$ rpki-client -vvf rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft File: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft (raw, json) Hash identifier: ev9aYHPsJUcc86AvWoIT04rf9cfY86s/mAJOIQ1skn0= Subject key identifier: 8D:73:36:92:A2:2F:35:49:62:3E:50:9D:3F:6B:A2:B4:BD:61:08:D3 Authority key identifier: AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B Certificate issuer: /CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Certificate serial: 56C071DA0604FCBF8F3B49F9BA8E6026C3EFC682 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft Manifest number: 67 Signing time: Thu 23 Jul 2026 16:38:14 +0000 Manifest this update: Thu 23 Jul 2026 16:33:14 +0000 Manifest next update: Fri 24 Jul 2026 18:31:14 +0000 Files and hashes: 1: 3130332e35312e39302e302f32332d3332203d3e20313331363537.roa (hash: 6/l/GHeRi+L26SSSmyoeIRzt/9QvcP9wUHNuiJTW0HI=) 2: 3130332e35312e39302e302f32332d3332203d3e20313334383233.roa (hash: tH36wJqzGsCI/o8hR/0a7GCLOKwO8H/LX8RVs1GWaks=) 3: 323430303a633965303a3a2f33322d3438203d3e20313334383233.roa (hash: tWF65JRIBYKnWmqjJzuJTpKo/cPf/CgMxXepVjUbTSQ=) 4: 323430303a633965303a3a2f33322d3438203d3e20313331363537.roa (hash: upFELCP3DHkRWuwf+Xm0sVZKdOzGkDLBh+WiG2O5joQ=) 5: 3230322e352e31302e302f32332d3332203d3e20313331363537.roa (hash: zCUned2k9nVUaWCk/pD8/VUXQUBPTJnpl6eX7zZ2e9s=) 6: AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl (hash: 2xhIoACxmjo/bOmxxgMuE1aJ8sMyiUV8Fa1w0v2GSvc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c0:71:da:06:04:fc:bf:8f:3b:49:f9:ba:8e:60:26:c3:ef:c6:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B Validity Not Before: Jul 23 16:33:14 2026 GMT Not After : Jul 24 18:31:14 2026 GMT Subject: CN=8D733692A22F3549623E509D3F6BA2B4BD6108D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:be:96:a0:b6:0e:43:c0:41:56:a9:6a:5a:d6: c6:6f:b6:6e:8a:6f:88:89:cb:87:41:b0:55:2a:a4: 6a:e3:a8:f8:b2:ca:6d:14:e8:43:4f:f1:b4:f5:22: 5b:3e:11:94:7f:73:02:a7:32:63:b9:1d:65:85:4c: 91:63:e2:f5:df:d7:84:33:6f:6b:77:7d:cc:2d:96: 60:5e:54:3f:55:5b:d8:be:d2:57:a2:c4:06:0f:c7: 30:d7:06:fe:b1:24:75:50:29:3a:cc:46:c6:61:ed: 2d:b6:e2:8e:06:78:93:f6:5c:20:57:85:34:8d:d9: 02:30:9d:c0:07:a3:df:45:d5:93:aa:98:a9:7a:52: bb:d2:e5:9c:c1:ad:19:d9:4e:10:f4:74:59:6e:f7: 02:40:83:b1:3c:bd:3d:14:28:28:23:3f:c8:0c:45: 0c:94:e5:34:05:d2:dd:39:c2:79:e1:dd:24:8b:0c: d6:c2:29:ac:f5:43:57:8b:91:65:ba:75:cb:ed:93: 3e:11:5f:61:9f:2e:3f:92:b6:b4:c1:76:3d:c6:de: b7:d4:b7:70:a6:73:91:51:b9:be:df:43:68:2a:37: ec:11:dc:19:b2:1c:f0:1c:fc:b3:9c:5f:3c:40:cd: f8:c5:a9:0d:f6:dd:91:2f:02:db:1f:de:e4:1b:f0: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:73:36:92:A2:2F:35:49:62:3E:50:9D:3F:6B:A2:B4:BD:61:08:D3 