$ rpki-client -vvf rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft File: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft (raw, json) Hash identifier: qThcYM9vF1gJwJtKPVEGjRsEFjGskvSr3ku6JlZkrJ4= Subject key identifier: 38:C2:FF:56:97:4C:91:53:E3:B5:F2:EA:61:CF:4F:85:1B:95:45:A1 Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Certificate serial: 2E389EECDA973FBAF4A021F4E041FF06A3BD46BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft Manifest number: 85 Signing time: Fri 14 Aug 2026 18:07:44 +0000 Manifest this update: Fri 14 Aug 2026 18:02:44 +0000 Manifest next update: Sat 15 Aug 2026 18:46:44 +0000 Files and hashes: 1: 323430303a633965303a3a2f33322d3438203d3e20313331363537.roa (hash: upFELCP3DHkRWuwf+Xm0sVZKdOzGkDLBh+WiG2O5joQ=) 2: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl (hash: rVGxv4Ds2iGS1NzrwU0wscGokyXNNQL8OgHrvZXuB8I=) 3: 323430303a633965303a3a2f33322d3438203d3e20313334383233.roa (hash: tWF65JRIBYKnWmqjJzuJTpKo/cPf/CgMxXepVjUbTSQ=) 4: 3130332e35312e39302e302f32332d3332203d3e20313331363537.roa (hash: 6/l/GHeRi+L26SSSmyoeIRzt/9QvcP9wUHNuiJTW0HI=) 5: 3130332e35312e39302e302f32332d3332203d3e20313334383233.roa (hash: tH36wJqzGsCI/o8hR/0a7GCLOKwO8H/LX8RVs1GWaks=) 6: 3230322e352e31302e302f32332d3332203d3e20313331363537.roa (hash: zCUned2k9nVUaWCk/pD8/VUXQUBPTJnpl6eX7zZ2e9s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 18:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:38:9e:ec:da:97:3f:ba:f4:a0:21:f4:e0:41:ff:06:a3:bd:46:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Validity Not Before: Aug 14 18:02:44 2026 GMT Not After : Aug 15 18:46:44 2026 GMT Subject: CN=38C2FF56974C9153E3B5F2EA61CF4F851B9545A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:66:f3:a1:3e:89:5d:6e:c8:6e:73:db:49: c9:41:25:cb:78:ae:36:d9:41:03:f1:a3:e9:65:24: 49:cc:91:c2:5e:35:91:8a:60:68:d6:03:c1:ff:e1: 48:63:bb:31:d5:91:be:71:2c:52:6f:af:00:c6:cf: a6:93:ab:14:23:17:76:95:24:10:57:6d:85:9f:1d: bf:f2:61:d2:a0:83:d9:f3:16:40:72:67:af:2b:2a: 5f:d8:88:fb:b1:af:74:86:5b:74:4b:73:a1:86:82: 55:8f:bc:a0:08:33:61:0b:7c:ce:58:e5:ca:da:80: 36:9c:d8:98:7f:8a:93:e4:87:05:ac:1c:4c:f6:8b: 6e:52:90:37:32:f7:02:e2:40:f0:00:e9:40:99:6c: 67:2a:5a:a7:80:4d:a6:3c:91:8a:1a:f6:9a:29:03: a0:51:da:97:df:07:ac:15:a0:22:e2:35:df:02:13: c6:81:94:e4:84:f1:17:56:2e:e1:c7:b0:f8:ed:c4: 47:a6:25:71:61:5e:67:f0:cd:f5:78:cd:4b:12:86: 27:33:9f:27:f8:b4:23:64:37:ae:42:76:72:a8:50: 