$ rpki-client -vvf rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft File: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft (raw, json) Hash identifier: b4MUVgn3vD6S7gjEpVD5DA1dWibBEr2+GZxTP4Mb2uo= Subject key identifier: AF:73:D5:16:B1:D3:DA:9B:14:A6:78:C0:70:5C:4A:3F:36:C6:66:13 Authority key identifier: F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 Certificate issuer: /CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Certificate serial: 426FBACB84359A4F9E83BC98611EDA6DD3B84303 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft Manifest number: 47 Signing time: Tue 30 Jun 2026 06:53:17 +0000 Manifest this update: Tue 30 Jun 2026 06:48:17 +0000 Manifest next update: Wed 01 Jul 2026 10:49:17 +0000 Files and hashes: 1: 3130332e3133312e3134392e302f32342d3234203d3e2038303735.roa (hash: ZWTKysskCJyx9iPE3iawI12a+vW95iu4X9ux8OHhK+s=) 2: 323430303a663532303a3a2f33322d3332203d3e2038303735.roa (hash: bcCWlKGdFRzkYWjpAxFiDRBiMFMYz6fz3Mvlqay5uQg=) 3: 3130332e3133312e3134382e302f32342d3234203d3e2038303735.roa (hash: ngU9yGwnv4zDeMAuwTOcnfYW07w9n6079RMDCBEl224=) 4: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl (hash: y5eBrhh34CB1CRJlG0YHnJNuxPh3W9BFmSrcpcfhc6Q=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 10:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:6f:ba:cb:84:35:9a:4f:9e:83:bc:98:61:1e:da:6d:d3:b8:43:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Validity Not Before: Jun 30 06:48:17 2026 GMT Not After : Jul 1 10:49:17 2026 GMT Subject: CN=AF73D516B1D3DA9B14A678C0705C4A3F36C66613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:93:d9:6f:fd:b1:6a:65:3e:51:b7:30:9e:12: be:29:a2:0a:98:03:9c:31:b0:ff:36:9a:7c:39:76: 89:8f:03:51:b9:5e:8e:1b:02:21:4e:d3:44:5f:d0: ab:0f:e3:52:12:24:ef:06:fe:25:48:1a:29:22:ec: 3a:4b:4b:e3:4c:b2:13:70:cf:7b:95:7c:33:bf:3e: 93:47:e3:f1:9a:35:0f:33:e9:24:bb:cc:f4:e5:be: b3:df:59:39:2b:ee:c4:2e:01:e8:b3:fc:44:3d:de: be:4f:11:4a:07:7a:6f:6f:20:e7:ef:d7:c5:90:d7: 54:07:6c:ab:22:79:ec:34:e3:e7:83:f3:2e:37:4d: 90:78:4f:2c:0b:e7:e2:20:6b:37:03:0c:76:3c:76: 91:ab:d7:57:15:dd:0b:fe:60:46:d1:92:63:b9:d9: 94:60:3a:79:18:e3:a5:40:e6:f1:c4:35:df:b4:56: aa:ad:54:bd:9d:91:a6:3c:dc:ca:a2:48:d8:7a:00: e6:65:62:34:90:0d:88:d2:aa:ba:a7:10:b7:9b:f1: a8:29:4d:46:4f:e2:d8:e7:09:03:17:af:d6:ab:34: 60:72:d6:ba:05:47:f0:dc:b5:b3:6c:03:f3:34:e9: 7e:7c:f6:cf:46:15:90:07:3d:aa:eb:15:74:98:d0: