$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft File: 9CF6ECD13FB5B2029770871AA6E5796104822624.mft (raw, json) Hash identifier: nt9DMNNjcrSsO3i0gk0vWkb4utRMuQrneLfhugJ6Cjg= Subject key identifier: 84:23:E4:3B:BD:FA:60:62:CF:4C:94:13:63:AF:AA:F6:62:7A:D3:2E Authority key identifier: 9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 Certificate issuer: /CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Certificate serial: 3E8E2749D8EDD14CE3AFC0F6C73155964B205C99 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft Manifest number: 0F Signing time: Fri 15 May 2026 12:22:07 +0000 Manifest this update: Fri 15 May 2026 12:17:07 +0000 Manifest next update: Sat 16 May 2026 13:47:07 +0000 Files and hashes: 1: 9CF6ECD13FB5B2029770871AA6E5796104822624.crl (hash: Fe5XodabyKGocodWj6/cZPucTgKLsYfRm/gLO9Yk0M0=) 2: 36342e37382e3136302e302f32302d3234203d3e203331393732.roa (hash: fJ9O2D8T6TBG/ntIcA3JtcHpPY7Bp1wllKnMj7rLb1A=) 3: 36342e37382e3136302e302f32302d3234203d3e20313332333639.roa (hash: GgXMTkt2H5e9QQpD/IDwW8cfgE25pbmkynI8XBBMpbg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 13:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:8e:27:49:d8:ed:d1:4c:e3:af:c0:f6:c7:31:55:96:4b:20:5c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Validity Not Before: May 15 12:17:07 2026 GMT Not After : May 16 13:47:07 2026 GMT Subject: CN=8423E43BBDFA6062CF4C941363AFAAF6627AD32E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:35:fc:ca:ec:31:28:85:bb:fa:8a:b0:87:58: 9e:cb:62:67:2a:83:9a:53:9f:5d:76:cd:27:33:50: 9a:df:f3:5d:67:67:f1:32:84:c0:cb:4e:99:26:1f: 28:ae:0c:b3:fa:fc:02:b4:df:57:85:83:2e:a4:58: 6a:3d:98:50:dd:be:b3:65:98:ff:a8:1f:90:2d:08: c9:d5:3b:0a:f2:98:7c:40:d9:f2:36:ef:5c:90:d7: 9e:c2:56:5a:95:cb:55:84:1f:52:cb:75:89:ed:80: 4b:bd:ab:b2:d3:f0:50:04:90:57:79:ea:18:c9:0b: f6:72:22:94:ce:30:4c:e6:33:9d:98:cc:99:3d:49: 55:cb:b0:cb:9f:10:f9:09:16:37:45:1c:51:66:b5: 3a:e7:88:8c:03:11:bb:07:9e:d9:a0:13:2e:fd:08: 12:a7:12:8b:32:3c:da:ae:a9:95:98:78:49:0f:3b: e9:c7:5b:c8:cb:b5:97:ab:c1:9e:12:17:b3:df:96: fa:b9:b9:34:a7:0a:0a:9d:c0:0d:d7:4c:4d:32:e3: 09:78:98:d5:23:4d:21:32:7c:f9:4f:03:49:c4:b1: ed:95:b8:8f:4e:2e:51:42:3f:82:a5:16:3d:06:d7: 5f:06:d1:ec:7e:6c:42:c0:e5:07:61:b1:6f:26:b5: 52:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:23:E4:3B:BD:FA:60:62:CF:4C:94:13:63:AF:AA:F6:62:7A:D3:2E X509v3 