$ rpki-client -vvf rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft File: 5677B1A39333120442A665B3D25D187209211BAE.mft (raw, json) Hash identifier: WQ8x3EZ4PF9Y0CYIa/zt21vIAisvfL+2OyKJfVrfsFA= Subject key identifier: 99:5E:FC:8C:C4:A9:94:6F:FB:3D:4B:03:AA:A7:13:6F:E6:B8:48:16 Authority key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE Certificate issuer: /CN=5677B1A39333120442A665B3D25D187209211BAE Certificate serial: 6482162D9ACE2A1245227ED53AB6C1323729C3D4 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft Manifest number: 45 Signing time: Tue 30 Jun 2026 05:23:10 +0000 Manifest this update: Tue 30 Jun 2026 05:18:10 +0000 Manifest next update: Wed 01 Jul 2026 05:52:10 +0000 Files and hashes: 1: 5677B1A39333120442A665B3D25D187209211BAE.crl (hash: MAEch71CH/ovjtsjKo7tlNKVkF+la62+1nCsJSejhFA=) 2: 3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa (hash: k/cF66xPcsmZ1x0DE1Ndr3+3JZ48QVlyjQhQ8TgIR4A=) 3: 323430363a626663303a3a2f33322d3438203d3e203138303431.roa (hash: KDiZaxw5XGQhywqutmhDqziZArSBlF5hTPaIVss/WdY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 05:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:82:16:2d:9a:ce:2a:12:45:22:7e:d5:3a:b6:c1:32:37:29:c3:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5677B1A39333120442A665B3D25D187209211BAE Validity Not Before: Jun 30 05:18:10 2026 GMT Not After : Jul 1 05:52:10 2026 GMT Subject: CN=995EFC8CC4A9946FFB3D4B03AAA7136FE6B84816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7a:88:71:46:c7:41:8c:90:27:54:5f:56:6e: ed:06:30:c0:75:d2:69:a8:37:d0:f3:16:93:5d:50: 60:b0:29:88:0f:6c:e2:05:e0:d3:5e:e0:ec:9c:0d: 62:5c:c3:3c:40:ea:aa:11:bf:1c:2c:7c:f2:c6:63: 03:51:c8:57:ef:e5:7b:cd:02:e0:41:42:de:cf:a7: 07:55:e9:ac:32:fd:ee:4a:42:09:26:e9:bb:9b:c2: 44:44:8b:32:36:d7:5c:53:a5:26:b6:ea:15:0c:1b: 4b:67:3d:46:d0:b5:dc:1f:f8:70:40:a8:ca:7e:71: 9f:de:40:a6:f0:3e:e5:17:7e:37:0d:a2:22:ab:e6: 72:f0:0a:a1:76:3a:18:7d:2b:d5:9c:b2:cb:c6:1f: 9a:39:5c:cd:8e:cc:87:36:c3:fa:3f:d6:8a:8b:67: cc:cc:fd:4b:fb:27:d0:4c:12:af:5b:49:a3:da:50: ce:54:57:b5:a1:7d:56:fb:6d:c1:39:b4:b1:6c:0f: ea:79:96:5d:d9:9a:7e:47:33:e1:e1:ce:05:7d:e5: 26:40:ca:c2:60:dd:cd:12:aa:61:e1:08:80:5f:0f: e2:e7:38:03:c9:16:a2:92:60:57:0f:0c:a5:e9:b9: 07:44:a0:46:00:49:d0:ed:50:c1:7e:f5:f1:11:8a: f7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5E:FC:8C:C4:A9:94:6F:FB:3D:4B:03:AA:A7:13:6F:E6:B8:48:16 X509v3 Authority Key Identifier: keyid:56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:22:b0:f1:2e:33:b3:3e:62:e5:5f:a4:eb:96:42:89:74:74: 81:43:32:05:02:d0:a8:ce:05:6d:2e:a0:30:d2:b9:91:54:73: 66:96:11:7a:f6:e1:d8:1b:71:78:de:26:e1:87:7b:b0:c7:bb: 24:83:2d:34:6a:00:f2:1d:85:ec:88:d5:37:85:6d:df:82:75: f4:0c:c2:4a:34:e2:10:1f:41:3d:c4:f6:cd:df:f5:a4:91:2f: 11:2d:87:c5:0f:1b:10:55:f7:77:77:59:51:db:ab:3e:e3:7a: 7c:cc:a5:2f:22:0d:02:5d:a9:8b:f9:f8:74:42:13:61:fb:4a: f9:3e:18:47:bc:23:ae:41:e6:4e:dc:f8:fc:4e:aa:5b:78:b1: 0f:3a:0a:cf:0e:b3:e7:9f:f7:14:24:15:d3:f7:e1:61:b0:21: 50:ef:a5:67:07:93:e5:57:fb:57:68:69:5e:9a:39:c5:ae:ac: 4d:69:d5:58:d5:a7:9f:59:d2:b6:79:99:0b:46:14:a1:fe:38: 22:93:29:c7:30:ab:d1:1e:28:f9:80:bb:de:7a:4c:7d:8d:2c: ea:5b:03:34:57:b9:da:7d:73:f5:00:40:a4:73:c4:5a:3a:a4: 6d:55:e8:f7:b1:45:89:d9:41:8b:73:a2:e4:9c:6b:8f:1f:91: cc:3f:75:0a -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUZIIWLZrOKhJFIn7VOrbBMjcpw9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1RDE4NzIw OTIxMUJBRTAeFw0yNjA2MzAwNTE4MTBaFw0yNjA3MDEwNTUyMTBaMDMxMTAvBgNV BAMTKDk5NUVGQzhDQzRBOTk0NkZGQjNENEIwM0FBQTcxMzZGRTZCODQ4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjeohxRsdBjJAnVF9Wbu0GMMB1 0mmoN9DzFpNdUGCwKYgPbOIF4NNe4OycDWJcwzxA6qoRvxwsfPLGYwNRyFfv5XvN AuBBQt7PpwdV6awy/e5KQgkm6bubwkREizI211xTpSa26hUMG0tnPUbQtdwf+HBA qMp+cZ/eQKbwPuUXfjcNoiKr5nLwCqF2Ohh9K9WcssvGH5o5XM2OzIc2w/o/1oqL Z8zM/Uv7J9BMEq9bSaPaUM5UV7WhfVb7bcE5tLFsD+p5ll3Zmn5HM+HhzgV95SZA ysJg3c0SqmHhCIBfD+LnOAPJFqKSYFcPDKXpuQdEoEYASdDtUMF+9fERivfNAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUmV78jMSplG/7PUsDqqcTb+a4SBYwHwYDVR0j BBgwFoAUVnexo5MzEgRCpmWz0l0YcgkhG64wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVCVUxB WC8wLzU2NzdCMUEzOTMzMzEyMDQ0MkE2NjVCM0QyNUQxODcyMDkyMTFCQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1 RDE4NzIwOTIxMUJBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FQlVMQVgvMC81Njc3QjFBMzkz MzMxMjA0NDJBNjY1QjNEMjVEMTg3MjA5MjExQkFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSKw8S4z sz5i5V+k65ZCiXR0gUMyBQLQqM4FbS6gMNK5kVRzZpYRevbh2BtxeN4m4Yd7sMe7 JIMtNGoA8h2F7IjVN4Vt34J19AzCSjTiEB9BPcT2zd/1pJEvES2HxQ8bEFX3d3dZ UdurPuN6fMylLyINAl2pi/n4dEITYftK+T4YR7wjrkHmTtz4/E6qW3ixDzoKzw6z 55/3FCQV0/fhYbAhUO+lZweT5Vf7V2hpXpo5xa6sTWnVWNWnn1nStnmZC0YUof44 IpMpxzCr0R4o+YC73npMfY0s6lsDNFe52n1z9QBApHPEWjqkbVXo97FFidlBi3Oi 5Jxrjx+RzD91Cg== -----END CERTIFICATE-----Generated at Tue Jun 30 19:12:31 2026 by rpki-client