$ rpki-client -vvvf rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft File: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft (raw, json) Hash identifier: WKS3kb+DPfKlZnbOdFdcelB1EJCPEwRilKdMUsfdTxo= Subject key identifier: B6:64:BD:37:5C:2A:B3:CA:97:4E:DA:CD:E3:1A:CC:E9:C2:EE:31:92 Authority key identifier: F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 Certificate issuer: /CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Certificate serial: 475083716DBAC772838583F360F674CD85275371 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject info access: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft Manifest number: CE Signing time: Fri 09 Oct 2026 14:42:06 +0000 Manifest this update: Fri 09 Oct 2026 14:37:06 +0000 Manifest next update: Sat 10 Oct 2026 15:20:06 +0000 Files and hashes: 1: 3130332e3133312e3134382e302f32342d3234203d3e2038303735.roa (hash: ngU9yGwnv4zDeMAuwTOcnfYW07w9n6079RMDCBEl224=) 2: F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl (hash: cGAs7PEp+nfHq7H+X2SkQRsva4SZ4afSjcJCif1E0X8=) 3: 3130332e3133312e3134392e302f32342d3234203d3e2038303735.roa (hash: ZWTKysskCJyx9iPE3iawI12a+vW95iu4X9ux8OHhK+s=) 4: 323430303a663532303a3a2f33322d3332203d3e2038303735.roa (hash: bcCWlKGdFRzkYWjpAxFiDRBiMFMYz6fz3Mvlqay5uQg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 02:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:50:83:71:6d:ba:c7:72:83:85:83:f3:60:f6:74:cd:85:27:53:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8 Validity Not Before: Oct 9 14:37:06 2026 GMT Not After : Oct 10 15:20:06 2026 GMT Subject: CN=B664BD375C2AB3CA974EDACDE31ACCE9C2EE3192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:e1:63:f9:5e:16:17:85:d0:80:80:0b:f1: 6f:7d:f0:31:ba:e4:7f:54:1b:f7:ce:a5:26:02:12: d5:36:45:aa:07:34:18:af:e0:87:64:7b:57:83:b8: 81:71:6b:2f:fb:0e:6c:70:eb:96:ec:88:cb:62:98: c7:6d:b7:64:dc:02:fa:8e:11:ad:b0:96:78:76:10: 26:4e:fa:55:c1:d9:9d:70:3d:a6:76:0e:52:d0:61: dc:77:69:de:ae:9d:01:0b:26:58:0c:f2:b1:4e:c3: fe:a8:bf:6e:58:09:1c:20:e2:ac:5a:8c:68:df:14: 5b:8e:9c:70:5c:30:63:c2:9c:32:ff:c5:8a:b0:8a: e8:ce:5e:bc:93:6b:03:4d:3f:48:0c:c3:db:6f:9d: 14:f3:b5:e4:fc:dd:82:cb:6c:03:24:99:14:8a:4c: fa:38:5d:dd:ba:b1:81:c4:8e:23:23:48:e9:6e:85: 76:5a:82:ff:e6:8c:d6:ab:09:35:86:ce:66:16:0e: 54:59:92:5d:da:34:27:91:9d:27:f9:f9:3b:9f:2d: bb:bf:2a:4c:f2:5f:2a:f9:54:f6:48:a1:b4:88:f7: 74:ba:55:ed:ca:c9:31:9c:cb:4a:55:7c:a9:45:df: 36:cb:68:de:77:2c:98:33:20:e1:f2:a3:38:a8:b8: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:64:BD:37:5C:2A:B3:CA:97:4E:DA:CD:E3:1A:CC:E9:C2:EE:31:92 X509v3 Authority