Authority Key Identifier: keyid:9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:d0:7b:39:87:01:27:2e:bf:6a:90:61:3d:1c:24:61:10:d0: 20:fa:c2:20:d3:17:d9:16:6c:04:6a:d9:be:42:b2:b2:1e:17: 73:cd:59:80:79:7b:63:45:61:a6:24:76:61:29:09:d1:e2:df: 53:3e:c6:f5:81:7a:8f:fe:d8:13:c4:d2:f8:66:6e:51:ce:07: 99:32:15:51:ea:17:cd:d1:d3:5d:a5:15:59:80:71:c4:49:b3: d2:42:da:87:d1:b2:82:a3:7d:42:79:69:8f:9f:dc:74:1d:57: 73:d8:99:50:9c:27:56:cc:40:07:48:e7:fc:0b:84:9f:18:f3: 58:d4:bf:07:35:98:ec:01:34:b8:82:77:a1:5c:9d:0f:55:d9: 01:23:b5:66:b9:0c:00:6e:20:b6:d5:63:db:b2:e6:f2:93:ac: d9:1a:7b:a5:ca:d7:ab:15:57:58:61:5d:de:92:f4:09:c9:53: fb:e7:a7:6f:7b:83:ff:5d:79:7e:af:83:ee:4f:87:e2:92:40: 18:f9:0b:3a:fb:7e:f8:10:87:6a:7f:5a:54:7d:7e:36:84:16: ab:e2:89:38:4c:b9:cc:84:3d:98:8c:1e:a7:df:e8:44:d5:3b: b1:10:bf:3d:95:da:8d:33:e3:f1:79:6f:1d:d7:fe:d8:80:7a: ae:56:9f:0e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUPo4nSdjt0Uzjr8D2xzFVlksgXJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEw NDgyMjYyNDAeFw0yNjA1MTUxMjE3MDdaFw0yNjA1MTYxMzQ3MDdaMDMxMTAvBgNV BAMTKDg0MjNFNDNCQkRGQTYwNjJDRjRDOTQxMzYzQUZBQUY2NjI3QUQzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgNfzK7DEohbv6irCHWJ7LYmcq g5pTn112zSczUJrf811nZ/EyhMDLTpkmHyiuDLP6/AK031eFgy6kWGo9mFDdvrNl mP+oH5AtCMnVOwrymHxA2fI271yQ157CVlqVy1WEH1LLdYntgEu9q7LT8FAEkFd5 6hjJC/ZyIpTOMEzmM52YzJk9SVXLsMufEPkJFjdFHFFmtTrniIwDEbsHntmgEy79 CBKnEosyPNquqZWYeEkPO+nHW8jLtZerwZ4SF7Pflvq5uTSnCgqdwA3XTE0y4wl4 mNUjTSEyfPlPA0nEse2VuI9OLlFCP4KlFj0G118G0ex+bELA5QdhsW8mtVL7AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUhCPkO736YGLPTJQTY6+q9mJ60y4wHwYDVR0j BBgwFoAUnPbs0T+1sgKXcIcapuV5YQSCJiQwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzEvOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC85Q0Y2RUNEMTNGQjVCMjAyOTc3MDg3MUFB NkU1Nzk2MTA0ODIyNjI0LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzEvOUNGNkVD RDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALzQ ezmHAScuv2qQYT0cJGEQ0CD6wiDTF9kWbARq2b5CsrIeF3PNWYB5e2NFYaYkdmEp CdHi31M+xvWBeo/+2BPE0vhmblHOB5kyFVHqF83R012lFVmAccRJs9JC2ofRsoKj fUJ5aY+f3HQdV3PYmVCcJ1bMQAdI5/wLhJ8Y81jUvwc1mOwBNLiCd6FcnQ9V2QEj tWa5DABuILbVY9uy5vKTrNkae6XK16sVV1hhXd6S9AnJU/vnp297g/9deX6vg+5P h+KSQBj5Czr7fvgQh2p/WlR9fjaEFqviiThMucyEPZiMHqff6ETVO7EQvz2V2o0z 4/F5bx3X/tiAeq5Wnw4= -----END CERTIFICATE-----Generated at Sat May 16 04:55:57 2026 by rpki-client