$ rpki-client -vvf rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft File: 5677B1A39333120442A665B3D25D187209211BAE.mft (raw, json) Hash identifier: tCG6npsoOVm6of6Gnz7oXWUyRxORUlmbg3JikCThKz8= Subject key identifier: 0E:7C:27:C2:32:68:C2:CE:D2:08:CF:33:9C:C1:CD:AB:89:31:5C:BE Authority key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE Certificate issuer: /CN=5677B1A39333120442A665B3D25D187209211BAE Certificate serial: 324022FE7D7A4B9A23095572EE330219EEB95123 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft Manifest number: 81 Signing time: Fri 14 Aug 2026 10:01:33 +0000 Manifest this update: Fri 14 Aug 2026 09:56:33 +0000 Manifest next update: Sat 15 Aug 2026 12:47:33 +0000 Files and hashes: 1: 5677B1A39333120442A665B3D25D187209211BAE.crl (hash: XvkcndLG51DE8SQFkXjQCLrfDK039ZMiXP5FeRVv3v4=) 2: 323430363a626663303a3a2f33322d3438203d3e203138303431.roa (hash: KDiZaxw5XGQhywqutmhDqziZArSBlF5hTPaIVss/WdY=) 3: 3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa (hash: k/cF66xPcsmZ1x0DE1Ndr3+3JZ48QVlyjQhQ8TgIR4A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 12:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:40:22:fe:7d:7a:4b:9a:23:09:55:72:ee:33:02:19:ee:b9:51:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5677B1A39333120442A665B3D25D187209211BAE Validity Not Before: Aug 14 09:56:33 2026 GMT Not After : Aug 15 12:47:33 2026 GMT Subject: CN=0E7C27C23268C2CED208CF339CC1CDAB89315CBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:ab:31:92:14:54:19:71:89:a9:47:86:c6: 3a:f3:9e:38:e7:ca:d6:5d:3c:44:c8:6b:75:2d:5f: ca:22:ac:fd:75:32:98:10:dd:84:54:d2:98:41:06: 04:03:c6:14:45:ec:b6:8e:8d:ea:e8:f0:27:b6:29: db:ee:80:c1:ed:1d:6f:84:3b:4d:ab:a8:e8:bb:30: 34:ed:68:f7:9b:e2:0e:59:e2:f4:04:36:b9:0d:0f: 91:ee:91:67:e6:30:7a:57:d3:b2:d7:1e:41:1e:10: 23:98:af:d4:44:88:54:9a:df:06:c4:dc:51:0f:25: e7:c3:ea:8d:25:00:bc:dd:c5:35:30:0c:d8:83:e0: 9b:e7:f2:ec:d4:d3:e5:c1:f0:18:7c:2c:c6:f6:5d: 63:4e:b7:f8:c2:2b:a3:97:15:ed:62:91:88:82:30: 11:5f:94:31:03:69:a7:ed:22:60:71:67:08:05:0a: c8:56:6d:ea:1e:a9:b5:aa:85:59:18:2a:64:85:ed: 3c:0c:8c:86:9a:3d:18:dc:22:bf:56:c3:32:f0:0f: 81:4b:db:4e:0f:20:f3:e1:c3:2d:07:f0:3e:5a:36: ca:be:a1:c2:84:f6:27:cf:a3:cd:22:8d:e7:10:3b: ce:a5:8d:c7:f8:b2:04:b1:ae:a7:2e:22:8b:d5:15: 09:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7C:27:C2:32:68:C2:CE:D2:08:CF:33:9C:C1:CD:AB:89:31:5C:BE X509v3 Authority Key Identifier: keyid:56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d8:bc:c5:cc:10:d4:ee:6f:c1:c0:9b:ac:e2:93:a6:f1:80: dd:1c:c7:11:0d:53:b5:c6:6b:c3:ea:40:22:66:e0:47:27:22: 03:24:aa:d2:41:1a:62:74:db:f0:b8:9f:d2:0f:fa:4a:00:d2: 95:4a:e2:0f:d3:3d:8d:de:99:4f:92:98:6e:fc:2e:0f:52:b2: b2:72:89:59:81:0c:55:3f:8a:b7:a9:37:6c:22:47:0e:44:6c: 8e:57:81:ba:da:94:56:6d:fd:05:89:e6:46:da:96:0e:27:3d: 8d:06:d3:9b:3e:3c:8d:c8:d6:00:56:31:b9:48:9b:09:04:25: 74:a4:92:5a:65:56:3a:62:bb:1e:0d:02:0c:2c:97:ac:9d:96: 7e:f6:f8:60:1a:b1:bb:56:bc:90:14:e8:4c:26:f7:73:9f:d0: 66:83:2b:da:5d:3d:79:b8:e9:d6:e7:a3:35:71:31:73:c8:c9: fd:7b:f3:76:a6:08:9b:1d:a9:74:3d:82:1a:8c:8b:1c:be:be: 09:b6:32:f9:30:81:03:95:22:70:cd:33:4e:bd:a9:34:dd:a2: cf:a3:bc:91:8b:7c:a7:c1:57:1b:7d:99:b1:f5:53:f1:d5:2d: ec:72:51:ad:a0:a9:e3:ca:7c:70:0d:3c:28:9f:69:39:eb:38: bf:35:76:71 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUMkAi/n16S5ojCVVy7jMCGe65USMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1RDE4NzIw OTIxMUJBRTAeFw0yNjA4MTQwOTU2MzNaFw0yNjA4MTUxMjQ3MzNaMDMxMTAvBgNV BAMTKDBFN0MyN0MyMzI2OEMyQ0VEMjA4Q0YzMzlDQzFDREFCODkzMTVDQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp46sxkhRUGXGJqUeGxjrznjjn ytZdPETIa3UtX8oirP11MpgQ3YRU0phBBgQDxhRF7LaOjero8Ce2KdvugMHtHW+E O02rqOi7MDTtaPeb4g5Z4vQENrkND5HukWfmMHpX07LXHkEeECOYr9REiFSa3wbE 3FEPJefD6o0lALzdxTUwDNiD4Jvn8uzU0+XB8Bh8LMb2XWNOt/jCK6OXFe1ikYiC MBFflDEDaaftImBxZwgFCshWbeoeqbWqhVkYKmSF7TwMjIaaPRjcIr9WwzLwD4FL 204PIPPhwy0H8D5aNsq+ocKE9ifPo80ijecQO86ljcf4sgSxrqcuIovVFQn/AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUDnwnwjJows7SCM8znMHNq4kxXL4wHwYDVR0j BBgwFoAUVnexo5MzEgRCpmWz0l0YcgkhG64wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVCVUxB WC8wLzU2NzdCMUEzOTMzMzEyMDQ0MkE2NjVCM0QyNUQxODcyMDkyMTFCQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1 RDE4NzIwOTIxMUJBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FQlVMQVgvMC81Njc3QjFBMzkz MzMxMjA0NDJBNjY1QjNEMjVEMTg3MjA5MjExQkFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9i8xcwQ 1O5vwcCbrOKTpvGA3RzHEQ1TtcZrw+pAImbgRyciAySq0kEaYnTb8Lif0g/6SgDS lUriD9M9jd6ZT5KYbvwuD1KysnKJWYEMVT+Kt6k3bCJHDkRsjleButqUVm39BYnm RtqWDic9jQbTmz48jcjWAFYxuUibCQQldKSSWmVWOmK7Hg0CDCyXrJ2Wfvb4YBqx u1a8kBToTCb3c5/QZoMr2l09ebjp1uejNXExc8jJ/XvzdqYImx2pdD2CGoyLHL6+ CbYy+TCBA5UicM0zTr2pNN2iz6O8kYt8p8FXG32ZsfVT8dUt7HJRraCp48p8cA08 KJ9pOes4vzV2cQ== -----END CERTIFICATE-----Generated at Sat Aug 15 05:38:54 2026 by rpki-client