$ rpki-client -vvvf rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft File: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft (raw, json) Hash identifier: RZYU9EBmYoJg68ZYAXJdQHGxHYP9QauAjLvASVUKrig= Subject key identifier: B1:FA:33:10:DC:71:93:DD:64:B9:B1:FB:5D:25:AC:C7:AB:EF:09:C0 Authority key identifier: F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 Certificate issuer: /CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Certificate serial: 59364BF3372EEC3A95AFA5E8435EF8521204BEA3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft Manifest number: B6 Signing time: Mon 21 Sep 2026 20:42:09 +0000 Manifest this update: Mon 21 Sep 2026 20:37:09 +0000 Manifest next update: Tue 22 Sep 2026 21:00:09 +0000 Files and hashes: 1: 3130332e3133312e3134392e302f32342d3234203d3e2038303735.roa (hash: ZWTKysskCJyx9iPE3iawI12a+vW95iu4X9ux8OHhK+s=) 2: 3130332e3133312e3134382e302f32342d3234203d3e2038303735.roa (hash: ngU9yGwnv4zDeMAuwTOcnfYW07w9n6079RMDCBEl224=) 3: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl (hash: imDxVIxN2ntLyRXs1luYkSRDbsQl0Nsi3OViYbWWsX4=) 4: 323430303a663532303a3a2f33322d3332203d3e2038303735.roa (hash: bcCWlKGdFRzkYWjpAxFiDRBiMFMYz6fz3Mvlqay5uQg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:36:4b:f3:37:2e:ec:3a:95:af:a5:e8:43:5e:f8:52:12:04:be:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Validity Not Before: Sep 21 20:37:09 2026 GMT Not After : Sep 22 21:00:09 2026 GMT Subject: CN=B1FA3310DC7193DD64B9B1FB5D25ACC7ABEF09C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:32:6a:4a:99:2b:c1:93:ce:37:77:f7:9b: 6a:fd:4c:c1:ca:d8:82:77:25:6b:ee:c2:14:58:eb: 9f:c7:2e:1b:6d:30:9e:00:d4:a9:d8:2f:f8:5f:07: 88:b8:75:3e:a8:9a:83:e5:fc:34:97:2f:53:95:0d: e1:5a:aa:19:38:5a:a9:fb:bd:ac:94:4b:e9:ee:75: 5d:e3:e7:89:d2:6a:84:25:16:86:54:9b:b6:d7:95: 93:1d:81:92:25:4c:b3:74:89:07:cb:82:08:80:64: ab:b2:9a:38:2d:2a:d1:a2:47:c8:96:f0:e1:bb:8f: e9:ce:0d:50:04:20:92:36:37:bd:f8:c2:a5:a6:42: 92:bd:5a:f4:b2:4a:8a:fc:f3:bc:8a:f2:6e:f8:c1: 8c:ce:1c:cf:31:a7:a9:9a:da:f0:c6:b3:c8:ae:13: 11:76:1b:15:38:76:a1:c3:c4:26:de:40:f7:c4:8c: 02:77:bf:33:35:e4:5b:46:6e:2c:a5:16:d1:36:a5: 56:41:38:09:63:9a:97:9a:75:e3:ce:39:74:cf:49: d5:1f:5b:24:61:43:38:80:e3:c9:99:42:9f:da:8c: 5b:8f:fe:a6:3b:d6:57:74:5b:62:a1:66:2f:01:a2: 3d:cf:a9:02:23:4a:e6:87:dc:36:65:29:4b:09:84: 03:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FA:33:10:DC:71:93:DD:64:B9:B1:FB:5D:25:AC:C7:AB:EF:09:C0 