$ rpki-client -vvvf rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft File: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft (raw, json) Hash identifier: I5Xgmuk59lgpHEps3k5H9Nr1AXH2re90HU+SNy6P5+Q= Subject key identifier: 88:F5:60:F7:96:92:00:B8:F3:29:7E:92:AD:D1:8E:1B:BF:60:89:5F Authority key identifier: F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 Certificate issuer: /CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Certificate serial: 6A566BFBF53F466468DD505DD742FDF837C73393 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft Manifest number: BA Signing time: Thu 24 Sep 2026 17:53:30 +0000 Manifest this update: Thu 24 Sep 2026 17:48:30 +0000 Manifest next update: Fri 25 Sep 2026 19:56:30 +0000 Files and hashes: 1: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl (hash: r3UmkfPUtrkMPtDCD/5pIgMaVKYVGi2kILFkRobk690=) 2: 323430303a663532303a3a2f33322d3332203d3e2038303735.roa (hash: bcCWlKGdFRzkYWjpAxFiDRBiMFMYz6fz3Mvlqay5uQg=) 3: 3130332e3133312e3134382e302f32342d3234203d3e2038303735.roa (hash: ngU9yGwnv4zDeMAuwTOcnfYW07w9n6079RMDCBEl224=) 4: 3130332e3133312e3134392e302f32342d3234203d3e2038303735.roa (hash: ZWTKysskCJyx9iPE3iawI12a+vW95iu4X9ux8OHhK+s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:56:6b:fb:f5:3f:46:64:68:dd:50:5d:d7:42:fd:f8:37:c7:33:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Validity Not Before: Sep 24 17:48:30 2026 GMT Not After : Sep 25 19:56:30 2026 GMT Subject: CN=88F560F7969200B8F3297E92ADD18E1BBF60895F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:99:c9:38:93:86:b0:6b:bd:f6:ad:fa:24: 5c:32:11:6d:17:bd:b5:d2:b3:cd:47:3d:aa:c9:52: 02:56:17:3b:5e:9d:ab:d7:d1:25:7b:a6:55:e2:21: 72:8d:d1:0f:bc:db:e8:53:14:d6:42:54:c9:53:60: b7:be:a9:06:7e:f4:4d:8a:9c:8d:04:df:44:fb:6c: fb:52:07:8d:41:78:28:1a:0d:de:51:d0:b1:31:80: 18:5d:28:18:50:c5:2a:d0:f4:8c:19:74:c9:67:c4: 7d:4a:3d:73:de:dd:d1:52:e5:4a:d7:2c:d5:21:44: 3e:d3:47:f1:f1:ad:38:fc:34:28:e2:d4:4d:1d:15: 70:af:c4:d3:02:0c:61:a0:c4:72:40:a0:47:52:6e: a4:15:77:cf:08:ab:d8:b9:9f:a1:71:68:93:c9:42: 99:fb:51:35:9e:74:10:2f:3a:fe:51:36:70:8d:24: 9b:54:b3:cd:2a:f3:26:a0:10:dc:fd:b3:f7:2d:e6: 37:27:39:2f:8a:ed:b4:41:06:d7:a5:66:d8:4c:cd: c7:21:58:77:88:97:d6:95:00:df:05:e6:dd:58:5c: ff:8b:bc:44:e2:17:12:ea:e6:f1:7d:d0:b8:1d:d7: 4a:34:d1:b4:5c:4d:0e:7f:96:53:3a:4b:45:7c:0e: 23:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F5:60:F7:96:92:00:B8:F3:29:7E:92:AD:D1:8E:1B:BF:60:89:5F