$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft File: 9CF6ECD13FB5B2029770871AA6E5796104822624.mft (raw, json) Hash identifier: DtKodLvknyn6CYBymyB9z5UlyhjbcTTvphdmCxNUhsQ= Subject key identifier: 7F:74:0C:CF:1B:C0:5A:51:70:44:19:35:EE:99:B9:2B:A8:F0:9C:C3 Authority key identifier: 9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 Certificate issuer: /CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Certificate serial: 45F38D20311727BF28A46FD42CBE6B6BE676B38C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft Manifest number: 4C Signing time: Tue 30 Jun 2026 11:13:44 +0000 Manifest this update: Tue 30 Jun 2026 11:08:44 +0000 Manifest next update: Wed 01 Jul 2026 14:10:44 +0000 Files and hashes: 1: 36342e37382e3136302e302f32302d3234203d3e20313332333639.roa (hash: GgXMTkt2H5e9QQpD/IDwW8cfgE25pbmkynI8XBBMpbg=) 2: 36342e37382e3136302e302f32302d3234203d3e203331393732.roa (hash: fJ9O2D8T6TBG/ntIcA3JtcHpPY7Bp1wllKnMj7rLb1A=) 3: 9CF6ECD13FB5B2029770871AA6E5796104822624.crl (hash: vXnuBY1JR7FGTNGRqwXOpMzu/HZaIKmyTgUoFdeVDgc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 14:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f3:8d:20:31:17:27:bf:28:a4:6f:d4:2c:be:6b:6b:e6:76:b3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Validity Not Before: Jun 30 11:08:44 2026 GMT Not After : Jul 1 14:10:44 2026 GMT Subject: CN=7F740CCF1BC05A5170441935EE99B92BA8F09CC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:eb:94:2a:c4:20:74:10:38:dd:61:a3:f7:9d: 87:31:9f:ac:21:92:83:82:e3:5c:0f:ee:0d:55:98: 65:28:bc:5c:64:44:9d:56:01:ac:84:7a:5a:f9:58: 5c:15:47:62:00:f5:0c:2a:52:65:b0:d1:93:4e:86: c3:3b:c9:12:48:b1:35:ab:09:2e:6d:8b:8f:a7:54: 4b:37:8f:77:07:42:ff:38:6b:d8:7b:73:62:21:4e: e1:14:b5:a4:28:eb:8c:f3:03:e4:da:48:82:ec:bb: 6d:99:03:e7:43:a5:0a:4b:70:8e:c2:0c:2c:4e:2e: 2e:b8:af:1f:c4:7d:20:43:f3:bb:ab:23:78:aa:41: 97:d1:37:54:30:15:db:e3:63:85:80:55:08:ef:6b: 26:dc:d3:25:be:6c:67:85:d2:6c:ca:df:c1:c6:56: fe:83:d8:64:7d:e6:8c:ed:2c:91:a1:7e:fa:a9:64: a5:ca:01:d8:2f:2f:07:a5:eb:a3:4b:f4:4b:31:ec: d1:af:9d:f1:4e:b3:3c:9f:20:3a:3b:35:6b:b0:52: fe:53:6b:c8:a2:d3:2e:61:be:3f:93:d0:05:7a:97: 3c:6d:26:8d:82:fe:44:45:b0:61:7f:d4:42:9f:21: 55:d7:2b:40:40:ad:04:4d:3c:e0:39:5d:d3:7b:d7: 8c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:74:0C:CF:1B:C0:5A:51:70:44:19:35:EE:99:B9:2B:A8:F0:9C:C3 X509v3 Authority