Key Identifier: keyid:F1:F9:1D:03:CF:9C:05:D5:D5:B1:A7:B5:82:34:67:72:75:AD:A1:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/ONEDEGREE/0/F1F91D03CF9C05D5D5B1A7B58234677275ADA1A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:21:cb:66:48:d2:ad:2b:5b:2b:53:f2:3d:bd:35:fc:39:a3: b9:12:c7:b0:f1:c8:ab:e7:7e:2e:df:70:5e:4b:bc:c6:9d:f5: 42:61:92:50:3b:aa:90:83:51:17:c5:f5:e2:de:ef:8d:5a:8f: dd:c8:4f:3f:63:d0:3a:22:da:2e:2b:aa:a1:d2:31:19:be:2c: a3:1a:6d:24:0f:81:64:e3:53:f1:52:36:b5:bc:42:cb:95:5e: d8:9f:3b:8a:a7:d1:cd:9e:01:fc:b2:c8:6c:76:46:7e:3a:89: 2e:f2:09:e8:97:ff:2b:ad:cc:48:8e:9a:ac:50:90:5b:ab:40: 6e:c0:5f:24:64:59:f6:64:81:9a:d8:f8:c9:6e:0d:59:af:fa: 4c:fa:fe:83:35:76:4a:42:38:6d:05:b8:a7:39:b2:7c:48:ff: b3:8b:57:ba:bd:a8:80:09:e0:82:e8:6c:5d:d6:e1:7d:ae:63: 53:95:7d:37:eb:a8:c6:ab:72:66:df:2e:88:e5:b5:ca:a0:59: 9e:05:b0:54:fc:12:58:15:93:9a:00:80:95:d5:cc:67:8e:62: fa:40:70:fc:95:3a:88:09:bb:79:6c:78:7c:0b:f1:b4:0b:9c: c3:66:28:6a:97:fb:f4:dd:c0:d2:bf:82:55:18:fd:26:82:6e: d1:59:61:af -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUR1CDcW26x3KDhYPzYPZ0zYUnU3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3 NUFEQTFBODAeFw0yNjEwMDkxNDM3MDZaFw0yNjEwMTAxNTIwMDZaMDMxMTAvBgNV BAMTKEI2NjRCRDM3NUMyQUIzQ0E5NzRFREFDREUzMUFDQ0U5QzJFRTMxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKG+Fj+V4WF4XQgIAL8W998DG6 5H9UG/fOpSYCEtU2RaoHNBiv4Idke1eDuIFxay/7Dmxw65bsiMtimMdtt2TcAvqO Ea2wlnh2ECZO+lXB2Z1wPaZ2DlLQYdx3ad6unQELJlgM8rFOw/6ov25YCRwg4qxa jGjfFFuOnHBcMGPCnDL/xYqwiujOXryTawNNP0gMw9tvnRTzteT83YLLbAMkmRSK TPo4Xd26sYHEjiMjSOluhXZagv/mjNarCTWGzmYWDlRZkl3aNCeRnSf5+TufLbu/ KkzyXyr5VPZIobSI93S6Ve3KyTGcy0pVfKlF3zbLaN53LJgzIOHyoziouHi3AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUtmS9N1wqs8qXTtrN4xrM6cLuMZIwHwYDVR0j BBgwFoAU8fkdA8+cBdXVsae1gjRncnWtoagwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVH UkVFLzAvRjFGOTFEMDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9GMUY5MUQwM0NGOUMwNUQ1RDVCMUE3QjU4 MjM0Njc3Mjc1QURBMUE4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvT05FREVHUkVFLzAvRjFGOTFE MDNDRjlDMDVENUQ1QjFBN0I1ODIzNDY3NzI3NUFEQTFBOC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEEh y2ZI0q0rWytT8j29Nfw5o7kSx7DxyKvnfi7fcF5LvMad9UJhklA7qpCDURfF9eLe 741aj93ITz9j0Doi2i4rqqHSMRm+LKMabSQPgWTjU/FSNrW8QsuVXtifO4qn0c2e AfyyyGx2Rn46iS7yCeiX/yutzEiOmqxQkFurQG7AXyRkWfZkgZrY+MluDVmv+kz6 /oM1dkpCOG0FuKc5snxI/7OLV7q9qIAJ4ILobF3W4X2uY1OVfTfrqMarcmbfLojl tcqgWZ4FsFT8ElgVk5oAgJXVzGeOYvpAcPyVOogJu3lseHwL8bQLnMNmKGqX+/Td wNK/glUY/SaCbtFZYa8= -----END CERTIFICATE-----Generated at Fri Oct 9 20:04:06 2026 by rpki-client