
$ rpki-client -vvvf rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
File: 7F09BA8E95F4407620647B82A775E9C71807F66F.mft (raw, json)
Hash identifier: G+KIy5C5ZxWccgv1pp+VDe4qHJ6g5c9+tiWaTuef2u8=
Subject key identifier: E1:6D:A9:F2:9B:5D:85:5B:F5:D5:EB:6D:5D:95:60:9F:3D:17:7C:E5
Authority key identifier: 7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
Certificate issuer: /CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Certificate serial: 70156AB692B13B268CDB1E531ACFD293F31E6AB5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
Manifest number: 71
Signing time: Sun 15 Nov 2026 02:04:09 +0000
Manifest this update: Sun 15 Nov 2026 01:59:09 +0000
Manifest next update: Mon 16 Nov 2026 06:00:09 +0000
Files and hashes: 1: 7F09BA8E95F4407620647B82A775E9C71807F66F.crl (hash: BwmgzTHdHC15HVMMWmpJHVxF+2gVEMuAmCU9ZckkgDc=)
2: 3230332e3132312e3234302e302f32302d3234203d3e203138343139.roa (hash: kpSiUGCscDYyCcHy/chJfosfR60d3BlDLVwnm6X4EKU=)
3: 3130332e3233342e3230342e302f32322d3234203d3e2034373830.roa (hash: UbUVa/yQ7MUIaVi+ya26GGi5eJWlXqH34Za5AVxQ9Zc=)
4: 3230322e3134382e3231382e302f32332d3234203d3e2034373830.roa (hash: Hak2Kjh6kJ7ksPJnjjQX/qj2mj03vkETTEsjCwHEy1k=)
5: 3230332e3132312e3232342e302f32302d3234203d3e203138343139.roa (hash: AHKpE865GlsG7ePMxcW5/yf6Kw0p3VGx6fJVKAitAX4=)
6: 323430323a323538303a3a2f33322d3332203d3e2034373830.roa (hash: nxAXU+J3+lv7KKuFPTwdVfXIg9/Ct9RdTZh/ggk/XFw=)
7: 3135302e3132392e3232382e302f32322d3234203d3e203138343139.roa (hash: L4OqGHOHvoiFD4en8FR1S9taD+sTsqdfhZvgnUI17GY=)
8: 3130332e3233342e3230342e302f32322d3234203d3e203138343139.roa (hash: kLLB3nMudzNuO9rk3m0i/2MoWQ9TxbGykcKJQdePmsY=)
9: 3135302e3132392e3232382e302f32322d3234203d3e2034373830.roa (hash: q9PJ3PsyhSTPLS/vMO94ePBZNqEjZtU9gQFNirsIHzs=)
10: 3135302e3132392e37322e302f32322d3234203d3e2034373830.roa (hash: 3TQpzVu5Veh0BPE+Fut/ckTh8jyTHx55c+PPcpVkhtw=)
11: 36312e36302e3139322e302f32302d3234203d3e2034373830.roa (hash: A0M4ifQ7o+lnecTrRQ3fAKKqExgyt7CABWym/XPUf7U=)
12: 3130332e3233342e3232382e302f32322d3234203d3e2034373830.roa (hash: 8Bl8haU1F0vIWafoewutukrqivPDgHbSfez5w+rXbAk=)
13: 3138302e3231342e3137362e302f32302d3234203d3e2034373830.roa (hash: tzvs9QrCz3ljL77OIc0uAPrT5KVs/VdV4UBc+0F7yGM=)
14: 3130332e3233342e3232382e302f32322d3234203d3e203138343139.roa (hash: bY0NXv0PHRUL6Unr7YOWL3dkWK/NFv0qutXeYULSTOo=)
15: 3230322e3134382e3231382e302f32332d3234203d3e203138343139.roa (hash: rSTcGPlrK4f1QAi6H1GST1AhRvS0/+BR4n5y55vtsAc=)
16: 36312e36302e3139322e302f32302d3234203d3e203138343139.roa (hash: 4pLDZrJuEuhbhG4EUR3OtcCDkbTjTBmo/ah6+5srjF4=)
17: 323430323a323538303a3a2f33322d3332203d3e203138343139.roa (hash: 58Gd6eOLAXQyKRDaHjMyHFXtUb8aKfwzLrP5Psh4j8w=)
18: 3138302e3231342e3137362e302f32302d3234203d3e203138343139.roa (hash: VRAV4obUDBldGo4yoQu7Ex5sF4P4Hx2wmUYoif3xgL0=)
19: 3135302e3132392e37322e302f32322d3234203d3e203138343139.roa (hash: 1vLg0RhKAOiWHPuZCXExG5dOGIqZKjzG1SikPX/DElo=)
