$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft File: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft (raw, json) Hash identifier: nVT/qF2UfeL9TdazzlRNVTn+nRE5CnXfyrobHERQp7w= Subject key identifier: 38:20:10:EF:F4:96:A6:70:37:58:D5:EA:E4:BD:D0:A7:25:B0:5E:A6 Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Certificate serial: 6F214F91C9CEE71471291B4B1C13C061DDE1BE84 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft Manifest number: 70 Signing time: Tue 28 Jul 2026 06:47:45 +0000 Manifest this update: Tue 28 Jul 2026 06:42:45 +0000 Manifest next update: Wed 29 Jul 2026 09:02:45 +0000 Files and hashes: 1: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl (hash: psXzHvCC89fB0kSPCHeIRwp0wtKLSgivNhRQIy+wQdc=) 2: 3230322e3134382e3231322e302f32332d3234203d3e20313332333639.roa (hash: SzGBARnHtav0Ll1lD5uijTPk6wrNJCucq/5lsmn01uE=) 3: 3130332e3135392e38382e302f32332d3234203d3e203331393732.roa (hash: uBJCL+hDXsrLzypekl61CYTy6y1oooM7hy7D2SecWcY=) 4: 3231312e37392e3130382e302f32332d3234203d3e20313332333639.roa (hash: 4OBGIBLB7koiOTORDKBpRQmErNmgCxAih0H1Dz5yNJU=) 5: 3231312e37392e3130382e302f32332d3234203d3e203331393732.roa (hash: XaWYO4EF8GCnSH9lm/3LpGTaiFlYA9VmdfI3S945iIY=) 6: 3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa (hash: 83VaupmQcP8aGjwKicONhsZqmG/0fmQWoqtdQ72vsQk=) 7: 3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa (hash: /IijmvgF3E5df29RTHQ7h6ytu6VbgcNgJM8iMgAjKe0=) 8: 323430363a636534303a3a2f33322d3634203d3e203331393732.roa (hash: BKJtx+GIQaqxKG+F8DcrnUzVLRxDmkAefIfDjo2DHGY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:21:4f:91:c9:ce:e7:14:71:29:1b:4b:1c:13:c0:61:dd:e1:be:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Validity Not Before: Jul 28 06:42:45 2026 GMT Not After : Jul 29 09:02:45 2026 GMT Subject: CN=382010EFF496A6703758D5EAE4BDD0A725B05EA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:7c:ee:e4:72:13:ce:cc:81:b6:15:f6:8d: 3a:66:a6:bf:15:57:30:ab:6e:7d:09:14:a3:20:59: bc:c3:c0:0f:bd:be:b2:29:4c:6b:f3:72:f2:bd:22: 37:bc:63:84:c6:8d:fc:79:ca:e9:32:0b:2e:d4:73: ec:40:d0:92:81:70:af:66:99:77:73:96:06:3b:81: 24:81:6f:32:b7:9d:13:02:a1:fd:67:0d:09:08:09: f0:c2:60:29:81:3c:66:3d:46:cc:fb:95:32:1d:ee: 47:00:69:07:30:8a:ab:56:1c:94:cb:eb:ea:e4:e1: fc:50:89:99:f3:a4:b3:18:a7:34:aa:3e:25:f8:30: 7e:f0:c7:33:a5:b5:a9:38:f2:d8:73:99:b0:dd:77: 29:9e:df:0e:cf:fe:41:1b:66:d5:c7:d0:76:55:df: ff:48:2d:7b:29:6f:23:c1:1d:f7:e2:88:c0:fb:87: 5f:07:8d:ff:61:c5:f0:93:6b:14:3d:e3:44:ca:ae: a3:b0:62:41:8d:f3:61:94:27:94:57:05:a0:10:d6: f1:5a:b4:d1:32:aa:21:0b:45:4b:50:23:26:ad:f0: f4:ca:7b:ff:59:f6:ec:88:4a:3c:86:e5:57:7b:ba: 74:92:b4:bf:e7:10:c0:1a:e5:6f:23:75:27:4c:b3: 75:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:20:10:EF:F4:96:A6:70:37:58:D5:EA:E4:BD:D0:A7:25:B0:5E:A6 X509v3 Authority Key Identifier: keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0b:9d:61:da:dd:4f:93:e5:76:3d:5f:b6:fc:37:9c:fc:22: 32:f0:7a:5e:5f:fe:d3:9d:78:28:9d:88:39:c2:ed:39:89:d2: da:f0:65:f5:ce:3d:b8:66:62:93:fc:a0:18:e8:12:ea:3d:e2: 58:6e:d1:b9:29:ba:11:c2:c8:55:45:fd:d9:ce:50:5e:df:2d: e3:26:36:f0:8e:a0:fa:3c:60:27:aa:9d:58:e2:d9:6b:cd:f1: 2a:21:34:87:3f:53:5d:4a:49:54:20:d1:39:25:58:d0:ae:5d: be:44:4c:7e:b9:f7:3d:32:8e:ad:8e:cc:5f:5a:2e:f3:41:a7: 87:84:01:3b:59:23:f4:7e:42:ca:da:04:46:0c:71:c7:3f:b0: 8c:d6:28:88:62:26:96:ef:be:56:40:d2:24:db:41:f5:22:5f: 8d:7e:58:0d:76:f5:83:05:b9:1a:f2:99:a9:14:e6:5a:08:47: e8:15:7f:91:81:d6:45:a1:22:f5:fe:b9:a7:41:92:53:66:f8: dd:f9:52:83:01:38:12:9b:b2:6e:3d:e4:5c:e0:34:17:60:36: 82:d8:95:7c:fd:1e:f1:3d:73:05:a2:53:38:cb:17:87:16:12: e4:db:a0:13:de:78:f9:c8:d0:52:1c:01:e8:c1:e1:bf:f9:45: d5:e9:91:ad -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUbyFPkcnO5xRxKRtLHBPAYd3hvoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJE QTVBRUI2ODAeFw0yNjA3MjgwNjQyNDVaFw0yNjA3MjkwOTAyNDVaMDMxMTAvBgNV BAMTKDM4MjAxMEVGRjQ5NkE2NzAzNzU4RDVFQUU0QkREMEE3MjVCMDVFQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3Xzu5HITzsyBthX2jTpmpr8V VzCrbn0JFKMgWbzDwA+9vrIpTGvzcvK9Ije8Y4TGjfx5yukyCy7Uc+xA0JKBcK9m mXdzlgY7gSSBbzK3nRMCof1nDQkICfDCYCmBPGY9Rsz7lTId7kcAaQcwiqtWHJTL 6+rk4fxQiZnzpLMYpzSqPiX4MH7wxzOltak48thzmbDddyme3w7P/kEbZtXH0HZV 3/9ILXspbyPBHffiiMD7h18Hjf9hxfCTaxQ940TKrqOwYkGN82GUJ5RXBaAQ1vFa tNEyqiELRUtQIyat8PTKe/9Z9uyISjyG5Vd7unSStL/nEMAa5W8jdSdMs3XTAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUOCAQ7/SWpnA3WNXq5L3QpyWwXqYwHwYDVR0j BBgwFoAUMYh/Do0X7rTfxzRM5Ihfa9pa62gwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzAvMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS8zMTg4N0YwRThEMTdFRUI0REZDNzM0NENF NDg4NUY2QkRBNUFFQjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzAvMzE4ODdG MEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACoL nWHa3U+T5XY9X7b8N5z8IjLwel5f/tOdeCidiDnC7TmJ0trwZfXOPbhmYpP8oBjo Euo94lhu0bkpuhHCyFVF/dnOUF7fLeMmNvCOoPo8YCeqnVji2WvN8SohNIc/U11K SVQg0TklWNCuXb5ETH659z0yjq2OzF9aLvNBp4eEATtZI/R+QsraBEYMccc/sIzW KIhiJpbvvlZA0iTbQfUiX41+WA129YMFuRrymakU5loIR+gVf5GB1kWhIvX+uadB klNm+N35UoMBOBKbsm495FzgNBdgNoLYlXz9HvE9cwWiUzjLF4cWEuTboBPeePnI 0FIcAejB4b/5RdXpka0= -----END CERTIFICATE-----Generated at Tue Jul 28 22:43:26 2026 by rpki-client