$ rpki-client -vvf rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft File: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft (raw, json) Hash identifier: /1c92jRaXckppIPKgvkNFMoKVNiCYL/WBzt8T6pRA9M= Subject key identifier: AF:3B:FE:E7:9B:56:49:80:11:68:E5:DE:1D:89:C0:38:81:57:27:E7 Authority key identifier: F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 Certificate issuer: /CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Certificate serial: 68043C128C11B06E7F6FC1095BCF8119A3B60F83 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft Manifest number: 6C Signing time: Tue 28 Jul 2026 08:23:00 +0000 Manifest this update: Tue 28 Jul 2026 08:18:00 +0000 Manifest next update: Wed 29 Jul 2026 11:10:00 +0000 Files and hashes: 1: 3130332e3133312e3134382e302f32342d3234203d3e2038303735.roa (hash: ngU9yGwnv4zDeMAuwTOcnfYW07w9n6079RMDCBEl224=) 2: 3130332e3133312e3134392e302f32342d3234203d3e2038303735.roa (hash: ZWTKysskCJyx9iPE3iawI12a+vW95iu4X9ux8OHhK+s=) 3: 323430303a663532303a3a2f33322d3332203d3e2038303735.roa (hash: bcCWlKGdFRzkYWjpAxFiDRBiMFMYz6fz3Mvlqay5uQg=) 4: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl (hash: E6Sc7LZIcwWjMzR4Wdp4D/TGwNc3ciV7vCbJnIYzjuU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:04:3c:12:8c:11:b0:6e:7f:6f:c1:09:5b:cf:81:19:a3:b6:0f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Validity Not Before: Jul 28 08:18:00 2026 GMT Not After : Jul 29 11:10:00 2026 GMT Subject: CN=AF3BFEE79B5649801168E5DE1D89C038815727E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:31:87:0f:83:9b:27:5b:2d:1a:58:85:07: e6:4e:75:bb:cc:20:fc:14:96:37:b0:54:ee:5b:b4: db:92:e7:a3:53:cc:ce:d0:f8:01:93:57:0c:18:d6: e9:aa:96:cb:f2:f7:f3:7f:d3:4c:1c:27:ac:d9:b5: 87:b3:f6:e4:ff:c5:c5:50:1d:c5:6c:33:81:53:a8: 4c:b5:ab:12:84:73:79:e0:a4:b0:1e:f5:80:e4:c1: 8d:48:e0:d7:2a:46:c9:07:e3:0a:f1:92:f3:4f:0a: 3a:f4:a3:57:ef:ee:90:2c:e4:f3:20:dc:18:1f:b3: a9:2a:c0:26:bd:cc:6d:bd:07:22:41:34:d3:fe:b6: 40:e1:39:bb:72:dd:6b:ee:bf:cc:ed:6f:0e:74:7f: 2a:bf:cd:ec:39:6b:5d:ca:1a:3a:49:b8:8d:4c:41: f0:e9:af:97:5b:82:46:fe:ab:06:d9:43:bb:f1:84: d7:60:c4:40:99:46:71:90:dd:29:34:02:26:0f:7e: 59:67:3d:32:49:58:d1:16:a1:51:e6:e2:6c:c5:17: c1:b1:50:74:11:da:74:3f:f6:22:22:b6:9b:78:da: 2f:76:f2:4e:40:7e:69:5b:4e:dc:30:a7:0a:da:eb: ea:11:a7:b7:97:65:44:f1:6e:26:b3:12:9f:84:33: ae:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3B:FE:E7:9B:56:49:80:11:68:E5:DE:1D:89:C0:38:81:57:27:E7 