$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BREACH9/CXUPPf-QwQxrwEUShmfvhmMqlEU.mft File: CXUPPf-QwQxrwEUShmfvhmMqlEU.mft (raw, json) Hash identifier: 76MSogy7xj23KrNxQ1UIGiKUkXo29enuRcDBDoiq5HM= Subject key identifier: A3:CB:65:B5:80:40:F2:F9:24:6F:78:D9:37:B1:1B:65:36:A6:3C:00 Authority key identifier: 09:75:0F:3D:FF:90:C1:0C:6B:C0:45:12:86:67:EF:86:63:2A:94:45 Certificate issuer: /CN=09750F3DFF90C10C6BC045128667EF86632A9445 Certificate serial: 25 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CXUPPf-QwQxrwEUShmfvhmMqlEU.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BREACH9/CXUPPf-QwQxrwEUShmfvhmMqlEU.mft Manifest number: 25 Signing time: Thu 26 Mar 2026 22:28:31 +0000 Manifest this update: Thu 26 Mar 2026 22:28:31 +0000 Manifest next update: Fri 27 Mar 2026 04:28:31 +0000 Files and hashes: 1: CXUPPf-QwQxrwEUShmfvhmMqlEU.crl (hash: FGcxqvRapW1YKFqSbx7NiMEcEx+Mv2rHCS+UcFOM81g=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/BREACH9/CXUPPf-QwQxrwEUShmfvhmMqlEU.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/BREACH9/CXUPPf-QwQxrwEUShmfvhmMqlEU.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/CXUPPf-QwQxrwEUShmfvhmMqlEU.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 03:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09750F3DFF90C10C6BC045128667EF86632A9445 Validity Not Before: Mar 26 22:28:31 2026 GMT Not After : Mar 17 15:30:20 2027 GMT Subject: CN=A3CB65B58040F2F9246F78D937B11B6536A63C00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a7:f9:1f:26:b3:e2:5d:02:d5:c8:56:b7:94: 48:37:ec:fd:6f:ea:ea:36:8f:55:71:08:45:24:45: 64:6e:f1:66:e6:c0:af:44:de:a9:50:d8:8b:83:04: 64:42:2f:ea:c1:3a:d8:21:50:5e:be:35:ef:20:4c: f0:06:e9:55:1a:d2:a8:20:94:d0:3a:5b:48:b3:95: bc:4d:31:d5:5a:75:b7:ac:08:d1:49:14:22:bc:1c: 48:01:9c:aa:8b:39:ea:b8:a5:39:53:56:18:68:11: 08:d5:d9:55:be:9d:45:05:6d:5f:c9:c9:aa:47:dc: 26:e7:e5:c3:d9:b2:44:3c:c9:33:3d:0b:c9:ef:de: 33:64:15:4a:65:38:8e:56:46:16:01:af:28:9c:eb: 49:8f:29:42:a2:bf:2c:ff:4a:17:df:a3:b5:86:22: 8c:8f:53:a9:81:d5:b2:08:e2:ef:cf:1a:e0:93:b1: 85:0e:31:ce:83:43:ae:5c:8f:9c:4f:d4:e2:2c:27: 19:36:7a:13:a4:0c:b2:2c:a0:34:59:5c:85:aa:6b: 2b:1e:22:a6:2d:6b:69:e6:d2:1f:a5:1d:41:8e:24: 66:d0:77:fb:a9:c4:b6:92:13:70:e4:d6:5f:18:58: 53:cf:59:04:f0:a4:99:c9:d8:37:71:b7:99:01:4f: 91:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CB:65:B5:80:40:F2:F9:24:6F:78:D9:37:B1:1B:65:36:A6:3C:00 X509v3 Authority Key Identifier: keyid:09:75:0F:3D:FF:90:C1:0C:6B:C0:45:12:86:67:EF:86:63:2A:94:45 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BREACH9/CXUPPf-QwQxrwEUShmfvhmMqlEU.