$ rpki-client -vvvf rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft File: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft (raw, json) Hash identifier: csUj/8eQ/8uQA8Ul8IFn/JQA1R+ewPhr9mt4WkW9klw= Subject key identifier: 7E:96:63:8F:29:2F:1C:BB:4D:5F:12:38:D9:42:7D:4B:5E:FD:4A:0A Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Certificate serial: 09507DCE60ABE7FF95D2BEEDE62131B36A485A4B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft Manifest number: BE Signing time: Mon 21 Sep 2026 15:22:32 +0000 Manifest this update: Mon 21 Sep 2026 15:17:32 +0000 Manifest next update: Tue 22 Sep 2026 15:29:32 +0000 Files and hashes: 1: 3230322e352e31302e302f32342d3234203d3e20313937353337.roa (hash: uvBAHIGsfVOPKEPiUlrDJflai1mxkNu/0gJ+oj7/pBE=) 2: 3230322e352e31302e302f32342d3234203d3e20323032373336.roa (hash: QJ5gRwlwOk90NIqbTeKQ9YIL40s99qTaJ8zlmXypSM4=) 3: 3230322e352e31302e302f32342d3234203d3e20323136313338.roa (hash: elBageucsQOSTptkEXsGAPEabTfNUu/5ZP88JzEAJHU=) 4: 3230322e352e31312e302f32342d3234203d3e20313937353337.roa (hash: /asmOvtxTVfejsQzCQN9JAzbwce/1zKDLT1mSL+cbv8=) 5: 323430303a633965303a3a2f33322d3438203d3e20313331363537.roa (hash: upFELCP3DHkRWuwf+Xm0sVZKdOzGkDLBh+WiG2O5joQ=) 6: 3230322e352e31312e302f32342d3234203d3e20323136313338.roa (hash: AWD+zuYzrNaUxcfv/56OBONbGf7IKDXjS7DxuJrGBYg=) 7: 323430303a633965303a3a2f33322d3438203d3e20313334383233.roa (hash: tWF65JRIBYKnWmqjJzuJTpKo/cPf/CgMxXepVjUbTSQ=) 8: 3230322e352e31312e302f32342d3234203d3e20323032373336.roa (hash: VH7i1Rmx/vnrLlet6gZkD22nYR0ayb436EnYjZJQzNA=) 9: 3230322e352e31302e302f32332d3233203d3e20313331363330.roa (hash: 0owoHP+vPpEdJ28e7p434+yQ6TztrvINieYa1Uziwec=) 10: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl (hash: zrHTclYTJPP6yWjDfEKm0Um+iMWXpCuovc9gc4Sudlg=) 11: 3130332e35312e39302e302f32332d3332203d3e20313331363537.roa (hash: 6/l/GHeRi+L26SSSmyoeIRzt/9QvcP9wUHNuiJTW0HI=) 12: 3230322e352e31302e302f32332d3332203d3e20313331363537.roa (hash: zCUned2k9nVUaWCk/pD8/VUXQUBPTJnpl6eX7zZ2e9s=) 13: 3130332e35312e39302e302f32332d3332203d3e20313334383233.roa (hash: tH36wJqzGsCI/o8hR/0a7GCLOKwO8H/LX8RVs1GWaks=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:50:7d:ce:60:ab:e7:ff:95:d2:be:ed:e6:21:31:b3:6a:48:5a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Validity Not Before: Sep 21 15:17:32 2026 GMT Not After : Sep 22 15:29:32 2026 GMT Subject: CN=7E96638F292F1CBB4D5F1238D9427D4B5EFD4A0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:36:4b:1c:6c:42:14:88:59:33:1b:22:63:25: 8b:ea:8b:39:40:5b:be:8d:30:83:17:61:f5:3e:2a: eb:4e:77:e8:68:e7:15:35:27:1d:81:da:1c:94:4d: b3:88:6e:b1:50:6a:62:67:dc:64:a6:fe:a8:cc:78: 6a:de:7b:6a:f7:a2:ca:e4:73:fb:dd:65:51:3c:1c: 5a:53:5c:c4:35:3d:29:3d:51:f3:68:30:dd:d7:d4: 11:58:58:1e:40:da:24:6b:fa:22:df:14:fe:f3:ac: 