$ rpki-client -vvvf rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft File: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft (raw, json) Hash identifier: XMnl8/Ut1wcgPkPEo5+TjptiA1EqNuVMPt01hTEmWoQ= Subject key identifier: 5E:62:32:F3:2F:54:2B:89:0A:AE:3E:61:B1:63:AF:42:A7:E3:B2:4F Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Certificate serial: 18520163DDE4E6E9BC9C7EBD427570425BFA8B4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft Manifest number: D2 Signing time: Tue 06 Oct 2026 19:59:03 +0000 Manifest this update: Tue 06 Oct 2026 19:54:03 +0000 Manifest next update: Wed 07 Oct 2026 20:24:03 +0000 Files and hashes: 1: 3230322e352e31302e302f32342d3234203d3e20323136313338.roa (hash: elBageucsQOSTptkEXsGAPEabTfNUu/5ZP88JzEAJHU=) 2: 3230322e352e31302e302f32342d3234203d3e20323032373336.roa (hash: QJ5gRwlwOk90NIqbTeKQ9YIL40s99qTaJ8zlmXypSM4=) 3: 3130332e35312e39302e302f32332d3332203d3e20313334383233.roa (hash: tH36wJqzGsCI/o8hR/0a7GCLOKwO8H/LX8RVs1GWaks=) 4: 3230322e352e31312e302f32342d3234203d3e20323136313338.roa (hash: AWD+zuYzrNaUxcfv/56OBONbGf7IKDXjS7DxuJrGBYg=) 5: 3230322e352e31312e302f32342d3234203d3e20323032373336.roa (hash: VH7i1Rmx/vnrLlet6gZkD22nYR0ayb436EnYjZJQzNA=) 6: 3230322e352e31302e302f32332d3233203d3e20313331363330.roa (hash: 0owoHP+vPpEdJ28e7p434+yQ6TztrvINieYa1Uziwec=) 7: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl (hash: 8J4i8btgQNwaDaxJTX162wue+94LnsAI90WBqZfOB7g=) 8: 323430303a633965303a3a2f33322d3438203d3e20313331363537.roa (hash: upFELCP3DHkRWuwf+Xm0sVZKdOzGkDLBh+WiG2O5joQ=) 9: 3230322e352e31302e302f32332d3332203d3e20313331363537.roa (hash: zCUned2k9nVUaWCk/pD8/VUXQUBPTJnpl6eX7zZ2e9s=) 10: 323430303a633965303a3a2f33322d3438203d3e20313334383233.roa (hash: tWF65JRIBYKnWmqjJzuJTpKo/cPf/CgMxXepVjUbTSQ=) 11: 3230322e352e31312e302f32342d3234203d3e20313937353337.roa (hash: /asmOvtxTVfejsQzCQN9JAzbwce/1zKDLT1mSL+cbv8=) 12: 3230322e352e31302e302f32342d3234203d3e20313937353337.roa (hash: uvBAHIGsfVOPKEPiUlrDJflai1mxkNu/0gJ+oj7/pBE=) 13: 3130332e35312e39302e302f32332d3332203d3e20313331363537.roa (hash: 6/l/GHeRi+L26SSSmyoeIRzt/9QvcP9wUHNuiJTW0HI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 19:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:52:01:63:dd:e4:e6:e9:bc:9c:7e:bd:42:75:70:42:5b:fa:8b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Validity Not Before: Oct 6 19:54:03 2026 GMT Not After : Oct 7 20:24:03 2026 GMT Subject: CN=5E6232F32F542B890AAE3E61B163AF42A7E3B24F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:72:52:dd:0f:6a:13:3c:6d:09:9f:27:9d: 5b:bd:ed:db:7b:6b:67:40:9b:da:46:89:94:54:d7: 4b:bd:17:ed:92:92:d8:0b:5e:4c:66:71:97:a2:d6: 15:00:1a:1e:7a:71:4c:7a:8f:75:70:6b:65:3e:f4: 3e:21:89:5c:dd:70:12:22:6f:db:a7:76:d5:3b:4a: aa:5c:f9:fd:0d:a1:ac:5f:cf:46:31:7f:4b:53:85: 3d:0e:9f:fe:de:e1:7d:d3:f9:08:57:53:d8:bc:c9: a8:64:4d:79:ad:38:9a:55:76:2e:42:99:36:f8:c7: 10:03:68:38:10:da:80:cb:7c:d9:fa:0b:02:18:5f: fc:a5:62:ac:2c:69:64:78:d3:b5:4d:c4:64:5f:ce: a8:a2:74:66:f3:33:bb:7c:1e:19:3b:12:a0:0a:3d: 55:ca:a6:4f:f5:f4:07:94:84:51:ff:52:99:6a:f1: c3:1a:b8:0c:fb:eb:c2:37:56:e0:49:09:df:8a:04: ac:8f:dd:ec:c1:3e:c6:57:66:0f:94:b9:44:09:6d: e1:74:4d:b1:40:2b:42:b2:d4:d3:8b:59:f7:f2:e1: c9:13:7a:be:06:76:5b:85:6d:ba:79:4c:3e:c2:b3: c9:c2:5b:72:6a:cc:be:6b:d6:87:92:6b:17:bb:2e: 23:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:62:32:F3:2F:54:2B:89:0A:AE:3E:61:B1:63:AF:42:A7:E3:B2:4F X509v3 Authority Key Identifier: keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:78:26:ae:28:37:79:ca:94:2b:17:62:2c:d6:bb:15:38:b7: 21:ef:15:e9:3d:95:06:bc:05:00:c0:d5:31:6a:96:4c:23:7a: 40:09:01:2c:37:0f:86:d5:50:98:c9:4f:00:97:46:f5:52:a3: 66:85:aa:e3:b5:7c:b4:aa:cc:36:e6:40:d9:4f:76:a0:65:5f: 97:78:72:8b:15:5f:34:ee:66:33:d2:e2:b8:0f:c4:a5:55:5c: df:40:ae:16:99:c8:6e:cc:1a:89:59:ed:16:e4:66:ce:51:d0: dc:13:52:bc:45:97:01:44:1f:8d:87:f2:a8:fa:c2:fd:7f:64: 08:8a:09:8c:84:55:44:30:e5:53:75:b9:8b:cc:36:8b:af:11: cf:93:e8:54:7e:8a:53:6e:d5:34:26:66:db:bd:5a:c0:9e:e7: 4f:42:21:e0:b3:20:13:d6:f2:8c:f8:cb:2b:c4:36:e3:01:47: 59:cd:35:ee:30:db:d9:d3:14:28:b7:ec:48:d4:0e:43:4d:f6: 45:69:7f:24:0f:bf:55:5d:4d:b4:29:ca:aa:2f:6d:9c:bd:89: 36:e4:79:b9:fe:28:97:93:41:2f:9f:b9:43:d8:f1:26:26:18: 91:c8:56:c6:2a:b4:58:42:81:eb:86:41:fa:69:19:a3:69:8d: ea:ad:50:d8 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUGFIBY93k5um8nH69QnVwQlv6i0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE RUQ4OEUxQjAeFw0yNjEwMDYxOTU0MDNaFw0yNjEwMDcyMDI0MDNaMDMxMTAvBgNV BAMTKDVFNjIzMkYzMkY1NDJCODkwQUFFM0U2MUIxNjNBRjQyQTdFM0IyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFA3JS3Q9qEzxtCZ8nnVu97dt7 a2dAm9pGiZRU10u9F+2SktgLXkxmcZei1hUAGh56cUx6j3Vwa2U+9D4hiVzdcBIi b9undtU7Sqpc+f0Noaxfz0Yxf0tThT0On/7e4X3T+QhXU9i8yahkTXmtOJpVdi5C mTb4xxADaDgQ2oDLfNn6CwIYX/ylYqwsaWR407VNxGRfzqiidGbzM7t8Hhk7EqAK PVXKpk/19AeUhFH/Uplq8cMauAz768I3VuBJCd+KBKyP3ezBPsZXZg+UuUQJbeF0 TbFAK0Ky1NOLWffy4ckTer4GdluFbbp5TD7Cs8nCW3JqzL5r1oeSaxe7LiPRAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUXmIy8y9UK4kKrj5hsWOvQqfjsk8wHwYDVR0j BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF M0MzRjJGRERFRDg4RTFCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvQUIzODg4 QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFp4 Jq4oN3nKlCsXYizWuxU4tyHvFek9lQa8BQDA1TFqlkwjekAJASw3D4bVUJjJTwCX RvVSo2aFquO1fLSqzDbmQNlPdqBlX5d4cosVXzTuZjPS4rgPxKVVXN9ArhaZyG7M GolZ7RbkZs5R0NwTUrxFlwFEH42H8qj6wv1/ZAiKCYyEVUQw5VN1uYvMNouvEc+T 6FR+ilNu1TQmZtu9WsCe509CIeCzIBPW8oz4yyvENuMBR1nNNe4w29nTFCi37EjU DkNN9kVpfyQPv1VdTbQpyqovbZy9iTbkebn+KJeTQS+fuUPY8SYmGJHIVsYqtFhC geuGQfppGaNpjeqtUNg= -----END CERTIFICATE-----Generated at Wed Oct 7 07:56:17 2026 by rpki-client