
$ rpki-client -vvvf rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
File: 8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft (raw, json)
Hash identifier: iBL2MfS87TtFrIrTcQPODNNpvwy7wxeadovmzW8Rs9g=
Subject key identifier: 2E:47:01:A2:0C:44:1B:91:8B:CF:BF:62:A4:D3:2E:8F:08:D4:C9:3B
Authority key identifier: 8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB
Certificate issuer: /CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
Certificate serial: 1AE6B970DB9067E3A00D1C7BDC9BF3E21D6E4FBF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
Manifest number: FE
Signing time: Sun 15 Nov 2026 15:03:20 +0000
Manifest this update: Sun 15 Nov 2026 14:58:20 +0000
Manifest next update: Mon 16 Nov 2026 15:14:20 +0000
Files and hashes: 1: 8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl (hash: tRlt2LYb7MsGG534jm/FN5Rq9/XPTA9+iIpmBR62xH0=)
2: 3136332e3132382e3137332e302f32342d3234203d3e2037353338.roa (hash: lN0c+zrFUM9A+yATR6PI6urDIFbSXfGahlIg9B4NXNw=)
3: 3136332e3132382e3137322e302f32332d3234203d3e2037353338.roa (hash: 76RD3PmOiizKI22CSgQ9dTiLJ8WL3ONkwXT5okUfmeg=)
4: 3136332e3132382e3137322e302f32342d3234203d3e2037353338.roa (hash: A4fXLq8miS4G/8CbEaXF5/ip5/2biJF6BwCxn18qXtg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl
rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 08:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e6:b9:70:db:90:67:e3:a0:0d:1c:7b:dc:9b:f3:e2:1d:6e:4f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F16D2DC7D12A845A503D07215FF9D320CBB5BAB
Validity
Not Before: Nov 15 14:58:20 2026 GMT
Not After : Nov 16 15:14:20 2026 GMT
Subject: CN=2E4701A20C441B918BCFBF62A4D32E8F08D4C93B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:39:a3:62:25:68:56:ae:23:d7:36:fa:12:
93:48:e9:80:16:2f:88:7d:44:44:da:d8:2a:01:4e:
5a:84:82:30:db:dc:4c:a6:36:d9:88:d0:8d:18:51:
fb:ea:68:2a:56:9d:28:76:f4:4d:dd:12:55:13:da:
47:1e:a7:22:f8:87:05:70:3d:e2:be:3f:85:c3:1c:
d5:17:bd:29:55:97:fc:5a:2a:10:d6:fa:e3:79:33:
57:57:0b:a5:13:42:20:9d:eb:fc:11:a1:a3:20:05:
0c:e7:52:fc:2e:c1:83:46:50:c6:66:10:6e:0d:9c:
1c:02:6d:0a:73:05:fa:76:51:19:f0:ab:fe:58:c5:
ff:50:8e:a4:51:97:72:84:e8:33:64:a9:b6:10:b0:
ab:6a:27:af:7e:cf:71:2c:07:f4:2e:fd:8f:0c:c5:
67:a4:2d:5f:bb:4a:96:aa:0f:11:00:fe:e6:93:21:
55:75:99:9e:b7:9f:01:7e:83:b0:76:62:f2:6e:99:
d0:ff:43:32:8f:29:de:14:b6:8b:dc:c2:7f:a7:1e:
b5:ef:36:d9:b8:87:95:61:18:aa:67:3e:31:db:da:
0d:e9:34:84:72:92:ae:b3:81:3d:58:17:69:e2:b1:
de:07:b1:46:7b:bd:f9:0a:d9:2a:91:85:ab:c4:9f:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:47:01:A2:0C:44:1B:91:8B:CF:BF:62:A4:D3:2E:8F:08:D4:C9:3B
X509v3 Authority Key Identifier:
keyid:8F:16:D2:DC:7D:12:A8:45:A5:03:D0:72:15:FF:9D:32:0C:BB:5B:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CALEBTECH/0/8F16D2DC7D12A845A503D07215FF9D320CBB5BAB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f5:55:4d:39:3d:4e:70:f8:22:be:98:0e:63:69:f6:f0:e8:77:
4e:31:c8:3e:be:14:ee:d2:cd:9c:8e:a2:a6:dc:4a:9e:86:cc:
ad:53:7f:34:23:bd:67:d7:a9:ee:8f:8f:fb:2a:a3:be:9a:80:
6c:b4:c2:15:5b:fa:d0:8a:73:70:13:04:ff:3a:df:fa:49:bf:
3b:66:51:ed:c5:53:3e:8a:c2:0f:a1:d6:2f:e1:89:6b:a3:a2:
f4:0f:dd:5e:6f:8c:b7:f7:ec:a1:d8:bc:64:75:3b:9c:63:a8:
16:cb:2c:33:79:37:07:6f:be:2d:65:99:bd:ed:2d:8f:5e:32:
85:d2:8c:fc:87:80:6d:5c:7c:fb:e7:29:fc:ec:99:b9:a1:f7:
7a:e0:b1:a8:06:52:47:b4:bb:32:76:9d:5a:84:67:81:df:22:
9c:04:a1:0f:f2:a6:42:d1:cd:01:e3:1f:6d:43:0f:20:9a:82:
0a:14:a5:aa:a2:55:99:58:e6:b6:95:e5:d3:d1:2f:22:bd:0e:
57:67:26:bd:75:fa:3e:64:6e:ea:9e:8c:76:ea:fe:87:4d:3b:
2d:9c:f6:7c:9a:d7:12:fa:d0:48:a3:f1:9c:17:0f:d8:22:9c:
7d:de:6e:b6:e6:35:1b:dc:7c:45:21:21:05:a1:01:ff:5f:eb:
43:f8:cc:26
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUGua5cNuQZ+OgDRx73Jvz4h1uT78wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYxNkQyREM3RDEyQTg0NUE1MDNEMDcyMTVGRjlEMzIw
Q0JCNUJBQjAeFw0yNjExMTUxNDU4MjBaFw0yNjExMTYxNTE0MjBaMDMxMTAvBgNV
BAMTKDJFNDcwMUEyMEM0NDFCOTE4QkNGQkY2MkE0RDMyRThGMDhENEM5M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC09jmjYiVoVq4j1zb6EpNI6YAW
L4h9RETa2CoBTlqEgjDb3EymNtmI0I0YUfvqaCpWnSh29E3dElUT2kcepyL4hwVw
PeK+P4XDHNUXvSlVl/xaKhDW+uN5M1dXC6UTQiCd6/wRoaMgBQznUvwuwYNGUMZm
EG4NnBwCbQpzBfp2URnwq/5Yxf9QjqRRl3KE6DNkqbYQsKtqJ69+z3EsB/Qu/Y8M
xWekLV+7SpaqDxEA/uaTIVV1mZ63nwF+g7B2YvJumdD/QzKPKd4Utovcwn+nHrXv
Ntm4h5VhGKpnPjHb2g3pNIRykq6zgT1YF2nisd4HsUZ7vfkK2SqRhavEn7ClAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQULkcBogxEG5GLz79ipNMujwjUyTswHwYDVR0j
BBgwFoAUjxbS3H0SqEWlA9ByFf+dMgy7W6swDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FMRUJU
RUNILzAvOEYxNkQyREM3RDEyQTg0NUE1MDNEMDcyMTVGRjlEMzIwQ0JCNUJBQi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS84RjE2RDJEQzdEMTJBODQ1QTUwM0QwNzIx
NUZGOUQzMjBDQkI1QkFCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG
VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0FMRUJURUNILzAvOEYxNkQy
REM3RDEyQTg0NUE1MDNEMDcyMTVGRjlEMzIwQ0JCNUJBQi5tZnQwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAPVV
TTk9TnD4Ir6YDmNp9vDod04xyD6+FO7SzZyOoqbcSp6GzK1TfzQjvWfXqe6Pj/sq
o76agGy0whVb+tCKc3ATBP863/pJvztmUe3FUz6Kwg+h1i/hiWujovQP3V5vjLf3
7KHYvGR1O5xjqBbLLDN5Nwdvvi1lmb3tLY9eMoXSjPyHgG1cfPvnKfzsmbmh93rg
sagGUke0uzJ2nVqEZ4HfIpwEoQ/ypkLRzQHjH21DDyCaggoUpaqiVZlY5raV5dPR
LyK9DldnJr11+j5kbuqejHbq/odNOy2c9nya1xL60Eij8ZwXD9ginH3ebrbmNRvc
fEUhIQWhAf9f60P4zCY=
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:10:54 2026 by rpki-client