18:21:dc:19:c9:ea:af:1f:23:c4:54:c2:ae:ba:f5: ca:18:45:1e:1a:1a:e8:21:34:ea:ee:ba:98:a9:56: 7b:f7:fd:69:05:60:8d:37:af:30:98:83:ea:ad:b2: 2e:6f:4c:06:1c:a0:ed:ee:2a:8c:ff:0b:d2:c0:5b: 7f:90:e2:f2:30:c5:ef:89:4e:1a:82:e8:d9:79:32: 60:60:7f:0a:04:0f:27:c7:6e:5d:e4:d3:72:4d:96: 88:86:1f:c7:8b:63:6f:1b:b7:6f:32:2d:b6:ff:8a: 6f:95:aa:7b:be:d4:9c:d7:00:59:bb:83:7d:5b:20: 9b:04:98:05:7d:75:df:cc:39:d6:c7:26:87:fa:19: 97:2e:f4:53:74:0b:05:0a:49:1c:24:6e:f9:71:f2: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:96:63:8F:29:2F:1C:BB:4D:5F:12:38:D9:42:7D:4B:5E:FD:4A:0A X509v3 Authority Key Identifier: keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:44:64:25:29:d8:30:71:8c:05:3d:77:79:53:4c:8e:14:49: 4f:4c:fb:20:32:72:cb:08:dd:d7:de:ce:ac:70:45:27:fc:7a: 4a:1f:2f:13:f3:bd:b5:e9:36:f2:8f:fa:ee:d1:1e:bc:13:55: 96:10:8e:70:5d:1b:da:78:8b:42:35:c6:11:cd:13:b0:be:6e: a4:e4:4c:14:ea:41:4a:0e:11:d2:06:d8:fe:2d:74:1f:35:5d: 59:c8:01:4c:16:7b:8b:67:9f:e0:f5:2d:aa:4b:f8:25:c7:0f: 9a:82:2d:9c:09:e2:9e:af:32:a7:1f:e4:ba:02:c4:7e:4b:30: 70:3a:b3:70:32:26:25:e5:f4:2a:19:2c:11:27:0a:5f:27:3c: 97:01:8c:5c:88:e7:16:19:c7:a6:12:87:31:db:a6:48:4e:84: 8d:57:dd:1f:89:5e:00:f7:f6:51:d8:65:b2:dd:c3:48:fc:21: af:96:be:80:c8:8d:99:c4:5a:ea:83:03:39:c4:04:16:fe:b1: 63:04:78:2d:84:1f:e0:66:8e:62:ca:d6:17:ac:96:4e:fc:57: 1c:fd:8e:7f:a4:ee:b8:a3:41:91:95:d9:3f:45:98:cb:44:d6: 21:dc:34:ca:51:46:79:0b:fa:9c:67:d8:be:7e:14:62:fd:0f: 9c:bf:4c:8a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCVB9zmCr5/+V0r7t5iExs2pIWkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE RUQ4OEUxQjAeFw0yNjA5MjExNTE3MzJaFw0yNjA5MjIxNTI5MzJaMDMxMTAvBgNV BAMTKDdFOTY2MzhGMjkyRjFDQkI0RDVGMTIzOEQ5NDI3RDRCNUVGRDRBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNNkscbEIUiFkzGyJjJYvqizlA W76NMIMXYfU+KutOd+ho5xU1Jx2B2hyUTbOIbrFQamJn3GSm/qjMeGree2r3osrk c/vdZVE8HFpTXMQ1PSk9UfNoMN3X1BFYWB5A2iRr+iLfFP7zrBgh3BnJ6q8fI8RU wq669coYRR4aGughNOruupipVnv3/WkFYI03rzCYg+qtsi5vTAYcoO3uKoz/C9LA W3+Q4vIwxe+JThqC6Nl5MmBgfwoEDyfHbl3k03JNloiGH8eLY28bt28yLbb/im+V qnu+1JzXAFm7g31bIJsEmAV9dd/MOdbHJof6GZcu9FN0CwUKSRwkbvlx8mtnAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUfpZjjykvHLtNXxI42UJ9S179SgowHwYDVR0j BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF M0MzRjJGRERFRDg4RTFCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvQUIzODg4 QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIBE ZCUp2DBxjAU9d3lTTI4USU9M+yAycssI3dfezqxwRSf8ekofLxPzvbXpNvKP+u7R HrwTVZYQjnBdG9p4i0I1xhHNE7C+bqTkTBTqQUoOEdIG2P4tdB81XVnIAUwWe4tn n+D1LapL+CXHD5qCLZwJ4p6vMqcf5LoCxH5LMHA6s3AyJiXl9CoZLBEnCl8nPJcB jFyI5xYZx6YShzHbpkhOhI1X3R+JXgD39lHYZbLdw0j8Ia+WvoDIjZnEWuqDAznE BBb+sWMEeC2EH+BmjmLK1heslk78Vxz9jn+k7rijQZGV2T9FmMtE1iHcNMpRRnkL +pxn2L5+FGL9D5y/TIo= -----END CERTIFICATE-----Generated at Mon Sep 21 19:52:39 2026 by rpki-client