoFI5NkM75vtlc=)
                          4: 3130332e3138332e37392e302f32342d3234203d3e203338303437.roa (hash: LKb5JTrIhhb/+pCF3MiMwmxDGcflx3R3PPt1vbEW8Is=)
                          5: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl (hash: QNNMlLf1XxVZM1vN+c1lGhTBowONCkrprvOfleuhtWU=)
                          6: 323430303a363161303a613035343a3a2f34382d3438203d3e203338303437.roa (hash: CqFIMI+phEk/TJh0hQHIrRWiqwd9Tib9RbiLAwUoHcI=)
                          7: 3130332e3138332e37382e302f32342d3234203d3e203338303437.roa (hash: DeoItfam0DiP7V+IpPTGWpm2o5vfasSAOwVrx+6kDhk=)
                          8: 3130332e3138332e37382e302f32332d3234203d3e203338303437.roa (hash: VCJh65xNZyWuR8N+DUeGOPmj5BTIWqqkZ0yjsvuy1Ds=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
                          rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 07:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:01:eb:92:94:0d:58:39:39:49:c7:80:b9:e3:9d:7b:48:2f:61:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
        Validity
            Not Before: Jul 28 16:19:25 2026 GMT
            Not After : Jul 29 19:54:25 2026 GMT
        Subject: CN=C4CAF54CAA4368F7FAF45F3301CBDAFDEAAE31E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:01:38:c9:b7:5d:e5:4a:2d:d0:29:0e:5c:
                    78:4d:86:dd:c4:ac:b3:d0:03:8f:47:b7:21:9b:7b:
                    c9:92:86:ef:26:49:cf:64:3c:99:7e:37:a1:4f:5d:
                    2d:2c:b5:28:d3:0a:51:08:83:b1:d7:0c:40:aa:85:
                    6b:32:4e:aa:36:5b:9b:3a:1b:3c:69:51:c2:13:2c:
                    f3:82:05:12:43:0c:86:09:c5:8d:0e:ab:fd:81:02:
                    b4:41:11:0b:63:6d:69:57:7f:62:47:4c:c5:a8:46:
                    2e:47:59:78:15:0b:06:7d:c3:dd:5f:78:9a:7a:ee:
                    95:2f:d7:d2:1f:b4:84:ec:2b:d4:53:94:ff:7b:08:
                    c9:af:33:fc:b5:78:0d:b2:b2:b5:a5:21:71:d1:5d:
                    a3:d7:a4:8b:91:f2:20:a4:a7:02:55:7b:9e:19:78:
                    ad:79:91:21:5f:c1:d4:de:06:6b:7a:ad:9a:df:b3:
                    fd:b4:47:f3:78:ae:ad:82:89:37:b4:54:89:46:b1:
                    1f:fc:ea:78:4b:36:4e:c0:5b:af:2a:3d:bb:99:6e:
                    4e:4e:62:ed:60:f9:73:8a:e1:7c:6b:51:3a:d8:24:
                    c9:0a:58:2b:45:0c:9e:18:1f:d7:8c:1a:cc:f9:21:
                    3a:04:63:34:65:ca:ed:27:32:43:84:65:85:2c:37:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CA:F5:4C:AA:43:68:F7:FA:F4:5F:33:01:CB:DA:FD:EA:AE:31:E4
            X509v3 Authority Key Identifier:
                keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:50:94:71:32:41:a5:8d:84:18:ea:e6:f5:33:08:1a:11:13:
