$ rpki-client -vvf rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft File: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft (raw, json) Hash identifier: Y3TlAKXzYH9C/h24e5OYlXCk+/S0Em8QmTYkuwP9Mac= Subject key identifier: 85:8F:16:0C:2B:F5:14:B7:A1:01:BB:E4:A1:78:B3:96:FA:85:44:C4 Authority key identifier: F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 Certificate issuer: /CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Certificate serial: 4C844DA4C9285CF9644C4978238B27EEE996DDC9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft Manifest number: 30 Signing time: Fri 12 Jun 2026 21:33:10 +0000 Manifest this update: Fri 12 Jun 2026 21:28:10 +0000 Manifest next update: Sat 13 Jun 2026 22:41:10 +0000 Files and hashes: 1: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl (hash: +F9fbidADn+ogo9SfyJrbAg9y+PChZy4tFLZ9o143xM=) 2: 323430303a663532303a3a2f33322d3332203d3e2038303735.roa (hash: bcCWlKGdFRzkYWjpAxFiDRBiMFMYz6fz3Mvlqay5uQg=) 3: 3130332e3133312e3134382e302f32342d3234203d3e2038303735.roa (hash: ngU9yGwnv4zDeMAuwTOcnfYW07w9n6079RMDCBEl224=) 4: 3130332e3133312e3134392e302f32342d3234203d3e2038303735.roa (hash: ZWTKysskCJyx9iPE3iawI12a+vW95iu4X9ux8OHhK+s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 22:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:84:4d:a4:c9:28:5c:f9:64:4c:49:78:23:8b:27:ee:e9:96:dd:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Validity Not Before: Jun 12 21:28:10 2026 GMT Not After : Jun 13 22:41:10 2026 GMT Subject: CN=858F160C2BF514B7A101BBE4A178B396FA8544C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5a:23:d6:43:5a:7c:60:e5:4e:a3:96:7e:8a: c8:6f:10:b8:f1:58:65:cf:f1:25:50:14:ce:d9:3f: ce:ca:76:00:b9:c1:5e:0e:12:b4:dc:88:3a:9c:23: b6:e4:a1:5b:12:b8:a2:02:18:90:a7:4b:cf:0b:5e: 6a:d6:ed:14:89:a2:4b:cc:5f:fb:7a:55:3d:0b:c4: a9:5f:06:5e:e7:e7:91:a0:0a:bf:00:b2:47:0d:de: 11:40:ab:73:c1:6f:a4:4c:07:83:8a:b0:4d:59:e2: 8c:fd:03:ff:03:08:42:d4:71:8e:3a:a9:1e:8f:1e: 84:98:7e:4a:86:71:59:20:45:7b:08:a9:ab:18:5a: fc:b0:3e:44:ba:e0:6d:ae:8e:40:12:44:fb:29:23: ff:0a:1f:16:f9:a6:94:c7:f9:41:10:af:0a:18:c9: 0a:0d:45:13:2c:98:1e:52:75:24:1f:3f:b9:ed:0f: d3:36:b1:0e:8e:d3:33:36:f5:34:17:2e:3a:1e:44: 6f:b8:87:14:68:55:fb:e7:68:b1:eb:67:14:23:b4: fe:86:cf:31:28:e7:64:d5:96:45:b6:46:ff:36:c7: 55:86:4f:56:e0:93:f9:77:32:42:fa:70:73:36:da: 41:c9:63:a4:7a:6f:c3:24:34:9d:d7:b2:38:2d:a2: 24:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:8F:16:0C:2B:F5:14:B7:A1:01:BB:E4:A1:78:B3:96:FA:85:44:C4 X509v3 Authority Key Identifier: keyid:F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e4:8b:25:d2:59:d0:34:50:f8:6d:f1:44:05:d9:28:c2:a8: 6b:41:ea:1a:d5:a9:2b:ab:cd:b5:d4:e9:3e:49:35:ab:96:b0: 62:d3:af:49:70:8d:d8:3b:e1:44:7d:d7:e2:3e:68:29:4e:8f: 5b:10:d0:74:fd:42:44:bf:9a:b7:6a:fd:13:2d:04:72:1c:b2: 17:be:56:70:d8:04:6f:75:86:27:9e:c1:b4:91:51:77:dd:ef: e0:1c:ee:65:45:5a:1f:d6:f0:7c:7a:82:73:75:59:32:f2:07: 98:06:62:ee:9d:d8:63:1d:9b:38:3e:09:27:bd:a9:85:ec:19: 02:d1:8b:67:b1:d1:d8:ce:3c:bb:a1:24:ab:da:79:07:36:1e: 65:91:a5:90:b7:7f:97:33:d2:18:8e:e9:57:2d:ef:07:8c:b3: 36:d1:46:8b:13:1c:80:57:01:3c:43:8f:fe:b2:cd:4b:34:02: c8:b0:73:a1:82:7d:b7:15:2a:10:bf:94:2e:23:30:b6:5d:03: 01:0a:79:57:c8:2c:32:12:bc:22:98:9f:b7:4b:2a:1c:a4:1c: f0:02:b8:a7:96:58:ce:ea:55:34:6c:70:5d:cf:0d:e9:22:40: dd:45:d6:29:b8:71:d7:d1:60:98:c5:d0:33:a3:73:13:1b:12: 79:f5:f2:60 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUTIRNpMkoXPlkTEl4I4sn7umW3ckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3 NUFEQTFBODAeFw0yNjA2MTIyMTI4MTBaFw0yNjA2MTMyMjQxMTBaMDMxMTAvBgNV BAMTKDg1OEYxNjBDMkJGNTE0QjdBMTAxQkJFNEExNzhCMzk2RkE4NTQ0QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVWiPWQ1p8YOVOo5Z+ishvELjx WGXP8SVQFM7ZP87KdgC5wV4OErTciDqcI7bkoVsSuKICGJCnS88LXmrW7RSJokvM X/t6VT0LxKlfBl7n55GgCr8AskcN3hFAq3PBb6RMB4OKsE1Z4oz9A/8DCELUcY46 qR6PHoSYfkqGcVkgRXsIqasYWvywPkS64G2ujkASRPspI/8KHxb5ppTH+UEQrwoY yQoNRRMsmB5SdSQfP7ntD9M2sQ6O0zM29TQXLjoeRG+4hxRoVfvnaLHrZxQjtP6G zzEo52TVlkW2Rv82x1WGT1bgk/l3MkL6cHM22kHJY6R6b8MkNJ3XsjgtoiSHAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUhY8WDCv1FLehAbvkoXizlvqFRMQwHwYDVR0j BBgwFoAU8fkdA8+cBdXVsae1gjRncnWtoagwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVH UkVFLzAvRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GMUY5MUQwM0NGOUMwNUQ1RDVCMUE3QjU4 MjM0Njc3Mjc1QURBMUE4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVHUkVFLzAvRjFGOTFE MDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADjk iyXSWdA0UPht8UQF2SjCqGtB6hrVqSurzbXU6T5JNauWsGLTr0lwjdg74UR91+I+ aClOj1sQ0HT9QkS/mrdq/RMtBHIcshe+VnDYBG91hieewbSRUXfd7+Ac7mVFWh/W 8Hx6gnN1WTLyB5gGYu6d2GMdmzg+CSe9qYXsGQLRi2ex0djOPLuhJKvaeQc2HmWR pZC3f5cz0hiO6Vct7weMszbRRosTHIBXATxDj/6yzUs0Asiwc6GCfbcVKhC/lC4j MLZdAwEKeVfILDISvCKYn7dLKhykHPACuKeWWM7qVTRscF3PDekiQN1F1im4cdfR YJjF0DOjcxMbEnn18mA= -----END CERTIFICATE-----Generated at Sat Jun 13 13:24:11 2026 by rpki-client