$ rpki-client -vvvf rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft File: 9CF6ECD13FB5B2029770871AA6E5796104822624.mft (raw, json) Hash identifier: 8V5FVXeNSzTCA5yZKA4dxj6PdSKRSYhhGO50jvm987U= Subject key identifier: E0:96:B1:DC:E5:69:49:EB:BE:7B:44:84:DC:A4:9E:01:5C:B6:DC:E7 Authority key identifier: 9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 Certificate issuer: /CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Certificate serial: 1B30264814C365A4276F2DDEFF44E6238087770E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft Manifest number: BB Signing time: Mon 21 Sep 2026 05:00:49 +0000 Manifest this update: Mon 21 Sep 2026 04:55:49 +0000 Manifest next update: Tue 22 Sep 2026 05:03:49 +0000 Files and hashes: 1: 36342e37382e3136302e302f32302d3234203d3e203331393732.roa (hash: fJ9O2D8T6TBG/ntIcA3JtcHpPY7Bp1wllKnMj7rLb1A=) 2: 36342e37382e3136302e302f32302d3234203d3e20313332333639.roa (hash: GgXMTkt2H5e9QQpD/IDwW8cfgE25pbmkynI8XBBMpbg=) 3: 9CF6ECD13FB5B2029770871AA6E5796104822624.crl (hash: uFPCIGZtJiUrYgNAySmE2pIIh1NJNg3eMV56THlAeU8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:30:26:48:14:c3:65:a4:27:6f:2d:de:ff:44:e6:23:80:87:77:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Validity Not Before: Sep 21 04:55:49 2026 GMT Not After : Sep 22 05:03:49 2026 GMT Subject: CN=E096B1DCE56949EBBE7B4484DCA49E015CB6DCE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:5c:48:04:21:dd:3d:a3:db:ec:a4:30:11:fa: 3d:5b:13:37:8d:b4:01:f0:68:88:f1:f2:0e:12:47: 96:5c:17:e2:c6:0b:d2:de:54:41:a9:55:72:a4:03: be:01:d8:d5:78:6d:28:e2:ed:f0:e3:ca:95:25:e6: f5:ca:bc:03:f3:28:f8:6c:36:d8:cf:86:3e:05:16: 91:8a:24:6b:ef:36:54:fb:22:7e:75:d8:04:2b:93: f1:45:cb:47:1a:56:8c:ed:e3:15:9b:c2:0e:9c:30: 85:02:2e:d8:43:d1:2e:b0:59:b7:cc:e8:71:d9:6c: d4:9b:3b:2e:2b:ce:61:e2:e4:59:66:6e:f3:16:b8: da:e2:49:da:89:bb:2b:cf:e7:45:29:66:a1:93:71: 95:ef:37:a3:e1:9c:95:fc:b4:ae:50:9a:0e:a7:82: 5b:7e:af:d5:09:2c:6e:de:01:02:d0:37:d3:1b:b9: 6b:b5:5b:74:20:a1:61:a5:1b:0e:22:4e:70:fa:a0: 6e:61:e0:86:fe:f1:54:97:a0:49:2d:50:67:64:51: 84:9b:df:4a:ca:1d:e5:df:f2:70:fc:93:41:26:67: 91:12:48:52:dc:e8:60:05:44:09:f5:d3:4b:7f:19: 53:a7:5f:5b:f3:c7:9b:9d:b9:b0:7e:ac:20:25:85: 56:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:96:B1:DC:E5:69:49:EB:BE:7B:44:84:DC:A4:9E:01:5C:B6:DC:E7 X509v3 Authority Key Identifier: keyid:9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:e9:c1:69:b2:49:ce:8b:ff:22:d5:ac:0e:b9:50:ab:bf:24: 14:f0:b1:ef:3b:9d:f7:66:a2:7f:f7:5f:fa:53:fb:3a:a6:9a: 40:72:f5:46:58:6e:d3:8d:0f:26:67:55:1e:92:30:cb:11:f8: 02:65:c7:74:01:70:37:f9:9a:e8:80:ac:4c:e7:d7:22:8b:f9: a2:48:eb:f6:45:b6:36:ab:99:6d:bf:46:5c:4c:d3:d2:3f:2d: ec:7d:cb:81:a9:20:89:99:62:9b:43:a2:93:52:34:47:fe:75: 74:d2:e5:16:9e:58:72:d9:ef:e8:4c:14:15:0a:46:1b:03:12: e1:80:24:ca:0b:4f:c2:f8:72:86:20:bf:38:a5:3d:c0:52:fb: 57:41:e7:c1:82:94:39:12:23:e7:02:ef:94:d1:c8:a0:fe:40: 26:c3:cd:a5:7d:e7:c2:00:e9:b8:b5:fb:c1:b0:61:9c:30:d2: fb:89:a3:84:b4:c6:ec:bc:ac:3d:69:11:07:7a:bf:1b:4e:f4: fb:da:2e:9d:28:4f:33:19:a3:a3:ad:41:84:90:cc:0c:1b:59: d2:b3:c4:47:2a:b7:b2:5b:d1:14:cb:36:66:35:86:47:d1:53: 97:01:87:a8:67:5b:6e:ae:f9:3a:44:eb:91:76:e4:1a:1d:e6: 50:22:ff:3c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUGzAmSBTDZaQnby3e/0TmI4CHdw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEw NDgyMjYyNDAeFw0yNjA5MjEwNDU1NDlaFw0yNjA5MjIwNTAzNDlaMDMxMTAvBgNV BAMTKEUwOTZCMURDRTU2OTQ5RUJCRTdCNDQ4NERDQTQ5RTAxNUNCNkRDRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0XEgEId09o9vspDAR+j1bEzeN tAHwaIjx8g4SR5ZcF+LGC9LeVEGpVXKkA74B2NV4bSji7fDjypUl5vXKvAPzKPhs NtjPhj4FFpGKJGvvNlT7In512AQrk/FFy0caVozt4xWbwg6cMIUCLthD0S6wWbfM 6HHZbNSbOy4rzmHi5FlmbvMWuNriSdqJuyvP50UpZqGTcZXvN6PhnJX8tK5Qmg6n glt+r9UJLG7eAQLQN9MbuWu1W3QgoWGlGw4iTnD6oG5h4Ib+8VSXoEktUGdkUYSb 30rKHeXf8nD8k0EmZ5ESSFLc6GAFRAn100t/GVOnX1vzx5udubB+rCAlhVZVAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU4Jax3OVpSeu+e0SE3KSeAVy23OcwHwYDVR0j BBgwFoAUnPbs0T+1sgKXcIcapuV5YQSCJiQwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzEvOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC85Q0Y2RUNEMTNGQjVCMjAyOTc3MDg3MUFB NkU1Nzk2MTA0ODIyNjI0LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzEvOUNGNkVD RDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHPp wWmySc6L/yLVrA65UKu/JBTwse87nfdmon/3X/pT+zqmmkBy9UZYbtONDyZnVR6S MMsR+AJlx3QBcDf5muiArEzn1yKL+aJI6/ZFtjarmW2/RlxM09I/Lex9y4GpIImZ YptDopNSNEf+dXTS5RaeWHLZ7+hMFBUKRhsDEuGAJMoLT8L4coYgvzilPcBS+1dB 58GClDkSI+cC75TRyKD+QCbDzaV958IA6bi1+8GwYZww0vuJo4S0xuy8rD1pEQd6 vxtO9PvaLp0oTzMZo6OtQYSQzAwbWdKzxEcqt7Jb0RTLNmY1hkfRU5cBh6hnW26u +TpE65F25Bod5lAi/zw= -----END CERTIFICATE-----Generated at Mon Sep 21 21:57:29 2026 by rpki-client