Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
File:                     F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft (raw, json)
Hash identifier:          IFxp5h7JCjjtR+aXUkXgo73Woml11toDlyXQ7xJv58s=
Subject key identifier:   16:D9:D7:92:01:37:0D:AF:F2:83:07:45:BB:A2:FD:83:18:0B:B9:0D
Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
Certificate issuer:       /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Certificate serial:       6690C5F86AA2B91526012133855BF439543989E1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
Manifest number:          08
Signing time:             Mon 11 May 2026 17:36:40 +0000
Manifest this update:     Mon 11 May 2026 17:31:40 +0000
Manifest next update:     Tue 12 May 2026 19:02:40 +0000
Files and hashes:         1: 3130332e3138332e37382e302f32342d3234203d3e203338303437.roa (hash: DeoItfam0DiP7V+IpPTGWpm2o5vfasSAOwVrx+6kDhk=)
                          2: 323430303a363161303a613030313a3a2f34382d3438203d3e203338303437.roa (hash: ClMyhImwoKQTPL6vpGbqnZIvxYBZtQoFI5NkM75vtlc=)
                          3: 3130332e3138332e37382e302f32332d3234203d3e203338303437.roa (hash: VCJh65xNZyWuR8N+DUeGOPmj5BTIWqqkZ0yjsvuy1Ds=)
                          4: 323430303a363161303a613035343a3a2f34382d3438203d3e203338303437.roa (hash: CqFIMI+phEk/TJh0hQHIrRWiqwd9Tib9RbiLAwUoHcI=)
                          5: 323430303a363161303a3a2f33322d3438203d3e203338303437.roa (hash: J5FZ9S8B0pYlsVGJstyO6n1c/aCGZycW6XgKo4yhN08=)
                          6: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl (hash: 0xrF2GDjie5tjpjJBXZHclv9WqG7k6pkhD31X09fTb8=)
                          7: 323430303a363161303a613035353a3a2f34382d3438203d3e203338303437.roa (hash: riDRlwpNIoMR7hMkqTfgjfQkV7fOImY2Sij1WLjWE7w=)
                          8: 3130332e3138332e37392e302f32342d3234203d3e203338303437.roa (hash: LKb5JTrIhhb/+pCF3MiMwmxDGcflx3R3PPt1vbEW8Is=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:90:c5:f8:6a:a2:b9:15:26:01:21:33:85:5b:f4:39:54:39:89:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
        Validity
            Not Before: May 11 17:31:40 2026 GMT
            Not After : May 12 19:02:40 2026 GMT
        Subject: CN=16D9D79201370DAFF2830745BBA2FD83180BB90D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:dc:1f:99:13:6e:71:c0:90:2a:3d:b6:2e:ab:
                    c1:d9:33:70:f3:1e:de:07:79:5f:79:2f:0f:e2:f7:
                    cb:6d:59:24:7d:eb:fa:03:4a:a6:3d:87:e4:d3:7e:
                    87:5b:c3:79:db:80:99:4a:9b:d5:1c:e4:00:6c:2d:
                    ad:8e:50:75:a4:84:de:6e:30:ad:3d:0a:c6:49:f6:
                    5b:60:22:97:ef:20:30:7b:86:2a:8c:a4:b3:88:49:
                    56:a8:43:37:a1:b7:63:eb:e4:bd:c7:62:b2:df:03:
                    45:3e:39:8c:96:24:a4:61:a2:63:95:a9:60:99:b0:
                    3b:ca:87:f8:53:54:50:13:59:ce:e2:2b:38:0c:28:
                    4f:60:4a:53:19:9f:27:a9:4c:19:16:3c:be:a0:3a:
                    1a:1f:04:75:03:1a:8b:92:8f:e2:71:ab:86:30:de:
                    7b:6b:3d:f2:e9:92:e7:55:be:29:52:f6:93:0d:67:
                    69:55:b2:f6:75:8d:b5:a9:7d:16:e2:bc:3d:a0:2a:
