$ rpki-client -vvvf rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft File: 9CF6ECD13FB5B2029770871AA6E5796104822624.mft (raw, json) Hash identifier: sNpPgTjzKswtU++x7KQ54F5M8/yKdcCs0RfcWw4AT5I= Subject key identifier: CE:D6:FA:E9:6D:C4:FE:8A:CD:D2:14:E1:52:6C:DD:7F:07:1A:A3:D6 Authority key identifier: 9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 Certificate issuer: /CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Certificate serial: 3FE64B384D233BF40BBAC5367E26A078713E166E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft Manifest number: D4 Signing time: Fri 09 Oct 2026 15:32:40 +0000 Manifest this update: Fri 09 Oct 2026 15:27:40 +0000 Manifest next update: Sat 10 Oct 2026 17:11:40 +0000 Files and hashes: 1: 36342e37382e3136302e302f32302d3234203d3e203331393732.roa (hash: fJ9O2D8T6TBG/ntIcA3JtcHpPY7Bp1wllKnMj7rLb1A=) 2: 9CF6ECD13FB5B2029770871AA6E5796104822624.crl (hash: VZoD4/KNUHHfCa5xNW6n01kRZqSGGyhbJZZKDeLInLc=) 3: 36342e37382e3136302e302f32302d3234203d3e20313332333639.roa (hash: GgXMTkt2H5e9QQpD/IDwW8cfgE25pbmkynI8XBBMpbg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 17:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e6:4b:38:4d:23:3b:f4:0b:ba:c5:36:7e:26:a0:78:71:3e:16:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Validity Not Before: Oct 9 15:27:40 2026 GMT Not After : Oct 10 17:11:40 2026 GMT Subject: CN=CED6FAE96DC4FE8ACDD214E1526CDD7F071AA3D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ba:46:09:73:64:26:2f:a3:2d:23:0d:5b:ca: 39:a4:ec:8a:21:86:cd:00:12:3a:1f:ef:17:c7:42: 91:18:91:2c:ca:34:38:37:46:35:25:0b:68:0f:b4: c7:75:12:18:d7:db:dc:18:e1:b3:dd:19:1b:53:c9: a2:85:ce:68:24:7d:dd:55:93:48:f6:05:84:e6:a9: 5f:61:86:f5:ce:1b:18:89:93:d5:a4:8b:5a:90:87: 85:37:f1:5e:28:e2:4b:8d:fb:03:21:af:fd:d2:cb: 66:a3:7e:80:ba:fc:1a:80:c1:bf:78:c8:71:9f:80: 45:e4:33:e5:6d:a0:03:5c:58:81:45:9d:db:94:1d: 32:58:78:f9:c0:95:8b:5d:ed:ff:d8:a3:b2:e3:23: 0e:35:22:86:f5:c5:ba:61:3e:03:22:ab:0e:7c:78: 58:b8:f1:6d:dc:c0:2f:97:14:6a:a4:c1:e8:53:90: e0:1b:e3:2f:da:60:93:a3:94:fe:14:90:78:a0:03: d7:ba:b0:ed:f6:9c:21:07:dc:3f:a0:80:ae:46:30: 55:8e:e4:4b:70:6e:9d:c8:68:0b:2f:54:09:0b:e1: 03:f7:6f:91:2b:d0:3c:3c:fe:58:04:47:0b:31:60: 2d:ea:b3:71:25:ae:bd:7d:25:48:d6:fd:8b:56:72: 98:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D6:FA:E9:6D:C4:FE:8A:CD:D2:14:E1:52:6C:DD:7F:07:1A:A3:D6 X509v3 