$ rpki-client -vvf rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft File: 37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft (raw, json) Hash identifier: UkT29Te4J4f8saEANEVQXumsBHgac5p5uGF/Na7E4V0= Subject key identifier: 55:27:F2:17:85:B0:09:C4:5F:BD:1E:4B:06:7E:B8:D9:18:7E:87:A0 Authority key identifier: 37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E Certificate issuer: /CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E Certificate serial: 79817372BA2136FCC0C1FD478D5C2900C7CBBFE3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft Manifest number: 6D Signing time: Tue 28 Jul 2026 16:14:24 +0000 Manifest this update: Tue 28 Jul 2026 16:09:24 +0000 Manifest next update: Wed 29 Jul 2026 18:05:24 +0000 Files and hashes: 1: 3136332e3132382e37362e302f32332d3234203d3e203332353935.roa (hash: K7N8j7vo0GWBUJ7KcOfXRKUesPEQd6IuNZ46Edb07vs=) 2: 323030313a6466653a3a2f33322d3438203d3e203332353935.roa (hash: hjb2b9nxxhACSmVNPNNAjbUPMZe7O7X8gXcKsWiqcrg=) 3: 3136332e3132382e37362e302f32332d3234203d3e2039393233.roa (hash: HcCrgyPQZ3iRC6R4Dmajnn3+LwU9SzxebMyYhDSTtJ0=) 4: 37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl (hash: mIKXpeTFMdFzOxkEbfNzd7jv0ZrJAq2XTzYpruJfQIw=) 5: 3136332e3132382e37372e302f32342d3234203d3e20313937353337.roa (hash: mlh0L4cv9acKEJ/qOZgzfu+K5lGDak9tmXUoIiAOhVA=) 6: 323030313a6466653a3a2f33322d3438203d3e2039393233.roa (hash: pgrYZOajKzQyKCkN+wjloDZT1L0F29LlCuW5K22DqWg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:81:73:72:ba:21:36:fc:c0:c1:fd:47:8d:5c:29:00:c7:cb:bf:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37BC55C5539971AFB8F6709E81C83C92EFDCA25E Validity Not Before: Jul 28 16:09:24 2026 GMT Not After : Jul 29 18:05:24 2026 GMT Subject: CN=5527F21785B009C45FBD1E4B067EB8D9187E87A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:98:92:be:37:21:93:0e:a2:2b:dd:3a:46:33: 9f:b1:0f:75:5f:b7:f7:a0:56:f3:60:16:f9:a8:22: ec:5d:94:64:64:75:3d:6f:3c:a9:c3:9b:a2:7e:b4: 25:5b:86:af:6b:36:70:fb:57:3d:9a:51:c8:18:71: 7f:12:29:b7:d9:00:6e:af:86:3c:49:bf:49:c5:a5: 62:53:f0:17:95:e2:4c:b0:ab:df:87:a5:d3:3f:8c: 82:a3:34:c8:69:8e:c9:e4:15:71:73:fc:3b:f2:47: 0d:40:08:5d:ca:2c:c3:a1:a7:20:16:3f:f0:08:2c: 17:cc:41:fd:e8:50:2f:f2:d4:91:00:66:63:2e:6e: 7a:27:89:84:6b:03:e4:7c:25:e3:87:3a:2c:fc:fb: 57:cf:b3:6e:18:ac:57:a5:23:74:3e:95:3d:30:6a: 5e:bc:3d:ea:1b:16:d8:2a:b6:3e:55:39:80:64:f6: 4d:9a:fc:5a:88:7b:c0:15:8a:05:73:98:0b:13:e0: e3:2c:6b:ac:7a:18:d8:5f:b1:5c:bf:37:bd:31:57: a7:d1:30:d9:20:5e:ff:b4:cc:e8:43:8d:b3:6d:0e: 1a:0f:7a:0d:55:db:34:52:ff:90:2c:d9:e1:4c:55: 6d:77:6c:82:4b:82:93:8e:6f:79:74:96:5d:2b:58: 2a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:27:F2:17:85:B0:09:C4:5F:BD:1E:4B:06:7E:B8:D9:18:7E:87:A0 