$ rpki-client -vvf rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft File: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft (raw, json) Hash identifier: hfe8C+xKniP9AKItTi1bKLnSQLmqZRXR6hAtjB0CAZE= Subject key identifier: C2:6C:64:15:72:A5:0B:76:02:F3:3C:14:2B:DE:BE:00:6D:7D:88:C6 Authority key identifier: F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 Certificate issuer: /CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Certificate serial: 24F2D6CE6B17DCCDB16D58E4C67F9E9504EA4494 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft Manifest number: 84 Signing time: Sat 15 Aug 2026 02:59:08 +0000 Manifest this update: Sat 15 Aug 2026 02:54:08 +0000 Manifest next update: Sun 16 Aug 2026 05:54:08 +0000 Files and hashes: 1: 3130332e3133312e3134382e302f32342d3234203d3e2038303735.roa (hash: ngU9yGwnv4zDeMAuwTOcnfYW07w9n6079RMDCBEl224=) 2: 323430303a663532303a3a2f33322d3332203d3e2038303735.roa (hash: bcCWlKGdFRzkYWjpAxFiDRBiMFMYz6fz3Mvlqay5uQg=) 3: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl (hash: AdXIDn/o+3E3Q7wIhNoEyrtGr9TfXkX5Dbr13pkXczo=) 4: 3130332e3133312e3134392e302f32342d3234203d3e2038303735.roa (hash: ZWTKysskCJyx9iPE3iawI12a+vW95iu4X9ux8OHhK+s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 03:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f2:d6:ce:6b:17:dc:cd:b1:6d:58:e4:c6:7f:9e:95:04:ea:44:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Validity Not Before: Aug 15 02:54:08 2026 GMT Not After : Aug 16 05:54:08 2026 GMT Subject: CN=C26C641572A50B7602F33C142BDEBE006D7D88C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3d:e8:97:60:39:1f:ee:5f:62:68:14:ae:85: b2:fd:3e:d1:3f:81:8b:88:69:86:93:5b:b1:97:78: 85:1e:14:f3:bb:2d:5c:ff:91:4b:3c:6a:97:70:cb: 3c:d3:31:b0:ce:5a:1a:54:a2:87:42:f5:55:6c:98: 4c:cd:db:ae:9c:46:97:ab:7d:30:09:a6:a0:58:19: ce:01:47:3d:54:be:56:84:1e:2f:7a:ce:a5:99:9a: 36:b0:3b:e3:ae:64:95:91:ee:a6:df:09:1d:90:36: 92:29:aa:0a:f4:5e:ca:66:0e:10:84:36:6a:1b:4b: 27:2d:86:38:65:ee:6a:2d:f7:7f:8d:c3:b4:45:1e: c0:4a:ba:01:fe:1e:1e:f4:4e:88:b5:40:af:25:38: de:14:2e:fc:be:27:db:98:63:21:ba:f1:b6:21:5e: 71:0b:d7:2a:41:f4:b6:dd:d6:3d:f4:9e:e3:3c:86: f5:a3:ba:ef:93:dc:64:03:34:dd:a7:22:a2:ba:50: 38:37:81:2f:00:a1:43:43:75:dd:3b:79:3b:4a:99: 05:08:45:07:ad:25:3c:04:a8:97:2e:f3:b1:2b:92: ee:34:3a:b4:20:46:1a:8c:68:05:f8:80:1e:58:19: 7c:85:c2:ea:c2:17:c8:c5:31:8e:e0:83:ee:3a:4e: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6C:64:15:72:A5:0B:76:02:F3:3C:14:2B:DE:BE:00:6D:7D:88:C6 