$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft File: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft (raw, json) Hash identifier: lXdHPpjCvthhgchJbzDdpZFjkYPt/xgqXetiY3sSe5k= Subject key identifier: 22:70:9D:54:D8:AC:42:A7:C5:CB:B0:34:54:A0:66:C2:23:8D:92:12 Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Certificate serial: 77C680740100C69618D37F00BF487ED122BDB45F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft Manifest number: 4B Signing time: Tue 30 Jun 2026 10:58:42 +0000 Manifest this update: Tue 30 Jun 2026 10:53:42 +0000 Manifest next update: Wed 01 Jul 2026 11:03:42 +0000 Files and hashes: 1: 3130332e3135392e38382e302f32332d3234203d3e203331393732.roa (hash: uBJCL+hDXsrLzypekl61CYTy6y1oooM7hy7D2SecWcY=) 2: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl (hash: KgKyzensZlENzZhMs/FCTEoSGKHC5EWSNXDoKr97+v0=) 3: 3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa (hash: 83VaupmQcP8aGjwKicONhsZqmG/0fmQWoqtdQ72vsQk=) 4: 3231312e37392e3130382e302f32332d3234203d3e203331393732.roa (hash: XaWYO4EF8GCnSH9lm/3LpGTaiFlYA9VmdfI3S945iIY=) 5: 3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa (hash: /IijmvgF3E5df29RTHQ7h6ytu6VbgcNgJM8iMgAjKe0=) 6: 323430363a636534303a3a2f33322d3634203d3e203331393732.roa (hash: BKJtx+GIQaqxKG+F8DcrnUzVLRxDmkAefIfDjo2DHGY=) 7: 3230322e3134382e3231322e302f32332d3234203d3e20313332333639.roa (hash: SzGBARnHtav0Ll1lD5uijTPk6wrNJCucq/5lsmn01uE=) 8: 3231312e37392e3130382e302f32332d3234203d3e20313332333639.roa (hash: 4OBGIBLB7koiOTORDKBpRQmErNmgCxAih0H1Dz5yNJU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 11:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c6:80:74:01:00:c6:96:18:d3:7f:00:bf:48:7e:d1:22:bd:b4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Validity Not Before: Jun 30 10:53:42 2026 GMT Not After : Jul 1 11:03:42 2026 GMT Subject: CN=22709D54D8AC42A7C5CBB03454A066C2238D9212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:76:47:95:b9:ce:ef:6d:22:35:d8:12:0f:ff: a9:27:61:13:dd:8b:e0:23:ef:9e:cb:ad:32:cf:33: 31:18:2e:05:6d:ca:37:ee:da:82:08:03:6f:6b:a1: 7f:e9:9f:cc:06:4f:48:60:28:90:97:38:63:ab:64: 06:43:db:dd:33:cd:7a:b5:ae:f0:ac:bb:73:43:93: e1:cd:17:b6:26:ba:82:cd:9a:d8:b2:ef:91:a2:cf: 1c:13:20:87:88:4b:c2:40:19:bf:f2:7c:c8:a0:4e: eb:c0:bc:d9:ab:bc:37:07:0a:9d:eb:7f:53:bc:27: b0:72:87:78:af:e0:3c:05:dd:5b:6c:ce:7a:b1:66: a5:b1:cf:dd:77:4d:8c:6d:6d:4e:95:a0:5f:ed:5e: f3:a4:77:1f:3f:f9:c0:31:3a:23:6f:ea:b7:3f:45: 66:ac:f7:22:06:63:05:e9:72:fe:ca:48:f8:83:76: 71:f1:24:ff:8b:a5:35:60:4a:cc:8a:fe:f8:60:6d: 11:2b:24:6a:db:0d:ea:c6:d7:24:36:e8:7e:e3:ae: 