$ rpki-client -vvf rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft File: 5677B1A39333120442A665B3D25D187209211BAE.mft (raw, json) Hash identifier: 1tbI+ngSd2ypBu/9kfT74x0g9V71AHuKHMMHBgolXm8= Subject key identifier: B9:68:FA:65:DB:8C:5E:91:66:9B:91:A8:BF:4F:25:77:D7:CD:17:49 Authority key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE Certificate issuer: /CN=5677B1A39333120442A665B3D25D187209211BAE Certificate serial: 7D8584FB24B4AF9990B59799969C7A884504B37E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft Manifest number: 07 Signing time: Thu 14 May 2026 20:20:54 +0000 Manifest this update: Thu 14 May 2026 20:15:54 +0000 Manifest next update: Fri 15 May 2026 20:30:54 +0000 Files and hashes: 1: 3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa (hash: k/cF66xPcsmZ1x0DE1Ndr3+3JZ48QVlyjQhQ8TgIR4A=) 2: 5677B1A39333120442A665B3D25D187209211BAE.crl (hash: hwl+kO2XaStM/adl+hIIcUhj76/MIOYqA2RiyKOcj4g=) 3: 323430363a626663303a3a2f33322d3438203d3e203138303431.roa (hash: KDiZaxw5XGQhywqutmhDqziZArSBlF5hTPaIVss/WdY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 15 May 2026 20:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:85:84:fb:24:b4:af:99:90:b5:97:99:96:9c:7a:88:45:04:b3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5677B1A39333120442A665B3D25D187209211BAE Validity Not Before: May 14 20:15:54 2026 GMT Not After : May 15 20:30:54 2026 GMT Subject: CN=B968FA65DB8C5E91669B91A8BF4F2577D7CD1749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:4d:52:a8:0b:d9:76:bc:0a:7b:b4:26:0c: bc:b0:67:1f:6c:8f:0b:0c:67:60:52:8e:13:a8:8f: 4e:3b:82:2a:f9:3f:08:a4:3b:98:86:57:60:fc:2e: 82:4e:83:fd:fd:f6:27:55:2d:0e:53:b7:72:64:c0: f7:4a:2e:91:35:61:b0:0f:cc:80:88:7b:9d:c5:2c: 0b:01:c6:ec:6b:78:53:37:99:2d:3e:3b:42:8d:ce: 64:9c:11:57:fe:42:75:20:82:67:d0:c8:dd:ea:48: 82:95:e2:7b:32:6c:a2:0f:21:6a:f9:61:f9:5b:c5: 14:db:64:5f:c2:85:ab:f1:fc:a7:9d:52:af:ba:cf: ec:7d:a4:72:96:34:dc:1a:62:75:11:9b:a2:5f:d7: 2e:2a:10:0a:e8:46:6c:36:b6:d1:0d:e4:72:43:9b: 81:f3:99:a5:97:ae:e8:da:64:9e:2a:be:ea:21:3c: 6d:cb:d3:1d:1d:5e:22:18:77:97:58:84:86:3c:55: ae:af:5b:8f:0a:fb:f3:b1:c2:38:8f:7b:d0:3e:15: b1:0d:98:30:44:e0:e5:75:68:ae:2e:c7:ae:8d:5f: da:75:bf:80:93:57:e0:5c:6b:0f:ad:b1:10:f0:13: d6:31:81:76:12:59:f1:51:c4:4e:21:63:25:5e:e6: c9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:68:FA:65:DB:8C:5E:91:66:9B:91:A8:BF:4F:25:77:D7:CD:17:49 X509v3 Authority Key Identifier: keyid:56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:7c:53:b8:8c:35:79:40:ea:84:9b:ec:15:43:0d:62:48:f3: 28:60:7a:b5:f0:8e:8a:20:64:3d:23:5f:63:ef:67:4d:49:3e: 53:b9:fd:ec:7b:a4:55:49:ab:ed:21:c7:c6:35:c2:e6:ca:53: 38:84:9a:27:2d:c4:70:f5:60:64:fa:0d:c2:32:8d:c8:e0:3b: 7f:ad:d0:36:7f:4f:b9:4f:88:6c:a1:a7:3c:3c:dc:0d:f3:41: 12:21:a6:73:c7:b4:9d:4c:a4:1c:90:cc:a9:de:ac:02:83:21: 64:d0:8a:b2:aa:28:ef:41:53:39:42:ad:4c:98:ad:52:d2:b2: 6c:a2:09:12:58:c5:e7:c9:7a:bd:2b:35:82:68:43:d5:2a:a0: fd:d0:39:95:62:0c:ad:ad:81:ca:b0:b7:20:dc:73:02:95:2d: 20:13:96:31:40:91:07:fe:16:ae:20:f3:88:00:69:c7:c8:ea: 8d:b1:4a:2d:ad:d0:b6:ae:26:19:df:16:31:55:b3:f9:53:ca: 98:66:23:11:96:3e:b6:f5:a7:83:14:95:06:9e:2a:f5:93:e8: 54:0a:5b:d0:18:32:94:b0:e9:51:14:5a:80:40:7f:7a:58:db: d3:0d:40:31:96:cc:d2:08:c1:15:a0:8b:c3:88:99:4d:3d:ae: a3:f7:c1:de -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUfYWE+yS0r5mQtZeZlpx6iEUEs34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1RDE4NzIw OTIxMUJBRTAeFw0yNjA1MTQyMDE1NTRaFw0yNjA1MTUyMDMwNTRaMDMxMTAvBgNV BAMTKEI5NjhGQTY1REI4QzVFOTE2NjlCOTFBOEJGNEYyNTc3RDdDRDE3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwuU1SqAvZdrwKe7QmDLywZx9s jwsMZ2BSjhOoj047gir5PwikO5iGV2D8LoJOg/399idVLQ5Tt3JkwPdKLpE1YbAP zICIe53FLAsBxuxreFM3mS0+O0KNzmScEVf+QnUggmfQyN3qSIKV4nsybKIPIWr5 YflbxRTbZF/Chavx/KedUq+6z+x9pHKWNNwaYnURm6Jf1y4qEAroRmw2ttEN5HJD m4HzmaWXrujaZJ4qvuohPG3L0x0dXiIYd5dYhIY8Va6vW48K+/OxwjiPe9A+FbEN mDBE4OV1aK4ux66NX9p1v4CTV+Bcaw+tsRDwE9YxgXYSWfFRxE4hYyVe5snvAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUuWj6ZduMXpFmm5Gov08ld9fNF0kwHwYDVR0j BBgwFoAUVnexo5MzEgRCpmWz0l0YcgkhG64wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVCVUxB WC8wLzU2NzdCMUEzOTMzMzEyMDQ0MkE2NjVCM0QyNUQxODcyMDkyMTFCQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1 RDE4NzIwOTIxMUJBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FQlVMQVgvMC81Njc3QjFBMzkz MzMxMjA0NDJBNjY1QjNEMjVEMTg3MjA5MjExQkFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHxTuIw1 eUDqhJvsFUMNYkjzKGB6tfCOiiBkPSNfY+9nTUk+U7n97HukVUmr7SHHxjXC5spT OISaJy3EcPVgZPoNwjKNyOA7f63QNn9PuU+IbKGnPDzcDfNBEiGmc8e0nUykHJDM qd6sAoMhZNCKsqoo70FTOUKtTJitUtKybKIJEljF58l6vSs1gmhD1Sqg/dA5lWIM ra2ByrC3INxzApUtIBOWMUCRB/4WriDziABpx8jqjbFKLa3Qtq4mGd8WMVWz+VPK mGYjEZY+tvWngxSVBp4q9ZPoVApb0BgylLDpURRagEB/eljb0w1AMZbM0gjBFaCL w4iZTT2uo/fB3g== -----END CERTIFICATE-----Generated at Fri May 15 08:23:46 2026 by rpki-client