20: 3132342e3130392e3131322e302f32302d3234203d3e203138343139.roa (hash: n5352g6Ik4h5sMcfAQRtmkDM+UGy7/md/q0xICjyUFo=)
21: 3132342e3130392e3131322e302f32302d3234203d3e2034373830.roa (hash: K2CnPWCCQSIR8MzBRJhfVE8C5iYS5C2S0yQ5v7j55mo=)
22: 3230332e3132312e3232342e302f32302d3234203d3e2034373830.roa (hash: v24846ZMc+9mp+wpeTl2YRx8kdrUozogRpm6tDj9RqA=)
23: 3230332e3132312e3234302e302f32302d3234203d3e2034373830.roa (hash: S3KOeJqer390u+4j9gUhzn/5mAOL6ZHJUcPQ8Fvcld0=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 06:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:15:6a:b6:92:b1:3b:26:8c:db:1e:53:1a:cf:d2:93:f3:1e:6a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F09BA8E95F4407620647B82A775E9C71807F66F
Validity
Not Before: Nov 15 01:59:09 2026 GMT
Not After : Nov 16 06:00:09 2026 GMT
Subject: CN=E16DA9F29B5D855BF5D5EB6D5D95609F3D177CE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5a:9a:fb:00:80:83:e5:b0:2a:33:d0:21:0c:
ca:d5:ce:f4:16:4a:ae:85:e8:79:c7:69:25:ba:bf:
4b:c2:51:99:6c:68:21:5b:4e:3f:17:80:d1:f4:ec:
d4:92:a2:e2:85:5a:9c:bf:94:52:65:03:90:ae:26:
17:b6:5f:2b:c3:7c:cc:a8:4b:e2:3f:c3:32:d3:71:
50:0f:1b:0d:1a:57:59:bd:d7:d2:d1:e9:fd:4c:1c:
af:6b:c8:8e:58:d1:4b:60:01:46:33:6c:ba:19:f9:
8d:62:28:46:3c:f4:25:96:40:1b:6f:eb:b5:80:10:
cb:d8:be:97:76:e0:7e:a0:f8:db:43:9c:70:ea:cc:
0b:f3:bb:de:95:ce:b9:6a:47:b0:1a:88:56:0c:f6:
51:6c:52:59:78:cc:23:8e:f9:86:1f:6b:e5:c6:74:
db:68:af:cc:eb:d1:44:6a:45:22:b7:e5:eb:27:4d:
87:9a:f5:b0:e3:70:83:66:36:8c:68:4c:c3:a2:43:
06:84:4b:c2:dd:d0:fe:37:d1:67:bd:3c:95:66:f2:
cf:f6:d1:f9:82:f7:e7:a4:92:f5:5c:1e:0c:03:aa:
48:75:6f:f2:62:80:d3:79:0b:e7:c2:26:77:c1:88:
98:5e:74:d0:05:82:3f:ab:34:45:48:c4:de:0d:80:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6D:A9:F2:9B:5D:85:5B:F5:D5:EB:6D:5D:95:60:9F:3D:17:7C:E5
X509v3 Authority Key Identifier:
keyid:7F:09:BA:8E:95:F4:40:76:20:64:7B:82:A7:75:E9:C7:18:07:F6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/7F09BA8E95F4407620647B82A775E9C71807F66F.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/SIGMA/0/7F09BA8E95F4407620647B82A775E9C71807F66F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8c:7e:6a:4c:aa:06:9b:da:19:06:2f:a5:82:63:22:4e:45:
14:1f:b5:e3:64:61:dc:f6:e6:e2:be:c3:38:52:db:ad:88:d4:
fc:e1:cf:10:cb:83:fb:00:a3:48:92:f8:f5:86:01:30:07:25:
53:a1:28:c5:71:2d:84:06:9d:7a:36:14:44:18:9b:28:ad:de:
1a:a2:47:47:d5:0a:65:96:53:bc:d7:94:c0:a7:de:98:0f:21:
96:ea:7c:63:8e:a3:6c:bf:8b:61:d6:aa:e6:3d:6b:ec:3f:82:
26:51:00:1a:45:95:12:b9:8f:ac:96:26:f8:10:5a:77:0e:7d:
cb:ea:95:28:98:fd:46:8f:c4:1b:ca:ab:85:d2:8e:84:47:0b:
ff:e7:98:e9:44:9c:d0:e8:6c:80:d9:bf:f7:14:07:33:83:3a:
56:6a:d2:0d:4c:de:9f:0e:ac:f9:bb:df:93:d2:11:8e:16:d0:
5b:95:f2:da:77:67:d4:11:bc:e5:f9:24:b3:2a:35:7e:fe:ec:
84:d6:1f:c2:76:4a:94:b6:80:e7:90:4b:e2:7a:0d:8a:a6:ba:
eb:2e:9d:89:63:b1:0c:30:50:98:40:06:56:39:cd:b2:5b:93:
47:9c:da:89:94:17:74:5e:51:3e:70:37:e0:1b:d0:e4:3e:a0:
da:27:59:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:36:27 2026 by rpki-client