$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft File: 7F09BA8E95F4407620647B82A775E9C71807F66F.mft (raw, json) Hash identifier: 7raU5XcKAyIpyDxUvYyuE0u8w140elM5f0ZQfPc6c0U= Subject key identifier: CB:BE:09:6D:8A:B7:F7:5E:D1:DC:A5:38:0E:61:71:0B:50:EA:30:18 Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 077F576E3FF104DA59284AF90E111F205D2FE610 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft Manifest number: 2B Signing time: Wed 23 Sep 2026 15:23:08 +0000 Manifest this update: Wed 23 Sep 2026 15:18:08 +0000 Manifest next update: Thu 24 Sep 2026 17:02:08 +0000 Files and hashes: 1: 7F09BA8E95F4407620647B82A775E9C71807F66F.crl (hash: T97/e0rPffGS962cefWw6kwHlNZ+613Q1W+i9u5NUYM=) 2: 3230332e3132312e3232342e302f32302d3234203d3e2034373830.roa (hash: v24846ZMc+9mp+wpeTl2YRx8kdrUozogRpm6tDj9RqA=) 3: 3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa (hash: n5352g6Ik4h5sMcfAQRtmkDM+UGy7/md/q0xICjyUFo=) 4: 3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa (hash: 8Bl8haU1F0vIWafoewutukrqivPDgHbSfez5w+rXbAk=) 5: 3135302e3132392e37322e302f32322d3234203d3e203138343139.roa (hash: 1vLg0RhKAOiWHPuZCXExG5dOGIqZKjzG1SikPX/DElo=) 6: 3230332e3132312e3234302e302f32302d3234203d3e2034373830.roa (hash: S3KOeJqer390u+4j9gUhzn/5mAOL6ZHJUcPQ8Fvcld0=) 7: 3132342e3130392e3131322e302f32302d3234203d3e2034373830.roa (hash: K2CnPWCCQSIR8MzBRJhfVE8C5iYS5C2S0yQ5v7j55mo=) 8: 3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa (hash: Hak2Kjh6kJ7ksPJnjjQX/qj2mj03vkETTEsjCwHEy1k=) 9: 323430323a323538303a3a2f33322d3332203d3e2034373830.roa (hash: nxAXU+J3+lv7KKuFPTwdVfXIg9/Ct9RdTZh/ggk/XFw=) 10: 3135302e3132392e37322e302f32322d3234203d3e2034373830.roa (hash: 3TQpzVu5Veh0BPE+Fut/ckTh8jyTHx55c+PPcpVkhtw=) 11: 3135302e3132392e3232382e302f32322d3234203d3e2034373830.roa (hash: q9PJ3PsyhSTPLS/vMO94ePBZNqEjZtU9gQFNirsIHzs=) 12: 36312e36302e3139322e302f32302d3234203d3e203138343139.roa (hash: 4pLDZrJuEuhbhG4EUR3OtcCDkbTjTBmo/ah6+5srjF4=) 13: 3138302e3231342e3137362e302f32302d3234203d3e203138343139.roa (hash: VRAV4obUDBldGo4yoQu7Ex5sF4P4Hx2wmUYoif3xgL0=) 14: 3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa (hash: tzvs9QrCz3ljL77OIc0uAPrT5KVs/VdV4UBc+0F7yGM=) 15: 36312e36302e3139322e302f32302d3234203d3e2034373830.roa (hash: A0M4ifQ7o+lnecTrRQ3fAKKqExgyt7CABWym/XPUf7U=) 16: 3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa (hash: AHKpE865GlsG7ePMxcW5/yf6Kw0p3VGx6fJVKAitAX4=) 17: 3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa (hash: bY0NXv0PHRUL6Unr7YOWL3dkWK/NFv0qutXeYULSTOo=) 18: 323430323a323538303a3a2f33322d3332203d3e203138343139.roa (hash: 58Gd6eOLAXQyKRDaHjMyHFXtUb8aKfwzLrP5Psh4j8w=) 19: 3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa (hash: rSTcGPlrK4f1QAi6H1GST1AhRvS0/+BR4n5y55vtsAc=) 20: 3130332e3233342e3230342e302f32322d3234203d3e203138343139.roa (hash: kLLB3nMudzNuO9rk3m0i/2MoWQ9TxbGykcKJQdePmsY=) 21: 3130332e3233342e3230342e302f32322d3234203d3e2034373830.roa (hash: UbUVa/yQ7MUIaVi+ya26GGi5eJWlXqH34Za5AVxQ9Zc=) 22: 3230332e3132312e3234302e302f32302d3234203d3e203138343139.roa (hash: kpSiUGCscDYyCcHy/chJfosfR60d3BlDLVwnm6X4EKU=) 23: 3135302e3132392e3232382e302f32322d3234203d3e203138343139.roa (hash: L4OqGHOHvoiFD4en8FR1S9taD+sTsqdfhZvgnUI17GY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:7f:57:6e:3f:f1:04:da:59:28:4a:f9:0e:11:1f:20:5d:2f:e6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 