                    b9:f4:ca:b4:5b:d9:41:bc:7f:33:cf:ac:70:98:8c:
                    a1:fb:54:04:61:9b:9d:d6:87:bf:0e:4c:d6:71:75:
                    78:00:8f:3c:8a:c4:14:60:4b:c2:b4:c1:ba:a1:d6:
                    26:38:a1:e8:9c:43:e1:f3:6f:c1:7b:0e:53:5f:85:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D9:D7:92:01:37:0D:AF:F2:83:07:45:BB:A2:FD:83:18:0B:B9:0D
            X509v3 Authority Key Identifier:
                keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:76:58:e4:a4:69:5d:b3:81:ab:8e:cf:03:51:b4:e2:f6:8e:
         45:d0:9d:91:d0:52:dd:1c:37:00:a2:db:70:92:f7:eb:24:62:
         78:53:23:1d:6c:68:ca:a9:da:b3:de:c1:b8:84:9e:74:87:97:
         39:5d:3a:9c:b4:0f:5c:17:f1:3b:df:5c:0f:c6:cd:c5:23:c3:
         82:7a:54:eb:8e:91:23:be:10:c7:c6:33:62:84:1b:0b:d0:a8:
         2b:9b:b5:31:9d:76:b1:b8:c5:08:5e:cc:19:ed:0b:70:25:b6:
         5a:65:5c:50:f9:a0:75:d4:f0:95:cb:e3:8f:ef:1d:9a:87:8c:
         43:62:ca:97:84:72:ef:dc:6d:4c:f0:45:9d:39:62:0b:e9:95:
         a4:19:ca:f7:1a:c7:82:22:7c:47:49:20:d0:ac:4a:f3:e6:e1:
         4d:96:b9:c9:f7:f1:64:3c:2a:cb:aa:ff:88:63:81:b6:36:e4:
         77:12:8b:0a:0b:b5:de:c7:bc:75:68:ae:eb:fd:01:0d:45:5c:
         04:3c:db:a2:22:a5:78:a3:28:89:9a:36:b1:e7:e4:b7:bd:eb:
         db:e2:f0:a7:08:be:aa:d6:43:39:16:48:42:83:0e:3a:e2:f1:
         80:bb:f8:31:97:1b:d0:c8:44:78:26:8c:a4:d7:90:e7:ef:10:
         f7:e0:a2:12
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUZpDF+GqiuRUmASEzhVv0OVQ5ieEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJBNTU0Q0Y2RDk4QTRBRUU3QkIzOTk5MzJCNDYzQjcy
RjNGNEI0NTAeFw0yNjA1MTExNzMxNDBaFw0yNjA1MTIxOTAyNDBaMDMxMTAvBgNV
BAMTKDE2RDlENzkyMDEzNzBEQUZGMjgzMDc0NUJCQTJGRDgzMTgwQkI5MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg3B+ZE25xwJAqPbYuq8HZM3Dz
Ht4HeV95Lw/i98ttWSR96/oDSqY9h+TTfodbw3nbgJlKm9Uc5ABsLa2OUHWkhN5u
MK09CsZJ9ltgIpfvIDB7hiqMpLOISVaoQzeht2Pr5L3HYrLfA0U+OYyWJKRhomOV
qWCZsDvKh/hTVFATWc7iKzgMKE9gSlMZnyepTBkWPL6gOhofBHUDGouSj+Jxq4Yw
3ntrPfLpkudVvilS9pMNZ2lVsvZ1jbWpfRbivD2gKrn0yrRb2UG8fzPPrHCYjKH7
VARhm53Wh78OTNZxdXgAjzyKxBRgS8K0wbqh1iY4oeicQ+Hzb8F7DlNfhdE3AgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUFtnXkgE3Da/ygwdFu6L9gxgLuQ0wHwYDVR0j
BBgwFoAU8qVUz22YpK7nuzmZMrRjty8/S0UwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud
HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQ0hJTkFU
RUwvMC9GMkE1NTRDRjZEOThBNEFFRTdCQjM5OTkzMkI0NjNCNzJGM0Y0QjQ1LmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3
bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0YyQTU1NENGNkQ5OEE0QUVFN0JCMzk5OTMy
QjQ2M0I3MkYzRjRCNDUuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU
cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9DSElOQVRFTC8wL0YyQTU1NENG
NkQ5OEE0QUVFN0JCMzk5OTMyQjQ2M0I3MkYzRjRCNDUubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgdljk
pGlds4Grjs8DUbTi9o5F0J2R0FLdHDcAottwkvfrJGJ4UyMdbGjKqdqz3sG4hJ50
h5c5XTqctA9cF/E731wPxs3FI8OCelTrjpEjvhDHxjNihBsL0Kgrm7UxnXaxuMUI
XswZ7QtwJbZaZVxQ+aB11PCVy+OP7x2ah4xDYsqXhHLv3G1M8EWdOWIL6ZWkGcr3
GseCInxHSSDQrErz5uFNlrnJ9/FkPCrLqv+IY4G2NuR3EosKC7Xex7x1aK7r/QEN
RVwEPNuiIqV4oyiJmjax5+S3vevb4vCnCL6q1kM5FkhCgw464vGAu/gxlxvQyER4
Joyk15Dn7xD34KIS
-----END CERTIFICATE-----