$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft File: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft (raw, json) Hash identifier: vmtA5x9MFsafKgSB/OJ+oj8t9cs/FWP8xnl1Ze5iRF8= Subject key identifier: CB:33:F1:C3:A2:08:F7:8E:75:F9:FD:D6:9C:19:15:E7:16:5B:B5:60 Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Certificate serial: 76DE3B38BBED631A009F01EF1A392FA1EA8EA526 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft Manifest number: 0C Signing time: Wed 13 May 2026 06:32:22 +0000 Manifest this update: Wed 13 May 2026 06:27:22 +0000 Manifest next update: Thu 14 May 2026 09:29:22 +0000 Files and hashes: 1: 3230322e3134382e3231322e302f32332d3234203d3e20313332333639.roa (hash: SzGBARnHtav0Ll1lD5uijTPk6wrNJCucq/5lsmn01uE=) 2: 3231312e37392e3130382e302f32332d3234203d3e20313332333639.roa (hash: 4OBGIBLB7koiOTORDKBpRQmErNmgCxAih0H1Dz5yNJU=) 3: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl (hash: X2bJgxfOB27Xd5ESPJKp9qu8eE6nSHIPSRLn01wXxoI=) 4: 3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa (hash: 83VaupmQcP8aGjwKicONhsZqmG/0fmQWoqtdQ72vsQk=) 5: 323430363a636534303a3a2f33322d3634203d3e203331393732.roa (hash: BKJtx+GIQaqxKG+F8DcrnUzVLRxDmkAefIfDjo2DHGY=) 6: 3130332e3135392e38382e302f32332d3234203d3e203331393732.roa (hash: uBJCL+hDXsrLzypekl61CYTy6y1oooM7hy7D2SecWcY=) 7: 3231312e37392e3130382e302f32332d3234203d3e203331393732.roa (hash: XaWYO4EF8GCnSH9lm/3LpGTaiFlYA9VmdfI3S945iIY=) 8: 3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa (hash: /IijmvgF3E5df29RTHQ7h6ytu6VbgcNgJM8iMgAjKe0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:29:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:de:3b:38:bb:ed:63:1a:00:9f:01:ef:1a:39:2f:a1:ea:8e:a5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Validity Not Before: May 13 06:27:22 2026 GMT Not After : May 14 09:29:22 2026 GMT Subject: CN=CB33F1C3A208F78E75F9FDD69C1915E7165BB560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:65:af:5d:8c:22:25:cc:99:03:44:2f:c4: 30:a3:6c:77:5e:fb:e3:6f:59:0d:4f:54:40:93:b5: f5:5d:85:40:47:63:89:b8:01:1a:97:85:52:c9:23: 05:44:60:8e:21:05:41:b6:8b:aa:be:07:ff:02:8c: 90:84:75:36:c9:09:0e:2a:ab:3e:1d:c3:b2:a1:27: 0e:00:f4:6c:ff:46:53:67:90:20:68:90:62:b1:d8: 27:cf:c6:a8:c4:9f:27:cc:93:b5:b1:08:57:da:dd: 69:f8:20:3d:04:3f:d6:ed:ca:6e:32:eb:40:5b:a9: 29:b3:56:80:79:87:5a:06:4a:1e:97:ec:02:37:0a: 9b:b4:d2:5c:ee:fa:58:68:63:53:27:3e:8d:0e:eb: af:1a:74:2c:f1:91:ce:68:5a:94:b1:49:6c:b9:be: 09:c8:48:1c:3b:41:00:0d:36:7d:f2:8d:81:b1:84: 2a:0e:31:15:19:46:e1:a4:ca:83:35:63:ab:a2:de: 75:13:b1:2e:8d:58:36:ec:71:ca:9b:0e:f9:de:78: