
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
File: 7F09BA8E95F4407620647B82A775E9C71807F66F.mft (raw, json)
Hash identifier: mUPp/7eFKpTifdPk2+GM3H8qvcKciEKBlqZ0qZMQRgo=
Subject key identifier: 52:A8:25:3E:C7:B8:9B:9D:70:FC:A2:5C:E1:9A:C0:F2:5F:7E:7E:57
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial: 582601A9853C0B57A93B754DE331A9CEF09B8CE0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
Manifest number: 3A
Signing time: Sun 04 Oct 2026 21:00:38 +0000
Manifest this update: Sun 04 Oct 2026 20:55:38 +0000
Manifest next update: Mon 05 Oct 2026 23:19:38 +0000
Files and hashes: 1: 323430323a323538303a3a2f33322d3332203d3e2034373830.roa (hash: nxAXU+J3+lv7KKuFPTwdVfXIg9/Ct9RdTZh/ggk/XFw=)
2: 3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa (hash: Hak2Kjh6kJ7ksPJnjjQX/qj2mj03vkETTEsjCwHEy1k=)
3: 3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa (hash: AHKpE865GlsG7ePMxcW5/yf6Kw0p3VGx6fJVKAitAX4=)
4: 3135302e3132392e3232382e302f32322d3234203d3e2034373830.roa (hash: q9PJ3PsyhSTPLS/vMO94ePBZNqEjZtU9gQFNirsIHzs=)
5: 7F09BA8E95F4407620647B82A775E9C71807F66F.crl (hash: wPbB7CBztxCGBGNE9DH4y6O+IHmmCpBK685qCiRFUtw=)
6: 3130332e3233342e3230342e302f32322d3234203d3e2034373830.roa (hash: UbUVa/yQ7MUIaVi+ya26GGi5eJWlXqH34Za5AVxQ9Zc=)
7: 3135302e3132392e3232382e302f32322d3234203d3e203138343139.roa (hash: L4OqGHOHvoiFD4en8FR1S9taD+sTsqdfhZvgnUI17GY=)
8: 3130332e3233342e3230342e302f32322d3234203d3e203138343139.roa (hash: kLLB3nMudzNuO9rk3m0i/2MoWQ9TxbGykcKJQdePmsY=)
9: 3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa (hash: bY0NXv0PHRUL6Unr7YOWL3dkWK/NFv0qutXeYULSTOo=)
10: 3135302e3132392e37322e302f32322d3234203d3e2034373830.roa (hash: 3TQpzVu5Veh0BPE+Fut/ckTh8jyTHx55c+PPcpVkhtw=)
11: 36312e36302e3139322e302f32302d3234203d3e203138343139.roa (hash: 4pLDZrJuEuhbhG4EUR3OtcCDkbTjTBmo/ah6+5srjF4=)
12: 36312e36302e3139322e302f32302d3234203d3e2034373830.roa (hash: A0M4ifQ7o+lnecTrRQ3fAKKqExgyt7CABWym/XPUf7U=)
13: 3230332e3132312e3232342e302f32302d3234203d3e2034373830.roa (hash: v24846ZMc+9mp+wpeTl2YRx8kdrUozogRpm6tDj9RqA=)
14: 3230332e3132312e3234302e302f32302d3234203d3e203138343139.roa (hash: kpSiUGCscDYyCcHy/chJfosfR60d3BlDLVwnm6X4EKU=)
15: 323430323a323538303a3a2f33322d3332203d3e203138343139.roa (hash: 58Gd6eOLAXQyKRDaHjMyHFXtUb8aKfwzLrP5Psh4j8w=)
16: 3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa (hash: rSTcGPlrK4f1QAi6H1GST1AhRvS0/+BR4n5y55vtsAc=)
17: 3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa (hash: tzvs9QrCz3ljL77OIc0uAPrT5KVs/VdV4UBc+0F7yGM=)
18: 3138302e3231342e3137362e302f32302d3234203d3e203138343139.roa (hash: VRAV4obUDBldGo4yoQu7Ex5sF4P4Hx2wmUYoif3xgL0=)
19: 3135302e3132392e37322e302f32322d3234203d3e203138343139.roa (hash: 1vLg0RhKAOiWHPuZCXExG5dOGIqZKjzG1SikPX/DElo=)
