$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft File: 7F09BA8E95F4407620647B82A775E9C71807F66F.mft (raw, json) Hash identifier: OLR42KtcZl+VZdnTe44Tt1gdHgyl0xYyPG5zbpbpbYI= Subject key identifier: 89:6D:B3:09:5E:EF:C3:87:15:DA:78:BF:8C:4A:98:64:10:6B:43:0E Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F Certificate serial: 7071879B519E352A60C4E3D2CCD781EA2EE10014 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft Manifest number: 28 Signing time: Mon 21 Sep 2026 06:46:25 +0000 Manifest this update: Mon 21 Sep 2026 06:41:25 +0000 Manifest next update: Tue 22 Sep 2026 09:40:25 +0000 Files and hashes: 1: 3230332e3132312e3234302e302f32302d3234203d3e2034373830.roa (hash: S3KOeJqer390u+4j9gUhzn/5mAOL6ZHJUcPQ8Fvcld0=) 2: 3230332e3132312e3232342e302f32302d3234203d3e2034373830.roa (hash: v24846ZMc+9mp+wpeTl2YRx8kdrUozogRpm6tDj9RqA=) 3: 3230332e3132312e3234302e302f32302d3234203d3e203138343139.roa (hash: kpSiUGCscDYyCcHy/chJfosfR60d3BlDLVwnm6X4EKU=) 4: 3135302e3132392e37322e302f32322d3234203d3e2034373830.roa (hash: 3TQpzVu5Veh0BPE+Fut/ckTh8jyTHx55c+PPcpVkhtw=) 5: 3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa (hash: 8Bl8haU1F0vIWafoewutukrqivPDgHbSfez5w+rXbAk=) 6: 3130332e3233342e3230342e302f32322d3234203d3e203138343139.roa (hash: kLLB3nMudzNuO9rk3m0i/2MoWQ9TxbGykcKJQdePmsY=) 7: 36312e36302e3139322e302f32302d3234203d3e203138343139.roa (hash: 4pLDZrJuEuhbhG4EUR3OtcCDkbTjTBmo/ah6+5srjF4=) 8: 3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa (hash: rSTcGPlrK4f1QAi6H1GST1AhRvS0/+BR4n5y55vtsAc=) 9: 36312e36302e3139322e302f32302d3234203d3e2034373830.roa (hash: A0M4ifQ7o+lnecTrRQ3fAKKqExgyt7CABWym/XPUf7U=) 10: 3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa (hash: Hak2Kjh6kJ7ksPJnjjQX/qj2mj03vkETTEsjCwHEy1k=) 11: 3135302e3132392e37322e302f32322d3234203d3e203138343139.roa (hash: 1vLg0RhKAOiWHPuZCXExG5dOGIqZKjzG1SikPX/DElo=) 12: 3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa (hash: AHKpE865GlsG7ePMxcW5/yf6Kw0p3VGx6fJVKAitAX4=) 13: 3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa (hash: bY0NXv0PHRUL6Unr7YOWL3dkWK/NFv0qutXeYULSTOo=) 14: 3138302e3231342e3137362e302f32302d3234203d3e203138343139.roa (hash: VRAV4obUDBldGo4yoQu7Ex5sF4P4Hx2wmUYoif3xgL0=) 15: 7F09BA8E95F4407620647B82A775E9C71807F66F.crl (hash: VRwgns8ZewBYqoGEXeZ4HHyLuaYh7xgDkZkxUjg09B0=) 16: 