$ rpki-client -vvf rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft File: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft (raw, json) Hash identifier: U4uzaunvuZbebI7fKD5ev/+H0GnRo1zWNGxtNmMlPp0= Subject key identifier: B9:AC:BB:35:2A:DC:A9:93:C8:15:E0:F0:26:FF:6C:0B:99:17:C7:93 Authority key identifier: F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 Certificate issuer: /CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Certificate serial: 63C4BE5D0A42B94EFAB420D6190E0CFC6D3732E1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft Manifest number: 06 Signing time: Wed 13 May 2026 07:47:40 +0000 Manifest this update: Wed 13 May 2026 07:42:40 +0000 Manifest next update: Thu 14 May 2026 10:03:40 +0000 Files and hashes: 1: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl (hash: GzQHQuM/O9VrvqDYP6jmb9flUf8l7ykK3kb8ENRmrrg=) 2: 3130332e3133312e3134392e302f32342d3234203d3e2038303735.roa (hash: ZWTKysskCJyx9iPE3iawI12a+vW95iu4X9ux8OHhK+s=) 3: 3130332e3133312e3134382e302f32342d3234203d3e2038303735.roa (hash: ngU9yGwnv4zDeMAuwTOcnfYW07w9n6079RMDCBEl224=) 4: 323430303a663532303a3a2f33322d3332203d3e2038303735.roa (hash: bcCWlKGdFRzkYWjpAxFiDRBiMFMYz6fz3Mvlqay5uQg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c4:be:5d:0a:42:b9:4e:fa:b4:20:d6:19:0e:0c:fc:6d:37:32:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Validity Not Before: May 13 07:42:40 2026 GMT Not After : May 14 10:03:40 2026 GMT Subject: CN=B9ACBB352ADCA993C815E0F026FF6C0B9917C793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:91:04:3a:59:3e:cc:69:af:be:6f:21:c2: 85:4e:a1:a2:19:7c:1d:0e:08:d1:93:cb:38:70:e1: 90:b4:8c:a7:22:66:12:f9:cf:14:78:b8:31:f9:46: 61:9d:7b:aa:be:c3:ad:1b:0a:09:66:cd:f8:82:34: bc:09:a6:1e:85:2f:a7:91:72:40:d7:18:9f:1d:cd: 9c:69:4c:55:2a:7a:e7:6e:03:fc:5f:3d:9e:1d:46: 6a:12:f6:d5:35:e8:fb:d2:ef:42:31:68:11:53:6b: d3:b9:24:71:d6:c1:ef:20:67:d0:58:4f:87:6c:61: 2c:8a:9b:20:67:69:37:e0:43:6a:69:33:dd:da:98: be:8c:fc:ec:69:bf:5d:46:3e:45:21:7d:e5:24:66: cc:de:a8:bc:5c:51:00:c7:60:73:dd:68:dc:45:f3: c4:5b:2c:c1:76:3e:06:b8:0c:21:a0:fe:64:d3:c5: c2:d5:1b:d8:8d:4c:a5:a0:9a:97:d9:d7:fd:2f:f1: 9d:28:9f:93:0f:1a:ce:01:8b:1a:d0:24:71:21:6a: d5:3c:61:ca:ca:dc:9c:09:ea:5c:14:42:a7:dc:8c: 5e:ed:0c:77:a5:ea:42:14:5b:d7:39:71:cd:9b:fd: 37:ee:f8:da:7a:9d:f9:b5:ec:66:b2:db:f8:c4:65: 70:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AC:BB:35:2A:DC:A9:93:C8:15:E0:F0:26:FF:6C:0B:99:17:C7:93 