23 15:18:08 2026 GMT Not After : Sep 24 17:02:08 2026 GMT Subject: CN=CBBE096D8AB7F75ED1DCA5380E61710B50EA3018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:f5:3f:dc:1f:0d:cf:c7:07:ba:a3:b4:f8: 59:4e:7b:b0:b5:0b:f6:48:a6:64:c3:69:8d:63:da: 7e:1f:64:b1:68:e0:2a:d0:23:30:fc:e3:78:84:e0: 4c:d7:27:a6:b1:1c:c6:d4:71:5a:8b:59:7c:8f:0d: 19:28:79:66:94:12:57:0d:35:aa:45:49:4d:8c:43: 0a:7f:19:5a:56:80:b9:fa:9b:71:38:e2:30:a1:9d: 1d:13:82:01:e9:26:cc:ac:a1:f5:9c:31:6c:c8:be: 8b:82:93:a9:5c:65:d3:c6:01:f6:d7:8d:78:58:e7: 06:f7:bb:b4:2e:ce:fa:28:fa:05:b6:0c:e3:32:55: c5:bc:aa:51:2d:3d:b8:25:a5:d9:db:86:76:44:54: 93:83:28:96:2c:bf:46:7d:0b:22:7c:d2:d1:6d:e9: f6:95:7a:f0:95:9f:9e:4f:08:fd:cf:70:db:95:d4: 34:6e:7f:58:75:5d:dc:d3:d9:2e:18:82:a8:a9:b2: 79:71:7e:08:09:0c:a5:20:ed:2f:82:23:96:49:fa: ca:48:b1:cd:de:c4:72:9d:e9:a7:e4:b6:b6:d2:43: 28:8d:dc:d5:2f:4a:ad:88:7e:ed:f7:cd:e5:29:72: a2:3a:0a:06:50:30:8b:89:77:1b:59:07:05:a0:4a: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BE:09:6D:8A:B7:F7:5E:D1:DC:A5:38:0E:61:71:0B:50:EA:30:18 X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b9:cf:c9:47:45:d8:b8:0f:2a:5f:18:d7:76:a6:77:cd:bf: 84:42:b8:ed:b7:2a:86:2f:d2:14:9a:25:2c:c0:6f:35:30:1d: f3:6d:30:e9:6b:ea:93:3b:01:83:97:82:33:a7:98:ca:d3:02: 91:f8:51:58:c9:98:0c:28:04:a5:73:f9:d0:ec:4f:2c:16:78: 12:18:7b:9c:b1:98:36:2f:82:83:e9:12:4c:b2:c1:59:d3:0e: 92:2f:49:fc:74:0a:6f:d6:d2:da:c8:2b:bc:46:f3:fb:59:59: 45:4b:0c:3f:40:23:ac:b8:ee:8d:ca:02:ac:4c:8d:c8:85:50: c6:35:de:3f:6d:4d:24:8a:e6:27:d6:78:e6:74:ff:ca:8c:77: 5a:4f:8a:b2:d8:03:bf:c7:84:73:ae:2f:e9:87:ae:25:a1:70: de:56:1d:bb:d5:a4:3d:9d:45:60:a4:66:50:9e:53:68:38:52: 2e:2f:26:32:07:9a:e9:87:dc:8f:d0:86:e6:2e:6b:af:de:7f: 9d:0e:a8:e3:2a:8c:c2:b7:aa:aa:d1:be:56:ac:7b:f9:70:f5: d9:ab:2d:d6:f4:6a:f4:1e:60:5b:6b:39:bf:74:56:ee:5e:7a: 82:59:b1:8a:13:82:3d:6d:b3:c5:94:44:91:a7:df:51:41:64: 59:55:08:ea -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUB39Xbj/xBNpZKEr5DhEfIF0v5hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MjMxNTE4MDhaFw0yNjA5MjQxNzAyMDhaMDMxMTAvBgNV BAMTKENCQkUwOTZEOEFCN0Y3NUVEMURDQTUzODBFNjE3MTBCNTBFQTMwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91vU/3B8Nz8cHuqO0+FlOe7C1 C/ZIpmTDaY1j2n4fZLFo4CrQIzD843iE4EzXJ6axHMbUcVqLWXyPDRkoeWaUElcN NapFSU2MQwp/GVpWgLn6m3E44jChnR0TggHpJsysofWcMWzIvouCk6lcZdPGAfbX jXhY5wb3u7Quzvoo+gW2DOMyVcW8qlEtPbglpdnbhnZEVJODKJYsv0Z9CyJ80tFt 6faVevCVn55PCP3PcNuV1DRuf1h1XdzT2S4YgqipsnlxfggJDKUg7S+CI5ZJ+spI sc3exHKd6afktrbSQyiN3NUvSq2Ifu33zeUpcqI6CgZQMIuJdxtZBwWgSujlAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUy74JbYq3917R3KU4DmFxC1DqMBgwHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzdGMDlCQThFOTVGNDQw NzYyMDY0N0I4MkE3NzVFOUM3MTgwN0Y2NkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+uc/JR0XYuA8q XxjXdqZ3zb+EQrjttyqGL9IUmiUswG81MB3zbTDpa+qTOwGDl4Izp5jK0wKR+FFY yZgMKASlc/nQ7E8sFngSGHucsZg2L4KD6RJMssFZ0w6SL0n8dApv1tLayCu8RvP7 WVlFSww/QCOsuO6NygKsTI3IhVDGNd4/bU0kiuYn1njmdP/KjHdaT4qy2AO/x4Rz ri/ph64loXDeVh271aQ9nUVgpGZQnlNoOFIuLyYyB5rph9yP0IbmLmuv3n+dDqjj KozCt6qq0b5WrHv5cPXZqy3W9Gr0HmBbazm/dFbuXnqCWbGKE4I9bbPFlESRp99R QWRZVQjq -----END CERTIFICATE-----Generated at Thu Sep 24 02:59:50 2026 by rpki-client