$ rpki-client -vvvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft File: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft (raw, json) Hash identifier: 7PN+f6dwJY5HL/SI3QcyeZpKk9+CB9V2TyM8j4AJorY= Subject key identifier: 2C:E4:86:05:4F:AE:EE:E4:C6:AF:86:0B:1B:5E:2C:1D:EE:64:DF:25 Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Certificate serial: 305DAA81958B14FDFC05DC6FD6EBAD7114372A7A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft Manifest number: CD Signing time: Sat 03 Oct 2026 21:58:12 +0000 Manifest this update: Sat 03 Oct 2026 21:53:12 +0000 Manifest next update: Mon 05 Oct 2026 00:03:12 +0000 Files and hashes: 1: 3231312e37392e3130382e302f32332d3234203d3e203331393732.roa (hash: XaWYO4EF8GCnSH9lm/3LpGTaiFlYA9VmdfI3S945iIY=) 2: 3230322e3134382e3231322e302f32332d3234203d3e20313332333639.roa (hash: SzGBARnHtav0Ll1lD5uijTPk6wrNJCucq/5lsmn01uE=) 3: 3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa (hash: 83VaupmQcP8aGjwKicONhsZqmG/0fmQWoqtdQ72vsQk=) 4: 3130332e3135392e38382e302f32332d3234203d3e203331393732.roa (hash: uBJCL+hDXsrLzypekl61CYTy6y1oooM7hy7D2SecWcY=) 5: 3231312e37392e3130382e302f32332d3234203d3e20313332333639.roa (hash: 4OBGIBLB7koiOTORDKBpRQmErNmgCxAih0H1Dz5yNJU=) 6: 3231312e37332e3130322e302f32332d3234203d3e20313332333639.roa (hash: WHMty9+iXYUNiWSnLw/kN5nrX7uOBPI5Gt9KRhY1qM4=) 7: 3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa (hash: /IijmvgF3E5df29RTHQ7h6ytu6VbgcNgJM8iMgAjKe0=) 8: 323430363a636534303a3a2f33322d3634203d3e203331393732.roa (hash: BKJtx+GIQaqxKG+F8DcrnUzVLRxDmkAefIfDjo2DHGY=) 9: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl (hash: a4mzrYQPMKn0VIGlq6QCtfC5giNiPbN7DfBaJkinW4c=) 10: 3231312e37332e3130322e302f32332d3234203d3e203331393732.roa (hash: BZZsk08mUYcwTMTfXfB6TG4Y8hhjasOxijDev40W9UE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 22:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5d:aa:81:95:8b:14:fd:fc:05:dc:6f:d6:eb:ad:71:14:37:2a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Validity Not Before: Oct 3 21:53:12 2026 GMT Not After : Oct 5 00:03:12 2026 GMT Subject: CN=2CE486054FAEEEE4C6AF860B1B5E2C1DEE64DF25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c8:00:e8:a4:5d:0d:73:99:2d:a2:fb:8f:e6: 4f:6a:e0:fa:7d:47:3c:22:77:f7:6d:2c:17:48:5f: 60:6a:10:63:6b:d6:2d:1e:7f:2c:9f:0b:af:46:6f: 3c:37:87:f2:70:63:24:a7:5b:31:89:29:d7:0a:ab: 7b:9e:92:f5:25:5a:b0:28:f9:17:86:b7:31:82:fa: 79:f1:df:c5:c9:b9:4f:d7:a4:fc:b2:fc:ce:f6:6d: b9:28:c4:e0:cf:32:94:dd:e9:1f:bc:aa:25:1e:7d: e8:c2:51:5b:d4:bd:47:c7:d3:0c:43:0b:8a:44:d4: 70:bf:40:a5:b5:2e:e8:c1:ba:78:de:36:e6:14:f2: ae:69:6f:bc:2b:8a:9c:8d:f9:65:a7:46:41:c8:09: 74:cd:bb:16:db:ea:57:f6:1c:2f:01:dd:2f:a5:7f: cc:22:29:5b:57:d3:9b:63:1d:fb:b3:72:c5:0a:d8: 