$ rpki-client -vvf rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft File: 5677B1A39333120442A665B3D25D187209211BAE.mft (raw, json) Hash identifier: mjcWakc6GCXC7QnmMQuuTPo4HFhzuAXnZbJ3PIszvYc= Subject key identifier: C1:0D:FC:6A:7A:0D:49:05:73:95:9F:CB:63:3D:BC:1A:A2:CE:C2:34 Authority key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE Certificate issuer: /CN=5677B1A39333120442A665B3D25D187209211BAE Certificate serial: 271AE294C18F67559C256DC8AD807D0F4A059A57 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft Manifest number: 2E Signing time: Sat 13 Jun 2026 03:58:56 +0000 Manifest this update: Sat 13 Jun 2026 03:53:56 +0000 Manifest next update: Sun 14 Jun 2026 05:23:56 +0000 Files and hashes: 1: 323430363a626663303a3a2f33322d3438203d3e203138303431.roa (hash: KDiZaxw5XGQhywqutmhDqziZArSBlF5hTPaIVss/WdY=) 2: 3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa (hash: k/cF66xPcsmZ1x0DE1Ndr3+3JZ48QVlyjQhQ8TgIR4A=) 3: 5677B1A39333120442A665B3D25D187209211BAE.crl (hash: lqTCQnAmKdkNhm8q/HTRDYSntVirW71NOTdfaFy5b1w=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:1a:e2:94:c1:8f:67:55:9c:25:6d:c8:ad:80:7d:0f:4a:05:9a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5677B1A39333120442A665B3D25D187209211BAE Validity Not Before: Jun 13 03:53:56 2026 GMT Not After : Jun 14 05:23:56 2026 GMT Subject: CN=C10DFC6A7A0D490573959FCB633DBC1AA2CEC234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a5:3e:b2:70:32:31:fc:00:e5:d9:f3:2a:9c: 30:e9:1b:c3:8c:da:d1:ab:63:f0:8b:3b:e1:66:d1: b2:39:b5:06:51:89:04:d5:eb:fd:24:ab:58:91:2e: b8:fa:e3:52:c7:ad:be:8d:95:6b:da:c3:ea:56:61: 4b:af:fd:8c:80:3f:20:df:b3:f4:c4:e0:a5:22:0e: ee:4a:e5:94:e8:fc:ff:50:d4:c3:5e:84:cf:19:12: e0:09:7f:95:71:62:d0:1e:53:41:3c:6a:31:7f:0b: 6b:cc:72:3e:0a:5e:b7:bf:7a:ff:1b:a0:ae:02:48: bd:e2:6b:6b:ce:18:2e:91:0e:ef:ae:63:85:ac:c8: f9:8a:c5:3f:84:9a:7b:03:7f:43:33:81:af:19:33: c3:68:f3:19:04:d8:67:6a:74:fd:fa:35:a9:4f:a5: ab:23:40:14:45:0a:d0:42:63:e5:1f:1e:f7:5c:9b: 82:44:3a:99:d1:47:53:08:4e:57:65:b4:cd:d7:ef: a1:74:fe:c0:85:51:2c:13:6b:b0:82:96:3a:23:8a: f3:08:33:a3:50:19:d2:4e:02:6a:5f:67:c0:11:c8: 70:0e:28:0e:7c:ed:bd:e9:42:36:52:06:25:af:6c: b2:00:fa:a0:61:26:29:dd:6a:fa:a8:9d:66:06:09: 79:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0D:FC:6A:7A:0D:49:05:73:95:9F:CB:63:3D:BC:1A:A2:CE:C2:34 X509v3 Authority Key Identifier: keyid:56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:bd:26:bc:26:dc:5f:02:21:36:dd:b4:64:3c:68:ae:2b:75: 31:29:42:c9:54:5d:73:b9:1e:ac:5f:ca:3c:95:ba:a9:30:40: be:c5:6f:14:96:5b:45:d0:35:0c:57:4a:2f:fa:a3:93:a7:0b: 0e:e9:a6:f4:7a:43:05:69:f4:9e:1b:d2:5d:4d:0c:26:b2:8c: 33:31:f7:95:27:95:ff:fc:2b:2a:4b:ad:10:2f:cd:da:1c:cb: 1f:15:f6:a9:90:8c:16:1c:04:99:1a:b6:6c:dd:e2:97:44:05: 6e:de:6c:f2:1f:39:bb:a4:d9:2a:fd:08:6a:a5:1f:b9:39:c3: 6a:45:c3:d2:17:3c:64:bf:d1:21:87:59:0d:1c:72:05:b1:d0: bd:5f:c9:4f:be:7d:30:31:3a:2e:ac:b0:23:24:e6:c0:58:a6: c1:8d:9f:a4:8e:4c:41:45:ed:db:4d:d9:b7:d0:2a:30:5b:23: 5d:78:e1:ed:d0:cc:f4:95:42:d9:be:48:2a:23:69:8d:7e:ed: 61:69:5b:92:9d:41:6c:db:6d:d3:c3:17:29:f7:d7:05:5f:92: 35:62:97:97:16:c1:27:42:e4:bf:38:7a:23:35:92:7b:c2:46: ba:a2:12:61:46:a8:3c:9d:eb:54:e0:fb:17:5a:f8:07:a3:1b: 6f:e7:71:f2 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUJxrilMGPZ1WcJW3IrYB9D0oFmlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1RDE4NzIw OTIxMUJBRTAeFw0yNjA2MTMwMzUzNTZaFw0yNjA2MTQwNTIzNTZaMDMxMTAvBgNV BAMTKEMxMERGQzZBN0EwRDQ5MDU3Mzk1OUZDQjYzM0RCQzFBQTJDRUMyMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcpT6ycDIx/ADl2fMqnDDpG8OM 2tGrY/CLO+Fm0bI5tQZRiQTV6/0kq1iRLrj641LHrb6NlWvaw+pWYUuv/YyAPyDf s/TE4KUiDu5K5ZTo/P9Q1MNehM8ZEuAJf5VxYtAeU0E8ajF/C2vMcj4KXre/ev8b oK4CSL3ia2vOGC6RDu+uY4WsyPmKxT+EmnsDf0Mzga8ZM8No8xkE2GdqdP36NalP pasjQBRFCtBCY+UfHvdcm4JEOpnRR1MITldltM3X76F0/sCFUSwTa7CCljojivMI M6NQGdJOAmpfZ8ARyHAOKA587b3pQjZSBiWvbLIA+qBhJindavqonWYGCXkrAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUwQ38anoNSQVzlZ/LYz28GqLOwjQwHwYDVR0j BBgwFoAUVnexo5MzEgRCpmWz0l0YcgkhG64wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVCVUxB WC8wLzU2NzdCMUEzOTMzMzEyMDQ0MkE2NjVCM0QyNUQxODcyMDkyMTFCQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1 RDE4NzIwOTIxMUJBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FQlVMQVgvMC81Njc3QjFBMzkz MzMxMjA0NDJBNjY1QjNEMjVEMTg3MjA5MjExQkFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbb0mvCbc XwIhNt20ZDxorit1MSlCyVRdc7kerF/KPJW6qTBAvsVvFJZbRdA1DFdKL/qjk6cL Dumm9HpDBWn0nhvSXU0MJrKMMzH3lSeV//wrKkutEC/N2hzLHxX2qZCMFhwEmRq2 bN3il0QFbt5s8h85u6TZKv0IaqUfuTnDakXD0hc8ZL/RIYdZDRxyBbHQvV/JT759 MDE6LqywIyTmwFimwY2fpI5MQUXt203Zt9AqMFsjXXjh7dDM9JVC2b5IKiNpjX7t YWlbkp1BbNtt08MXKffXBV+SNWKXlxbBJ0Lkvzh6IzWSe8JGuqISYUaoPJ3rVOD7 F1r4B6Mbb+dx8g== -----END CERTIFICATE-----Generated at Sat Jun 13 09:15:06 2026 by rpki-client