$ rpki-client -vvf rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft File: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft (raw, json) Hash identifier: J+pXpLHXVtTE0Rpxi3RWi2yOSLkAMviufKyZfH8S6Lk= Subject key identifier: 8B:D8:2A:A5:E7:B8:9B:3D:B6:88:DE:91:02:5E:D1:95:02:5E:1A:83 Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Certificate serial: 6621443C67651D79B9654C8F3A5FEE7698AFF570 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft Manifest number: 48 Signing time: Tue 30 Jun 2026 11:03:43 +0000 Manifest this update: Tue 30 Jun 2026 10:58:43 +0000 Manifest next update: Wed 01 Jul 2026 14:24:43 +0000 Files and hashes: 1: 3130332e35312e39302e302f32332d3332203d3e20313331363537.roa (hash: 6/l/GHeRi+L26SSSmyoeIRzt/9QvcP9wUHNuiJTW0HI=) 2: 323430303a633965303a3a2f33322d3438203d3e20313334383233.roa (hash: tWF65JRIBYKnWmqjJzuJTpKo/cPf/CgMxXepVjUbTSQ=) 3: 3130332e35312e39302e302f32332d3332203d3e20313334383233.roa (hash: tH36wJqzGsCI/o8hR/0a7GCLOKwO8H/LX8RVs1GWaks=) 4: 3230322e352e31302e302f32332d3332203d3e20313331363537.roa (hash: zCUned2k9nVUaWCk/pD8/VUXQUBPTJnpl6eX7zZ2e9s=) 5: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl (hash: CEw/oUSTeCLt9redhccWXBggPck2FwE5WChpjdgOB8w=) 6: 323430303a633965303a3a2f33322d3438203d3e20313331363537.roa (hash: upFELCP3DHkRWuwf+Xm0sVZKdOzGkDLBh+WiG2O5joQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 14:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:21:44:3c:67:65:1d:79:b9:65:4c:8f:3a:5f:ee:76:98:af:f5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Validity Not Before: Jun 30 10:58:43 2026 GMT Not After : Jul 1 14:24:43 2026 GMT Subject: CN=8BD82AA5E7B89B3DB688DE91025ED195025E1A83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:aa:51:84:bb:a9:18:2e:1f:f7:28:3b:1a:3c: 94:3d:be:ae:9c:ea:7b:f4:37:02:5b:8c:44:c7:5b: c0:c2:8d:42:ec:f2:6b:fb:d5:fd:88:f9:29:1d:1d: 3f:9f:49:15:1b:f0:23:06:2d:8d:ab:16:d0:71:04: 88:58:2a:e6:c1:24:dc:83:3f:15:f6:0b:e2:d4:94: 0c:42:a0:73:ca:3b:23:5d:85:ff:67:6c:de:99:dc: 1b:00:c5:f5:23:a8:21:20:23:49:a8:80:c6:cf:f9: 26:f1:83:b8:4a:3f:01:a8:6c:c5:02:a4:8b:05:fe: f0:34:10:5b:94:30:90:18:e4:40:c5:f4:57:b8:11: 53:2c:e1:51:47:6a:57:9b:70:94:da:7a:cf:d4:7d: 52:df:a8:8f:6c:d5:b1:87:fb:0a:60:e7:4e:04:20: 9c:51:40:07:f6:d4:22:5e:30:e7:7f:81:81:a0:ee: a6:bb:37:23:1a:bd:6a:b9:5d:98:37:d5:5d:db:93: db:b1:df:05:59:a4:9b:1f:ce:bb:a0:aa:4b:95:3d: f7:33:24:fe:ce:b6:ec:65:10:ca:42:48:5c:97:5c: 