$ rpki-client -vvvf rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft File: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft (raw, json) Hash identifier: PysterPG9BOGLuklQRFZFmZ/b4aLJsHzO8mcxNBJ7s0= Subject key identifier: E7:33:3C:45:42:92:1A:2B:2A:0E:2C:8F:80:48:0B:C9:85:D2:DD:AC Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45 Certificate issuer: /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45 Certificate serial: 6B25DD1522393C54F0584F53A10C8F935E1974CA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft Manifest number: BF Signing time: Thu 24 Sep 2026 12:34:48 +0000 Manifest this update: Thu 24 Sep 2026 12:29:48 +0000 Manifest next update: Fri 25 Sep 2026 15:28:48 +0000 Files and hashes: 1: 323430303a363161303a3a2f33322d3438203d3e203338303437.roa (hash: J5FZ9S8B0pYlsVGJstyO6n1c/aCGZycW6XgKo4yhN08=) 2: 323430303a363161303a613035343a3a2f34382d3438203d3e203338303437.roa (hash: CqFIMI+phEk/TJh0hQHIrRWiqwd9Tib9RbiLAwUoHcI=) 3: 3130332e3138332e37392e302f32342d3234203d3e203338303437.roa (hash: LKb5JTrIhhb/+pCF3MiMwmxDGcflx3R3PPt1vbEW8Is=) 4: 3130332e3136302e3231352e302f32342d3234203d3e203338303437.roa (hash: DVa6lflyFCE3PWvV287KtfNHuZRpwCib43B9QlWb9Mo=) 5: 3130332e3136302e3231342e302f32342d3234203d3e203338303437.roa (hash: I/8oBrcA7D4gSHZsNUzYUMucmbnioIQjHYdj6J1h3lQ=) 6: 3130332e3138332e37382e302f32342d3234203d3e203338303437.roa (hash: DeoItfam0DiP7V+IpPTGWpm2o5vfasSAOwVrx+6kDhk=) 7: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl (hash: MfpyAOA46A1Xi6sTOM7AKM4UwN7JEF1DEK3Lwy0latI=) 8: 3130332e3136302e3231342e302f32332d3234203d3e203338303437.roa (hash: kLX8JWP5e8TfooxSrIQf/bTViGHZeimUz/lVy37AiIU=) 9: 3130332e3138332e37382e302f32332d3234203d3e203338303437.roa (hash: VCJh65xNZyWuR8N+DUeGOPmj5BTIWqqkZ0yjsvuy1Ds=) 10: 323430303a363161303a613030313a3a2f34382d3438203d3e203338303437.roa (hash: ClMyhImwoKQTPL6vpGbqnZIvxYBZtQoFI5NkM75vtlc=) 11: 323430303a363161303a613035353a3a2f34382d3438203d3e203338303437.roa (hash: riDRlwpNIoMR7hMkqTfgjfQkV7fOImY2Sij1WLjWE7w=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:25:dd:15:22:39:3c:54:f0:58:4f:53:a1:0c:8f:93:5e:19:74:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45 Validity Not Before: Sep 24 12:29:48 2026 GMT Not After : Sep 25 15:28:48 2026 GMT Subject: CN=E7333C4542921A2B2A0E2C8F80480BC985D2DDAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bf:13:a7:06:eb:ea:08:a0:1a:4e:67:bb:a8: a5:c2:7d:b4:ab:6c:e3:b1:3e:f1:f7:0f:f9:96:41: b8:2b:de:56:e1:30:06:5a:53:d4:d8:dc:86:45:7c: 21:53:cb:bd:e5:10:19:af:0a:92:d5:b3:25:db:68: 0f:a2:1a:cb:28:44:53:4e:34:a3:b0:9e:0f:38:6a: a4:88:92:b4:28:e0:16:b7:9f:2a:21:3c:d0:74:f9: ef:89:e5:07:ec:f8:38:4c:65:cf:38:63:53:3b:e3: 65:71:85:76:97:f9:51:ae:69:a1:93:da:32:c4:71: c8:be:c4:c0:6d:fe:a8:dc:37:2f:a9:3a:3b:fb:61: 63:66:2b:fa:14:68:b1:a1:92:7e:ae:6c:43:eb:13: 11:54:15:80:f7:36:35:23:4b:f7:a1:c8:f0:b2:9e: 