20: 3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa (hash: 8Bl8haU1F0vIWafoewutukrqivPDgHbSfez5w+rXbAk=)
21: 3230332e3132312e3234302e302f32302d3234203d3e2034373830.roa (hash: S3KOeJqer390u+4j9gUhzn/5mAOL6ZHJUcPQ8Fvcld0=)
22: 3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa (hash: n5352g6Ik4h5sMcfAQRtmkDM+UGy7/md/q0xICjyUFo=)
23: 3132342e3130392e3131322e302f32302d3234203d3e2034373830.roa (hash: K2CnPWCCQSIR8MzBRJhfVE8C5iYS5C2S0yQ5v7j55mo=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 23:19:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:26:01:a9:85:3c:0b:57:a9:3b:75:4d:e3:31:a9:ce:f0:9b:8c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Validity
Not Before: Oct 4 20:55:38 2026 GMT
Not After : Oct 5 23:19:38 2026 GMT
Subject: CN=52A8253EC7B89B9D70FCA25CE19AC0F25F7E7E57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d0:1f:46:40:2d:34:f2:07:a9:cd:97:03:d8:
cf:2b:ea:d9:02:4a:4d:83:cb:4f:6c:ed:b4:78:8e:
6c:10:46:2a:16:91:21:12:a0:23:68:d4:2a:a6:a9:
21:39:27:d8:9f:da:4a:8b:61:0a:71:fe:be:e8:38:
49:37:49:3c:90:14:fe:e5:96:73:f8:08:ba:2a:ae:
4e:89:9d:f4:82:aa:fe:21:15:9a:c6:e2:76:d1:a1:
68:41:2a:ed:51:b2:0f:a0:3b:fa:6f:e6:1a:5b:02:
39:c6:ac:b5:69:f0:d7:58:92:3a:da:1a:85:a3:e6:
da:6f:9e:10:75:26:68:f4:fa:47:d1:0a:17:c6:eb:
91:c3:49:36:60:60:e0:b2:e0:88:68:c3:c0:7a:25:
b7:da:b7:27:4c:57:24:90:c4:99:cb:5c:c2:48:cb:
6d:4a:93:c2:36:b1:0b:36:7e:1b:dc:23:c5:dc:04:
db:a7:4c:12:95:52:6e:ca:02:6b:c9:65:1b:f9:7a:
ef:b9:67:fa:47:7e:fe:fe:74:60:4f:26:d2:8a:ff:
b7:49:e2:09:b5:3e:8b:92:48:47:e4:42:18:e0:cf:
66:91:09:01:3d:fb:4e:03:57:21:95:48:7e:f6:72:
89:02:f5:69:f4:a4:ff:75:22:f3:63:4d:78:af:54:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A8:25:3E:C7:B8:9B:9D:70:FC:A2:5C:E1:9A:C0:F2:5F:7E:7E:57
X509v3 Authority Key Identifier:
keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:28:9e:da:c4:70:de:4a:b5:c8:94:9b:af:35:87:c5:e5:a7:
17:c3:55:28:b1:19:11:ed:bd:dc:29:72:f7:9c:52:9f:66:b5:
db:f4:99:d0:61:f2:f8:42:71:d8:7f:4e:a9:08:75:66:20:16:
84:c2:dd:48:42:1e:5d:f0:86:74:9d:c9:10:47:c6:6d:8b:5d:
47:25:a8:41:ef:16:2f:18:c8:57:79:90:45:65:ba:36:e8:40:
3c:62:7d:d1:d9:41:f1:61:69:c2:82:d5:d1:d0:a3:16:19:b0:
d5:c1:ae:d6:68:76:30:1f:e7:cb:ef:b8:e0:37:29:6d:9c:fc:
8d:82:33:9c:7f:c8:e1:64:37:72:9e:1e:8b:7f:99:3f:8c:cc:
0a:7b:4a:25:ce:a4:44:c4:c9:8f:63:3f:5f:ab:6f:87:14:a3:
9d:49:76:32:c0:6b:90:47:f2:9c:06:a2:d5:a4:e9:49:51:df:
49:da:41:93:cc:f9:05:ff:5c:75:8c:5b:67:eb:c7:d3:51:63:
dd:a2:05:29:ae:3d:51:88:59:c9:92:24:44:29:8d:35:49:c2:
0f:b8:05:a7:51:d6:bf:d6:10:2f:9b:34:75:58:fa:c1:17:01:
4c:9f:67:e7:08:68:6b:d5:ec:a6:07:ab:e9:0c:e7:1a:17:66:
a1:74:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:37:28 2026 by rpki-client