5b:76:b7:7c:56:54:6b:39:bb:6c:66:66:3f:d9:08: 55:04:76:a8:6f:96:7c:a2:4c:21:56:70:45:af:5c: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D8:2A:A5:E7:B8:9B:3D:B6:88:DE:91:02:5E:D1:95:02:5E:1A:83 X509v3 Authority Key Identifier: keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:35:6a:cb:35:f1:51:db:27:24:d7:4c:57:24:2f:8d:88:d8: f9:e8:56:16:58:ac:5a:bd:6b:f7:16:41:b9:d4:3f:05:4b:7c: ba:f0:72:c4:e9:c4:4e:3e:1a:a9:17:c6:df:f9:e2:85:ee:38: 35:9d:f9:f7:c6:0a:56:88:38:7b:82:c8:5f:c2:11:65:63:f8: 10:e8:cd:c8:71:27:7f:15:e9:09:4f:4b:b8:80:01:e6:68:5d: 7e:a0:27:da:60:cf:b3:49:ba:80:5f:cf:e4:ae:52:89:fc:f3: 0a:40:6a:24:fd:71:bf:83:a8:91:fd:99:7c:32:46:a0:91:91: 40:ca:14:88:b5:ba:00:fd:6f:e0:90:65:32:ab:2c:c6:70:c7: c9:54:c9:2c:68:1e:84:1f:4c:5a:77:c7:35:be:a8:16:4f:dd: 42:5b:15:48:08:df:23:3c:4b:dd:a9:34:89:8a:30:84:83:63: 30:83:b5:92:4c:83:3c:60:70:92:e8:9c:ef:7d:8a:53:01:95: c5:d4:22:e9:46:8e:90:d1:7c:87:40:0e:fa:f5:14:07:0b:93: 43:0b:8b:00:eb:29:97:0d:7f:6a:2d:5a:38:9a:03:4f:37:f7: e9:12:22:c9:fc:e7:69:60:09:0f:1e:4b:3b:f0:c5:6d:d2:d5: e7:d4:f5:80 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUZiFEPGdlHXm5ZUyPOl/udpiv9XAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE RUQ4OEUxQjAeFw0yNjA2MzAxMDU4NDNaFw0yNjA3MDExNDI0NDNaMDMxMTAvBgNV BAMTKDhCRDgyQUE1RTdCODlCM0RCNjg4REU5MTAyNUVEMTk1MDI1RTFBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYqlGEu6kYLh/3KDsaPJQ9vq6c 6nv0NwJbjETHW8DCjULs8mv71f2I+SkdHT+fSRUb8CMGLY2rFtBxBIhYKubBJNyD PxX2C+LUlAxCoHPKOyNdhf9nbN6Z3BsAxfUjqCEgI0mogMbP+Sbxg7hKPwGobMUC pIsF/vA0EFuUMJAY5EDF9Fe4EVMs4VFHalebcJTaes/UfVLfqI9s1bGH+wpg504E IJxRQAf21CJeMOd/gYGg7qa7NyMavWq5XZg31V3bk9ux3wVZpJsfzrugqkuVPfcz JP7OtuxlEMpCSFyXXFt2t3xWVGs5u2xmZj/ZCFUEdqhvlnyiTCFWcEWvXMXNAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUi9gqpee4mz22iN6RAl7RlQJeGoMwHwYDVR0j BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF M0MzRjJGRERFRDg4RTFCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvQUIzODg4 QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHg1 ass18VHbJyTXTFckL42I2PnoVhZYrFq9a/cWQbnUPwVLfLrwcsTpxE4+GqkXxt/5 4oXuODWd+ffGClaIOHuCyF/CEWVj+BDozchxJ38V6QlPS7iAAeZoXX6gJ9pgz7NJ uoBfz+SuUon88wpAaiT9cb+DqJH9mXwyRqCRkUDKFIi1ugD9b+CQZTKrLMZwx8lU ySxoHoQfTFp3xzW+qBZP3UJbFUgI3yM8S92pNImKMISDYzCDtZJMgzxgcJLonO99 ilMBlcXUIulGjpDRfIdADvr1FAcLk0MLiwDrKZcNf2otWjiaA0839+kSIsn852lg CQ8eSzvwxW3S1efU9YA= -----END CERTIFICATE-----Generated at Tue Jun 30 19:10:57 2026 by rpki-client