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CXUPPf-QwQxrwEUShmfvhmMqlEU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BREACH9/CXUPPf-QwQxrwEUShmfvhmMqlEU.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:24:58:7b:7b:7b:bd:f8:1d:08:92:75:9b:57:cb:fd:77:14: 8f:c8:08:68:29:09:12:89:72:7c:c7:84:1a:6c:56:6c:62:a5: ab:25:12:b5:0c:ef:25:b0:14:36:2b:f7:dc:60:b0:14:6f:6a: fb:a5:74:ba:9a:d1:a5:97:dc:1d:d7:2c:d7:33:76:1c:da:fc: 58:19:d0:bc:9e:e6:62:cf:24:34:60:2c:26:8b:30:0a:58:90: 60:82:64:0c:f4:32:0f:4c:b3:0e:96:5a:7c:a0:d0:7e:37:05: f4:5a:0b:8d:95:3c:61:d5:a5:e0:0c:2e:c8:06:43:b5:bf:fa: 50:61:2f:7a:cc:7a:2e:8c:20:7d:9f:cc:7e:20:8d:5e:d6:da: 0a:c6:35:8f:5c:d1:5f:8e:75:34:7a:76:a9:66:72:80:84:0f: 15:e6:86:94:e1:1a:a2:42:fc:2c:0e:6a:41:26:c7:b5:b4:ad: 47:2b:70:0a:09:04:60:b8:81:1c:24:2e:33:a9:7b:c5:cd:04: 49:2f:76:eb:22:0c:c7:89:0e:c1:1b:35:63:07:3a:c7:97:09: 70:0a:ec:f2:01:25:ff:84:ac:49:92:43:c7:e1:17:55:4a:4d: fe:d0:8b:fe:23:31:67:05:8d:21:3b:22:00:64:65:e3:ae:f3: 65:06:a2:d7 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwOTc1 MEYzREZGOTBDMTBDNkJDMDQ1MTI4NjY3RUY4NjYzMkE5NDQ1MB4XDTI2MDMyNjIy MjgzMVoXDTI3MDMxNzE1MzAyMFowMzExMC8GA1UEAxMoQTNDQjY1QjU4MDQwRjJG OTI0NkY3OEQ5MzdCMTFCNjUzNkE2M0MwMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL+n+R8ms+JdAtXIVreUSDfs/W/q6jaPVXEIRSRFZG7xZubAr0Te qVDYi4MEZEIv6sE62CFQXr417yBM8AbpVRrSqCCU0DpbSLOVvE0x1Vp1t6wI0UkU IrwcSAGcqos56rilOVNWGGgRCNXZVb6dRQVtX8nJqkfcJuflw9myRDzJMz0Lye/e M2QVSmU4jlZGFgGvKJzrSY8pQqK/LP9KF9+jtYYijI9TqYHVsgji788a4JOxhQ4x zoNDrlyPnE/U4iwnGTZ6E6QMsiygNFlchaprKx4ipi1raebSH6UdQY4kZtB3+6nE tpITcOTWXxhYU89ZBPCkmcnYN3G3mQFPkTECAwEAAaOCAgkwggIFMB0GA1UdDgQW BBSjy2W1gEDy+SRveNk3sRtlNqY8ADAfBgNVHSMEGDAWgBQJdQ89/5DBDGvARRKG Z++GYyqURTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ oE6GTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9CUkVBQ0g5 L0NYVVBQZi1Rd1F4cndFVVNobWZ2aG1NcWxFVS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvQ1hVUFBmLVF3UXhyd0VVU2htZnZobU1xbEVVLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQlJFQUNIOS9DWFVQUGYtUXdReHJ3RVVT aG1mdmhtTXFsRVUubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMu dHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA fyRYe3t7vfgdCJJ1m1fL/XcUj8gIaCkJEolyfMeEGmxWbGKlqyUStQzvJbAUNiv3 3GCwFG9q+6V0uprRpZfcHdcs1zN2HNr8WBnQvJ7mYs8kNGAsJoswCliQYIJkDPQy D0yzDpZafKDQfjcF9FoLjZU8YdWl4AwuyAZDtb/6UGEvesx6LowgfZ/MfiCNXtba CsY1j1zRX451NHp2qWZygIQPFeaGlOEaokL8LA5qQSbHtbStRytwCgkEYLiBHCQu M6l7xc0ESS926yIMx4kOwRs1Ywc6x5cJcArs8gEl/4SsSZJDx+EXVUpN/tCL/iMx ZwWNITsiAGRl467zZQai1w== -----END CERTIFICATE-----Generated at Fri Mar 27 01:54:05 2026 by rpki-client