$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft File: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft (raw, json) Hash identifier: Dn1UtAHrB1OMRc3z0jp1VGh8Ad6BhOI7Ujyo8GzCk1I= Subject key identifier: 39:56:35:F4:9E:A3:36:DD:6B:0C:5C:88:C9:34:61:38:E0:16:D3:C3 Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Certificate serial: 2F39DE2E50AFF18B15FC294EE9CD7843E0859383 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft Manifest number: 87 Signing time: Fri 14 Aug 2026 17:52:43 +0000 Manifest this update: Fri 14 Aug 2026 17:47:43 +0000 Manifest next update: Sat 15 Aug 2026 18:21:43 +0000 Files and hashes: 1: 323430363a636534303a3a2f33322d3634203d3e203331393732.roa (hash: BKJtx+GIQaqxKG+F8DcrnUzVLRxDmkAefIfDjo2DHGY=) 2: 3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa (hash: 83VaupmQcP8aGjwKicONhsZqmG/0fmQWoqtdQ72vsQk=) 3: 3231312e37392e3130382e302f32332d3234203d3e20313332333639.roa (hash: 4OBGIBLB7koiOTORDKBpRQmErNmgCxAih0H1Dz5yNJU=) 4: 3231312e37392e3130382e302f32332d3234203d3e203331393732.roa (hash: XaWYO4EF8GCnSH9lm/3LpGTaiFlYA9VmdfI3S945iIY=) 5: 3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa (hash: /IijmvgF3E5df29RTHQ7h6ytu6VbgcNgJM8iMgAjKe0=) 6: 3230322e3134382e3231322e302f32332d3234203d3e20313332333639.roa (hash: SzGBARnHtav0Ll1lD5uijTPk6wrNJCucq/5lsmn01uE=) 7: 3130332e3135392e38382e302f32332d3234203d3e203331393732.roa (hash: uBJCL+hDXsrLzypekl61CYTy6y1oooM7hy7D2SecWcY=) 8: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl (hash: kEpG+L0hhzKwvNhMsJKUh0xzJLv67mUJncef6H2As5E=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 18:21:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:39:de:2e:50:af:f1:8b:15:fc:29:4e:e9:cd:78:43:e0:85:93:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Validity Not Before: Aug 14 17:47:43 2026 GMT Not After : Aug 15 18:21:43 2026 GMT Subject: CN=395635F49EA336DD6B0C5C88C9346138E016D3C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:8a:b5:71:c5:1f:1e:1b:f6:03:ab:73:38:97: 95:dc:3b:6c:6d:36:85:71:fe:8e:8c:89:4c:c7:5c: b2:af:87:4f:b3:b9:a3:d5:36:0c:90:27:20:11:ea: c3:52:c7:d7:7d:d5:a8:29:62:e4:91:c3:de:19:bf: 1d:04:b3:08:bb:a3:59:91:6a:cf:73:8c:3a:07:cf: 69:b2:68:1a:49:6a:12:23:16:84:09:00:99:f7:26: 87:c8:a5:b0:77:a4:2d:60:20:f9:c4:c1:7b:c2:7b: f7:8e:e3:39:3f:b2:50:a7:a6:54:0a:f3:85:57:37: 27:af:f0:45:1d:37:fe:03:30:1f:cb:0e:ff:cb:c0: 3f:27:3c:0f:7f:2a:66:6c:f1:cf:72:80:1e:bf:6e: ae:cc:39:93:0b:ea:a3:01:2d:55:0e:55:e4:19:fc: fd:c8:61:06:f9:99:f5:8d:34:19:bc:f7:6c:9a:98: a7:7a:de:fb:5a:df:69:a5:91:7f:7e:e3:4e:19:61: 81:7c:7f:94:e4:fb:04:06:30:57:4c:80:c8:3b:0a: b3:50:e6:47:b6:ce:2d:b4:6d:19:fc:ac:6b:06:7f: b4:87:2f:3d:27:8b:cb:f9:68:91:0e:a6:2c:62:9f: 69:7c:f9:8a:ea:ac:14:b7:e5:b5:10:e9:e4:d1:22: 2e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:56:35:F4:9E:A3:36:DD:6B:0C:5C:88:C9:34:61:38:E0:16:D3:C3 X509v3 Authority Key Identifier: keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e9:d1:3b:cc:e8:36:a1:8d:13:9e:b6:72:1f:ee:89:f7:a0: 0b:0e:1c:cd:b6:8b:53:3c:b3:a6:f2:cc:23:c4:52:fd:df:60: 98:f7:34:8b:c0:c5:50:11:1f:2f:6e:36:fe:0c:b4:a2:9f:36: 82:b0:64:6f:79:e5:3b:0f:c2:f3:9c:5f:6f:72:c4:63:c5:49: 88:1e:c9:ce:b6:93:eb:78:c5:1a:87:a3:90:c6:5a:0f:1f:5e: 0c:f4:43:ea:96:da:72:01:52:ee:55:3f:e0:11:12:2a:71:d3: 7d:9f:e3:5c:18:3d:09:cd:45:fe:16:ec:1d:29:1e:db:8c:f8: be:66:87:36:ea:de:c7:cf:39:66:ee:d8:73:ce:4b:6c:ce:08: bd:5c:01:2c:7c:b4:88:de:4a:7e:f5:8e:05:f1:e0:38:c5:d6: 91:a6:a8:9b:49:d2:47:15:46:e2:f6:89:b1:f6:27:d5:98:c3: cd:bd:1c:c4:d7:e7:d6:b8:3c:e2:6a:c1:05:d7:9c:32:ed:52: 92:bf:be:d4:c5:e8:c0:08:68:60:d1:d4:31:ef:b5:b7:fd:45: bf:7c:4f:32:cd:2b:7a:c0:cf:8e:a7:b6:29:0b:6a:40:b9:63: 02:86:94:03:6e:26:c6:38:4e:e1:e4:00:a2:0d:7e:8a:e8:1d: a3:5f:26:79 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIULzneLlCv8YsV/ClO6c14Q+CFk4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJE QTVBRUI2ODAeFw0yNjA4MTQxNzQ3NDNaFw0yNjA4MTUxODIxNDNaMDMxMTAvBgNV BAMTKDM5NTYzNUY0OUVBMzM2REQ2QjBDNUM4OEM5MzQ2MTM4RTAxNkQzQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6irVxxR8eG/YDq3M4l5XcO2xt NoVx/o6MiUzHXLKvh0+zuaPVNgyQJyAR6sNSx9d91agpYuSRw94Zvx0Eswi7o1mR as9zjDoHz2myaBpJahIjFoQJAJn3JofIpbB3pC1gIPnEwXvCe/eO4zk/slCnplQK 84VXNyev8EUdN/4DMB/LDv/LwD8nPA9/KmZs8c9ygB6/bq7MOZML6qMBLVUOVeQZ /P3IYQb5mfWNNBm892yamKd63vta32mlkX9+404ZYYF8f5Tk+wQGMFdMgMg7CrNQ 5ke2zi20bRn8rGsGf7SHLz0ni8v5aJEOpixin2l8+YrqrBS35bUQ6eTRIi63AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUOVY19J6jNt1rDFyIyTRhOOAW08MwHwYDVR0j BBgwFoAUMYh/Do0X7rTfxzRM5Ihfa9pa62gwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzAvMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS8zMTg4N0YwRThEMTdFRUI0REZDNzM0NENF NDg4NUY2QkRBNUFFQjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzAvMzE4ODdG MEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG/p 0TvM6DahjROetnIf7on3oAsOHM22i1M8s6byzCPEUv3fYJj3NIvAxVARHy9uNv4M tKKfNoKwZG955TsPwvOcX29yxGPFSYgeyc62k+t4xRqHo5DGWg8fXgz0Q+qW2nIB Uu5VP+AREipx032f41wYPQnNRf4W7B0pHtuM+L5mhzbq3sfPOWbu2HPOS2zOCL1c ASx8tIjeSn71jgXx4DjF1pGmqJtJ0kcVRuL2ibH2J9WYw829HMTX59a4POJqwQXX nDLtUpK/vtTF6MAIaGDR1DHvtbf9Rb98TzLNK3rAz46ntikLakC5YwKGlANuJsY4 TuHkAKINforoHaNfJnk= -----END CERTIFICATE-----Generated at Sat Aug 15 05:20:47 2026 by rpki-client