X509v3 Authority Key Identifier: keyid:F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:67:86:ea:ff:b3:6f:60:19:5b:62:48:bc:82:db:9f:5e:9d: 0b:21:b6:aa:2b:1c:ee:e8:98:c1:b7:27:76:62:af:79:10:55: c0:cb:8a:28:7a:bf:f7:84:f0:f0:69:4f:8e:22:86:a4:99:47: a1:38:51:c0:db:21:82:74:be:cc:07:e1:9c:64:22:57:4e:6f: e0:63:3d:44:74:85:24:8d:80:f1:db:22:1e:c4:e3:ac:5a:89: cb:e7:28:aa:e7:f6:5d:d2:b2:92:02:95:30:97:12:ae:82:d9: db:3a:e7:5a:6e:67:df:8c:64:69:4f:a0:de:1c:39:ca:8e:ef: f9:42:41:6c:76:63:bb:2b:d2:2c:b5:35:70:79:a2:82:fd:90: c8:24:53:02:1b:55:ac:44:b7:fd:45:71:c8:ef:dd:d1:55:6d: bb:61:db:13:00:31:50:9d:30:3c:7c:ed:b7:1d:8d:53:08:bd: 28:b9:2b:4f:3d:26:98:50:82:a2:0c:fe:3b:0b:49:d4:28:00: 9e:ab:66:e2:f3:f4:8c:59:b4:27:96:f9:b4:02:e0:57:40:2d: 26:dd:36:51:5c:b4:26:e2:0c:d6:28:5c:56:5b:1c:25:aa:2f: 03:5c:26:46:56:66:42:cc:0d:d7:d9:86:4e:85:49:3c:c4:b9: 8a:f8:2b:c4 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUJPLWzmsX3M2xbVjkxn+elQTqRJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3 NUFEQTFBODAeFw0yNjA4MTUwMjU0MDhaFw0yNjA4MTYwNTU0MDhaMDMxMTAvBgNV BAMTKEMyNkM2NDE1NzJBNTBCNzYwMkYzM0MxNDJCREVCRTAwNkQ3RDg4QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPeiXYDkf7l9iaBSuhbL9PtE/ gYuIaYaTW7GXeIUeFPO7LVz/kUs8apdwyzzTMbDOWhpUoodC9VVsmEzN266cRper fTAJpqBYGc4BRz1UvlaEHi96zqWZmjawO+OuZJWR7qbfCR2QNpIpqgr0XspmDhCE NmobSycthjhl7mot93+Nw7RFHsBKugH+Hh70Toi1QK8lON4ULvy+J9uYYyG68bYh XnEL1ypB9Lbd1j30nuM8hvWjuu+T3GQDNN2nIqK6UDg3gS8AoUNDdd07eTtKmQUI RQetJTwEqJcu87Erku40OrQgRhqMaAX4gB5YGXyFwurCF8jFMY7gg+46ToIVAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUwmxkFXKlC3YC8zwUK96+AG19iMYwHwYDVR0j BBgwFoAU8fkdA8+cBdXVsae1gjRncnWtoagwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVH UkVFLzAvRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GMUY5MUQwM0NGOUMwNUQ1RDVCMUE3QjU4 MjM0Njc3Mjc1QURBMUE4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVHUkVFLzAvRjFGOTFE MDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABRn hur/s29gGVtiSLyC259enQshtqorHO7omMG3J3Zir3kQVcDLiih6v/eE8PBpT44i hqSZR6E4UcDbIYJ0vswH4ZxkIldOb+BjPUR0hSSNgPHbIh7E46xaicvnKKrn9l3S spIClTCXEq6C2ds651puZ9+MZGlPoN4cOcqO7/lCQWx2Y7sr0iy1NXB5ooL9kMgk UwIbVaxEt/1Fccjv3dFVbbth2xMAMVCdMDx87bcdjVMIvSi5K089JphQgqIM/jsL SdQoAJ6rZuLz9IxZtCeW+bQC4FdALSbdNlFctCbiDNYoXFZbHCWqLwNcJkZWZkLM DdfZhk6FSTzEuYr4K8Q= -----END CERTIFICATE-----Generated at Sat Aug 15 05:38:32 2026 by rpki-client