$ rpki-client -vvvf rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft File: 37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft (raw, json) Hash identifier: D1uOR8zPGRCfC1XIl6EQehI4FTEvKqRrFCtoMpTaaJo= Subject key identifier: B9:2C:D0:ED:7F:05:38:99:2F:4E:08:62:5D:6A:3D:9E:4A:C5:43:C3 Authority key identifier: 37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E Certificate issuer: /CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E Certificate serial: 5E1F624C7C63BD27B633F4F279050261A701ADA5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft Manifest number: CB Signing time: Wed 07 Oct 2026 02:10:09 +0000 Manifest this update: Wed 07 Oct 2026 02:05:09 +0000 Manifest next update: Thu 08 Oct 2026 02:19:09 +0000 Files and hashes: 1: 3136332e3132382e37372e302f32342d3234203d3e20313937353337.roa (hash: mlh0L4cv9acKEJ/qOZgzfu+K5lGDak9tmXUoIiAOhVA=) 2: 323030313a6466653a3a2f33322d3438203d3e203332353935.roa (hash: hjb2b9nxxhACSmVNPNNAjbUPMZe7O7X8gXcKsWiqcrg=) 3: 37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl (hash: xEdzkJhXqafkV8fl6a6WKHvVPs+QVXNmj0F6tIuGEEM=) 4: 323030313a6466653a3a2f33322d3438203d3e2039393233.roa (hash: pgrYZOajKzQyKCkN+wjloDZT1L0F29LlCuW5K22DqWg=) 5: 3136332e3132382e37372e302f32342d3234203d3e20323032373336.roa (hash: TfpMHl3tbMw4P8soG2o7vLNtNm7H+J+gz5LksyActPg=) 6: 3136332e3132382e37362e302f32332d3234203d3e2039393233.roa (hash: HcCrgyPQZ3iRC6R4Dmajnn3+LwU9SzxebMyYhDSTtJ0=) 7: 3136332e3132382e37362e302f32332d3234203d3e203332353935.roa (hash: K7N8j7vo0GWBUJ7KcOfXRKUesPEQd6IuNZ46Edb07vs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 02:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:1f:62:4c:7c:63:bd:27:b6:33:f4:f2:79:05:02:61:a7:01:ad:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E Validity Not Before: Oct 7 02:05:09 2026 GMT Not After : Oct 8 02:19:09 2026 GMT Subject: CN=B92CD0ED7F0538992F4E08625D6A3D9E4AC543C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:cd:b5:46:09:56:b7:ed:90:95:a2:32:8b: 90:3f:87:e4:e8:cf:af:6a:c2:8b:70:dd:d7:2b:54: 9c:69:f5:62:84:8b:8a:0b:89:90:d1:8d:da:38:ee: 8e:9e:83:2a:99:18:b8:8e:78:e4:4c:40:18:83:97: cb:36:0f:89:23:2a:b1:79:63:d6:39:5b:a3:5c:a7: 37:71:58:bf:04:1d:c8:33:3e:0c:6b:9b:32:03:a8: a9:17:b1:2e:0c:aa:22:d5:f8:84:4a:87:33:09:dd: ae:bc:28:a6:9d:ba:d9:51:de:3e:8c:8e:47:4f:6b: 0a:14:46:04:b1:3d:4c:a4:f0:d6:c0:6c:fe:0e:4b: 24:e3:3e:57:74:98:15:73:03:3b:90:95:34:9a:af: 82:6a:41:62:3a:de:9b:e2:61:a1:c2:d9:7f:58:cd: d3:ee:b3:f2:6e:5c:1f:52:3f:9b:fb:cb:24:c3:b5: fe:c0:e3:9c:3c:24:87:2c:76:fa:fd:68:6f:28:2c: a8:67:f0:94:65:6f:b1:9b:0a:e4:7e:5e:59:2b:46: 8a:62:73:35:9c:5b:53:c4:7b:0c:09:27:64:59:e2: e5:bc:10:67:04:8b:11:3f:4c:11:74:71:5b:96:e4: 39:9d:54:1f:94:87:fc:53:49:9e:db:f7:00:98:98: 55:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2C:D0:ED:7F:05:38:99:2F:4E:08:62:5D:6A:3D:9E:4A:C5:43:C3 X509v3 Authority Key Identifier: keyid:37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:55:d6:30:bf:16:40:0e:13:9b:cb:63:c4:bd:6c:9f:dc:5d: 3c:6f:78:1f:e7:85:6a:62:ea:a7:10:42:18:30:c4:ff:a2:87: 7c:02:b3:bf:c9:f4:5f:dd:d4:d6:9c:58:d2:04:b2:5b:b0:72: 19:20:a2:ce:29:77:28:6d:5a:db:75:b0:3e:e5:00:55:e5:f2: 23:db:97:2a:b6:09:8b:24:6b:df:a9:37:a6:9c:86:2a:ea:78: 46:c9:3e:a2:95:53:00:5a:c4:4c:e5:43:62:d3:37:02:f1:6f: 09:d2:8b:16:57:dc:0b:37:b1:24:05:3e:7a:b5:a0:81:d8:16: 9a:8f:fb:88:f3:30:bb:ee:85:8e:f1:21:2e:87:47:d0:b8:24: 6d:c2:be:0b:8b:0f:47:6c:a0:e1:8f:a3:71:b4:13:4b:e4:d3: db:04:8f:81:18:be:85:18:d6:21:f5:22:3a:7f:95:7e:99:9d: b0:ec:77:64:49:04:5b:50:aa:e8:4e:dc:75:8a:c2:b9:5d:aa: 10:d4:2b:17:61:04:34:ae:d5:54:39:07:dd:c0:e6:e2:41:66: 5d:7e:58:ea:b3:4e:e4:91:5a:3c:7e:c8:1e:e4:38:7f:cf:08: cf:a1:78:74:23:25:f6:90:d3:87:16:3b:df:ce:c5:b4:5e:07: 04:ae:6d:80 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUXh9iTHxjvSe2M/TyeQUCYacBraUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFDODNDOTJF RkRDQTI1RTAeFw0yNjEwMDcwMjA1MDlaFw0yNjEwMDgwMjE5MDlaMDMxMTAvBgNV BAMTKEI5MkNEMEVEN0YwNTM4OTkyRjRFMDg2MjVENkEzRDlFNEFDNTQzQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgys21RglWt+2QlaIyi5A/h+To z69qwotw3dcrVJxp9WKEi4oLiZDRjdo47o6egyqZGLiOeORMQBiDl8s2D4kjKrF5 Y9Y5W6NcpzdxWL8EHcgzPgxrmzIDqKkXsS4MqiLV+IRKhzMJ3a68KKadutlR3j6M jkdPawoURgSxPUyk8NbAbP4OSyTjPld0mBVzAzuQlTSar4JqQWI63pviYaHC2X9Y zdPus/JuXB9SP5v7yyTDtf7A45w8JIcsdvr9aG8oLKhn8JRlb7GbCuR+XlkrRopi czWcW1PEewwJJ2RZ4uW8EGcEixE/TBF0cVuW5DmdVB+Uh/xTSZ7b9wCYmFVTAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUuSzQ7X8FOJkvTghiXWo9nkrFQ8MwHwYDVR0j BBgwFoAUN7xVxVOZca+49nCegcg8ku/col4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJFQUNI OS8wLzM3QkM1NUM1NTM5OTcxQUZCOEY2NzA5RTgxQzgzQzkyRUZEQ0EyNUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFD ODNDOTJFRkRDQTI1RS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JSRUFDSDkvMC8zN0JDNTVDNTUz OTk3MUFGQjhGNjcwOUU4MUM4M0M5MkVGRENBMjVFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1XWML8W QA4Tm8tjxL1sn9xdPG94H+eFamLqpxBCGDDE/6KHfAKzv8n0X93U1pxY0gSyW7By GSCizil3KG1a23WwPuUAVeXyI9uXKrYJiyRr36k3ppyGKup4Rsk+opVTAFrETOVD YtM3AvFvCdKLFlfcCzexJAU+erWggdgWmo/7iPMwu+6FjvEhLodH0LgkbcK+C4sP R2yg4Y+jcbQTS+TT2wSPgRi+hRjWIfUiOn+VfpmdsOx3ZEkEW1Cq6E7cdYrCuV2q ENQrF2EENK7VVDkH3cDm4kFmXX5Y6rNO5JFaPH7IHuQ4f88Iz6F4dCMl9pDThxY7 387FtF4HBK5tgA== -----END CERTIFICATE-----Generated at Wed Oct 7 19:29:01 2026 by rpki-client