$ rpki-client -vvvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft File: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft (raw, json) Hash identifier: rlb47LIyr6O7YgwbxP5eGC9i3hf/IAnOV2JohvkUfGY= Subject key identifier: 0B:CA:67:1A:6F:1E:26:1A:04:58:97:A4:8B:43:57:48:B9:43:A2:4C Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Certificate serial: 64C81EDA39BC5D9443CC7841C93B3378F0D9F0E5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft Manifest number: BC Signing time: Mon 21 Sep 2026 02:40:03 +0000 Manifest this update: Mon 21 Sep 2026 02:35:03 +0000 Manifest next update: Tue 22 Sep 2026 04:32:03 +0000 Files and hashes: 1: 3130332e3135392e38382e302f32332d3234203d3e203331393732.roa (hash: uBJCL+hDXsrLzypekl61CYTy6y1oooM7hy7D2SecWcY=) 2: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl (hash: goR/InDZb5Wn8soarYgegg+8tzAq080UD+Y6GtFVpEg=) 3: 3231312e37392e3130382e302f32332d3234203d3e20313332333639.roa (hash: 4OBGIBLB7koiOTORDKBpRQmErNmgCxAih0H1Dz5yNJU=) 4: 323430363a636534303a3a2f33322d3634203d3e203331393732.roa (hash: BKJtx+GIQaqxKG+F8DcrnUzVLRxDmkAefIfDjo2DHGY=) 5: 3230322e3134382e3231322e302f32332d3234203d3e20313332333639.roa (hash: SzGBARnHtav0Ll1lD5uijTPk6wrNJCucq/5lsmn01uE=) 6: 3231312e37392e3130382e302f32332d3234203d3e203331393732.roa (hash: XaWYO4EF8GCnSH9lm/3LpGTaiFlYA9VmdfI3S945iIY=) 7: 3231312e37332e3130322e302f32332d3234203d3e203331393732.roa (hash: BZZsk08mUYcwTMTfXfB6TG4Y8hhjasOxijDev40W9UE=) 8: 3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa (hash: 83VaupmQcP8aGjwKicONhsZqmG/0fmQWoqtdQ72vsQk=) 9: 3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa (hash: /IijmvgF3E5df29RTHQ7h6ytu6VbgcNgJM8iMgAjKe0=) 10: 3231312e37332e3130322e302f32332d3234203d3e20313332333639.roa (hash: WHMty9+iXYUNiWSnLw/kN5nrX7uOBPI5Gt9KRhY1qM4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c8:1e:da:39:bc:5d:94:43:cc:78:41:c9:3b:33:78:f0:d9:f0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Validity Not Before: Sep 21 02:35:03 2026 GMT Not After : Sep 22 04:32:03 2026 GMT Subject: CN=0BCA671A6F1E261A045897A48B435748B943A24C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:86:fd:4f:3f:b7:d5:45:88:bc:51:31:0f:cc: 29:e9:7b:39:68:7a:db:3c:8e:35:05:16:3b:6e:fd: 57:2c:a9:6b:f0:15:94:75:c8:cf:b4:7e:9c:1c:de: b3:0e:a6:77:07:3d:97:29:8f:df:3d:c7:ab:18:f1: 79:24:77:6c:9d:d8:81:38:23:53:d0:43:c8:4a:d3: ea:ed:47:91:58:45:59:3e:de:36:93:5b:78:61:0d: cf:64:1e:db:f3:c5:cd:3c:4a:ba:b5:d4:ab:be:f7: 67:4c:ce:25:85:b6:04:7d:cd:fe:e7:30:a8:e0:0e: 33:23:e0:ae:0d:60:7e:ac:6b:9b:6d:09:b5:d3:80: 61:64:bc:52:3c:ad:66:94:09:94:ff:d7:0b:15:ed: 2d:ec:91:9f:f5:1f:b0:dc:cc:11:d2:b3:eb:a6:c7: 7c:05:26:4f:a4:2e:c7:71:7d:53:c6:a1:0f:64:13: 