18:3d:27:4f:fe:a9:52:29:e5:fa:72:40:2c:2e:79: 90:dc:3d:c0:9a:e7:3e:6f:f4:46:c6:c7:a6:b5:e0: cd:d9:ff:96:81:7c:47:39:c3:37:52:da:78:cd:76: 07:8d:ea:d8:1b:b2:9a:ca:6a:91:0c:36:9a:25:fe: 00:46:06:9d:6a:7d:54:b8:d1:f2:8f:5d:4b:de:eb: e9:e3:29:bc:ab:22:4b:04:34:66:3f:3a:56:08:ae: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:33:3C:45:42:92:1A:2B:2A:0E:2C:8F:80:48:0B:C9:85:D2:DD:AC X509v3 Authority Key Identifier: keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b4:d3:05:77:c4:2b:35:5f:41:19:c5:1a:0d:20:cd:90:da: be:fc:87:65:4f:31:cd:6e:f6:f7:64:e1:c3:22:72:37:b0:2b: 87:b1:a3:01:ad:d2:c5:a9:2b:98:c6:fd:8d:2c:f8:26:1f:68: 7b:e5:e7:13:56:8d:5b:d1:94:48:ee:cb:4b:01:07:2d:12:67: ba:07:d3:45:40:a1:78:8b:af:db:1d:25:48:63:9c:2f:f5:06: 73:44:77:45:7a:05:29:fb:32:31:5d:40:eb:2f:d4:03:c9:0d: 22:d6:e2:3a:01:91:12:ba:56:c4:a5:fc:b8:f8:dd:71:18:82: d2:6a:5e:5e:31:a3:a7:c5:d4:f9:4b:38:51:fd:59:d5:dd:ca: ff:98:11:a6:6f:67:da:11:be:66:9b:7f:ce:80:e7:ac:29:1a: 5f:ce:d8:1d:99:45:35:40:94:04:8e:d5:6d:74:47:14:37:65: 55:37:1e:0a:44:62:9f:b1:06:b3:39:21:b1:c1:af:80:a2:82: 26:ed:fd:b3:e8:f6:0e:0e:9f:54:c0:f1:e4:17:40:4a:9b:fc: 32:e5:cb:6a:b3:3c:6d:52:fe:f0:54:d3:28:72:39:a6:c8:86: ce:70:57:f5:45:be:40:e5:51:5b:2a:82:90:e1:2d:f8:09:9f: 76:c9:d4:9d -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUayXdFSI5PFTwWE9ToQyPk14ZdMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBNTU0Q0Y2RDk4QTRBRUU3QkIzOTk5MzJCNDYzQjcy RjNGNEI0NTAeFw0yNjA5MjQxMjI5NDhaFw0yNjA5MjUxNTI4NDhaMDMxMTAvBgNV BAMTKEU3MzMzQzQ1NDI5MjFBMkIyQTBFMkM4RjgwNDgwQkM5ODVEMkREQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxvxOnBuvqCKAaTme7qKXCfbSr bOOxPvH3D/mWQbgr3lbhMAZaU9TY3IZFfCFTy73lEBmvCpLVsyXbaA+iGssoRFNO NKOwng84aqSIkrQo4Ba3nyohPNB0+e+J5Qfs+DhMZc84Y1M742VxhXaX+VGuaaGT 2jLEcci+xMBt/qjcNy+pOjv7YWNmK/oUaLGhkn6ubEPrExFUFYD3NjUjS/ehyPCy nhg9J0/+qVIp5fpyQCwueZDcPcCa5z5v9EbGx6a14M3Z/5aBfEc5wzdS2njNdgeN 6tgbsprKapEMNpol/gBGBp1qfVS40fKPXUve6+njKbyrIksENGY/OlYIrmkLAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU5zM8RUKSGisqDiyPgEgLyYXS3awwHwYDVR0j BBgwFoAU8qVUz22YpK7nuzmZMrRjty8/S0UwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFU RUwvMC9GMkE1NTRDRjZEOThBNEFFRTdCQjM5OTkzMkI0NjNCNzJGM0Y0QjQ1LmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0YyQTU1NENGNkQ5OEE0QUVFN0JCMzk5OTMy QjQ2M0I3MkYzRjRCNDUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElOQVRFTC8wL0YyQTU1NENG NkQ5OEE0QUVFN0JCMzk5OTMyQjQ2M0I3MkYzRjRCNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCtNMF d8QrNV9BGcUaDSDNkNq+/IdlTzHNbvb3ZOHDInI3sCuHsaMBrdLFqSuYxv2NLPgm H2h75ecTVo1b0ZRI7stLAQctEme6B9NFQKF4i6/bHSVIY5wv9QZzRHdFegUp+zIx XUDrL9QDyQ0i1uI6AZESulbEpfy4+N1xGILSal5eMaOnxdT5SzhR/VnV3cr/mBGm b2faEb5mm3/OgOesKRpfztgdmUU1QJQEjtVtdEcUN2VVNx4KRGKfsQazOSGxwa+A ooIm7f2z6PYODp9UwPHkF0BKm/wy5ctqszxtUv7wVNMocjmmyIbOcFf1Rb5A5VFb KoKQ4S34CZ92ydSd -----END CERTIFICATE-----Generated at Thu Sep 24 19:44:17 2026 by rpki-client