$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft File: 9CF6ECD13FB5B2029770871AA6E5796104822624.mft (raw, json) Hash identifier: 8+jABYx+eHk5/RrxxuJgxXDFI+59mKVVC66P1ZRm8VY= Subject key identifier: 34:6E:7F:79:E6:69:96:61:28:85:D5:98:26:ED:63:0A:84:BF:3F:48 Authority key identifier: 9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 Certificate issuer: /CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Certificate serial: 68C63B4F4319C2DEB82276E9A77451266DB6CFE2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft Manifest number: 71 Signing time: Tue 28 Jul 2026 11:18:16 +0000 Manifest this update: Tue 28 Jul 2026 11:13:16 +0000 Manifest next update: Wed 29 Jul 2026 14:23:16 +0000 Files and hashes: 1: 36342e37382e3136302e302f32302d3234203d3e20313332333639.roa (hash: GgXMTkt2H5e9QQpD/IDwW8cfgE25pbmkynI8XBBMpbg=) 2: 36342e37382e3136302e302f32302d3234203d3e203331393732.roa (hash: fJ9O2D8T6TBG/ntIcA3JtcHpPY7Bp1wllKnMj7rLb1A=) 3: 9CF6ECD13FB5B2029770871AA6E5796104822624.crl (hash: AmxvH1qPFYpEDTaUXtq+lnEFpttnSM1XNP3zb/a7M64=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c6:3b:4f:43:19:c2:de:b8:22:76:e9:a7:74:51:26:6d:b6:cf:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Validity Not Before: Jul 28 11:13:16 2026 GMT Not After : Jul 29 14:23:16 2026 GMT Subject: CN=346E7F79E66996612885D59826ED630A84BF3F48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e3:b7:5b:95:f3:23:54:36:ec:c4:c8:b2:8b: 83:99:05:9e:04:1f:4f:44:71:90:23:ad:5e:f0:10: f8:12:07:2b:6f:e7:32:c0:0b:a7:8c:7d:0c:5f:50: 8c:0e:3b:c6:77:c4:61:1e:42:1d:91:29:65:56:ed: bd:67:ef:b7:89:01:f3:ab:bf:08:dd:06:fd:02:ad: bf:99:e1:a3:a1:5d:c3:36:7a:56:a5:02:a6:20:f7: 87:7e:27:79:2d:0a:fa:a7:0a:2f:6f:4d:e5:e5:84: 48:2f:54:94:bb:91:d8:3c:5f:f4:15:d7:e2:74:52: 1f:c8:f6:76:37:23:85:25:2e:19:83:62:62:c4:46: fc:ee:5a:19:46:73:e1:f2:ac:6a:6a:70:07:3c:b8: 71:f8:98:c4:41:97:0a:cf:73:7f:50:81:74:be:a6: 1f:cb:44:31:11:7e:45:01:4d:c1:d1:8e:ab:5c:49: 67:6b:8d:de:4d:1c:27:f9:80:de:6a:b6:1d:5f:89: c6:70:0b:2b:7d:db:11:b1:f2:94:14:52:2e:88:42: 3a:9c:1f:36:2e:d5:fa:b1:d9:95:5f:10:57:5b:37: 35:e6:94:2d:ee:ad:93:4f:ab:cc:0b:d2:86:43:b8: 2b:b8:c7:f6:14:6a:ae:98:ec:d4:f5:62:96:ee:78: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6E:7F:79:E6:69:96:61:28:85:D5:98:26:ED:63:0A:84:BF:3F:48 X509v3 Authority Key Identifier: keyid:9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:dc:11:4a:5b:6b:bc:8f:08:b6:9e:ed:03:29:c7:ea:2c:c8: 9a:82:9b:aa:03:42:df:8f:65:ef:41:35:a2:f7:98:07:a7:08: 82:13:2a:b8:36:5c:30:b4:c7:b2:8d:1d:7a:e5:c4:09:af:41: 20:36:a9:84:6f:52:12:19:ec:3e:9c:c1:7e:8b:5f:af:c4:91: bc:b5:76:e1:12:bb:c8:99:0a:d4:50:46:e3:77:65:11:7d:5b: bd:2f:ce:4b:54:97:eb:25:62:5c:1f:d4:d9:15:95:41:61:66: 6e:9c:83:5b:38:ff:e7:ff:2e:1b:17:c8:66:55:a7:a1:d2:39: ad:cd:95:56:b1:c7:5d:4b:3a:5b:44:53:22:e1:15:13:10:0c: 1d:02:9d:7b:f7:93:60:9e:63:4b:cc:b0:4b:9d:2b:2e:c0:63: 53:42:60:a1:3e:0c:0e:8a:fd:5f:49:47:97:e4:6c:98:d4:87: b0:94:ae:5a:0f:0f:9b:b7:04:81:30:0b:bb:4a:d0:bf:41:26: ce:c7:0e:e9:01:65:e3:57:8c:44:8d:ae:31:10:d5:3b:5a:b2: 47:7b:1a:fa:26:61:ff:d7:3d:1e:83:fa:78:c7:d2:f6:84:de: ad:d8:63:39:f6:c3:ce:e1:b7:cb:dc:f3:19:57:59:e0:ea:64: b6:80:30:f2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUaMY7T0MZwt64Inbpp3RRJm22z+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEw NDgyMjYyNDAeFw0yNjA3MjgxMTEzMTZaFw0yNjA3MjkxNDIzMTZaMDMxMTAvBgNV BAMTKDM0NkU3Rjc5RTY2OTk2NjEyODg1RDU5ODI2RUQ2MzBBODRCRjNGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP47dblfMjVDbsxMiyi4OZBZ4E H09EcZAjrV7wEPgSBytv5zLAC6eMfQxfUIwOO8Z3xGEeQh2RKWVW7b1n77eJAfOr vwjdBv0Crb+Z4aOhXcM2elalAqYg94d+J3ktCvqnCi9vTeXlhEgvVJS7kdg8X/QV 1+J0Uh/I9nY3I4UlLhmDYmLERvzuWhlGc+HyrGpqcAc8uHH4mMRBlwrPc39QgXS+ ph/LRDERfkUBTcHRjqtcSWdrjd5NHCf5gN5qth1ficZwCyt92xGx8pQUUi6IQjqc HzYu1fqx2ZVfEFdbNzXmlC3urZNPq8wL0oZDuCu4x/YUaq6Y7NT1YpbueJeHAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUNG5/eeZplmEohdWYJu1jCoS/P0gwHwYDVR0j BBgwFoAUnPbs0T+1sgKXcIcapuV5YQSCJiQwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzEvOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC85Q0Y2RUNEMTNGQjVCMjAyOTc3MDg3MUFB NkU1Nzk2MTA0ODIyNjI0LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzEvOUNGNkVD RDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHTc EUpba7yPCLae7QMpx+osyJqCm6oDQt+PZe9BNaL3mAenCIITKrg2XDC0x7KNHXrl xAmvQSA2qYRvUhIZ7D6cwX6LX6/Ekby1duESu8iZCtRQRuN3ZRF9W70vzktUl+sl Ylwf1NkVlUFhZm6cg1s4/+f/LhsXyGZVp6HSOa3NlVaxx11LOltEUyLhFRMQDB0C nXv3k2CeY0vMsEudKy7AY1NCYKE+DA6K/V9JR5fkbJjUh7CUrloPD5u3BIEwC7tK 0L9BJs7HDukBZeNXjESNrjEQ1Ttaskd7GvomYf/XPR6D+njH0vaE3q3YYzn2w87h t8vc8xlXWeDqZLaAMPI= -----END CERTIFICATE-----Generated at Tue Jul 28 20:51:02 2026 by rpki-client