6d:ab:ce:bd:db:4c:91:4e:eb:a4:76:77:ec:1b:af: 86:47:b4:4b:22:21:12:1c:5c:67:47:29:c1:27:20: 30:0f:09:02:a0:54:c5:a2:c7:d4:25:72:d0:d7:99: 02:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:70:9D:54:D8:AC:42:A7:C5:CB:B0:34:54:A0:66:C2:23:8D:92:12 X509v3 Authority Key Identifier: keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:7f:d2:6b:0e:0f:f7:fd:85:ed:34:3b:8d:a5:e5:59:d9:2a: be:4f:29:7f:5f:c7:38:b1:6d:69:4b:7c:aa:78:36:01:c2:53: 34:db:00:f7:05:a1:bf:08:d8:1e:ac:6c:c6:19:48:97:ec:c1: 7c:c4:56:82:30:c2:95:2c:0c:23:73:2a:3c:ca:7d:38:c6:29: 99:5c:a9:42:9e:28:bb:14:9b:a6:fc:54:2b:50:37:d6:ae:98: c4:9f:57:af:f2:c0:5a:8d:24:5e:a4:ff:b7:e0:20:e3:09:99: fd:05:92:e5:f8:1d:1d:72:38:cd:aa:d4:2b:b7:b2:8f:40:d3: 52:aa:79:f9:97:07:68:e2:b4:11:c3:97:35:9c:89:f7:a7:32: 7b:75:b3:4c:ae:6b:ec:91:ed:16:aa:76:65:8d:9b:94:5e:a7: 49:44:36:c1:4a:f8:a4:64:9c:d4:64:96:d9:52:d7:05:ec:8e: a8:5d:38:e0:ed:93:1d:d3:d5:11:00:8b:a6:c3:f4:dc:d0:8e: 86:f1:40:81:8b:b9:78:36:fe:17:28:5c:a0:a3:9a:51:ab:52: 16:d5:d6:07:19:07:97:a9:c2:28:27:48:00:78:bc:1d:e0:4c: 3e:bb:40:7f:2e:20:46:e9:01:3d:c0:20:10:40:69:f7:c9:da: 13:28:b9:01 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUd8aAdAEAxpYY038Av0h+0SK9tF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJE QTVBRUI2ODAeFw0yNjA2MzAxMDUzNDJaFw0yNjA3MDExMTAzNDJaMDMxMTAvBgNV BAMTKDIyNzA5RDU0RDhBQzQyQTdDNUNCQjAzNDU0QTA2NkMyMjM4RDkyMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dkeVuc7vbSI12BIP/6knYRPd i+Aj757LrTLPMzEYLgVtyjfu2oIIA29roX/pn8wGT0hgKJCXOGOrZAZD290zzXq1 rvCsu3NDk+HNF7YmuoLNmtiy75GizxwTIIeIS8JAGb/yfMigTuvAvNmrvDcHCp3r f1O8J7Byh3iv4DwF3VtsznqxZqWxz913TYxtbU6VoF/tXvOkdx8/+cAxOiNv6rc/ RWas9yIGYwXpcv7KSPiDdnHxJP+LpTVgSsyK/vhgbRErJGrbDerG1yQ26H7jrm2r zr3bTJFO66R2d+wbr4ZHtEsiIRIcXGdHKcEnIDAPCQKgVMWix9QlctDXmQIHAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUInCdVNisQqfFy7A0VKBmwiONkhIwHwYDVR0j BBgwFoAUMYh/Do0X7rTfxzRM5Ihfa9pa62gwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzAvMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS8zMTg4N0YwRThEMTdFRUI0REZDNzM0NENF NDg4NUY2QkRBNUFFQjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzAvMzE4ODdG MEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAN/ 0msOD/f9he00O42l5VnZKr5PKX9fxzixbWlLfKp4NgHCUzTbAPcFob8I2B6sbMYZ SJfswXzEVoIwwpUsDCNzKjzKfTjGKZlcqUKeKLsUm6b8VCtQN9aumMSfV6/ywFqN JF6k/7fgIOMJmf0FkuX4HR1yOM2q1Cu3so9A01KqefmXB2jitBHDlzWcifenMnt1 s0yua+yR7RaqdmWNm5Rep0lENsFK+KRknNRkltlS1wXsjqhdOODtkx3T1REAi6bD 9NzQjobxQIGLuXg2/hcoXKCjmlGrUhbV1gcZB5epwignSAB4vB3gTD67QH8uIEbp AT3AIBBAaffJ2hMouQE= -----END CERTIFICATE-----Generated at Tue Jun 30 19:07:27 2026 by rpki-client