$ rpki-client -vvf rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft File: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft (raw, json) Hash identifier: oGuGKNkAh7TILtNypUIsDxMWAQe6HGDsau5pDRLYHFE= Subject key identifier: 32:50:27:DD:EF:59:19:66:57:AB:D9:80:9E:7A:92:06:34:53:72:05 Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Certificate serial: 47FE76E0CE9F317D0697461219599A9724DC714A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft Manifest number: 08 Signing time: Wed 13 May 2026 05:47:11 +0000 Manifest this update: Wed 13 May 2026 05:42:11 +0000 Manifest next update: Thu 14 May 2026 07:43:11 +0000 Files and hashes: 1: 3130332e35312e39302e302f32332d3332203d3e20313334383233.roa (hash: tH36wJqzGsCI/o8hR/0a7GCLOKwO8H/LX8RVs1GWaks=) 2: 323430303a633965303a3a2f33322d3438203d3e20313331363537.roa (hash: upFELCP3DHkRWuwf+Xm0sVZKdOzGkDLBh+WiG2O5joQ=) 3: 323430303a633965303a3a2f33322d3438203d3e20313334383233.roa (hash: tWF65JRIBYKnWmqjJzuJTpKo/cPf/CgMxXepVjUbTSQ=) 4: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl (hash: OT3TxnNsgk2bcl6mni7si3dnkApJMu9RaGdTi4Mtvjw=) 5: 3130332e35312e39302e302f32332d3332203d3e20313331363537.roa (hash: 6/l/GHeRi+L26SSSmyoeIRzt/9QvcP9wUHNuiJTW0HI=) 6: 3230322e352e31302e302f32332d3332203d3e20313331363537.roa (hash: zCUned2k9nVUaWCk/pD8/VUXQUBPTJnpl6eX7zZ2e9s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:fe:76:e0:ce:9f:31:7d:06:97:46:12:19:59:9a:97:24:dc:71:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Validity Not Before: May 13 05:42:11 2026 GMT Not After : May 14 07:43:11 2026 GMT Subject: CN=325027DDEF59196657ABD9809E7A920634537205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:ed:25:45:42:05:f6:90:60:26:e1:3a:94: 7c:0d:11:61:58:bb:80:12:ed:4e:70:94:ec:ec:44: a7:d4:da:1a:a9:d1:ea:80:ca:03:56:7f:36:9a:91: 4c:db:66:51:55:94:8a:a5:cc:0f:be:d6:8a:78:5d: 9a:24:6f:da:e5:2b:b1:af:65:f5:96:a0:8d:59:c7: 49:67:c9:ab:d8:a8:a4:d5:bc:6f:ca:98:df:09:3d: 64:c2:e3:a3:b6:0c:85:3d:e0:66:f9:b7:28:18:e3: 33:04:f4:41:f4:09:1c:46:e6:70:3d:ab:a1:33:93: 81:0b:7e:a1:ca:d3:f9:c2:be:e0:fe:58:3e:0c:7e: 49:95:55:70:79:47:4c:bc:4a:3d:98:62:b6:f0:ba: ff:3d:9e:d1:8f:c6:ce:a3:9c:cf:08:15:27:82:7c: 58:a9:58:ad:27:85:02:94:34:48:3a:e7:31:06:8d: 5a:db:74:10:ff:7e:c9:4d:b3:f2:95:76:94:29:64: 1f:15:3a:b3:86:a9:b2:6e:08:ff:b6:7d:29:66:9d: 36:35:4f:32:d1:1b:24:59:c2:68:d8:c4:d0:aa:32: 93:dc:71:27:95:eb:62:5c:9c:2e:aa:24:c8:9f:16: 