$ rpki-client -vvf rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft File: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft (raw, json) Hash identifier: QEueIQtv4cgn3qTYmRQhnti3VsO/hSOJ/jqwNoKhJ9w= Subject key identifier: 9F:07:B3:43:A8:5B:5B:95:45:26:A9:FC:35:72:33:27:B8:64:FF:32 Authority key identifier: F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 Certificate issuer: /CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Certificate serial: 3889CC12A57AF75EE3563CAE12A6F53AC84579D9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft Manifest number: 66 Signing time: Thu 23 Jul 2026 19:36:37 +0000 Manifest this update: Thu 23 Jul 2026 19:31:37 +0000 Manifest next update: Fri 24 Jul 2026 20:50:37 +0000 Files and hashes: 1: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl (hash: MptLVM99EH/PDiNWZP6Wpkng9HlAEpPZGnSCKfzf6bA=) 2: 323430303a663532303a3a2f33322d3332203d3e2038303735.roa (hash: bcCWlKGdFRzkYWjpAxFiDRBiMFMYz6fz3Mvlqay5uQg=) 3: 3130332e3133312e3134382e302f32342d3234203d3e2038303735.roa (hash: ngU9yGwnv4zDeMAuwTOcnfYW07w9n6079RMDCBEl224=) 4: 3130332e3133312e3134392e302f32342d3234203d3e2038303735.roa (hash: ZWTKysskCJyx9iPE3iawI12a+vW95iu4X9ux8OHhK+s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:89:cc:12:a5:7a:f7:5e:e3:56:3c:ae:12:a6:f5:3a:c8:45:79:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Validity Not Before: Jul 23 19:31:37 2026 GMT Not After : Jul 24 20:50:37 2026 GMT Subject: CN=9F07B343A85B5B954526A9FC35723327B864FF32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:64:1c:17:2a:75:dd:5b:81:20:75:22:02:bd: 43:e2:92:f3:48:c1:fd:e2:4a:92:3d:3e:d8:6d:89: 37:5b:a3:a7:3c:27:76:90:fd:49:cb:84:11:96:ac: a3:c1:58:75:46:58:3f:ef:fa:9b:e6:48:36:dd:cd: 1f:12:5b:87:51:fd:e0:c8:34:39:9d:71:4d:f9:1c: a7:71:35:3d:0c:3f:76:56:17:f2:97:b3:14:3e:16: 0f:8b:cd:0c:4c:4b:cf:05:1a:3c:af:0b:c3:4a:6c: 75:a0:68:8e:69:d2:18:54:9d:03:09:9a:2e:5f:cd: de:c5:83:58:bd:ad:43:f9:07:43:1f:bd:c6:e6:22: 50:67:c8:32:98:c2:a7:82:26:96:cd:4a:93:83:4f: 9a:5b:2d:fb:03:78:c6:c4:60:f6:0d:02:b9:de:88: af:51:af:a5:62:37:5b:0d:a1:71:12:24:c1:48:37: 1f:4a:ca:12:85:50:4c:51:bf:b5:74:42:73:0e:0f: c0:7b:8d:c4:db:7d:f4:1e:7a:66:e1:46:a7:be:1a: c7:e7:26:2d:8f:25:2f:76:cd:9d:aa:e6:fa:b1:96: 7b:15:bb:e5:4c:48:59:c9:95:bc:08:eb:1b:26:f9: 16:24:48:a2:d6:34:cb:16:f3:12:6e:ba:e6:40:51: 35:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:07:B3:43:A8:5B:5B:95:45:26:A9:FC:35:72:33:27:B8:64:FF:32 