X509v3 Authority Key Identifier: keyid:37:BC:55:C5:53:99:71:AF:B8:F6:70:9E:81:C8:3C:92:EF:DC:A2:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BREACH9/0/37BC55C5539971AFB8F6709E81C83C92EFDCA25E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:da:cb:42:5a:dd:cc:99:7c:99:74:36:5d:6e:4e:96:7d:c0: 15:cb:b9:4c:ef:22:be:a3:2b:0e:44:18:53:a7:eb:5e:1c:3e: 82:95:f1:71:39:0d:9a:1d:f5:8d:c3:aa:b2:e1:3d:35:1e:86: 4f:d8:1c:fa:5c:d3:a3:95:0b:d1:f5:d7:b0:2b:26:0e:c8:85: 37:74:fa:71:0f:e6:8d:ba:be:4b:bc:3f:a7:68:2e:49:42:de: 41:19:e5:56:6b:8a:b2:61:32:2d:43:45:6f:2d:eb:80:34:71: cf:48:fd:90:52:e9:02:b7:81:99:43:d4:fd:8b:82:ec:57:e6: 9f:f7:d1:23:31:21:67:ab:be:ff:1a:4a:29:d5:ad:d9:5d:9c: 6e:58:f1:c4:98:59:27:df:80:95:af:49:32:79:00:8f:97:91: 9f:95:7b:04:d4:98:0a:99:d2:34:b0:ae:32:1d:32:45:bf:c6: 8d:cb:4a:f6:4d:9f:ae:70:ca:0a:d8:9e:a3:ee:c5:3b:03:1d: 2b:3f:b1:13:76:d1:14:e2:20:7f:96:8c:13:1e:f1:bc:8e:dc: a9:e4:3b:04:59:dc:d6:80:0f:2f:8f:5c:43:f0:a4:ff:7e:c2: bf:d4:27:c2:f5:37:c1:6d:ee:af:6e:86:d9:4d:9a:3d:da:3e: 5b:d8:d7:a5 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUeYFzcrohNvzAwf1HjVwpAMfLv+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFDODNDOTJF RkRDQTI1RTAeFw0yNjA3MjgxNjA5MjRaFw0yNjA3MjkxODA1MjRaMDMxMTAvBgNV BAMTKDU1MjdGMjE3ODVCMDA5QzQ1RkJEMUU0QjA2N0VCOEQ5MTg3RTg3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChmJK+NyGTDqIr3TpGM5+xD3Vf t/egVvNgFvmoIuxdlGRkdT1vPKnDm6J+tCVbhq9rNnD7Vz2aUcgYcX8SKbfZAG6v hjxJv0nFpWJT8BeV4kywq9+HpdM/jIKjNMhpjsnkFXFz/DvyRw1ACF3KLMOhpyAW P/AILBfMQf3oUC/y1JEAZmMubnoniYRrA+R8JeOHOiz8+1fPs24YrFelI3Q+lT0w al68PeobFtgqtj5VOYBk9k2a/FqIe8AVigVzmAsT4OMsa6x6GNhfsVy/N70xV6fR MNkgXv+0zOhDjbNtDhoPeg1V2zRS/5As2eFMVW13bIJLgpOOb3l0ll0rWCqXAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUVSfyF4WwCcRfvR5LBn642Rh+h6AwHwYDVR0j BBgwFoAUN7xVxVOZca+49nCegcg8ku/col4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJFQUNI OS8wLzM3QkM1NUM1NTM5OTcxQUZCOEY2NzA5RTgxQzgzQzkyRUZEQ0EyNUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMzdCQzU1QzU1Mzk5NzFBRkI4RjY3MDlFODFD ODNDOTJFRkRDQTI1RS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JSRUFDSDkvMC8zN0JDNTVDNTUz OTk3MUFGQjhGNjcwOUU4MUM4M0M5MkVGRENBMjVFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdrLQlrd zJl8mXQ2XW5Oln3AFcu5TO8ivqMrDkQYU6frXhw+gpXxcTkNmh31jcOqsuE9NR6G T9gc+lzTo5UL0fXXsCsmDsiFN3T6cQ/mjbq+S7w/p2guSULeQRnlVmuKsmEyLUNF by3rgDRxz0j9kFLpAreBmUPU/YuC7Ffmn/fRIzEhZ6u+/xpKKdWt2V2cbljxxJhZ J9+Ala9JMnkAj5eRn5V7BNSYCpnSNLCuMh0yRb/GjctK9k2frnDKCtieo+7FOwMd Kz+xE3bRFOIgf5aMEx7xvI7cqeQ7BFnc1oAPL49cQ/Ck/37Cv9QnwvU3wW3ur26G 2U2aPdo+W9jXpQ== -----END CERTIFICATE-----Generated at Wed Jul 29 00:50:08 2026 by rpki-client