7a:85:c0:9e:e8:e1:71:e6:05:18:53:a8:bd:1c:1b: e1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:50:27:DD:EF:59:19:66:57:AB:D9:80:9E:7A:92:06:34:53:72:05 X509v3 Authority Key Identifier: keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:8a:c4:d9:0d:d3:5c:02:6c:07:60:92:70:8e:d0:90:05:a7: 0a:b6:d4:85:45:90:30:dc:be:5e:3b:2f:17:cc:0b:27:65:dc: 21:6b:93:b2:b0:0b:3a:63:34:93:a3:97:ab:d6:99:ad:ac:ac: 72:26:35:be:78:2c:cb:b9:8e:94:86:08:3d:e7:08:e5:9e:6a: 5a:8f:5d:0e:89:10:42:c5:99:c6:5c:26:8d:dc:ca:ad:a1:7a: bf:14:06:00:ff:df:60:38:a2:05:1a:8a:8f:25:a6:de:00:2d: 74:0d:0a:dd:98:c1:0c:ec:0e:3e:84:da:c4:b8:af:f3:03:bf: e5:ee:c0:3f:52:3f:bb:f3:f5:58:69:78:e2:c1:d7:0c:21:99: 2b:7b:9c:e4:be:02:f8:50:38:e6:53:9f:a8:0d:69:98:8b:8a: 1f:43:e8:2b:bc:e1:29:e9:53:24:b5:f9:d5:c1:02:e3:ee:65: 7e:67:b1:f2:2a:3f:c4:fa:e0:f9:ef:aa:36:77:30:c7:56:af: f6:bc:ec:d2:ee:50:00:41:b9:34:c8:f7:bc:1d:3b:1c:cb:42: 42:93:04:c2:6e:16:49:e3:4e:11:ce:78:4a:41:81:18:a1:e7: e4:4a:02:34:e8:83:9f:0f:2d:2b:03:08:af:ef:1d:67:a4:ae: dc:03:ae:19 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUR/524M6fMX0Gl0YSGVmalyTccUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE RUQ4OEUxQjAeFw0yNjA1MTMwNTQyMTFaFw0yNjA1MTQwNzQzMTFaMDMxMTAvBgNV BAMTKDMyNTAyN0RERUY1OTE5NjY1N0FCRDk4MDlFN0E5MjA2MzQ1MzcyMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLnu0lRUIF9pBgJuE6lHwNEWFY u4AS7U5wlOzsRKfU2hqp0eqAygNWfzaakUzbZlFVlIqlzA++1op4XZokb9rlK7Gv ZfWWoI1Zx0lnyavYqKTVvG/KmN8JPWTC46O2DIU94Gb5tygY4zME9EH0CRxG5nA9 q6Ezk4ELfqHK0/nCvuD+WD4MfkmVVXB5R0y8Sj2YYrbwuv89ntGPxs6jnM8IFSeC fFipWK0nhQKUNEg65zEGjVrbdBD/fslNs/KVdpQpZB8VOrOGqbJuCP+2fSlmnTY1 TzLRGyRZwmjYxNCqMpPccSeV62JcnC6qJMifFnqFwJ7o4XHmBRhTqL0cG+FlAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUMlAn3e9ZGWZXq9mAnnqSBjRTcgUwHwYDVR0j BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF M0MzRjJGRERFRDg4RTFCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvQUIzODg4 QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEqK xNkN01wCbAdgknCO0JAFpwq21IVFkDDcvl47LxfMCydl3CFrk7KwCzpjNJOjl6vW ma2srHImNb54LMu5jpSGCD3nCOWealqPXQ6JEELFmcZcJo3cyq2her8UBgD/32A4 ogUaio8lpt4ALXQNCt2YwQzsDj6E2sS4r/MDv+XuwD9SP7vz9VhpeOLB1wwhmSt7 nOS+AvhQOOZTn6gNaZiLih9D6Cu84SnpUyS1+dXBAuPuZX5nsfIqP8T64PnvqjZ3 MMdWr/a87NLuUABBuTTI97wdOxzLQkKTBMJuFknjThHOeEpBgRih5+RKAjTog58P LSsDCK/vHWekrtwDrhk= -----END CERTIFICATE-----Generated at Wed May 13 20:34:00 2026 by rpki-client