Key Identifier: keyid:9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:76:23:90:f0:d2:7c:55:65:f8:14:42:f6:98:a3:b9:c4:d1: 44:ce:72:2c:3b:12:27:88:a7:a0:66:6c:e1:e8:b0:22:cc:a1: ff:39:59:7c:43:43:e2:06:39:c8:54:be:22:c2:49:78:b3:9d: 0d:a0:3c:cb:1a:12:db:b8:1e:37:ba:ff:6b:48:99:96:ff:cc: 6a:de:1c:c3:ea:d9:39:15:66:0d:d5:b9:4c:67:4c:7c:f3:69: d5:6f:09:ec:ac:15:8d:ff:99:a1:d2:aa:8d:b1:78:9d:14:ed: d3:74:77:e2:e9:3b:d8:70:d5:04:c4:81:84:b9:fa:63:bb:a8: 08:25:79:54:89:f2:07:ad:41:94:99:22:27:f6:a2:24:92:a1: 03:d7:55:41:da:c3:e3:04:ee:58:2c:ee:40:a8:13:1b:0b:0d: 53:9b:3c:8f:96:2b:84:be:02:9c:8e:0c:d0:73:cd:bf:a2:3d: f0:f8:51:92:b7:5f:9b:db:b7:26:6e:18:98:98:fa:40:da:35: 79:2b:aa:c3:33:bc:37:da:83:22:38:75:32:4e:11:e2:9e:68: 1b:b7:9c:60:3e:94:af:72:d6:03:63:58:2f:f2:f7:35:ed:3c: a6:b1:b5:f2:8b:d2:11:e5:7e:8a:83:69:48:c3:b5:0f:33:6c: 2c:db:5e:84 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIURfONIDEXJ78opG/ULL5ra+Z2s4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEw NDgyMjYyNDAeFw0yNjA2MzAxMTA4NDRaFw0yNjA3MDExNDEwNDRaMDMxMTAvBgNV BAMTKDdGNzQwQ0NGMUJDMDVBNTE3MDQ0MTkzNUVFOTlCOTJCQThGMDlDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC365QqxCB0EDjdYaP3nYcxn6wh koOC41wP7g1VmGUovFxkRJ1WAayEelr5WFwVR2IA9QwqUmWw0ZNOhsM7yRJIsTWr CS5ti4+nVEs3j3cHQv84a9h7c2IhTuEUtaQo64zzA+TaSILsu22ZA+dDpQpLcI7C DCxOLi64rx/EfSBD87urI3iqQZfRN1QwFdvjY4WAVQjvaybc0yW+bGeF0mzK38HG Vv6D2GR95oztLJGhfvqpZKXKAdgvLwel66NL9Esx7NGvnfFOszyfIDo7NWuwUv5T a8ii0y5hvj+T0AV6lzxtJo2C/kRFsGF/1EKfIVXXK0BArQRNPOA5XdN714zjAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUf3QMzxvAWlFwRBk17pm5K6jwnMMwHwYDVR0j BBgwFoAUnPbs0T+1sgKXcIcapuV5YQSCJiQwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzEvOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC85Q0Y2RUNEMTNGQjVCMjAyOTc3MDg3MUFB NkU1Nzk2MTA0ODIyNjI0LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzEvOUNGNkVD RDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHl2 I5Dw0nxVZfgUQvaYo7nE0UTOciw7EieIp6BmbOHosCLMof85WXxDQ+IGOchUviLC SXiznQ2gPMsaEtu4Hje6/2tImZb/zGreHMPq2TkVZg3VuUxnTHzzadVvCeysFY3/ maHSqo2xeJ0U7dN0d+LpO9hw1QTEgYS5+mO7qAgleVSJ8getQZSZIif2oiSSoQPX VUHaw+ME7lgs7kCoExsLDVObPI+WK4S+ApyODNBzzb+iPfD4UZK3X5vbtyZuGJiY +kDaNXkrqsMzvDfagyI4dTJOEeKeaBu3nGA+lK9y1gNjWC/y9zXtPKaxtfKL0hHl foqDaUjDtQ8zbCzbXoQ= -----END CERTIFICATE-----Generated at Tue Jun 30 13:10:01 2026 by rpki-client