$ rpki-client -vvf rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft File: 37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft (raw, json) Hash identifier: Vj1WvhlPA+KFzeTV1lRLYuTUi9toounVu7TGkF2REd0= Subject key identifier: 79:4B:B2:5F:20:28:AD:B8:37:9D:D2:34:0F:69:D4:82:5D:01:7B:3A Authority key identifier: 37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E Certificate issuer: /CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E Certificate serial: 3CBACCABA90E32D64E6BA1136F51FE1B40A1296B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft Manifest number: 84 Signing time: Fri 14 Aug 2026 12:46:48 +0000 Manifest this update: Fri 14 Aug 2026 12:41:48 +0000 Manifest next update: Sat 15 Aug 2026 14:05:48 +0000 Files and hashes: 1: 323030313a6466653a3a2f33322d3438203d3e203332353935.roa (hash: hjb2b9nxxhACSmVNPNNAjbUPMZe7O7X8gXcKsWiqcrg=) 2: 37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl (hash: 7TKultuTuhVWat0E8VbC2s3vE5P/pEGOq0ktL/LUL+c=) 3: 3136332e3132382e37372e302f32342d3234203d3e20323032373336.roa (hash: TfpMHl3tbMw4P8soG2o7vLNtNm7H+J+gz5LksyActPg=) 4: 323030313a6466653a3a2f33322d3438203d3e2039393233.roa (hash: pgrYZOajKzQyKCkN+wjloDZT1L0F29LlCuW5K22DqWg=) 5: 3136332e3132382e37372e302f32342d3234203d3e20313937353337.roa (hash: mlh0L4cv9acKEJ/qOZgzfu+K5lGDak9tmXUoIiAOhVA=) 6: 3136332e3132382e37362e302f32332d3234203d3e2039393233.roa (hash: HcCrgyPQZ3iRC6R4Dmajnn3+LwU9SzxebMyYhDSTtJ0=) 7: 3136332e3132382e37362e302f32332d3234203d3e203332353935.roa (hash: K7N8j7vo0GWBUJ7KcOfXRKUesPEQd6IuNZ46Edb07vs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 14:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ba:cc:ab:a9:0e:32:d6:4e:6b:a1:13:6f:51:fe:1b:40:a1:29:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E Validity Not Before: Aug 14 12:41:48 2026 GMT Not After : Aug 15 14:05:48 2026 GMT Subject: CN=794BB25F2028ADB8379DD2340F69D4825D017B3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b0:d3:4d:eb:bd:3b:fa:82:27:4c:22:8a:70: c2:9d:b9:2e:2a:28:ce:67:af:ec:19:dd:c4:02:4c: 7f:8c:93:a8:3d:8f:8c:4a:8f:6e:ab:77:da:d4:45: b9:a7:b3:5e:0b:98:87:8b:57:a0:5a:83:82:30:94: 0c:d2:b3:94:7e:16:82:c3:dd:aa:cf:3c:63:5c:b7: ae:35:8e:d9:e7:27:49:ce:99:8a:e1:52:27:94:0f: e7:6d:7d:a9:97:ae:45:49:52:8b:4b:04:47:65:6b: 0e:07:08:e1:53:c4:ba:53:f6:1b:ca:84:02:78:ae: 32:f4:95:c7:2a:17:d0:52:9c:b4:08:69:42:16:9c: 50:c8:4e:f3:9e:8a:1c:ce:a7:ad:f2:b6:06:4b:8f: 77:a5:51:b7:3e:86:e9:26:4e:b6:31:6e:40:df:2d: df:4c:8b:9e:b0:4a:7c:e7:28:4c:99:b2:5b:df:51: a4:4f:ed:90:ae:77:54:ce:9e:5a:fc:e0:ff:64:dc: 26:ad:b9:69:87:ce:6d:ca:b2:17:cc:6f:a5:e3:73: 8e:42:58:27:ec:17:15:84:2d:25:50:fb:40:a0:ea: c0:60:47:9c:30:0b:c5:4f:17:ed:80:9d:b7:9e:8b: 53:37:4a:0d:ea:ab:c3:85:a6:e5:b2:19:66:a7:14: 87:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4B:B2:5F:20:28:AD:B8:37:9D:D2:34:0F:69:D4:82:5D:01:7B:3A X509v3 Authority Key Identifier: keyid:37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:7f:54:eb:6e:06:de:5b:44:77:3a:63:1f:82:e2:13:0d:cb: cf:6a:f4:ae:36:47:04:a8:0e:9f:7d:a7:c2:24:a5:99:21:63: 5d:45:b1:34:7a:97:16:0c:86:94:7a:9b:53:55:43:40:e0:55: 4d:80:60:ef:d7:7d:00:31:a1:af:4f:81:77:75:b6:5e:b3:08: 61:64:8c:d7:dc:1f:02:15:37:a8:22:98:62:db:b3:da:bc:44: 3a:77:6e:a1:d8:bd:54:cc:25:e0:e0:1f:15:58:73:c6:88:3d: 44:8d:a6:1a:59:90:73:c6:04:a0:08:8b:1d:6d:76:50:04:ac: 39:7a:24:ce:96:52:41:82:59:4a:2a:48:fd:6f:20:53:d6:34: 4f:05:be:80:88:39:e7:5f:0d:f3:40:e8:e3:70:6d:38:af:d8: 11:80:ec:be:18:30:bd:c9:9a:94:7e:d9:52:64:45:8e:ba:ad: b0:68:d0:1d:e8:98:63:64:1b:a4:be:e0:df:55:3f:44:a1:22: ed:52:41:f3:45:52:35:cb:cb:df:73:38:df:b8:54:1a:80:08: e7:b5:b7:38:03:bb:d1:dc:b4:7d:04:53:49:f8:13:74:34:90: e2:64:58:cd:92:5f:6b:7f:f7:5b:0a:a7:4f:c5:bf:cc:b0:5d: e0:6e:da:3a -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUPLrMq6kOMtZOa6ETb1H+G0ChKWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFDODNDOTJF RkRDQTI1RTAeFw0yNjA4MTQxMjQxNDhaFw0yNjA4MTUxNDA1NDhaMDMxMTAvBgNV BAMTKDc5NEJCMjVGMjAyOEFEQjgzNzlERDIzNDBGNjlENDgyNUQwMTdCM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsNNN6707+oInTCKKcMKduS4q KM5nr+wZ3cQCTH+Mk6g9j4xKj26rd9rURbmns14LmIeLV6Bag4IwlAzSs5R+FoLD 3arPPGNct641jtnnJ0nOmYrhUieUD+dtfamXrkVJUotLBEdlaw4HCOFTxLpT9hvK hAJ4rjL0lccqF9BSnLQIaUIWnFDITvOeihzOp63ytgZLj3elUbc+hukmTrYxbkDf Ld9Mi56wSnznKEyZslvfUaRP7ZCud1TOnlr84P9k3CatuWmHzm3KshfMb6Xjc45C WCfsFxWELSVQ+0Cg6sBgR5wwC8VPF+2Anbeei1M3Sg3qq8OFpuWyGWanFIcLAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUeUuyXyAorbg3ndI0D2nUgl0BezowHwYDVR0j BBgwFoAUN7xVxVOZca+49nCegcg8ku/col4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJFQUNI OS8wLzM3QkM1NUM1NTM5OTcxQUZCOEY2NzA5RTgxQzgzQzkyRUZEQ0EyNUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFD ODNDOTJFRkRDQTI1RS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JSRUFDSDkvMC8zN0JDNTVDNTUz OTk3MUFGQjhGNjcwOUU4MUM4M0M5MkVGRENBMjVFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX9U624G 3ltEdzpjH4LiEw3Lz2r0rjZHBKgOn32nwiSlmSFjXUWxNHqXFgyGlHqbU1VDQOBV TYBg79d9ADGhr0+Bd3W2XrMIYWSM19wfAhU3qCKYYtuz2rxEOnduodi9VMwl4OAf FVhzxog9RI2mGlmQc8YEoAiLHW12UASsOXokzpZSQYJZSipI/W8gU9Y0TwW+gIg5 518N80Do43BtOK/YEYDsvhgwvcmalH7ZUmRFjrqtsGjQHeiYY2QbpL7g31U/RKEi 7VJB80VSNcvL33M437hUGoAI57W3OAO70dy0fQRTSfgTdDSQ4mRYzZJfa3/3Wwqn T8W/zLBd4G7aOg== -----END CERTIFICATE-----Generated at Sat Aug 15 05:38:17 2026 by rpki-client