b2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:73:D5:16:B1:D3:DA:9B:14:A6:78:C0:70:5C:4A:3F:36:C6:66:13 X509v3 Authority Key Identifier: keyid:F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d8:ca:9f:e1:69:06:17:c2:9b:96:45:37:c6:fe:4f:fd:fc: 8a:5c:1a:f9:59:9b:30:ad:a2:a1:19:9e:36:21:74:3f:bf:34: e1:4f:13:c0:29:31:90:c3:29:dd:48:d2:a9:72:50:60:78:c5: 23:b1:6d:0e:cf:57:2f:91:c2:22:1f:16:3d:df:34:eb:f2:e5: e2:8d:00:c3:3c:12:c6:97:af:ba:9a:c7:66:db:f4:6d:af:88: 97:bf:86:28:a8:16:cd:84:4a:9a:d5:4e:72:f7:2e:2b:63:f1: f1:d0:bb:3f:e5:86:d2:bb:cf:41:a2:69:1a:7b:02:05:08:05: e9:7e:6f:14:34:aa:34:88:c6:71:84:1a:54:2e:fe:22:2a:47: f4:55:a2:20:01:15:41:99:f9:32:84:3f:02:06:07:0d:6b:11: 0e:6d:44:86:58:75:5a:0e:e9:22:f4:58:be:4f:00:64:5f:6f: 46:a3:22:26:48:aa:70:50:e5:79:f0:9b:74:09:50:66:26:04: f3:53:61:87:af:b8:22:68:13:c0:7a:91:78:9e:27:a6:e4:32: b0:39:82:e9:97:6d:d0:0d:44:68:f7:3b:7c:40:be:99:61:c4: 9f:ab:b7:1d:dd:ac:17:01:80:52:62:88:e9:94:df:26:3e:60: d8:aa:12:46 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQm+6y4Q1mk+eg7yYYR7abdO4QwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3 NUFEQTFBODAeFw0yNjA2MzAwNjQ4MTdaFw0yNjA3MDExMDQ5MTdaMDMxMTAvBgNV BAMTKEFGNzNENTE2QjFEM0RBOUIxNEE2NzhDMDcwNUM0QTNGMzZDNjY2MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWk9lv/bFqZT5RtzCeEr4pogqY A5wxsP82mnw5domPA1G5Xo4bAiFO00Rf0KsP41ISJO8G/iVIGiki7DpLS+NMshNw z3uVfDO/PpNH4/GaNQ8z6SS7zPTlvrPfWTkr7sQuAeiz/EQ93r5PEUoHem9vIOfv 18WQ11QHbKsieew04+eD8y43TZB4TywL5+IgazcDDHY8dpGr11cV3Qv+YEbRkmO5 2ZRgOnkY46VA5vHENd+0VqqtVL2dkaY83MqiSNh6AOZlYjSQDYjSqrqnELeb8agp TUZP4tjnCQMXr9arNGBy1roFR/DctbNsA/M06X589s9GFZAHParrFXSY0LK/AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUr3PVFrHT2psUpnjAcFxKPzbGZhMwHwYDVR0j BBgwFoAU8fkdA8+cBdXVsae1gjRncnWtoagwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVH UkVFLzAvRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GMUY5MUQwM0NGOUMwNUQ1RDVCMUE3QjU4 MjM0Njc3Mjc1QURBMUE4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVHUkVFLzAvRjFGOTFE MDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHzY yp/haQYXwpuWRTfG/k/9/IpcGvlZmzCtoqEZnjYhdD+/NOFPE8ApMZDDKd1I0qly UGB4xSOxbQ7PVy+RwiIfFj3fNOvy5eKNAMM8EsaXr7qax2bb9G2viJe/hiioFs2E SprVTnL3Litj8fHQuz/lhtK7z0GiaRp7AgUIBel+bxQ0qjSIxnGEGlQu/iIqR/RV oiABFUGZ+TKEPwIGBw1rEQ5tRIZYdVoO6SL0WL5PAGRfb0ajIiZIqnBQ5Xnwm3QJ UGYmBPNTYYevuCJoE8B6kXieJ6bkMrA5gumXbdANRGj3O3xAvplhxJ+rtx3drBcB gFJiiOmU3yY+YNiqEkY= -----END CERTIFICATE-----Generated at Tue Jun 30 19:11:51 2026 by rpki-client