X509v3 Authority Key Identifier: keyid:F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d0:91:ab:a2:b3:a9:16:e0:44:e1:b4:6e:d1:43:1d:79:75: db:20:4d:4d:a7:5f:5d:96:b1:ce:3f:24:90:cd:73:18:07:63: bb:bc:46:04:4c:af:5f:64:cf:bd:f2:10:d8:96:17:05:14:4a: c0:e4:24:5f:41:84:20:3e:1e:7b:ed:27:df:8b:23:df:ba:4c: bd:10:d7:d8:93:b8:eb:bb:44:4a:f7:e0:b9:32:2c:c0:c3:16: 60:a7:78:d0:ef:33:5c:6b:55:34:cd:ea:15:d1:bf:96:01:28: c4:e5:03:b6:ff:39:b9:b4:92:87:d4:35:9e:99:55:a6:05:d8: 95:26:c8:1b:0c:d6:5a:97:af:d9:8b:1c:d8:b7:ef:c8:7e:f5: b5:82:2a:e0:f1:cf:27:e8:28:b2:54:97:f5:ca:e5:a2:7a:99: 3c:58:ff:d8:cd:29:85:e8:af:b3:7f:5a:d7:17:61:ca:2f:44: 21:ad:ca:73:51:ec:63:85:37:15:83:0a:79:27:5b:97:f2:5a: 7e:82:36:dc:09:69:f4:c5:bd:78:22:e4:44:06:0f:60:c2:8e: 32:f5:8b:eb:b2:2a:b8:26:79:4f:8d:5a:f1:53:c8:40:e2:02: 44:ed:5c:c3:99:60:a9:e9:66:9f:f7:f2:70:2b:d3:db:3f:65: a1:ea:7d:ff -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUaAQ8EowRsG5/b8EJW8+BGaO2D4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3 NUFEQTFBODAeFw0yNjA3MjgwODE4MDBaFw0yNjA3MjkxMTEwMDBaMDMxMTAvBgNV BAMTKEFGM0JGRUU3OUI1NjQ5ODAxMTY4RTVERTFEODlDMDM4ODE1NzI3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gTGHD4ObJ1stGliFB+ZOdbvM IPwUljewVO5btNuS56NTzM7Q+AGTVwwY1umqlsvy9/N/00wcJ6zZtYez9uT/xcVQ HcVsM4FTqEy1qxKEc3ngpLAe9YDkwY1I4NcqRskH4wrxkvNPCjr0o1fv7pAs5PMg 3Bgfs6kqwCa9zG29ByJBNNP+tkDhObty3Wvuv8ztbw50fyq/zew5a13KGjpJuI1M QfDpr5dbgkb+qwbZQ7vxhNdgxECZRnGQ3Sk0AiYPfllnPTJJWNEWoVHm4mzFF8Gx UHQR2nQ/9iIitpt42i928k5AfmlbTtwwpwra6+oRp7eXZUTxbiazEp+EM64nAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUrzv+55tWSYARaOXeHYnAOIFXJ+cwHwYDVR0j BBgwFoAU8fkdA8+cBdXVsae1gjRncnWtoagwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVH UkVFLzAvRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GMUY5MUQwM0NGOUMwNUQ1RDVCMUE3QjU4 MjM0Njc3Mjc1QURBMUE4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVHUkVFLzAvRjFGOTFE MDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAXQ kauis6kW4EThtG7RQx15ddsgTU2nX12Wsc4/JJDNcxgHY7u8RgRMr19kz73yENiW FwUUSsDkJF9BhCA+HnvtJ9+LI9+6TL0Q19iTuOu7REr34LkyLMDDFmCneNDvM1xr VTTN6hXRv5YBKMTlA7b/Obm0kofUNZ6ZVaYF2JUmyBsM1lqXr9mLHNi378h+9bWC KuDxzyfoKLJUl/XK5aJ6mTxY/9jNKYXor7N/WtcXYcovRCGtynNR7GOFNxWDCnkn W5fyWn6CNtwJafTFvXgi5EQGD2DCjjL1i+uyKrgmeU+NWvFTyEDiAkTtXMOZYKnp Zp/38nAr09s/ZaHqff8= -----END CERTIFICATE-----Generated at Tue Jul 28 20:55:20 2026 by rpki-client