$ rpki-client -vvvf rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft File: 5677B1A39333120442A665B3D25D187209211BAE.mft (raw, json) Hash identifier: aw5Q7WpnvN+lz07iL+H4nAV/2vfkeJRyLavZh24Sh7A= Subject key identifier: A3:70:AD:67:FB:68:68:51:9A:74:67:C7:F0:52:4F:42:8D:B3:FC:B0 Authority key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE Certificate issuer: /CN=5677B1A39333120442A665B3D25D187209211BAE Certificate serial: 6A885A9B5460F15A7829A01151BFDD889A295FFC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft Manifest number: C5 Signing time: Sun 04 Oct 2026 15:40:55 +0000 Manifest this update: Sun 04 Oct 2026 15:35:55 +0000 Manifest next update: Mon 05 Oct 2026 16:47:55 +0000 Files and hashes: 1: 323430363a626663303a3a2f33322d3438203d3e203138303431.roa (hash: KDiZaxw5XGQhywqutmhDqziZArSBlF5hTPaIVss/WdY=) 2: 5677B1A39333120442A665B3D25D187209211BAE.crl (hash: nQ7m7IZfsMHOMgXAPkhf1aYGmLlhXZeVpBM3keZxU+4=) 3: 3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa (hash: k/cF66xPcsmZ1x0DE1Ndr3+3JZ48QVlyjQhQ8TgIR4A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 16:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:88:5a:9b:54:60:f1:5a:78:29:a0:11:51:bf:dd:88:9a:29:5f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5677B1A39333120442A665B3D25D187209211BAE Validity Not Before: Oct 4 15:35:55 2026 GMT Not After : Oct 5 16:47:55 2026 GMT Subject: CN=A370AD67FB6868519A7467C7F0524F428DB3FCB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:44:28:a0:eb:b7:f9:80:0b:64:88:60:fe:76: 6a:cc:a9:95:5e:f8:7d:05:27:c7:4d:e2:e4:cf:88: 63:c1:30:d7:03:0b:19:d4:18:c6:98:ef:70:8a:08: 53:2e:3d:26:e7:ec:9b:86:2c:1f:2e:3c:57:0a:af: 11:92:19:54:cd:b4:ef:fd:94:2e:f7:aa:3f:3e:49: 0e:99:87:ff:dc:c7:96:e3:28:d0:07:fc:5d:02:b1: 09:47:6a:7e:4c:49:cf:a5:31:65:36:57:26:44:c7: 96:08:4e:3a:7c:6a:5a:ba:10:1a:1c:77:2c:52:93: 59:1e:41:55:20:40:16:0a:e2:65:99:53:b0:af:69: 83:51:00:bc:05:5b:d6:e9:5b:69:7a:25:22:7b:75: 56:e3:08:5d:fe:b5:03:5c:1c:57:cf:c0:50:7e:62: 17:07:8c:4e:56:c2:05:26:bf:3b:d6:0c:84:86:df: 5f:0b:65:5d:a2:c5:bc:b5:cc:3f:e6:dc:d8:2c:c8: ea:38:e2:e2:7e:f6:e7:05:4d:36:36:c8:ed:64:45: aa:d1:3c:5b:96:ac:79:41:f9:24:d5:d6:af:c5:3a: 42:3a:0a:76:21:74:ca:7c:e5:19:c5:56:ef:95:4f: de:8b:e9:79:b8:7e:e6:77:81:13:36:de:b7:e0:02: 45:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:70:AD:67:FB:68:68:51:9A:74:67:C7:F0:52:4F:42:8D:B3:FC:B0 X509v3 Authority Key Identifier: keyid:56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f8:33:62:17:73:43:55:7c:c7:ee:4e:ca:2e:74:be:5b:a8: 17:c1:21:08:bd:b0:49:70:8c:f1:87:fe:86:31:59:ea:b2:73: 89:99:a6:26:f2:c6:25:9d:b9:83:08:af:89:f3:e7:ab:b4:9c: 67:13:a1:4e:05:cf:4b:87:bf:58:1b:93:a0:5e:fb:bc:be:a1: 0d:6c:ac:1f:e0:44:85:c4:31:7b:f8:20:9c:d4:68:9c:eb:89: e3:4e:b4:eb:58:3c:09:c4:f1:b6:76:fe:9d:04:d6:7a:ce:05: 00:2b:48:d5:d5:00:95:74:c9:22:00:a7:58:3b:9d:f7:35:62: 1d:ab:f9:73:06:75:6f:7b:a7:c3:28:44:95:8b:9b:82:32:fc: 07:c6:78:45:9a:af:63:6d:81:69:4c:f7:1c:6f:e4:d2:dd:74: 5d:60:e7:bd:ea:9a:42:38:bb:80:1c:4b:f9:e2:a9:25:ad:75: fb:5c:c9:4a:42:b3:d7:cd:f2:1b:ab:b7:97:73:a1:d1:90:05: 4d:55:20:4f:23:e7:a4:5e:38:78:c6:51:75:91:0b:30:76:b9: 3b:7c:a9:16:0b:75:46:82:d8:c7:70:86:89:64:e9:ba:3c:24: 18:9c:da:05:3f:47:8c:e2:84:18:a4:da:52:ee:03:6f:30:13: 70:59:cb:71 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUaoham1Rg8Vp4KaARUb/diJopX/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1RDE4NzIw OTIxMUJBRTAeFw0yNjEwMDQxNTM1NTVaFw0yNjEwMDUxNjQ3NTVaMDMxMTAvBgNV BAMTKEEzNzBBRDY3RkI2ODY4NTE5QTc0NjdDN0YwNTI0RjQyOERCM0ZDQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTRCig67f5gAtkiGD+dmrMqZVe +H0FJ8dN4uTPiGPBMNcDCxnUGMaY73CKCFMuPSbn7JuGLB8uPFcKrxGSGVTNtO/9 lC73qj8+SQ6Zh//cx5bjKNAH/F0CsQlHan5MSc+lMWU2VyZEx5YITjp8alq6EBoc dyxSk1keQVUgQBYK4mWZU7CvaYNRALwFW9bpW2l6JSJ7dVbjCF3+tQNcHFfPwFB+ YhcHjE5WwgUmvzvWDISG318LZV2ixby1zD/m3NgsyOo44uJ+9ucFTTY2yO1kRarR PFuWrHlB+STV1q/FOkI6CnYhdMp85RnFVu+VT96L6Xm4fuZ3gRM23rfgAkWPAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUo3CtZ/toaFGadGfH8FJPQo2z/LAwHwYDVR0j BBgwFoAUVnexo5MzEgRCpmWz0l0YcgkhG64wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVCVUxB WC8wLzU2NzdCMUEzOTMzMzEyMDQ0MkE2NjVCM0QyNUQxODcyMDkyMTFCQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1 RDE4NzIwOTIxMUJBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FQlVMQVgvMC81Njc3QjFBMzkz MzMxMjA0NDJBNjY1QjNEMjVEMTg3MjA5MjExQkFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPgzYhdz Q1V8x+5Oyi50vluoF8EhCL2wSXCM8Yf+hjFZ6rJziZmmJvLGJZ25gwivifPnq7Sc ZxOhTgXPS4e/WBuToF77vL6hDWysH+BEhcQxe/ggnNRonOuJ406061g8CcTxtnb+ nQTWes4FACtI1dUAlXTJIgCnWDud9zViHav5cwZ1b3unwyhElYubgjL8B8Z4RZqv Y22BaUz3HG/k0t10XWDnveqaQji7gBxL+eKpJa11+1zJSkKz183yG6u3l3Oh0ZAF TVUgTyPnpF44eMZRdZELMHa5O3ypFgt1RoLYx3CGiWTpujwkGJzaBT9HjOKEGKTa Uu4DbzATcFnLcQ== -----END CERTIFICATE-----Generated at Mon Oct 5 06:32:22 2026 by rpki-client