$ rpki-client -vvf rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft File: 5677B1A39333120442A665B3D25D187209211BAE.mft (raw, json) Hash identifier: sK02y9Td+t7xsKp2vWsMyf3B+0vMaAZi8s5BiJPO2TQ= Subject key identifier: 8C:73:BF:F5:D1:1F:F1:94:BB:18:FF:E6:31:92:C0:7C:7F:BE:33:2E Authority key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE Certificate issuer: /CN=5677B1A39333120442A665B3D25D187209211BAE Certificate serial: 5A3FA39BDC66261180B658922720088D829F8419 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft Manifest number: 04 Signing time: Tue 12 May 2026 12:46:01 +0000 Manifest this update: Tue 12 May 2026 12:41:01 +0000 Manifest next update: Wed 13 May 2026 16:07:01 +0000 Files and hashes: 1: 5677B1A39333120442A665B3D25D187209211BAE.crl (hash: x56XxmxTt4fDLj0PIGnVRtkxC4w+n7YhivjcUu6dUmU=) 2: 3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa (hash: k/cF66xPcsmZ1x0DE1Ndr3+3JZ48QVlyjQhQ8TgIR4A=) 3: 323430363a626663303a3a2f33322d3438203d3e203138303431.roa (hash: KDiZaxw5XGQhywqutmhDqziZArSBlF5hTPaIVss/WdY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3f:a3:9b:dc:66:26:11:80:b6:58:92:27:20:08:8d:82:9f:84:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5677B1A39333120442A665B3D25D187209211BAE Validity Not Before: May 12 12:41:01 2026 GMT Not After : May 13 16:07:01 2026 GMT Subject: CN=8C73BFF5D11FF194BB18FFE63192C07C7FBE332E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:e2:9c:4c:12:35:31:34:bf:7d:62:70:38: 24:47:05:62:12:5f:e1:76:d6:98:42:ec:cc:4b:d7: e9:b7:f7:8a:2a:75:9a:d7:54:6c:12:cc:70:d9:fa: 94:7d:cb:d8:6b:3e:7e:87:1c:5f:7d:31:49:a7:6d: 44:6e:b5:ba:fa:4d:a2:8e:52:63:24:81:5b:55:53: 33:52:1e:62:8a:51:13:f3:8e:1c:ca:f3:01:a2:e2: 49:97:f7:c5:a0:9b:e5:5e:6d:c2:aa:3c:f9:f8:9c: ce:b1:2a:0f:43:56:1f:7d:ee:93:32:9d:63:49:db: 3c:93:d2:33:c3:26:ad:3c:22:a8:3d:72:f3:88:f7: 56:4d:6d:6f:a0:81:56:65:9b:cf:7e:7e:d4:6a:d9: d6:b0:30:b0:5e:45:35:6f:6f:e3:d1:3f:69:5c:e6: f2:10:7a:f4:75:59:09:4b:a8:f3:23:37:d7:86:a7: a4:be:3a:15:80:a0:9b:dd:8a:b7:1e:cf:00:af:bd: 3a:bf:75:bb:5e:0e:16:a8:c2:6d:f4:3b:98:4c:ec: 09:a3:18:ca:44:43:88:5d:34:bb:f1:ca:42:8b:3c: 97:bb:20:eb:05:5f:3d:cd:27:1e:f9:89:f2:8b:92: 38:7f:75:f5:eb:ba:17:31:fb:06:d8:ae:9e:7e:2c: 58:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:73:BF:F5:D1:1F:F1:94:BB:18:FF:E6:31:92:C0:7C:7F:BE:33:2E X509v3 Authority Key Identifier: keyid:56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:60:40:0f:12:1d:aa:e3:6c:6f:01:d3:f7:39:67:a1:d6:8e: 8e:e1:35:e7:93:87:29:ed:7a:36:e5:bf:07:1d:ff:07:29:eb: 02:72:4c:a1:20:c7:cc:f0:42:f7:bc:0c:e7:8b:5e:bb:2f:60: 81:7d:f5:db:bd:8a:ef:3a:cf:ad:f7:17:db:90:95:0b:8b:6c: 4d:56:8a:0e:d2:4d:71:5a:7d:70:89:30:84:94:6f:23:8c:60: 70:6f:66:f4:65:33:57:ac:d0:83:a7:5b:5e:fd:e5:47:be:cb: e8:8d:32:0a:3d:86:b5:81:cb:97:4a:89:23:6a:36:66:2b:91: 7e:2d:d4:31:46:78:ba:45:78:0b:75:cb:c5:53:54:a5:ee:9d: 4d:08:1e:4c:dd:a5:a4:08:3c:18:38:36:0a:a7:b7:12:24:10: dd:93:48:72:0e:19:88:c5:08:b1:ed:d8:c9:3c:31:bd:ac:1f: b0:4f:ca:96:a2:b5:cf:ae:65:e5:a2:6c:24:2a:84:8d:ac:6e: d0:46:8a:7b:ef:71:62:d1:d5:3f:ce:81:78:43:02:25:e3:f5: 8c:5a:cf:0a:5f:3e:7c:b6:e0:8d:6f:d5:ff:a4:86:38:83:c6: 99:3d:83:82:b4:60:15:d4:18:4f:ac:d6:d5:fb:e2:1a:f3:a9: 0d:12:8e:a2 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUWj+jm9xmJhGAtliSJyAIjYKfhBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1RDE4NzIw OTIxMUJBRTAeFw0yNjA1MTIxMjQxMDFaFw0yNjA1MTMxNjA3MDFaMDMxMTAvBgNV BAMTKDhDNzNCRkY1RDExRkYxOTRCQjE4RkZFNjMxOTJDMDdDN0ZCRTMzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoh+KcTBI1MTS/fWJwOCRHBWIS X+F21phC7MxL1+m394oqdZrXVGwSzHDZ+pR9y9hrPn6HHF99MUmnbURutbr6TaKO UmMkgVtVUzNSHmKKURPzjhzK8wGi4kmX98Wgm+VebcKqPPn4nM6xKg9DVh997pMy nWNJ2zyT0jPDJq08Iqg9cvOI91ZNbW+ggVZlm89+ftRq2dawMLBeRTVvb+PRP2lc 5vIQevR1WQlLqPMjN9eGp6S+OhWAoJvdircezwCvvTq/dbteDhaowm30O5hM7Amj GMpEQ4hdNLvxykKLPJe7IOsFXz3NJx75ifKLkjh/dfXruhcx+wbYrp5+LFiPAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUjHO/9dEf8ZS7GP/mMZLAfH++My4wHwYDVR0j BBgwFoAUVnexo5MzEgRCpmWz0l0YcgkhG64wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVCVUxB WC8wLzU2NzdCMUEzOTMzMzEyMDQ0MkE2NjVCM0QyNUQxODcyMDkyMTFCQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1 RDE4NzIwOTIxMUJBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FQlVMQVgvMC81Njc3QjFBMzkz MzMxMjA0NDJBNjY1QjNEMjVEMTg3MjA5MjExQkFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGBADxId quNsbwHT9zlnodaOjuE155OHKe16NuW/Bx3/BynrAnJMoSDHzPBC97wM54teuy9g gX31272K7zrPrfcX25CVC4tsTVaKDtJNcVp9cIkwhJRvI4xgcG9m9GUzV6zQg6db Xv3lR77L6I0yCj2GtYHLl0qJI2o2ZiuRfi3UMUZ4ukV4C3XLxVNUpe6dTQgeTN2l pAg8GDg2Cqe3EiQQ3ZNIcg4ZiMUIse3YyTwxvawfsE/KlqK1z65l5aJsJCqEjaxu 0EaKe+9xYtHVP86BeEMCJeP1jFrPCl8+fLbgjW/V/6SGOIPGmT2DgrRgFdQYT6zW 1fviGvOpDRKOog== -----END CERTIFICATE-----Generated at Wed May 13 05:58:23 2026 by rpki-client