56:98:7f:a7:21:28:92:66:ec:fc:85:9b:02:71:a9: c7:4d:a9:9e:71:41:82:48:44:a3:73:80:2b:c9:7b: e7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C2:FF:56:97:4C:91:53:E3:B5:F2:EA:61:CF:4F:85:1B:95:45:A1 X509v3 Authority Key Identifier: keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:45:ff:75:30:f4:21:e6:5b:b0:ed:c6:38:48:06:84:e4:bc: 7a:8c:11:82:8b:ec:a8:b3:a5:40:b3:41:6e:3a:e7:80:f8:da: 53:05:53:fa:51:f9:d0:51:87:a6:81:6a:cc:b4:33:05:55:b5: cd:91:d2:53:4b:99:a4:d1:8e:0b:fc:88:4d:a2:8a:a8:61:07: 66:67:c0:97:0b:56:f6:fb:a4:85:f7:77:6e:26:c4:31:50:3b: ff:bb:49:37:72:ac:06:17:98:6d:50:ce:5b:74:4d:fb:47:69: 96:cb:d6:bb:b1:cf:b3:61:b8:64:f3:28:99:f1:3f:80:5f:b2: f1:21:62:ce:4a:8c:9b:cb:32:1a:16:ff:85:df:f5:bf:76:6a: e7:9d:ef:fc:3b:e0:85:de:cb:5f:e7:b4:74:bc:60:0c:98:aa: 87:e8:ea:a6:a5:d1:18:2d:18:7d:97:ce:36:8c:87:59:36:9d: ae:b6:6b:30:82:8e:0a:fe:4b:44:90:17:73:ce:e7:c8:74:8d: c4:ce:6e:cc:49:50:7f:98:4e:53:3d:55:5a:c5:19:88:33:15: 3b:f2:36:1d:25:bc:ac:77:74:58:05:9a:54:97:63:dd:84:26: f5:e7:e9:48:09:e6:27:29:ad:91:d2:50:e1:18:9b:e0:f2:e7: ff:c4:e3:75 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIULjie7NqXP7r0oCH04EH/BqO9RrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE RUQ4OEUxQjAeFw0yNjA4MTQxODAyNDRaFw0yNjA4MTUxODQ2NDRaMDMxMTAvBgNV BAMTKDM4QzJGRjU2OTc0QzkxNTNFM0I1RjJFQTYxQ0Y0Rjg1MUI5NTQ1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs52bzoT6JXW7IbnPbSclBJct4 rjbZQQPxo+llJEnMkcJeNZGKYGjWA8H/4UhjuzHVkb5xLFJvrwDGz6aTqxQjF3aV JBBXbYWfHb/yYdKgg9nzFkByZ68rKl/YiPuxr3SGW3RLc6GGglWPvKAIM2ELfM5Y 5cragDac2Jh/ipPkhwWsHEz2i25SkDcy9wLiQPAA6UCZbGcqWqeATaY8kYoa9pop A6BR2pffB6wVoCLiNd8CE8aBlOSE8RdWLuHHsPjtxEemJXFhXmfwzfV4zUsShicz nyf4tCNkN65CdnKoUFaYf6chKJJm7PyFmwJxqcdNqZ5xQYJIRKNzgCvJe+etAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUOML/VpdMkVPjtfLqYc9PhRuVRaEwHwYDVR0j BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF M0MzRjJGRERFRDg4RTFCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvQUIzODg4 QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA1F /3Uw9CHmW7DtxjhIBoTkvHqMEYKL7KizpUCzQW4654D42lMFU/pR+dBRh6aBasy0 MwVVtc2R0lNLmaTRjgv8iE2iiqhhB2ZnwJcLVvb7pIX3d24mxDFQO/+7STdyrAYX mG1Qzlt0TftHaZbL1ruxz7NhuGTzKJnxP4BfsvEhYs5KjJvLMhoW/4Xf9b92aued 7/w74IXey1/ntHS8YAyYqofo6qal0RgtGH2XzjaMh1k2na62azCCjgr+S0SQF3PO 58h0jcTObsxJUH+YTlM9VVrFGYgzFTvyNh0lvKx3dFgFmlSXY92EJvXn6UgJ5icp rZHSUOEYm+Dy5//E43U= -----END CERTIFICATE-----Generated at Sat Aug 15 05:22:45 2026 by rpki-client