$ rpki-client -vvvf rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft File: 5677B1A39333120442A665B3D25D187209211BAE.mft (raw, json) Hash identifier: bIDCOB6EV12I6NUlFKfU0gZVx8mKx3mFw7QJ6ra9efw= Subject key identifier: AB:C9:2D:5C:63:4D:3C:C7:4F:86:9E:93:5B:94:11:1A:D4:14:CA:7F Authority key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE Certificate issuer: /CN=5677B1A39333120442A665B3D25D187209211BAE Certificate serial: 0B48BBFD72444447EC45D971C672591BEB3720FE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft Manifest number: BA Signing time: Sat 26 Sep 2026 13:01:15 +0000 Manifest this update: Sat 26 Sep 2026 12:56:15 +0000 Manifest next update: Sun 27 Sep 2026 13:23:15 +0000 Files and hashes: 1: 5677B1A39333120442A665B3D25D187209211BAE.crl (hash: X6mml5TrvdaJlni+x9HjFvujVhxeocUDZUxmtiRwqSw=) 2: 323430363a626663303a3a2f33322d3438203d3e203138303431.roa (hash: KDiZaxw5XGQhywqutmhDqziZArSBlF5hTPaIVss/WdY=) 3: 3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa (hash: k/cF66xPcsmZ1x0DE1Ndr3+3JZ48QVlyjQhQ8TgIR4A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 09:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:48:bb:fd:72:44:44:47:ec:45:d9:71:c6:72:59:1b:eb:37:20:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5677B1A39333120442A665B3D25D187209211BAE Validity Not Before: Sep 26 12:56:15 2026 GMT Not After : Sep 27 13:23:15 2026 GMT Subject: CN=ABC92D5C634D3CC74F869E935B94111AD414CA7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:6a:28:28:cb:6f:9d:21:ff:80:88:21:c6: 88:94:14:04:28:f8:8f:98:25:9a:de:e3:be:92:d1: 6f:36:8f:5e:50:41:a6:c8:e6:47:75:49:08:99:d1: 13:9d:33:e2:88:54:60:dc:86:44:60:e2:4b:55:39: d9:ef:a9:ef:dd:e1:c5:af:18:3a:ce:81:3c:66:8a: 2a:82:fc:c5:81:1b:05:cf:fd:ac:25:12:4b:11:05: 39:c8:4f:76:12:c7:65:88:6e:d2:36:f0:0d:74:72: b0:48:b3:73:0a:fa:26:19:2f:8d:55:69:ff:0e:39: f5:ab:04:53:8c:e8:c2:84:62:a9:5f:ba:10:5e:ae: 67:75:a0:e0:24:ea:b6:98:73:f1:89:fa:fc:9a:8e: 2c:7b:5c:7e:b2:cd:8d:69:8b:31:96:ac:6e:31:8f: 5d:00:0b:0d:96:d9:05:75:87:bb:80:de:92:8f:e8: d7:b9:76:0e:24:91:f3:43:2c:4a:10:a5:37:f4:0f: 70:26:84:30:b7:4b:28:f2:3a:3a:51:98:e4:77:2e: df:ca:0a:20:60:35:90:99:52:bb:d5:d5:4d:cd:65: 59:b8:58:d9:49:18:44:d4:79:fb:80:bc:bd:ad:35: de:6d:98:11:4f:86:7d:4a:50:ab:e5:69:b9:25:11: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C9:2D:5C:63:4D:3C:C7:4F:86:9E:93:5B:94:11:1A:D4:14:CA:7F X509v3 Authority Key Identifier: keyid:56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:ed:f7:ce:ce:35:d0:5c:b6:86:ca:46:8f:54:1c:e7:21:da: 8a:a5:a6:88:9e:24:b2:8c:51:05:3e:cf:8a:cf:c8:2a:94:76: f2:a1:af:fc:b3:80:ad:c9:23:0d:85:77:5b:c9:3b:d9:c2:16: 53:e7:e0:95:75:3f:d3:3b:b6:fa:73:f8:7c:4b:13:8b:a0:4e: cf:17:6a:a5:58:cd:4c:d6:9b:09:4d:70:6a:af:14:68:55:76: 06:c5:d5:56:37:c7:c7:7f:0c:1a:88:39:cf:86:e7:96:79:b6: 82:6e:40:86:6d:71:d9:8d:0a:de:78:c5:9e:e0:b3:08:dc:4d: fe:b5:1e:0e:0b:25:6b:a7:64:ac:aa:3b:21:a6:22:8e:21:62: e6:10:89:b0:48:9f:39:1b:43:02:1c:10:97:37:81:24:2e:c1: 0c:5b:7d:60:b7:db:f3:f5:fc:0a:da:90:2b:4a:1b:1a:03:92: 7a:28:ab:ed:f6:ef:17:a4:a5:cd:09:88:62:ad:56:b5:c6:40: 95:a4:29:ea:83:59:ba:5a:db:1e:19:3c:7e:af:22:5c:96:aa: 2e:0c:e6:3e:f7:c1:9e:a3:65:1f:f4:fb:01:5d:32:3a:14:b6: 60:1a:9b:fc:bd:07:dc:84:6f:85:ba:3d:a1:04:2a:fe:3d:28: 64:5c:c3:52 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUC0i7/XJEREfsRdlxxnJZG+s3IP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1RDE4NzIw OTIxMUJBRTAeFw0yNjA5MjYxMjU2MTVaFw0yNjA5MjcxMzIzMTVaMDMxMTAvBgNV BAMTKEFCQzkyRDVDNjM0RDNDQzc0Rjg2OUU5MzVCOTQxMTFBRDQxNENBN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDjmooKMtvnSH/gIghxoiUFAQo +I+YJZre476S0W82j15QQabI5kd1SQiZ0ROdM+KIVGDchkRg4ktVOdnvqe/d4cWv GDrOgTxmiiqC/MWBGwXP/awlEksRBTnIT3YSx2WIbtI28A10crBIs3MK+iYZL41V af8OOfWrBFOM6MKEYqlfuhBermd1oOAk6raYc/GJ+vyajix7XH6yzY1pizGWrG4x j10ACw2W2QV1h7uA3pKP6Ne5dg4kkfNDLEoQpTf0D3AmhDC3SyjyOjpRmOR3Lt/K CiBgNZCZUrvV1U3NZVm4WNlJGETUefuAvL2tNd5tmBFPhn1KUKvlabklEb3TAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUq8ktXGNNPMdPhp6TW5QRGtQUyn8wHwYDVR0j BBgwFoAUVnexo5MzEgRCpmWz0l0YcgkhG64wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVCVUxB WC8wLzU2NzdCMUEzOTMzMzEyMDQ0MkE2NjVCM0QyNUQxODcyMDkyMTFCQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1 RDE4NzIwOTIxMUJBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FQlVMQVgvMC81Njc3QjFBMzkz MzMxMjA0NDJBNjY1QjNEMjVEMTg3MjA5MjExQkFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApO33zs41 0Fy2hspGj1Qc5yHaiqWmiJ4ksoxRBT7Pis/IKpR28qGv/LOArckjDYV3W8k72cIW U+fglXU/0zu2+nP4fEsTi6BOzxdqpVjNTNabCU1waq8UaFV2BsXVVjfHx38MGog5 z4bnlnm2gm5Ahm1x2Y0K3njFnuCzCNxN/rUeDgsla6dkrKo7IaYijiFi5hCJsEif ORtDAhwQlzeBJC7BDFt9YLfb8/X8CtqQK0obGgOSeiir7fbvF6SlzQmIYq1WtcZA laQp6oNZulrbHhk8fq8iXJaqLgzmPvfBnqNlH/T7AV0yOhS2YBqb/L0H3IRvhbo9 oQQq/j0oZFzDUg== -----END CERTIFICATE-----Generated at Sun Sep 27 01:06:33 2026 by rpki-client