X509v3 Authority Key Identifier: keyid:AB:38:88:A4:E1:63:E2:BC:E7:6E:A9:86:E3:C3:F2:FD:DE:D8:8E:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BRICKSINC/0/AB3888A4E163E2BCE76EA986E3C3F2FDDED88E1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:29:86:9d:d0:9c:ea:fa:6a:76:99:4e:ca:45:40:9f:72:10: d7:cb:98:75:0d:b7:be:1f:a6:c4:b1:34:8a:c6:59:52:52:a2: a0:9f:35:16:be:81:b6:24:98:4b:cc:7a:47:37:19:29:6d:be: b5:c9:b8:c2:06:21:9d:53:46:98:c3:14:b5:ec:25:94:e7:01: 4c:84:24:15:9f:06:b9:ea:2a:20:a0:fc:f3:c7:d6:c2:9e:de: 1e:49:2c:ed:7b:f1:44:af:1f:71:aa:38:24:5f:c7:dd:48:5a: da:d8:a7:7d:d7:51:98:d6:21:40:c1:ad:b6:cc:98:c1:d7:3f: a6:fa:1d:ab:29:ef:ab:0c:1d:8d:50:3a:46:07:f6:da:11:7b: 8e:1b:84:94:ef:8d:6e:0d:1d:54:23:4e:13:7a:54:89:64:b2: ad:af:f3:21:ab:f1:ac:f9:d0:a5:1a:c1:fe:be:f4:b3:1f:52: 9a:c6:8e:51:61:e3:b9:e9:89:ff:94:fb:1d:2c:78:36:46:09: 32:a5:52:9a:e0:3c:2b:3a:29:8c:42:06:da:ca:e4:2e:1d:a4: 00:47:e4:45:9a:3f:5c:74:98:9b:df:d7:b8:00:b5:19:63:7c: 8d:7c:85:19:fd:a3:7f:8a:7a:10:36:61:dc:08:6e:de:07:38: ea:d5:25:3e -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUVsBx2gYE/L+PO0n5uo5gJsPvxoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRE RUQ4OEUxQjAeFw0yNjA3MjMxNjMzMTRaFw0yNjA3MjQxODMxMTRaMDMxMTAvBgNV BAMTKDhENzMzNjkyQTIyRjM1NDk2MjNFNTA5RDNGNkJBMkI0QkQ2MTA4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTvpagtg5DwEFWqWpa1sZvtm6K b4iJy4dBsFUqpGrjqPiyym0U6ENP8bT1Ils+EZR/cwKnMmO5HWWFTJFj4vXf14Qz b2t3fcwtlmBeVD9VW9i+0leixAYPxzDXBv6xJHVQKTrMRsZh7S224o4GeJP2XCBX hTSN2QIwncAHo99F1ZOqmKl6UrvS5ZzBrRnZThD0dFlu9wJAg7E8vT0UKCgjP8gM RQyU5TQF0t05wnnh3SSLDNbCKaz1Q1eLkWW6dcvtkz4RX2GfLj+StrTBdj3G3rfU t3Cmc5FRub7fQ2gqN+wR3BmyHPAc/LOcXzxAzfjFqQ323ZEvAtsf3uQb8LGzAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUjXM2kqIvNUliPlCdP2uitL1hCNMwHwYDVR0j BBgwFoAUqziIpOFj4rznbqmG48Py/d7YjhswDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tT SU5DLzAvQUIzODg4QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS9BQjM4ODhBNEUxNjNFMkJDRTc2RUE5ODZF M0MzRjJGRERFRDg4RTFCLmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQlJJQ0tTSU5DLzAvQUIzODg4 QTRFMTYzRTJCQ0U3NkVBOTg2RTNDM0YyRkRERUQ4OEUxQi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJ8p hp3QnOr6anaZTspFQJ9yENfLmHUNt74fpsSxNIrGWVJSoqCfNRa+gbYkmEvMekc3 GSltvrXJuMIGIZ1TRpjDFLXsJZTnAUyEJBWfBrnqKiCg/PPH1sKe3h5JLO178USv H3GqOCRfx91IWtrYp33XUZjWIUDBrbbMmMHXP6b6Hasp76sMHY1QOkYH9toRe44b hJTvjW4NHVQjThN6VIlksq2v8yGr8az50KUawf6+9LMfUprGjlFh47npif+U+x0s eDZGCTKlUprgPCs6KYxCBtrK5C4dpABH5EWaP1x0mJvf17gAtRljfI18hRn9o3+K ehA2YdwIbt4HOOrVJT4= -----END CERTIFICATE-----Generated at Fri Jul 24 10:38:34 2026 by rpki-client