12:8f:10:11:e2:e1:e6:5c:78:e2:94:c3:5a:5e:ab: 8c:f7:ae:48:cc:bb:3c:50:8a:1f:45:e8:e8:70:d6: b9:2b:c1:85:f4:16:37:2e:53:9a:af:46:20:ce:a6: d8:c7:51:83:ff:82:44:53:98:5f:47:d5:bf:3c:55: b5:16:0a:70:8c:5d:64:19:db:b0:a5:98:5f:00:7c: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CA:67:1A:6F:1E:26:1A:04:58:97:A4:8B:43:57:48:B9:43:A2:4C X509v3 Authority Key Identifier: keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e0:cb:2f:73:ee:65:1a:b4:c4:85:55:6b:98:d5:6c:92:c4: 0b:3a:42:82:16:54:ba:d7:3f:cb:e4:ae:93:f6:2d:a2:b4:9a: 30:4f:a0:fc:85:96:ec:62:c8:5a:c1:38:20:7d:ce:d2:68:91: 16:4a:85:16:cf:cf:fd:ba:92:dc:b8:6e:b6:ea:2e:e7:c1:0d: ef:5e:5c:43:0c:70:60:89:a5:74:0d:99:65:95:97:2c:fa:06: 54:40:9c:83:87:da:db:4f:82:a9:8b:2a:57:b1:50:cb:c0:19: 50:63:ef:76:d2:42:5a:56:a3:2a:7d:f2:e7:10:82:94:cd:7a: 47:35:82:89:99:c0:11:da:30:d5:f5:1d:02:c8:21:7b:53:41: 17:94:f5:3d:df:97:6b:05:b3:47:eb:c3:6d:cd:1c:07:86:e5: f4:c8:ec:fc:7b:87:06:13:90:ea:ad:63:42:fd:f2:f5:8f:8e: b9:51:ac:85:81:f4:25:c9:18:79:1a:46:98:8a:2a:7c:89:4c: 81:ff:16:5d:6b:98:b5:d5:a9:f1:74:cc:09:62:be:9f:92:cf: f1:35:3d:da:cf:9a:e7:45:94:74:e5:7f:81:19:cb:e8:39:3d: 38:10:10:c9:65:93:c0:06:f9:f8:f6:e0:a8:73:66:d2:a4:25: 0c:14:3d:fe -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUZMge2jm8XZRDzHhByTszePDZ8OUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJE QTVBRUI2ODAeFw0yNjA5MjEwMjM1MDNaFw0yNjA5MjIwNDMyMDNaMDMxMTAvBgNV BAMTKDBCQ0E2NzFBNkYxRTI2MUEwNDU4OTdBNDhCNDM1NzQ4Qjk0M0EyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhv1PP7fVRYi8UTEPzCnpezlo ets8jjUFFjtu/VcsqWvwFZR1yM+0fpwc3rMOpncHPZcpj989x6sY8Xkkd2yd2IE4 I1PQQ8hK0+rtR5FYRVk+3jaTW3hhDc9kHtvzxc08Srq11Ku+92dMziWFtgR9zf7n MKjgDjMj4K4NYH6sa5ttCbXTgGFkvFI8rWaUCZT/1wsV7S3skZ/1H7DczBHSs+um x3wFJk+kLsdxfVPGoQ9kExKPEBHi4eZceOKUw1peq4z3rkjMuzxQih9F6Ohw1rkr wYX0FjcuU5qvRiDOptjHUYP/gkRTmF9H1b88VbUWCnCMXWQZ27ClmF8AfIsjAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUC8pnGm8eJhoEWJeki0NXSLlDokwwHwYDVR0j BBgwFoAUMYh/Do0X7rTfxzRM5Ihfa9pa62gwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzAvMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS8zMTg4N0YwRThEMTdFRUI0REZDNzM0NENF NDg4NUY2QkRBNUFFQjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzAvMzE4ODdG MEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIbg yy9z7mUatMSFVWuY1WySxAs6QoIWVLrXP8vkrpP2LaK0mjBPoPyFluxiyFrBOCB9 ztJokRZKhRbPz/26kty4brbqLufBDe9eXEMMcGCJpXQNmWWVlyz6BlRAnIOH2ttP gqmLKlexUMvAGVBj73bSQlpWoyp98ucQgpTNekc1gomZwBHaMNX1HQLIIXtTQReU 9T3fl2sFs0frw23NHAeG5fTI7Px7hwYTkOqtY0L98vWPjrlRrIWB9CXJGHkaRpiK KnyJTIH/Fl1rmLXVqfF0zAlivp+Sz/E1PdrPmudFlHTlf4EZy+g5PTgQEMllk8AG +fj24KhzZtKkJQwUPf4= -----END CERTIFICATE-----Generated at Mon Sep 21 18:52:49 2026 by rpki-client