$ rpki-client -vvvf rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft File: 37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft (raw, json) Hash identifier: xN0u051XT10upI8lXU6gSoeMQiWAS6Mtp2w+4hst4dw= Subject key identifier: F2:20:49:39:A4:99:D7:BC:0F:8A:4D:EF:CC:2C:9F:FF:F4:85:07:56 Authority key identifier: 37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E Certificate issuer: /CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E Certificate serial: 35FA45DCBA5B42D41BFAAAF01E2439B34D852900 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft Manifest number: B7 Signing time: Tue 22 Sep 2026 02:38:28 +0000 Manifest this update: Tue 22 Sep 2026 02:33:28 +0000 Manifest next update: Wed 23 Sep 2026 02:46:28 +0000 Files and hashes: 1: 37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl (hash: LziX9RGBUpsmJF9HiXwmN84MbxkH+aLAfoggdJDq7mU=) 2: 3136332e3132382e37362e302f32332d3234203d3e203332353935.roa (hash: K7N8j7vo0GWBUJ7KcOfXRKUesPEQd6IuNZ46Edb07vs=) 3: 323030313a6466653a3a2f33322d3438203d3e2039393233.roa (hash: pgrYZOajKzQyKCkN+wjloDZT1L0F29LlCuW5K22DqWg=) 4: 323030313a6466653a3a2f33322d3438203d3e203332353935.roa (hash: hjb2b9nxxhACSmVNPNNAjbUPMZe7O7X8gXcKsWiqcrg=) 5: 3136332e3132382e37372e302f32342d3234203d3e20313937353337.roa (hash: mlh0L4cv9acKEJ/qOZgzfu+K5lGDak9tmXUoIiAOhVA=) 6: 3136332e3132382e37362e302f32332d3234203d3e2039393233.roa (hash: HcCrgyPQZ3iRC6R4Dmajnn3+LwU9SzxebMyYhDSTtJ0=) 7: 3136332e3132382e37372e302f32342d3234203d3e20323032373336.roa (hash: TfpMHl3tbMw4P8soG2o7vLNtNm7H+J+gz5LksyActPg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:fa:45:dc:ba:5b:42:d4:1b:fa:aa:f0:1e:24:39:b3:4d:85:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E Validity Not Before: Sep 22 02:33:28 2026 GMT Not After : Sep 23 02:46:28 2026 GMT Subject: CN=F2204939A499D7BC0F8A4DEFCC2C9FFFF4850756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b3:7d:ad:69:c5:f4:d5:a6:23:d0:3f:df:e7: 7b:22:b2:fc:14:dc:b1:47:26:c8:9a:70:a8:21:ad: 50:bb:40:89:b5:ee:02:60:3b:7c:79:8a:d6:d1:b3: 74:04:8d:5a:dc:1e:e8:24:eb:ad:f6:87:e4:e7:40: 4e:3e:0d:44:f9:41:8d:0e:75:dd:ef:3c:34:9b:b2: e7:be:a6:7b:81:ec:70:30:84:7a:67:7f:d4:04:68: 98:aa:92:d6:90:ec:3a:dd:b7:63:f9:aa:50:1e:68: 6c:2b:df:5b:97:5e:e5:18:ae:f8:ce:1e:cb:c0:47: db:fd:19:e2:d4:52:ba:86:03:cb:5b:6f:85:9f:02: d8:62:69:c0:df:dd:ad:eb:f2:27:81:8a:cb:33:57: f5:f0:25:93:fa:23:12:e0:36:bf:9b:bd:2b:51:b0: 7b:8a:b2:3c:a1:36:35:a2:85:84:54:14:71:48:56: b5:f5:80:27:77:31:6d:16:5a:e1:59:a4:70:2e:99: 22:5e:e5:22:1f:d5:2b:bc:91:d7:f3:a0:5a:bc:09: 7d:6d:4b:5c:a5:ae:f9:be:f2:70:8e:f1:26:cb:7c: bb:85:98:a4:e7:f5:c7:b1:0b:5f:cb:86:fc:7d:6b: 