Authority Key Identifier: keyid:9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a7:b1:cd:b7:6a:1b:42:79:fe:82:f5:8d:23:93:89:47:31: d4:17:d6:27:6b:a0:3f:b0:6f:c1:93:5c:19:c6:ef:76:04:87: a4:21:87:8d:8b:94:6c:b4:96:d1:7c:14:54:f9:3f:5f:09:4e: da:91:62:be:b4:48:a2:c7:cb:af:bb:89:a3:7f:4a:a1:e7:45: 4f:ce:ba:c8:7d:c0:9e:8d:1c:f3:9f:74:4f:82:29:d8:bb:2f: 2c:16:3a:22:dc:93:cf:4d:72:b4:95:50:86:e6:24:40:74:7f: dc:a6:3b:6d:2d:d1:27:a6:bb:dc:57:ac:73:25:f3:12:26:0e: a0:7d:21:8b:86:b6:35:df:22:a1:44:b9:68:9c:1d:6e:7b:69: cc:b7:a0:64:e7:63:d1:3b:bb:c1:4f:3d:5e:23:be:9f:fd:82: 78:50:d3:a8:f2:5c:67:e9:e4:66:3a:2f:eb:03:86:0b:6b:1a: 9d:08:b4:1f:a4:83:22:ff:fe:0f:c6:9a:27:d0:2c:db:cb:f4: 37:a0:39:73:62:66:75:5a:65:7e:9f:fe:4b:19:5a:17:88:2a: 69:e5:59:d2:21:e0:46:82:db:5d:b6:57:58:29:95:75:73:a1: 15:5a:78:8a:8c:55:f7:cb:e7:c7:4a:51:ab:9c:ef:21:cb:cd: f4:c5:c2:ac -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUP+ZLOE0jO/QLusU2fiageHE+Fm4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEw NDgyMjYyNDAeFw0yNjEwMDkxNTI3NDBaFw0yNjEwMTAxNzExNDBaMDMxMTAvBgNV BAMTKENFRDZGQUU5NkRDNEZFOEFDREQyMTRFMTUyNkNERDdGMDcxQUEzRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgukYJc2QmL6MtIw1byjmk7Ioh hs0AEjof7xfHQpEYkSzKNDg3RjUlC2gPtMd1EhjX29wY4bPdGRtTyaKFzmgkfd1V k0j2BYTmqV9hhvXOGxiJk9Wki1qQh4U38V4o4kuN+wMhr/3Sy2ajfoC6/BqAwb94 yHGfgEXkM+VtoANcWIFFnduUHTJYePnAlYtd7f/Yo7LjIw41Iob1xbphPgMiqw58 eFi48W3cwC+XFGqkwehTkOAb4y/aYJOjlP4UkHigA9e6sO32nCEH3D+ggK5GMFWO 5Etwbp3IaAsvVAkL4QP3b5Er0Dw8/lgERwsxYC3qs3Elrr19JUjW/YtWcphDAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUztb66W3E/orN0hThUmzdfwcao9YwHwYDVR0j BBgwFoAUnPbs0T+1sgKXcIcapuV5YQSCJiQwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzEvOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC85Q0Y2RUNEMTNGQjVCMjAyOTc3MDg3MUFB NkU1Nzk2MTA0ODIyNjI0LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzEvOUNGNkVD RDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI2n sc23ahtCef6C9Y0jk4lHMdQX1idroD+wb8GTXBnG73YEh6Qhh42LlGy0ltF8FFT5 P18JTtqRYr60SKLHy6+7iaN/SqHnRU/Oush9wJ6NHPOfdE+CKdi7LywWOiLck89N crSVUIbmJEB0f9ymO20t0Semu9xXrHMl8xImDqB9IYuGtjXfIqFEuWicHW57acy3 oGTnY9E7u8FPPV4jvp/9gnhQ06jyXGfp5GY6L+sDhgtrGp0ItB+kgyL//g/GmifQ LNvL9DegOXNiZnVaZX6f/ksZWheIKmnlWdIh4EaC2122V1gplXVzoRVaeIqMVffL 58dKUauc7yHLzfTFwqw= -----END CERTIFICATE-----Generated at Sat Oct 10 10:24:50 2026 by rpki-client