323430323a323538303a3a2f33322d3332203d3e203138343139.roa (hash: 58Gd6eOLAXQyKRDaHjMyHFXtUb8aKfwzLrP5Psh4j8w=) 17: 3135302e3132392e3232382e302f32322d3234203d3e2034373830.roa (hash: q9PJ3PsyhSTPLS/vMO94ePBZNqEjZtU9gQFNirsIHzs=) 18: 3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa (hash: n5352g6Ik4h5sMcfAQRtmkDM+UGy7/md/q0xICjyUFo=) 19: 3130332e3233342e3230342e302f32322d3234203d3e2034373830.roa (hash: UbUVa/yQ7MUIaVi+ya26GGi5eJWlXqH34Za5AVxQ9Zc=) 20: 323430323a323538303a3a2f33322d3332203d3e2034373830.roa (hash: nxAXU+J3+lv7KKuFPTwdVfXIg9/Ct9RdTZh/ggk/XFw=) 21: 3135302e3132392e3232382e302f32322d3234203d3e203138343139.roa (hash: L4OqGHOHvoiFD4en8FR1S9taD+sTsqdfhZvgnUI17GY=) 22: 3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa (hash: tzvs9QrCz3ljL77OIc0uAPrT5KVs/VdV4UBc+0F7yGM=) 23: 3132342e3130392e3131322e302f32302d3234203d3e2034373830.roa (hash: K2CnPWCCQSIR8MzBRJhfVE8C5iYS5C2S0yQ5v7j55mo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:71:87:9b:51:9e:35:2a:60:c4:e3:d2:cc:d7:81:ea:2e:e1:00:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F Validity Not Before: Sep 21 06:41:25 2026 GMT Not After : Sep 22 09:40:25 2026 GMT Subject: CN=896DB3095EEFC38715DA78BF8C4A9864106B430E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:71:20:7f:ce:70:5a:ec:8c:2c:47:a8:75: 66:98:e7:91:87:a3:3e:63:8d:8a:c6:b8:6c:bd:e7: 15:4d:5e:60:01:2c:1f:32:2f:10:2a:fd:87:73:cc: ad:38:06:c7:50:ae:a3:30:57:8c:76:59:f6:67:2b: 8c:4f:94:d4:8d:de:e9:ae:a1:28:2c:ab:38:d5:bc: 1a:89:52:61:a4:92:ca:be:27:21:cd:03:de:51:73: 24:21:e3:2e:a0:d5:13:a2:e1:34:78:a6:a1:ac:ac: 8e:d7:16:45:a0:f4:d6:22:6d:9b:b2:a9:56:29:95: e7:3f:ea:ac:30:17:c6:0a:24:9e:a9:04:44:82:9b: 73:47:dc:19:af:1c:07:f5:71:c7:08:1c:e6:5d:03: 85:b4:48:69:bf:1c:ff:c4:07:76:de:1f:aa:8b:d7: 6d:d4:c4:8e:46:2f:19:3a:5b:28:d2:16:c5:57:ca: 96:e2:4d:c4:a6:62:7e:78:c5:fb:02:26:aa:27:b2: 2e:be:80:5b:52:db:62:bf:fe:27:65:bc:3a:da:a0: 94:03:4e:7c:df:04:a3:5f:93:25:36:f5:2e:2b:bc: f0:9c:08:fd:67:f7:f9:75:7f:38:6c:62:a5:5c:64: 8e:18:5f:54:76:32:43:ad:d8:03:16:62:bf:49:40: 25:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6D:B3:09:5E:EF:C3:87:15:DA:78:BF:8C:4A:98:64:10:6B:43:0E X509v3 Authority Key Identifier: keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:1e:c9:2f:e5:1c:01:86:b3:d8:b8:79:6b:ee:7e:33:0e:76: 68:b4:67:f5:3a:db:60:d0:9c:6a:42:a8:4b:7f:b7:b5:89:62: 