         cb:dd:5f:b9:c6:24:fb:30:1f:aa:db:38:f0:a2:92:9d:e0:81:
         42:80:8e:b0:03:3c:4f:30:3c:2d:ee:69:93:0d:c3:29:48:d9:
         c4:fb:e0:b1:54:b1:2d:4f:ab:f8:04:2e:27:7c:c3:d2:ba:18:
         5d:e2:6b:45:c1:85:ba:7a:c5:8f:fd:5d:7d:fc:a5:e6:d4:eb:
         d6:0d:6b:ff:db:d8:6c:75:af:e8:9e:48:0f:a4:8f:21:0e:9b:
         dc:5f:31:d8:3b:4c:94:02:fa:88:16:86:8c:74:98:b3:b9:cd:
         8a:ac:56:ab:40:5c:0b:d1:76:ea:38:e1:36:1b:ee:43:3f:27:
         ae:cd:e5:d8:52:48:02:72:0e:c2:a3:97:55:f5:bc:4b:41:76:
         ed:20:91:2a:83:8f:54:36:a2:f2:48:18:88:4f:22:b7:1c:18:
         30:b8:68:a7:fb:9e:17:f6:1a:ec:14:1e:3e:96:db:67:0c:64:
         b6:3b:7f:6c:fd:08:3f:b3:fb:f0:6c:20:c6:7d:a2:23:d1:39:
         3b:27:8b:90:ce:96:fd:d7:48:4a:b8:70:ee:88:33:be:01:ea:
         92:fa:82:e8:5b:8a:75:aa:be:8c:45:82:19:22:87:e0:04:44:
         de:dc:1e:33
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIURAHrkpQNWDk5SceAueOde0gvYUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJBNTU0Q0Y2RDk4QTRBRUU3QkIzOTk5MzJCNDYzQjcy
RjNGNEI0NTAeFw0yNjA3MjgxNjE5MjVaFw0yNjA3MjkxOTU0MjVaMDMxMTAvBgNV
BAMTKEM0Q0FGNTRDQUE0MzY4RjdGQUY0NUYzMzAxQ0JEQUZERUFBRTMxRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMewE4ybdd5Uot0CkOXHhNht3E
rLPQA49HtyGbe8mShu8mSc9kPJl+N6FPXS0stSjTClEIg7HXDECqhWsyTqo2W5s6
GzxpUcITLPOCBRJDDIYJxY0Oq/2BArRBEQtjbWlXf2JHTMWoRi5HWXgVCwZ9w91f
eJp67pUv19IftITsK9RTlP97CMmvM/y1eA2ysrWlIXHRXaPXpIuR8iCkpwJVe54Z
eK15kSFfwdTeBmt6rZrfs/20R/N4rq2CiTe0VIlGsR/86nhLNk7AW68qPbuZbk5O
Yu1g+XOK4XxrUTrYJMkKWCtFDJ4YH9eMGsz5IToEYzRlyu0nMkOEZYUsN5VPAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUxMr1TKpDaPf69F8zAcva/equMeQwHwYDVR0j
BBgwFoAU8qVUz22YpK7nuzmZMrRjty8/S0UwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFU
RUwvMC9GMkE1NTRDRjZEOThBNEFFRTdCQjM5OTkzMkI0NjNCNzJGM0Y0QjQ1LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0YyQTU1NENGNkQ5OEE0QUVFN0JCMzk5OTMy
QjQ2M0I3MkYzRjRCNDUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElOQVRFTC8wL0YyQTU1NENG
NkQ5OEE0QUVFN0JCMzk5OTMyQjQ2M0I3MkYzRjRCNDUubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVUJRx
MkGljYQY6ub1MwgaERPL3V+5xiT7MB+q2zjwopKd4IFCgI6wAzxPMDwt7mmTDcMp
SNnE++CxVLEtT6v4BC4nfMPSuhhd4mtFwYW6esWP/V19/KXm1OvWDWv/29hsda/o
nkgPpI8hDpvcXzHYO0yUAvqIFoaMdJizuc2KrFarQFwL0XbqOOE2G+5DPyeuzeXY
UkgCcg7Co5dV9bxLQXbtIJEqg49UNqLySBiITyK3HBgwuGin+54X9hrsFB4+lttn
DGS2O39s/Qg/s/vwbCDGfaIj0Tk7J4uQzpb910hKuHDuiDO+AeqS+oLoW4p1qr6M
RYIZIofgBETe3B4z
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:19:02 2026 by rpki-client