$ rpki-client -vvvf rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft File: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft (raw, json) Hash identifier: IrwozCHvqi+8uFgBgY1/62hCskfUJHp+eD0ZFyHxVMw= Subject key identifier: A9:58:2B:7A:96:B6:42:53:DB:8E:59:A0:A8:CE:CF:CB:08:6F:0E:52 Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Certificate serial: 0DD79378BA2F81091B651FBB3D5F978B8A372FDE Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 21:01:25 +0000 Manifest this update: Sat 14 Nov 2026 20:56:25 +0000 Manifest next update: Sun 15 Nov 2026 23:40:25 +0000 Files and hashes: 1: 3230322e352e31302e302f32332d3233203d3e20313331363330.roa (hash: 0owoHP+vPpEdJ28e7p434+yQ6TztrvINieYa1Uziwec=) 2: 323430303a633965303a3a2f33322d3438203d3e20313334383233.roa (hash: tWF65JRIBYKnWmqjJzuJTpKo/cPf/CgMxXepVjUbTSQ=) 3: 3230322e352e31312e302f32342d3234203d3e20323032373336.roa (hash: VH7i1Rmx/vnrLlet6gZkD22nYR0ayb436EnYjZJQzNA=) 4: 323430303a633965303a3a2f33322d3438203d3e20313331363537.roa (hash: upFELCP3DHkRWuwf+Xm0sVZKdOzGkDLBh+WiG2O5joQ=) 5: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl (hash: fyP/rR4pVIKdMDd8HqFzMl4MsPiY3bqxhhQpmSsZd/o=) 6: 3230322e352e31302e302f32332d3332203d3e20313331363537.roa (hash: zCUned2k9nVUaWCk/pD8/VUXQUBPTJnpl6eX7zZ2e9s=) 7: 3230322e352e31302e302f32342d3234203d3e20323032373336.roa (hash: QJ5gRwlwOk90NIqbTeKQ9YIL40s99qTaJ8zlmXypSM4=) 8: 3230322e352e31302e302f32342d3234203d3e20313937353337.roa (hash: uvBAHIGsfVOPKEPiUlrDJflai1mxkNu/0gJ+oj7/pBE=) 9: 3130332e35312e39302e302f32332d3332203d3e20313334383233.roa (hash: tH36wJqzGsCI/o8hR/0a7GCLOKwO8H/LX8RVs1GWaks=) 10: 3230322e352e31312e302f32342d3234203d3e20313937353337.roa (hash: /asmOvtxTVfejsQzCQN9JAzbwce/1zKDLT1mSL+cbv8=) 11: 3230322e352e31312e302f32342d3234203d3e20323136313338.roa (hash: AWD+zuYzrNaUxcfv/56OBONbGf7IKDXjS7DxuJrGBYg=) 12: 3130332e35312e39302e302f32332d3332203d3e20313331363537.roa (hash: 6/l/GHeRi+L26SSSmyoeIRzt/9QvcP9wUHNuiJTW0HI=) 13: 3230322e352e31302e302f32342d3234203d3e20323136313338.roa (hash: elBageucsQOSTptkEXsGAPEabTfNUu/5ZP88JzEAJHU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 23:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d7:93:78:ba:2f:81:09:1b:65:1f:bb:3d:5f:97:8b:8a:37:2f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Validity Not Before: Nov 14 20:56:25 2026 GMT Not After : Nov 15 23:40:25 2026 GMT Subject: CN=A9582B7A96B64253DB8E59A0A8CECFCB086F0E52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:4a:2b:6a:71:3f:95:39:c5:b1:23:2f:62: e3:44:73:54:4c:d5:ff:f8:ba:d2:73:d6:d7:7f:32: 12:67:c1:ae:bf:ff:4e:27:f1:61:2f:62:fa:19:a7: 52:96:8c:9d:14:af:88:78:41:5c:72:9a:6b:b6:ec: 4d:6d:3a:9c:4f:61:fd:5c:32:43:b5:cb:ca:0c:b1: 9b:60:b9:cf:00:1d:78:e0:5e:de:33:c7:7b:e4:6f: 4f:3b:af:e6:a1:79:4a:2e:98:05:ee:29:5e:ae:e5: b2:96:e2:c3:29:e2:97:9e:b1:0d:b7:02:29:68:00: 24:43:5b:67:cb:49:ba:70:17:e6:1a:b0:41:b6:a1: 30:b1:e1:f5:2e:d6:73:19:3a:9a:72:cc:74:76:72: 05:6d:f6:b2:f8:eb:41:b7:f3:9d:b5:66:87:c5:ad: 01:63:01:90:24:e4:b9:c7:af:6a:62:ac:a4:44:ed: 14:27:69:3c:26:de:55:33:3d:38:19:0f:f2:f3:b9: ea:c9:6e:4b:55:20:22:25:16:38:f5:57:82:aa:50: 40:e3:97:38:5e:fa:91:14:fc:ff:c3:71:3b:0f:bb: b8:0b:95:e3:13:8d:11:5b:59:06:20:68:0e:fe:b2: 85:d8:d2:7f:93:12:82:00:f5:df:ae:86:d1:a9:c6: 60:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:58:2B:7A:96:B6:42:53:DB:8E:59:A0:A8:CE:CF:CB:08:6F:0E:52 X509v3 Authority Key Identifier: keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:df:7e:5b:5b:27:d1:e1:1a:f0:6b:f0:61:f9:65:c7:8e:59: 63:5a:db:d5:68:c6:d8:88:91:0b:08:f3:45:da:4f:28:13:c8: ef:e9:9f:45:94:04:2a:54:45:70:4d:df:df:08:4f:b0:dd:a0: 4e:6f:d8:f3:9b:a2:d7:21:54:12:8d:9e:b0:02:39:d2:5d:83: a1:30:a8:8b:01:1d:23:2b:c8:7d:94:a1:e6:da:0e:d5:b5:89: 3e:4a:66:a1:ec:4d:a4:30:79:d0:11:cc:63:3e:fe:77:7a:7f: a6:b1:e5:92:7a:63:e9:f2:7c:17:e2:b0:71:40:fa:4d:a3:ac: 9e:66:80:9e:8e:97:c9:07:b8:c5:70:80:bb:c2:79:0d:65:c2: 9f:4e:ed:56:f3:e7:d8:a6:9e:39:95:c0:53:9f:50:99:54:64: 3a:ff:2e:a2:90:7c:60:a9:11:f4:6d:3f:12:c2:e6:31:53:7e: 8e:02:e1:6d:6d:be:b8:9b:b3:c6:7b:2b:a1:d1:de:4c:e6:a5: b8:28:82:c4:d0:12:26:a7:6c:9e:b0:49:be:a9:17:7c:a6:d2: 1c:ea:9c:13:ff:f5:56:8f:03:33:80:23:cc:b2:fa:3c:45:3e: 7d:7b:1c:6f:db:07:3a:5e:07:f2:d2:9b:ee:85:18:f0:73:14: d7:65:9f:d7 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUDdeTeLovgQkbZR+7PV+Xi4o3L94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE RUQ4OEUxQjAeFw0yNjExMTQyMDU2MjVaFw0yNjExMTUyMzQwMjVaMDMxMTAvBgNV BAMTKEE5NTgyQjdBOTZCNjQyNTNEQjhFNTlBMEE4Q0VDRkNCMDg2RjBFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVkoranE/lTnFsSMvYuNEc1RM 1f/4utJz1td/MhJnwa6//04n8WEvYvoZp1KWjJ0Ur4h4QVxymmu27E1tOpxPYf1c MkO1y8oMsZtguc8AHXjgXt4zx3vkb087r+aheUoumAXuKV6u5bKW4sMp4peesQ23 AiloACRDW2fLSbpwF+YasEG2oTCx4fUu1nMZOppyzHR2cgVt9rL460G38521ZofF rQFjAZAk5LnHr2pirKRE7RQnaTwm3lUzPTgZD/LzuerJbktVICIlFjj1V4KqUEDj lzhe+pEU/P/DcTsPu7gLleMTjRFbWQYgaA7+soXY0n+TEoIA9d+uhtGpxmD3AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUqVgrepa2QlPbjlmgqM7PywhvDlIwHwYDVR0j BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF M0MzRjJGRERFRDg4RTFCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvQUIzODg4 QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAITf fltbJ9HhGvBr8GH5ZceOWWNa29VoxtiIkQsI80XaTygTyO/pn0WUBCpURXBN398I T7DdoE5v2PObotchVBKNnrACOdJdg6EwqIsBHSMryH2UoebaDtW1iT5KZqHsTaQw edARzGM+/nd6f6ax5ZJ6Y+nyfBfisHFA+k2jrJ5mgJ6Ol8kHuMVwgLvCeQ1lwp9O 7Vbz59imnjmVwFOfUJlUZDr/LqKQfGCpEfRtPxLC5jFTfo4C4W1tvribs8Z7K6HR 3kzmpbgogsTQEianbJ6wSb6pF3ym0hzqnBP/9VaPAzOAI8yy+jxFPn17HG/bBzpe B/LSm+6FGPBzFNdln9c= -----END CERTIFICATE-----Generated at Sun Nov 15 10:23:06 2026 by rpki-client