9b:43:84:d3:0f:07:db:48:8c:ad:d4:2b:12:31:61:4c:a0:ae: 37:22:16:a8:7c:06:93:d5:f6:ed:1c:86:1f:b0:a3:d7:a6:98: 09:78:c4:7d:a8:1b:51:fc:2d:e4:b1:14:22:0a:9e:5c:e6:03: e0:be:ce:ff:24:b6:82:60:f3:06:66:c8:85:60:2f:7f:b1:31: f0:b9:9e:4a:82:8d:8c:53:c2:1b:5b:c1:12:b5:bd:56:06:35: de:75:aa:96:04:a8:68:62:59:69:05:1b:df:db:c0:80:1c:08: b0:1e:d4:1f:93:97:f3:07:d9:7f:1b:a9:6f:13:dc:c4:e0:0c: 4a:0c:1b:51:58:6c:96:41:b5:41:d9:d8:51:43:fb:9e:c2:e1: b2:36:42:55:2c:23:5a:b4:93:29:6b:af:a9:24:53:5f:27:10: 51:d7:a0:ff:0c:40:50:ec:1b:92:38:b6:c4:ec:77:33:d5:a8: 71:8b:96:1f:46:62:62:e3:89:31:03:bf:aa:e1:4b:9a:de:44: 37:b8:56:30:a1:b2:ac:51:e4:8c:aa:f6:76:43:65:23:a4:fa: 92:3f:04:ec -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUcHGHm1GeNSpgxOPSzNeB6i7hABQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwOUJBOEU5NUY0NDA3NjIwNjQ3QjgyQTc3NUU5Qzcx ODA3RjY2RjAeFw0yNjA5MjEwNjQxMjVaFw0yNjA5MjIwOTQwMjVaMDMxMTAvBgNV BAMTKDg5NkRCMzA5NUVFRkMzODcxNURBNzhCRjhDNEE5ODY0MTA2QjQzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+NXEgf85wWuyMLEeodWaY55GH oz5jjYrGuGy95xVNXmABLB8yLxAq/YdzzK04BsdQrqMwV4x2WfZnK4xPlNSN3umu oSgsqzjVvBqJUmGkksq+JyHNA95RcyQh4y6g1ROi4TR4pqGsrI7XFkWg9NYibZuy qVYplec/6qwwF8YKJJ6pBESCm3NH3BmvHAf1cccIHOZdA4W0SGm/HP/EB3beH6qL 123UxI5GLxk6WyjSFsVXypbiTcSmYn54xfsCJqonsi6+gFtS22K//idlvDraoJQD TnzfBKNfkyU29S4rvPCcCP1n9/l1fzhsYqVcZI4YX1R2MkOt2AMWYr9JQCXfAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUiW2zCV7vw4cV2ni/jEqYZBBrQw4wHwYDVR0j BBgwFoAUfwm6jpX0QHYgZHuCp3XpxxgH9m8wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvU0lHTUEv MC83RjA5QkE4RTk1RjQ0MDc2MjA2NDdCODJBNzc1RTlDNzE4MDdGNjZGLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzdGMDlCQThFOTVGNDQwNzYyMDY0N0I4MkE3NzVF OUM3MTgwN0Y2NkYuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9TSUdNQS8wLzdGMDlCQThFOTVGNDQw NzYyMDY0N0I4MkE3NzVFOUM3MTgwN0Y2NkYubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgHskv5RwBhrPY uHlr7n4zDnZotGf1Ottg0JxqQqhLf7e1iWKbQ4TTDwfbSIyt1CsSMWFMoK43Ihao fAaT1fbtHIYfsKPXppgJeMR9qBtR/C3ksRQiCp5c5gPgvs7/JLaCYPMGZsiFYC9/ sTHwuZ5Kgo2MU8IbW8EStb1WBjXedaqWBKhoYllpBRvf28CAHAiwHtQfk5fzB9l/ G6lvE9zE4AxKDBtRWGyWQbVB2dhRQ/uewuGyNkJVLCNatJMpa6+pJFNfJxBR16D/ DEBQ7BuSOLbE7Hcz1ahxi5YfRmJi44kxA7+q4Uua3kQ3uFYwobKsUeSMqvZ2Q2Uj pPqSPwTs -----END CERTIFICATE-----Generated at Mon Sep 21 15:54:18 2026 by rpki-client