4f:d3:b6:0f:dd:b0:f1:9e:74:75:7e:75:96:8f:99: a1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:20:49:39:A4:99:D7:BC:0F:8A:4D:EF:CC:2C:9F:FF:F4:85:07:56 X509v3 Authority Key Identifier: keyid:37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:1a:a8:8d:c1:eb:54:f6:b5:16:a4:2f:9e:6b:32:1c:75:6f: 90:3a:a2:5b:33:46:34:f8:db:10:88:e0:f1:e4:3d:7e:a8:12: ba:60:d2:7b:7e:65:ab:d7:46:c4:97:bb:20:c7:2b:c7:7f:38: c0:20:df:3b:17:ac:1c:37:63:b8:b8:59:12:a7:f2:75:05:b5: 5e:37:d2:c2:b5:02:94:58:27:ee:a0:58:00:d2:bb:dc:c1:f4: a7:36:3d:95:2a:f2:4b:26:e7:62:6c:f9:bb:2f:87:1b:89:6c: d9:04:6f:73:e0:9f:6c:3d:89:d1:fc:b9:6f:65:4b:f8:df:f1: ed:c2:30:b7:1c:51:f3:b5:95:a9:cb:28:5d:b5:bb:00:80:2e: da:64:f4:2a:dd:bc:d6:19:40:31:22:ec:b6:52:d9:70:bf:b6: d2:35:84:7c:33:f1:ac:5e:dd:36:9f:49:47:e2:f8:4e:42:c4: a0:65:a1:26:e5:ff:48:6e:3c:9e:4e:0e:83:3f:de:18:54:ce: fd:96:c1:de:f8:a0:13:2b:e3:15:e7:4d:79:9a:8d:4f:fb:32: e3:e0:59:7a:4b:a0:3e:fb:f7:f0:e2:07:b2:c5:8c:c8:2f:ce: ed:dc:14:42:0e:2e:ba:36:db:b5:83:d1:5f:cf:95:f4:b2:df: 89:89:46:a0 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUNfpF3LpbQtQb+qrwHiQ5s02FKQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFDODNDOTJF RkRDQTI1RTAeFw0yNjA5MjIwMjMzMjhaFw0yNjA5MjMwMjQ2MjhaMDMxMTAvBgNV BAMTKEYyMjA0OTM5QTQ5OUQ3QkMwRjhBNERFRkNDMkM5RkZGRjQ4NTA3NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFs32tacX01aYj0D/f53sisvwU 3LFHJsiacKghrVC7QIm17gJgO3x5itbRs3QEjVrcHugk6632h+TnQE4+DUT5QY0O dd3vPDSbsue+pnuB7HAwhHpnf9QEaJiqktaQ7Drdt2P5qlAeaGwr31uXXuUYrvjO HsvAR9v9GeLUUrqGA8tbb4WfAthiacDf3a3r8ieBisszV/XwJZP6IxLgNr+bvStR sHuKsjyhNjWihYRUFHFIVrX1gCd3MW0WWuFZpHAumSJe5SIf1Su8kdfzoFq8CX1t S1ylrvm+8nCO8SbLfLuFmKTn9cexC1/Lhvx9a0/Ttg/dsPGedHV+dZaPmaGLAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQU8iBJOaSZ17wPik3vzCyf//SFB1YwHwYDVR0j BBgwFoAUN7xVxVOZca+49nCegcg8ku/col4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJFQUNI OS8wLzM3QkM1NUM1NTM5OTcxQUZCOEY2NzA5RTgxQzgzQzkyRUZEQ0EyNUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFD ODNDOTJFRkRDQTI1RS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JSRUFDSDkvMC8zN0JDNTVDNTUz OTk3MUFGQjhGNjcwOUU4MUM4M0M5MkVGRENBMjVFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASBqojcHr VPa1FqQvnmsyHHVvkDqiWzNGNPjbEIjg8eQ9fqgSumDSe35lq9dGxJe7IMcrx384 wCDfOxesHDdjuLhZEqfydQW1XjfSwrUClFgn7qBYANK73MH0pzY9lSrySybnYmz5 uy+HG4ls2QRvc+CfbD2J0fy5b2VL+N/x7cIwtxxR87WVqcsoXbW7AIAu2mT0Kt28 1hlAMSLstlLZcL+20jWEfDPxrF7dNp9JR+L4TkLEoGWhJuX/SG48nk4Ogz/eGFTO /ZbB3vigEyvjFedNeZqNT/sy4+BZekugPvv38OIHssWMyC/O7dwUQg4uujbbtYPR X8+V9LLfiYlGoA== -----END CERTIFICATE-----Generated at Tue Sep 22 16:17:21 2026 by rpki-client