
$ rpki-client -vvf rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
File: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft (raw, json)
Hash identifier: AZrmewc+7ELuPrmEcNAczkRVtYFog2pnxI8wU2jt27I=
Subject key identifier: C6:CD:98:9E:D5:3E:03:E3:62:1B:22:B9:6F:70:0A:E5:21:B1:C1:7B
Authority key identifier: F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
Certificate issuer: /CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Certificate serial: 451FE2DBAA337827BCB28510BF5DDBB2778F9F11
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
Manifest number: 69
Signing time: Thu 23 Jul 2026 17:16:14 +0000
Manifest this update: Thu 23 Jul 2026 17:11:14 +0000
Manifest next update: Fri 24 Jul 2026 17:20:14 +0000
Files and hashes: 1: 323430303a363161303a613035353a3a2f34382d3438203d3e203338303437.roa (hash: riDRlwpNIoMR7hMkqTfgjfQkV7fOImY2Sij1WLjWE7w=)
2: 3130332e3138332e37382e302f32342d3234203d3e203338303437.roa (hash: DeoItfam0DiP7V+IpPTGWpm2o5vfasSAOwVrx+6kDhk=)
3: 323430303a363161303a613030313a3a2f34382d3438203d3e203338303437.roa (hash: ClMyhImwoKQTPL6vpGbqnZIvxYBZtQoFI5NkM75vtlc=)
4: 3130332e3138332e37382e302f32332d3234203d3e203338303437.roa (hash: VCJh65xNZyWuR8N+DUeGOPmj5BTIWqqkZ0yjsvuy1Ds=)
5: F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl (hash: RYhhCzhViv5yUKPXExnD2e6mqjAMC5SA0nUMFbGYefI=)
6: 323430303a363161303a3a2f33322d3438203d3e203338303437.roa (hash: J5FZ9S8B0pYlsVGJstyO6n1c/aCGZycW6XgKo4yhN08=)
7: 323430303a363161303a613035343a3a2f34382d3438203d3e203338303437.roa (hash: CqFIMI+phEk/TJh0hQHIrRWiqwd9Tib9RbiLAwUoHcI=)
8: 3130332e3138332e37392e302f32342d3234203d3e203338303437.roa (hash: LKb5JTrIhhb/+pCF3MiMwmxDGcflx3R3PPt1vbEW8Is=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:20:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:1f:e2:db:aa:33:78:27:bc:b2:85:10:bf:5d:db:b2:77:8f:9f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F2A554CF6D98A4AEE7BB399932B463B72F3F4B45
Validity
Not Before: Jul 23 17:11:14 2026 GMT
Not After : Jul 24 17:20:14 2026 GMT
Subject: CN=C6CD989ED53E03E3621B22B96F700AE521B1C17B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fa:c8:20:90:f4:b1:57:cf:0e:cd:56:48:03:
d7:0e:e1:10:a4:c9:e3:89:13:f2:09:76:c8:e0:11:
73:8f:f0:5b:dd:85:64:40:82:a8:ab:57:f6:6f:87:
61:6f:a0:37:57:03:60:75:85:4e:2f:af:85:a8:f2:
8f:97:f7:c1:49:72:5c:25:6f:ba:55:f2:38:55:bb:
bc:f5:44:1f:9e:1c:40:5f:e5:c3:7f:1a:1f:5c:3d:
2b:90:e4:ef:e9:93:d0:c8:7e:3e:e1:ef:d8:51:91:
72:e8:0c:4f:68:cf:92:59:6e:48:d5:8e:bc:ff:2e:
98:29:d3:a7:82:c1:73:2a:fa:8c:25:48:7b:2d:d8:
4e:d9:c5:69:39:aa:8a:8b:64:8e:58:32:31:85:b2:
cb:94:fd:26:fa:28:ed:84:07:2a:b6:0c:9f:c7:83:
af:5e:3d:f0:0d:f8:8e:80:eb:4b:43:f0:79:71:e8:
cd:80:70:32:92:3f:e7:3c:59:5a:44:ed:c7:76:ff:
ad:b9:57:0d:e0:cc:10:88:be:64:db:b7:7f:a6:75:
a5:f0:fa:b8:fe:28:48:80:df:b5:2c:cd:fc:43:25:
7f:d7:7c:4f:c5:db:c0:b6:c9:c2:85:97:9c:97:cf:
2d:96:c3:21:fb:0d:1d:79:32:76:df:70:62:19:64:
1e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CD:98:9E:D5:3E:03:E3:62:1B:22:B9:6F:70:0A:E5:21:B1:C1:7B
X509v3 Authority Key Identifier:
keyid:F2:A5:54:CF:6D:98:A4:AE:E7:BB:39:99:32:B4:63:B7:2F:3F:4B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/CHINATEL/0/F2A554CF6D98A4AEE7BB399932B463B72F3F4B45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c8:e0:42:95:49:c7:16:7f:6f:44:43:94:12:a2:88:9b:77:
30:4d:c3:54:74:ce:b2:1d:1f:e9:d6:6a:4d:c1:ab:cb:66:e6:
92:bb:8e:ae:b7:27:ff:a1:b9:ad:bb:4d:e5:dd:ba:7c:23:5d:
b0:ad:e3:8f:58:4e:ad:a4:43:38:09:71:3f:b1:eb:3a:f2:4e:
78:64:95:ab:0f:35:6a:31:46:17:37:5f:99:b9:af:c2:30:89:
5e:c5:8b:1c:7a:af:96:a2:9d:8b:b7:6b:cd:c6:b1:34:26:a9:
4a:97:bb:09:cb:d4:62:08:54:aa:17:39:b4:32:a4:e3:bb:90:
c6:8a:ed:9f:14:0f:18:cf:41:1c:fc:00:21:5f:26:be:5e:ed:
ba:98:24:da:0f:2d:9b:43:f5:c4:e4:a9:b5:1c:df:31:cb:f6:
6c:1a:0b:b9:d6:de:30:84:60:a7:76:7f:c3:a2:1e:92:d3:1b:
b1:e3:2b:25:b0:96:2e:0d:d4:01:3d:d8:b2:b0:e5:29:16:37:
12:ec:f5:f6:aa:f6:9a:8a:f9:4f:d1:e1:32:ec:0a:0c:eb:e9:
17:59:7a:1e:5d:01:26:c7:2e:a0:03:7d:65:64:83:eb:8e:4a:
cd:ad:2d:1e:fe:3d:9c:49:3e:f0:5d:3f:be:74:ee:03:92:e2:
86:f0:9a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:00 2026 by rpki-client