$ rpki-client -vvf rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft File: 5677B1A39333120442A665B3D25D187209211BAE.mft (raw, json) Hash identifier: W2KlS0V2LeRICUim0xMOskLuBcgXtMsbnIHiMxVY1cg= Subject key identifier: 7F:EB:0C:B0:29:89:F2:FC:1A:9E:99:D6:EB:60:15:39:C3:99:70:49 Authority key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE Certificate issuer: /CN=5677B1A39333120442A665B3D25D187209211BAE Certificate serial: 05020B15AC339AEB73DAEAFBFB1B47A11501C115 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft Manifest number: 6A Signing time: Tue 28 Jul 2026 00:22:02 +0000 Manifest this update: Tue 28 Jul 2026 00:17:02 +0000 Manifest next update: Wed 29 Jul 2026 01:59:02 +0000 Files and hashes: 1: 3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa (hash: k/cF66xPcsmZ1x0DE1Ndr3+3JZ48QVlyjQhQ8TgIR4A=) 2: 5677B1A39333120442A665B3D25D187209211BAE.crl (hash: yWXYrJDva5nnvqvINunhduHHBIo7ULJo5Bywarlu0tI=) 3: 323430363a626663303a3a2f33322d3438203d3e203138303431.roa (hash: KDiZaxw5XGQhywqutmhDqziZArSBlF5hTPaIVss/WdY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 01:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:02:0b:15:ac:33:9a:eb:73:da:ea:fb:fb:1b:47:a1:15:01:c1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5677B1A39333120442A665B3D25D187209211BAE Validity Not Before: Jul 28 00:17:02 2026 GMT Not After : Jul 29 01:59:02 2026 GMT Subject: CN=7FEB0CB02989F2FC1A9E99D6EB601539C3997049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:cb:f5:e9:50:01:dc:e0:02:25:25:c4:d7: 80:c3:d4:43:2b:39:dd:1c:93:64:22:77:96:0d:3b: 34:69:df:62:27:96:c1:61:5e:f0:e5:72:28:90:6f: 95:50:66:13:49:54:b1:1d:89:d7:27:24:c7:5d:ee: ce:15:18:ad:b9:63:16:b3:38:3f:4e:69:f9:a0:d9: 2a:15:07:69:a3:32:2b:a9:c2:ce:79:8e:ff:9a:23: 42:2a:e8:a2:72:46:a9:b8:94:55:f6:c5:91:d7:15: 5d:73:3f:27:ee:ca:9d:96:0d:b6:6c:bf:69:fc:c6: 0d:e3:04:54:6a:98:14:4b:bb:3c:3e:f6:14:b2:a0: 3e:87:26:fd:72:d2:c3:86:59:c5:d9:83:ff:bb:18: 33:a0:2a:81:f1:bb:34:cb:9b:1e:05:ad:bd:07:43: 60:3f:44:57:23:25:36:8f:8c:36:5f:28:67:d5:49: 57:db:45:b4:db:e0:5d:43:a4:34:55:cd:5d:80:35: 55:6c:3f:25:77:15:2f:ce:77:e4:12:5c:44:6c:f9: 0e:27:0a:7f:cc:55:69:c7:7b:87:60:e3:b6:e5:52: db:d1:83:80:4a:e4:25:2d:66:63:12:e6:4c:4c:aa: c5:03:06:31:9f:02:58:79:7c:1a:14:40:25:ce:04: e8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EB:0C:B0:29:89:F2:FC:1A:9E:99:D6:EB:60:15:39:C3:99:70:49 X509v3 Authority Key Identifier: keyid:56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:8b:d3:16:92:46:a7:58:c3:c6:17:2d:cb:16:bb:cf:24:f4: 2d:86:8c:6f:53:75:7e:41:3a:c2:b7:ff:9a:fd:b7:52:de:f9: e1:ae:1c:7c:50:c1:50:bc:3d:01:3b:a8:83:2f:60:87:fa:c2: d3:92:e5:78:b6:76:95:10:3d:44:a4:98:73:8e:5d:53:ba:58: 8a:44:59:f7:cd:b9:e3:41:61:a1:4b:13:2b:8a:ed:22:ca:c3: 3b:7c:1d:21:ab:c9:b8:41:ce:1c:23:06:dc:65:6a:a7:5c:9e: 2f:15:ef:41:7c:f2:0b:e9:76:07:9f:3d:54:ca:4f:c8:21:dc: 01:ef:3e:00:52:34:af:06:c8:c0:97:8f:bd:dc:4a:74:ae:86: 4f:f6:2d:5e:8b:bf:c4:94:28:56:17:0a:a1:b9:46:dd:2e:7a: 90:5e:54:6b:f7:2a:bc:c0:a1:95:d8:40:7b:c5:77:d1:9d:c9: 3e:ac:fe:9b:be:10:f3:ec:47:c2:6a:7f:f9:18:a0:3f:0b:e4: 5a:38:5c:69:11:04:b2:68:37:4b:3a:37:10:42:77:6a:f6:7e: 73:a1:b5:29:51:ed:73:ac:76:55:4d:1e:b3:a0:3b:5b:1b:29: d4:a3:3f:f3:6f:19:c5:91:69:c7:be:a9:a9:b8:86:aa:84:74: 1d:24:89:05 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUBQILFawzmutz2ur7+xtHoRUBwRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1RDE4NzIw OTIxMUJBRTAeFw0yNjA3MjgwMDE3MDJaFw0yNjA3MjkwMTU5MDJaMDMxMTAvBgNV BAMTKDdGRUIwQ0IwMjk4OUYyRkMxQTlFOTlENkVCNjAxNTM5QzM5OTcwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLFsv16VAB3OACJSXE14DD1EMr Od0ck2Qid5YNOzRp32InlsFhXvDlciiQb5VQZhNJVLEdidcnJMdd7s4VGK25Yxaz OD9Oafmg2SoVB2mjMiupws55jv+aI0Iq6KJyRqm4lFX2xZHXFV1zPyfuyp2WDbZs v2n8xg3jBFRqmBRLuzw+9hSyoD6HJv1y0sOGWcXZg/+7GDOgKoHxuzTLmx4Frb0H Q2A/RFcjJTaPjDZfKGfVSVfbRbTb4F1DpDRVzV2ANVVsPyV3FS/Od+QSXERs+Q4n Cn/MVWnHe4dg47blUtvRg4BK5CUtZmMS5kxMqsUDBjGfAlh5fBoUQCXOBOi5AgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUf+sMsCmJ8vwanpnW62AVOcOZcEkwHwYDVR0j BBgwFoAUVnexo5MzEgRCpmWz0l0YcgkhG64wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVCVUxB WC8wLzU2NzdCMUEzOTMzMzEyMDQ0MkE2NjVCM0QyNUQxODcyMDkyMTFCQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1 RDE4NzIwOTIxMUJBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FQlVMQVgvMC81Njc3QjFBMzkz MzMxMjA0NDJBNjY1QjNEMjVEMTg3MjA5MjExQkFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy4vTFpJG p1jDxhctyxa7zyT0LYaMb1N1fkE6wrf/mv23Ut754a4cfFDBULw9ATuogy9gh/rC 05LleLZ2lRA9RKSYc45dU7pYikRZ982540FhoUsTK4rtIsrDO3wdIavJuEHOHCMG 3GVqp1yeLxXvQXzyC+l2B589VMpPyCHcAe8+AFI0rwbIwJePvdxKdK6GT/YtXou/ xJQoVhcKoblG3S56kF5Ua/cqvMChldhAe8V30Z3JPqz+m74Q8+xHwmp/+RigPwvk WjhcaREEsmg3Szo3EEJ3avZ+c6G1KVHtc6x2VU0es6A7Wxsp1KM/828ZxZFpx76p qbiGqoR0HSSJBQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:37:10 2026 by rpki-client