X509v3 Authority Key Identifier: keyid:F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ad:df:5b:dc:0d:52:87:d7:d7:74:32:78:30:eb:f6:cf:54: 4e:4e:11:10:f7:08:33:e8:74:e9:36:d5:62:41:df:78:0b:0a: 5c:5a:6f:8a:b2:5f:d1:9f:17:6f:37:24:da:06:ca:af:03:63: 5f:25:24:f6:b4:31:90:b1:52:75:a0:ba:e1:b7:c7:fb:3b:1d: 12:24:94:09:3e:fe:9e:34:b1:0c:11:b0:63:2b:86:eb:01:89: a5:f6:2e:6c:db:c8:c5:52:e1:46:35:cc:fc:5a:06:c3:33:0c: 09:f2:71:1e:fe:93:78:98:8a:06:16:7d:c8:03:df:c2:8c:56: c2:fb:0f:09:9c:8e:73:c2:a9:be:5e:49:6a:a6:ce:f1:c6:04: f7:ef:06:f8:0f:8e:13:e3:0d:98:42:06:5b:48:9d:80:0f:2b: a0:78:af:36:9c:97:35:d6:95:e6:b1:d5:96:6b:5b:20:5f:40: da:4e:65:5d:32:ad:16:bd:82:e5:e0:fa:89:cd:8c:80:df:5f: a4:af:ec:b9:67:da:08:f6:fa:cb:d7:e7:a6:2e:bf:77:fc:a9: 3f:73:d5:63:b2:30:51:d5:8b:9d:8c:05:74:e1:40:fe:d6:6e: a1:ea:10:45:89:be:fa:b6:66:d8:3d:d8:80:89:1a:0e:30:cb: ee:a4:53:b8 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUWTZL8zcu7DqVr6XoQ174UhIEvqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3 NUFEQTFBODAeFw0yNjA5MjEyMDM3MDlaFw0yNjA5MjIyMTAwMDlaMDMxMTAvBgNV BAMTKEIxRkEzMzEwREM3MTkzREQ2NEI5QjFGQjVEMjVBQ0M3QUJFRjA5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vTJqSpkrwZPON3f3m2r9TMHK 2IJ3JWvuwhRY65/HLhttMJ4A1KnYL/hfB4i4dT6omoPl/DSXL1OVDeFaqhk4Wqn7 vayUS+nudV3j54nSaoQlFoZUm7bXlZMdgZIlTLN0iQfLggiAZKuymjgtKtGiR8iW 8OG7j+nODVAEIJI2N734wqWmQpK9WvSySor887yK8m74wYzOHM8xp6ma2vDGs8iu ExF2GxU4dqHDxCbeQPfEjAJ3vzM15FtGbiylFtE2pVZBOAljmpeadePOOXTPSdUf WyRhQziA48mZQp/ajFuP/qY71ld0W2KhZi8Boj3PqQIjSuaH3DZlKUsJhAOrAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUsfozENxxk91kubH7XSWsx6vvCcAwHwYDVR0j BBgwFoAU8fkdA8+cBdXVsae1gjRncnWtoagwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVH UkVFLzAvRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GMUY5MUQwM0NGOUMwNUQ1RDVCMUE3QjU4 MjM0Njc3Mjc1QURBMUE4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVHUkVFLzAvRjFGOTFE MDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABSt 31vcDVKH19d0Mngw6/bPVE5OERD3CDPodOk21WJB33gLClxab4qyX9GfF283JNoG yq8DY18lJPa0MZCxUnWguuG3x/s7HRIklAk+/p40sQwRsGMrhusBiaX2LmzbyMVS 4UY1zPxaBsMzDAnycR7+k3iYigYWfcgD38KMVsL7DwmcjnPCqb5eSWqmzvHGBPfv BvgPjhPjDZhCBltInYAPK6B4rzaclzXWleax1ZZrWyBfQNpOZV0yrRa9guXg+onN jIDfX6Sv7Lln2gj2+svX56Yuv3f8qT9z1WOyMFHVi52MBXThQP7WbqHqEEWJvvq2 Ztg92ICJGg4wy+6kU7g= -----END CERTIFICATE-----Generated at Tue Sep 22 13:39:41 2026 by rpki-client