aa:1b:33:c1:f3:c9:5b:46:ca:5b:93:36:01:f0:ff: c5:40:b1:41:62:6d:d9:36:ff:ac:b3:e8:30:29:3c: 93:23:6f:38:50:18:6b:13:e1:5d:db:59:68:27:a8: 9b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:33:F1:C3:A2:08:F7:8E:75:F9:FD:D6:9C:19:15:E7:16:5B:B5:60 X509v3 Authority Key Identifier: keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:b0:67:50:f2:6f:47:0b:8e:23:c6:59:76:32:81:b6:9e:38: ac:98:2f:8f:ab:ad:c8:ff:c2:36:23:4f:e3:bb:00:d1:8b:4f: fb:79:97:18:39:b9:ab:5b:d2:f2:1b:28:af:02:9d:9b:2a:41: f7:ea:ef:2a:21:0e:8c:47:a0:5c:7a:fc:d2:95:23:08:63:54: 5c:cf:f8:0e:3a:eb:c7:a6:00:9b:3c:b1:b7:c0:91:fc:a4:9f: e9:9c:d1:07:e4:44:38:aa:43:55:96:7c:39:cb:ba:e1:a9:32: 90:dd:86:ba:0a:f1:0d:85:bf:97:36:8c:19:d0:59:b5:8c:6e: a7:d7:55:e1:b6:11:58:de:ec:a0:3d:42:32:43:99:44:00:70: f1:c1:79:c9:95:7c:88:bb:4c:54:1c:98:61:59:fc:05:fa:7c: c7:b6:81:ee:28:65:bc:bd:d7:60:9b:e1:78:22:ac:12:3c:a2: 5b:82:08:b6:f2:77:b5:25:41:26:2f:b5:8c:38:9a:55:36:a2: fb:ec:3c:6d:4f:ae:c8:92:3d:b8:0f:bf:67:40:b1:6a:db:0f: 93:84:e5:a9:f1:6b:b6:3e:82:eb:45:90:be:05:e2:c4:45:82: 1d:a2:80:b5:27:09:65:69:5e:e1:d6:6b:08:8d:d0:99:68:6b: 04:f0:5b:ae -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUdt47OLvtYxoAnwHvGjkvoeqOpSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJE QTVBRUI2ODAeFw0yNjA1MTMwNjI3MjJaFw0yNjA1MTQwOTI5MjJaMDMxMTAvBgNV BAMTKENCMzNGMUMzQTIwOEY3OEU3NUY5RkRENjlDMTkxNUU3MTY1QkI1NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lWWvXYwiJcyZA0QvxDCjbHde ++NvWQ1PVECTtfVdhUBHY4m4ARqXhVLJIwVEYI4hBUG2i6q+B/8CjJCEdTbJCQ4q qz4dw7KhJw4A9Gz/RlNnkCBokGKx2CfPxqjEnyfMk7WxCFfa3Wn4ID0EP9btym4y 60BbqSmzVoB5h1oGSh6X7AI3Cpu00lzu+lhoY1MnPo0O668adCzxkc5oWpSxSWy5 vgnISBw7QQANNn3yjYGxhCoOMRUZRuGkyoM1Y6ui3nUTsS6NWDbsccqbDvneeKob M8HzyVtGyluTNgHw/8VAsUFibdk2/6yz6DApPJMjbzhQGGsT4V3bWWgnqJv5AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUyzPxw6II9451+f3WnBkV5xZbtWAwHwYDVR0j BBgwFoAUMYh/Do0X7rTfxzRM5Ihfa9pa62gwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzAvMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS8zMTg4N0YwRThEMTdFRUI0REZDNzM0NENF NDg4NUY2QkRBNUFFQjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzAvMzE4ODdG MEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABWw Z1Dyb0cLjiPGWXYygbaeOKyYL4+rrcj/wjYjT+O7ANGLT/t5lxg5uatb0vIbKK8C nZsqQffq7yohDoxHoFx6/NKVIwhjVFzP+A4668emAJs8sbfAkfykn+mc0QfkRDiq Q1WWfDnLuuGpMpDdhroK8Q2Fv5c2jBnQWbWMbqfXVeG2EVje7KA9QjJDmUQAcPHB ecmVfIi7TFQcmGFZ/AX6fMe2ge4oZby912Cb4XgirBI8oluCCLbyd7UlQSYvtYw4 mlU2ovvsPG1PrsiSPbgPv2dAsWrbD5OE5anxa7Y+gutFkL4F4sRFgh2igLUnCWVp XuHWawiN0JloawTwW64= -----END CERTIFICATE-----Generated at Wed May 13 20:36:00 2026 by rpki-client