20:de:8d:ce:fc:33:89:99:f5:df:54:fc:a4:bd:50: 35:18:b1:4d:7b:a9:1e:b9:c9:b5:1d:d7:c2:87:01: 16:f5:55:bc:67:87:09:69:ad:74:52:3c:a9:ed:c2: a5:ab:99:e2:ed:0b:71:de:86:85:43:80:68:c8:c3: c9:b6:99:9d:91:a4:e9:99:b3:a0:17:e6:51:ff:2d: 74:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E4:86:05:4F:AE:EE:E4:C6:AF:86:0B:1B:5E:2C:1D:EE:64:DF:25 X509v3 Authority Key Identifier: keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8f:14:30:0c:a9:f6:5e:db:a6:82:2f:96:e8:3d:f7:c0:7f: e7:cb:38:33:ff:c2:89:f9:81:ac:9a:97:c6:0a:05:06:9c:77: 65:ca:d8:27:ba:91:b8:47:85:50:1e:13:4c:b4:04:2d:50:88: b0:8c:b9:1e:66:4f:b8:ea:22:4b:cf:6d:19:3e:1b:97:a9:a3: b5:cb:d8:06:d6:d4:d6:df:5d:b1:40:6b:2c:70:e3:45:48:0a: 86:d8:70:45:b6:2d:f8:74:18:fa:5c:b5:bb:aa:1a:09:2f:52: fd:f8:99:c3:12:23:a1:7d:7b:81:61:08:1a:77:1a:91:de:ff: 7d:a7:53:37:32:4b:c9:56:fc:bd:82:d8:0f:27:1d:3e:c3:5c: 7e:85:9a:70:79:61:9f:cf:62:cb:06:67:64:93:87:08:08:5f: 3d:b0:1d:b7:ff:8b:45:08:f3:b4:d6:f6:15:c1:0f:92:39:06: 60:51:67:43:f6:a1:e8:4f:2a:c7:3f:73:67:08:b9:d5:d8:53: 63:88:36:84:29:5c:d9:0a:1f:8e:3a:e0:c4:55:f0:1f:93:63: 3c:08:0c:85:e9:78:f7:c7:d2:ba:3a:fe:59:73:f2:6a:15:b7: 87:70:eb:88:a2:9e:cc:95:26:d2:f1:19:42:9a:af:f0:b0:36: 5e:17:ad:52 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUMF2qgZWLFP38Bdxv1uutcRQ3KnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJE QTVBRUI2ODAeFw0yNjEwMDMyMTUzMTJaFw0yNjEwMDUwMDAzMTJaMDMxMTAvBgNV BAMTKDJDRTQ4NjA1NEZBRUVFRTRDNkFGODYwQjFCNUUyQzFERUU2NERGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdyADopF0Nc5ktovuP5k9q4Pp9 Rzwid/dtLBdIX2BqEGNr1i0efyyfC69Gbzw3h/JwYySnWzGJKdcKq3uekvUlWrAo +ReGtzGC+nnx38XJuU/XpPyy/M72bbkoxODPMpTd6R+8qiUefejCUVvUvUfH0wxD C4pE1HC/QKW1LujBunjeNuYU8q5pb7wripyN+WWnRkHICXTNuxbb6lf2HC8B3S+l f8wiKVtX05tjHfuzcsUK2CDejc78M4mZ9d9U/KS9UDUYsU17qR65ybUd18KHARb1 VbxnhwlprXRSPKntwqWrmeLtC3HehoVDgGjIw8m2mZ2RpOmZs6AX5lH/LXSFAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQULOSGBU+u7uTGr4YLG14sHe5k3yUwHwYDVR0j BBgwFoAUMYh/Do0X7rTfxzRM5Ihfa9pa62gwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzAvMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS8zMTg4N0YwRThEMTdFRUI0REZDNzM0NENF NDg4NUY2QkRBNUFFQjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzAvMzE4ODdG MEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH+P FDAMqfZe26aCL5boPffAf+fLODP/won5gayal8YKBQacd2XK2Ce6kbhHhVAeE0y0 BC1QiLCMuR5mT7jqIkvPbRk+G5epo7XL2AbW1NbfXbFAayxw40VICobYcEW2Lfh0 GPpctbuqGgkvUv34mcMSI6F9e4FhCBp3GpHe/32nUzcyS8lW/L2C2A8nHT7DXH6F mnB5YZ/PYssGZ2SThwgIXz2wHbf/i0UI87TW9hXBD5I5BmBRZ0P2oehPKsc/c2cI udXYU2OINoQpXNkKH4464MRV8B+TYzwIDIXpePfH0ro6/llz8moVt4dw64iinsyV JtLxGUKar/CwNl4XrVI= -----END CERTIFICATE-----Generated at Sun Oct 4 08:15:48 2026 by rpki-client