X509v3 Authority Key Identifier: keyid:F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:99:6d:70:01:cf:a3:78:31:95:61:93:84:53:3d:9e:50:a9: 45:d6:23:a7:6e:62:ac:6e:9a:3f:f2:72:c1:ca:2a:54:75:c7: f1:c3:75:82:a4:57:51:ac:08:f0:dc:89:ca:80:5a:81:81:a1: 1f:d7:65:de:15:6f:8f:1b:6c:6b:33:58:92:d1:92:1c:52:85: fb:ba:29:02:55:85:73:df:6f:5c:46:2e:ed:8a:72:cc:57:2b: 13:ee:31:46:62:05:f5:3d:dd:7d:ec:e4:4d:0a:ef:55:f1:17: c0:fd:2a:1d:dc:38:dc:70:29:0e:1e:40:76:7c:35:fa:5f:be: 57:b7:b2:6e:31:57:50:cc:37:13:47:93:c1:e4:bb:d4:2b:be: 80:d4:d1:43:ea:f5:a8:d5:e3:c0:f1:7f:94:bf:7f:e2:fa:8e: b8:2c:82:d7:db:ed:02:c1:8a:c4:e9:53:fb:29:7f:6f:33:06: 12:10:26:8c:50:ba:22:07:d8:15:ee:fd:b5:9c:c6:1b:e6:41: 80:de:e4:d3:3a:1b:a1:28:1c:fd:66:db:10:e2:4f:68:cf:0f: 97:b1:47:10:d2:dc:66:27:99:8a:39:50:bc:16:99:e5:ed:e5: 63:51:fe:f7:46:6b:7c:04:1d:e7:9a:ca:6f:35:9a:21:de:ec: a0:eb:bb:be -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUalZr+/U/RmRo3VBd10L9+DfHM5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3 NUFEQTFBODAeFw0yNjA5MjQxNzQ4MzBaFw0yNjA5MjUxOTU2MzBaMDMxMTAvBgNV BAMTKDg4RjU2MEY3OTY5MjAwQjhGMzI5N0U5MkFERDE4RTFCQkY2MDg5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl45nJOJOGsGu99q36JFwyEW0X vbXSs81HParJUgJWFztenavX0SV7plXiIXKN0Q+82+hTFNZCVMlTYLe+qQZ+9E2K nI0E30T7bPtSB41BeCgaDd5R0LExgBhdKBhQxSrQ9IwZdMlnxH1KPXPe3dFS5UrX LNUhRD7TR/HxrTj8NCji1E0dFXCvxNMCDGGgxHJAoEdSbqQVd88Iq9i5n6FxaJPJ Qpn7UTWedBAvOv5RNnCNJJtUs80q8yagENz9s/ct5jcnOS+K7bRBBtelZthMzcch WHeIl9aVAN8F5t1YXP+LvETiFxLq5vF90Lgd10o00bRcTQ5/llM6S0V8DiNrAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUiPVg95aSALjzKX6SrdGOG79giV8wHwYDVR0j BBgwFoAU8fkdA8+cBdXVsae1gjRncnWtoagwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVH UkVFLzAvRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GMUY5MUQwM0NGOUMwNUQ1RDVCMUE3QjU4 MjM0Njc3Mjc1QURBMUE4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVHUkVFLzAvRjFGOTFE MDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB+Z bXABz6N4MZVhk4RTPZ5QqUXWI6duYqxumj/ycsHKKlR1x/HDdYKkV1GsCPDcicqA WoGBoR/XZd4Vb48bbGszWJLRkhxShfu6KQJVhXPfb1xGLu2KcsxXKxPuMUZiBfU9 3X3s5E0K71XxF8D9Kh3cONxwKQ4eQHZ8Nfpfvle3sm4xV1DMNxNHk8Hku9QrvoDU 0UPq9ajV48Dxf5S/f+L6jrgsgtfb7QLBisTpU/spf28zBhIQJoxQuiIH2BXu/bWc xhvmQYDe5NM6G6EoHP1m2xDiT2jPD5exRxDS3GYnmYo5ULwWmeXt5WNR/vdGa3wE Heeaym81miHe7KDru74= -----END CERTIFICATE-----Generated at Fri Sep 25 10:38:38 2026 by rpki-client