X509v3 Authority Key Identifier: keyid:F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7e:e6:10:ca:7c:30:55:ea:95:2c:f9:fc:c7:98:3e:48:ef: d5:0f:ee:46:89:35:a1:c4:30:b9:08:0e:f0:6b:ae:58:a6:73: 3c:af:5d:22:2b:40:15:d3:a6:76:35:48:32:ef:9e:bb:a0:d4: 1d:11:c3:e2:e9:5c:13:bd:02:c2:c9:3b:1d:f9:d2:fc:a5:c8: c4:37:80:9d:0f:45:f3:f2:da:4b:3e:28:31:ac:ba:42:b1:eb: 3f:6a:ef:a3:04:cc:85:42:85:de:96:94:9b:40:00:68:6d:bf: e0:95:fc:57:6e:ec:37:18:00:a3:86:e6:44:25:29:88:0b:09: 0f:32:5d:b1:17:d0:fb:9d:40:f7:ea:b8:2d:c8:f9:38:69:94: ae:24:f0:d5:58:6a:40:fe:a9:18:35:f8:66:d0:d9:cc:43:0e: 6d:d4:d4:76:1f:9e:46:81:37:36:8d:36:8f:a0:e3:9a:33:c1: c8:0f:8c:83:4e:e9:d6:f8:33:ce:9e:64:16:61:23:97:8c:30: c8:91:dd:e7:8b:ec:06:33:a6:0b:56:07:be:43:06:02:f6:11: 44:85:fb:cf:54:73:76:01:31:8c:31:fe:b0:bd:b7:e8:92:d0: 82:4e:a7:bf:8b:0f:06:82:13:2d:72:dd:a7:7a:eb:55:cd:a8: b1:fc:8b:f3 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUOInMEqV6917jVjyuEqb1OshFedkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3 NUFEQTFBODAeFw0yNjA3MjMxOTMxMzdaFw0yNjA3MjQyMDUwMzdaMDMxMTAvBgNV BAMTKDlGMDdCMzQzQTg1QjVCOTU0NTI2QTlGQzM1NzIzMzI3Qjg2NEZGMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ZBwXKnXdW4EgdSICvUPikvNI wf3iSpI9PthtiTdbo6c8J3aQ/UnLhBGWrKPBWHVGWD/v+pvmSDbdzR8SW4dR/eDI NDmdcU35HKdxNT0MP3ZWF/KXsxQ+Fg+LzQxMS88FGjyvC8NKbHWgaI5p0hhUnQMJ mi5fzd7Fg1i9rUP5B0MfvcbmIlBnyDKYwqeCJpbNSpODT5pbLfsDeMbEYPYNArne iK9Rr6ViN1sNoXESJMFINx9KyhKFUExRv7V0QnMOD8B7jcTbffQeembhRqe+Gsfn Ji2PJS92zZ2q5vqxlnsVu+VMSFnJlbwI6xsm+RYkSKLWNMsW8xJuuuZAUTU5AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUnwezQ6hbW5VFJqn8NXIzJ7hk/zIwHwYDVR0j BBgwFoAU8fkdA8+cBdXVsae1gjRncnWtoagwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVH UkVFLzAvRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GMUY5MUQwM0NGOUMwNUQ1RDVCMUE3QjU4 MjM0Njc3Mjc1QURBMUE4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVHUkVFLzAvRjFGOTFE MDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABF+ 5hDKfDBV6pUs+fzHmD5I79UP7kaJNaHEMLkIDvBrrlimczyvXSIrQBXTpnY1SDLv nrug1B0Rw+LpXBO9AsLJOx350vylyMQ3gJ0PRfPy2ks+KDGsukKx6z9q76MEzIVC hd6WlJtAAGhtv+CV/Fdu7DcYAKOG5kQlKYgLCQ8yXbEX0PudQPfquC3I+ThplK4k 8NVYakD+qRg1+GbQ2cxDDm3U1HYfnkaBNzaNNo+g45ozwcgPjINO6db4M86eZBZh I5eMMMiR3eeL7AYzpgtWB75DBgL2EUSF+89Uc3YBMYwx/rC9t+iS0IJOp7+LDwaC Ey1y3ad661XNqLH8i/M= -----END CERTIFICATE-----Generated at Fri Jul 24 08:21:14 2026 by rpki-client