X509v3 Authority Key Identifier: keyid:F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8a:82:8b:0f:69:e0:8f:a0:ec:83:79:b5:13:d5:e9:6a:0b: 82:ce:74:86:fb:da:78:6a:cd:ff:db:b7:99:8a:73:bf:aa:b0: 6f:8a:9c:70:47:a6:a2:d3:27:f3:42:69:90:db:c7:0c:55:c8: 42:9d:e8:9e:93:26:eb:ad:d8:fb:5d:d0:80:f3:00:ab:d3:54: ac:82:ed:3d:88:a1:b6:7a:31:27:b3:e6:85:91:04:26:f2:1e: 77:00:cf:1b:d9:4f:28:42:6c:e9:dc:d0:d1:86:95:c2:16:b5: 18:5e:d2:af:15:69:b8:ca:0e:c8:9a:73:a3:ef:1b:18:48:08: d9:c0:84:51:90:c0:73:4b:ca:52:23:0f:86:67:44:8f:4f:72: f2:fb:c0:84:4e:91:e8:3e:56:0f:77:12:4f:2f:60:f8:4d:ad: bd:90:95:5a:d2:f1:b5:46:bb:7a:41:7d:bb:b0:74:99:fb:1a: a8:30:02:08:2c:26:8e:e5:58:cc:cf:7a:e8:7d:4e:e1:7a:0b: 76:36:ef:93:33:dc:99:ed:3f:1e:c3:96:4e:ae:3d:fe:ca:04: 38:32:56:91:c4:ba:f9:53:3d:9d:c9:b7:ef:86:95:d1:53:04: e7:ce:3f:65:19:71:41:a6:9f:42:18:8b:22:0e:c7:79:43:b5: 6c:3d:fc:d2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUY8S+XQpCuU76tCDWGQ4M/G03MuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3 NUFEQTFBODAeFw0yNjA1MTMwNzQyNDBaFw0yNjA1MTQxMDAzNDBaMDMxMTAvBgNV BAMTKEI5QUNCQjM1MkFEQ0E5OTNDODE1RTBGMDI2RkY2QzBCOTkxN0M3OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5JEEOlk+zGmvvm8hwoVOoaIZ fB0OCNGTyzhw4ZC0jKciZhL5zxR4uDH5RmGde6q+w60bCglmzfiCNLwJph6FL6eR ckDXGJ8dzZxpTFUqeuduA/xfPZ4dRmoS9tU16PvS70IxaBFTa9O5JHHWwe8gZ9BY T4dsYSyKmyBnaTfgQ2ppM93amL6M/Oxpv11GPkUhfeUkZszeqLxcUQDHYHPdaNxF 88RbLMF2Pga4DCGg/mTTxcLVG9iNTKWgmpfZ1/0v8Z0on5MPGs4BixrQJHEhatU8 YcrK3JwJ6lwUQqfcjF7tDHel6kIUW9c5cc2b/Tfu+Np6nfm17Gay2/jEZXATAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUuay7NSrcqZPIFeDwJv9sC5kXx5MwHwYDVR0j BBgwFoAU8fkdA8+cBdXVsae1gjRncnWtoagwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVH UkVFLzAvRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GMUY5MUQwM0NGOUMwNUQ1RDVCMUE3QjU4 MjM0Njc3Mjc1QURBMUE4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVHUkVFLzAvRjFGOTFE MDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACGK gosPaeCPoOyDebUT1elqC4LOdIb72nhqzf/bt5mKc7+qsG+KnHBHpqLTJ/NCaZDb xwxVyEKd6J6TJuut2Ptd0IDzAKvTVKyC7T2IobZ6MSez5oWRBCbyHncAzxvZTyhC bOnc0NGGlcIWtRhe0q8VabjKDsiac6PvGxhICNnAhFGQwHNLylIjD4ZnRI9PcvL7 wIROkeg+Vg93Ek8vYPhNrb2QlVrS8bVGu3pBfbuwdJn7GqgwAggsJo7lWMzPeuh9 TuF6C3Y275Mz3JntPx7Dlk6uPf7KBDgyVpHEuvlTPZ3Jt++GldFTBOfOP2UZcUGm n0IYiyIOx3lDtWw9/NI= -----END CERTIFICATE-----Generated at Wed May 13 20:36:35 2026 by rpki-client