$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft File: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft (raw, json) Hash identifier: UQHJ8PtZdV2tVSaQayz/FHq25sXrOt+2HwedkpYE7kc= Subject key identifier: 8E:EF:B0:36:F4:92:2C:4D:B9:F6:FC:E5:28:05:F9:CB:88:D9:AE:30 Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Certificate serial: 2B71D71898A72A6AD028F00B083224D34C789F8E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft Manifest number: 35 Signing time: Sat 13 Jun 2026 11:44:59 +0000 Manifest this update: Sat 13 Jun 2026 11:39:59 +0000 Manifest next update: Sun 14 Jun 2026 14:30:59 +0000 Files and hashes: 1: 3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa (hash: /IijmvgF3E5df29RTHQ7h6ytu6VbgcNgJM8iMgAjKe0=) 2: 3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa (hash: 83VaupmQcP8aGjwKicONhsZqmG/0fmQWoqtdQ72vsQk=) 3: 3230322e3134382e3231322e302f32332d3234203d3e20313332333639.roa (hash: SzGBARnHtav0Ll1lD5uijTPk6wrNJCucq/5lsmn01uE=) 4: 3231312e37392e3130382e302f32332d3234203d3e20313332333639.roa (hash: 4OBGIBLB7koiOTORDKBpRQmErNmgCxAih0H1Dz5yNJU=) 5: 3130332e3135392e38382e302f32332d3234203d3e203331393732.roa (hash: uBJCL+hDXsrLzypekl61CYTy6y1oooM7hy7D2SecWcY=) 6: 323430363a636534303a3a2f33322d3634203d3e203331393732.roa (hash: BKJtx+GIQaqxKG+F8DcrnUzVLRxDmkAefIfDjo2DHGY=) 7: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl (hash: XlbJM9Fh9paJXN2KLZSC2KRGeAAP4sOJI6zBQNWSAlA=) 8: 3231312e37392e3130382e302f32332d3234203d3e203331393732.roa (hash: XaWYO4EF8GCnSH9lm/3LpGTaiFlYA9VmdfI3S945iIY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:71:d7:18:98:a7:2a:6a:d0:28:f0:0b:08:32:24:d3:4c:78:9f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Validity Not Before: Jun 13 11:39:59 2026 GMT Not After : Jun 14 14:30:59 2026 GMT Subject: CN=8EEFB036F4922C4DB9F6FCE52805F9CB88D9AE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:29:35:d7:37:91:30:4d:4a:e3:13:04:f1: d1:98:be:39:1b:e5:16:89:b9:e8:af:d3:19:99:de: 9d:bd:e0:81:b6:d2:fa:ea:33:a1:1e:6d:91:0d:48: 6f:15:f3:22:76:14:29:ea:c8:22:3c:c5:40:d5:c8: 46:5d:1c:98:e9:92:4a:90:76:0a:b4:6a:3a:ed:2d: 9a:7d:f4:04:51:54:58:19:4f:2f:c1:1f:ec:ad:db: b2:71:d1:a8:ab:3d:83:50:45:bf:e7:84:58:7e:bf: b3:6b:94:1b:44:1e:cb:1e:7d:c6:29:2c:6d:74:3e: 06:50:6e:8a:18:6a:6d:bb:b3:50:dd:71:6c:f4:e2: b6:93:a0:40:8d:50:d6:18:d5:98:8d:e2:e7:07:89: 0e:20:1c:65:64:7b:12:6d:87:07:18:58:de:48:65: a5:55:44:e8:64:6c:de:65:a8:38:81:9e:77:b3:e3: 63:e2:85:fe:2a:9b:6a:38:7e:0e:de:26:b7:f7:e1: 68:67:dd:0f:f0:8f:e7:09:96:9d:6f:0c:2b:8a:5d: c8:5d:c2:8d:52:78:67:d6:96:38:03:b9:aa:4d:8c: b7:23:6b:4f:d3:7d:83:e8:d8:66:a9:f4:b2:8b:87: 95:46:cc:47:1a:5c:10:0e:a4:ef:d5:af:c7:c4:3e: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EF:B0:36:F4:92:2C:4D:B9:F6:FC:E5:28:05:F9:CB:88:D9:AE:30 X509v3 Authority Key Identifier: keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:08:24:b8:d5:9d:50:c1:b1:3e:12:9b:25:a3:d8:8e:e9:da: 43:a6:c3:28:27:e5:d1:38:84:ab:41:66:10:07:4d:16:4f:e0: 14:ec:19:30:80:0f:e4:37:47:a8:ec:03:88:e6:f5:b8:85:13: 46:26:c5:82:f8:42:6e:49:a9:75:50:56:92:f9:87:e9:c8:fa: e4:25:f9:e6:14:62:9b:e5:a5:92:bb:30:c7:a9:57:8d:f1:70: fb:99:aa:df:80:36:92:08:04:e0:b3:c3:84:25:a4:f2:f4:2a: f4:ee:7d:45:ed:90:4d:80:0f:9b:58:73:d3:15:68:f5:83:4f: 3d:7d:2a:ce:a1:dd:e2:0c:28:81:c8:1f:d4:f4:d8:92:42:d6: ad:a2:2e:48:f8:7f:64:de:15:5f:d7:1a:06:88:4b:ab:52:31: 32:01:63:1d:13:55:81:c5:e4:51:0c:56:8e:97:2e:25:69:ca: f7:ad:e0:c9:a8:f9:75:e9:77:e4:52:cc:36:00:89:21:3f:7a: 0d:58:8c:f7:66:76:cc:99:e3:92:c5:14:33:6f:f0:9f:7e:e3: ed:9c:f2:31:b1:b9:95:47:9f:8a:1a:ff:d6:cb:7e:f6:c9:3f: 43:e7:f1:82:cc:d9:0c:cf:52:de:3a:10:17:72:9c:e7:6e:c9: 77:03:a4:0a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUK3HXGJinKmrQKPALCDIk00x4n44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJE QTVBRUI2ODAeFw0yNjA2MTMxMTM5NTlaFw0yNjA2MTQxNDMwNTlaMDMxMTAvBgNV BAMTKDhFRUZCMDM2RjQ5MjJDNERCOUY2RkNFNTI4MDVGOUNCODhEOUFFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGaCk11zeRME1K4xME8dGYvjkb 5RaJueiv0xmZ3p294IG20vrqM6EebZENSG8V8yJ2FCnqyCI8xUDVyEZdHJjpkkqQ dgq0ajrtLZp99ARRVFgZTy/BH+yt27Jx0airPYNQRb/nhFh+v7NrlBtEHssefcYp LG10PgZQbooYam27s1DdcWz04raToECNUNYY1ZiN4ucHiQ4gHGVkexJthwcYWN5I ZaVVROhkbN5lqDiBnnez42Pihf4qm2o4fg7eJrf34Whn3Q/wj+cJlp1vDCuKXchd wo1SeGfWljgDuapNjLcja0/TfYPo2Gap9LKLh5VGzEcaXBAOpO/Vr8fEPjlTAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUju+wNvSSLE259vzlKAX5y4jZrjAwHwYDVR0j BBgwFoAUMYh/Do0X7rTfxzRM5Ihfa9pa62gwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzAvMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS8zMTg4N0YwRThEMTdFRUI0REZDNzM0NENF NDg4NUY2QkRBNUFFQjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzAvMzE4ODdG MEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIEI JLjVnVDBsT4SmyWj2I7p2kOmwygn5dE4hKtBZhAHTRZP4BTsGTCAD+Q3R6jsA4jm 9biFE0YmxYL4Qm5JqXVQVpL5h+nI+uQl+eYUYpvlpZK7MMepV43xcPuZqt+ANpII BOCzw4QlpPL0KvTufUXtkE2AD5tYc9MVaPWDTz19Ks6h3eIMKIHIH9T02JJC1q2i Lkj4f2TeFV/XGgaIS6tSMTIBYx0TVYHF5FEMVo6XLiVpyvet4Mmo+XXpd+RSzDYA iSE/eg1YjPdmdsyZ45LFFDNv8J9+4+2c8jGxuZVHn4oa/9bLfvbJP0Pn8YLM2QzP Ut46EBdynOduyXcDpAo= -----END CERTIFICATE-----Generated at Sat Jun 13 15:54:51 2026 by rpki-client