$ rpki-client -vvf rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft File: 5677B1A39333120442A665B3D25D187209211BAE.mft (raw, json) Hash identifier: I7BXnvTyxJlKftioJkmMMOv+/CNMY4Z3RJecOmc9D4s= Subject key identifier: BF:77:42:2A:41:1C:60:90:4F:F0:0C:62:6A:16:78:81:0D:E8:E3:AC Authority key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE Certificate issuer: /CN=5677B1A39333120442A665B3D25D187209211BAE Certificate serial: 6D426955C1FE9A80AAF959FDF0BB1F3BE1CDF618 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 13:22:33 +0000 Manifest this update: Thu 23 Jul 2026 13:17:33 +0000 Manifest next update: Fri 24 Jul 2026 14:04:33 +0000 Files and hashes: 1: 323430363a626663303a3a2f33322d3438203d3e203138303431.roa (hash: KDiZaxw5XGQhywqutmhDqziZArSBlF5hTPaIVss/WdY=) 2: 5677B1A39333120442A665B3D25D187209211BAE.crl (hash: 3bEwZWcwMStO7Hy/aqbii1icNJt7DzNyi9Jn1HeFJtI=) 3: 3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa (hash: k/cF66xPcsmZ1x0DE1Ndr3+3JZ48QVlyjQhQ8TgIR4A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:06:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:42:69:55:c1:fe:9a:80:aa:f9:59:fd:f0:bb:1f:3b:e1:cd:f6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5677B1A39333120442A665B3D25D187209211BAE Validity Not Before: Jul 23 13:17:33 2026 GMT Not After : Jul 24 14:04:33 2026 GMT Subject: CN=BF77422A411C60904FF00C626A1678810DE8E3AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:f6:85:6f:72:82:12:ed:b8:d6:90:25:29: ea:4c:80:1e:de:0f:16:51:cb:a8:c3:75:f1:22:6b: 65:1f:a3:01:28:71:13:d9:49:62:d4:ab:7c:07:37: d5:af:66:9b:ca:ce:b2:8e:e2:c4:9f:98:8b:0b:3f: d7:ef:ad:b9:87:51:63:7d:62:de:ac:85:a0:08:85: aa:a0:0a:5a:78:e6:18:1c:49:84:4e:60:7a:ad:4a: 06:3c:a6:f4:f3:ae:ea:33:bf:89:b0:0a:b2:4e:79: d7:af:f8:43:53:98:20:6d:4f:42:5e:04:38:7b:c3: 42:1f:56:d9:60:30:da:99:0c:3c:b0:5b:30:52:22: 3e:72:77:a5:0b:a2:aa:1c:5a:2e:6d:a4:04:80:7b: a1:05:a9:41:42:d1:f7:72:e9:ce:ee:ab:46:c3:23: 14:78:28:cf:68:c2:40:95:a3:87:97:d5:be:b8:a6: 10:ab:52:74:cd:65:7c:41:87:53:6e:a6:bd:2e:a9: a6:35:08:1f:3d:e6:79:61:ba:e4:41:d0:4a:29:e4: 94:4a:71:40:7e:24:1b:5f:96:98:6f:a4:b2:c2:3d: a9:94:18:52:0c:34:ec:c2:52:27:52:d6:7b:6b:6b: ac:b3:6a:81:a2:21:86:7d:7f:a2:d8:3f:d7:42:e3: 64:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:77:42:2A:41:1C:60:90:4F:F0:0C:62:6A:16:78:81:0D:E8:E3:AC X509v3 Authority Key Identifier: keyid:56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:33:8a:40:5a:bd:01:d5:36:66:28:d0:b8:93:e4:e0:d3:db: c4:a4:a5:b1:dd:2a:1d:10:63:da:f5:d1:6b:14:42:e0:a3:d2: b2:c5:e8:f2:9f:bb:b7:18:3a:a6:55:d6:b9:4a:2e:13:11:7c: c4:96:e5:65:2d:aa:8d:4c:ae:1a:78:73:bf:16:be:14:3d:c8: 2a:91:64:91:89:ed:2e:68:bf:0a:1e:83:1a:0f:11:86:bf:42: f8:95:83:19:a8:3f:72:20:67:d8:de:1c:09:a8:00:ee:b2:ef: f9:17:c3:3e:91:13:b0:4d:39:59:1d:e4:ff:ed:bf:9f:07:98: c3:52:d4:f1:32:7a:78:07:31:6f:70:7e:bd:5e:7d:ac:87:99: 37:31:2d:20:43:4b:dd:94:88:5f:98:7d:1d:4f:75:e2:55:f3: 22:7f:eb:26:14:1a:a9:ab:7b:a0:77:3a:7a:d7:87:14:99:32: 81:6a:1d:1d:f3:53:6a:6f:dd:2e:01:df:ec:7b:80:37:c9:29: 70:fa:d8:50:b9:ae:34:e7:7e:7e:37:e5:f8:90:70:0b:07:5f: 3b:3d:27:6f:1b:f6:04:50:0f:06:f2:f6:7b:bc:88:1b:b3:05: db:c4:c7:a6:ec:0e:98:6e:06:c2:46:4f:02:b1:fa:f2:6c:b7: e0:6e:47:46 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUbUJpVcH+moCq+Vn98LsfO+HN9hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1RDE4NzIw OTIxMUJBRTAeFw0yNjA3MjMxMzE3MzNaFw0yNjA3MjQxNDA0MzNaMDMxMTAvBgNV BAMTKEJGNzc0MjJBNDExQzYwOTA0RkYwMEM2MjZBMTY3ODgxMERFOEUzQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjE/aFb3KCEu241pAlKepMgB7e DxZRy6jDdfEia2UfowEocRPZSWLUq3wHN9WvZpvKzrKO4sSfmIsLP9fvrbmHUWN9 Yt6shaAIhaqgClp45hgcSYROYHqtSgY8pvTzruozv4mwCrJOedev+ENTmCBtT0Je BDh7w0IfVtlgMNqZDDywWzBSIj5yd6ULoqocWi5tpASAe6EFqUFC0fdy6c7uq0bD IxR4KM9owkCVo4eX1b64phCrUnTNZXxBh1Nupr0uqaY1CB895nlhuuRB0Eop5JRK cUB+JBtflphvpLLCPamUGFIMNOzCUidS1ntra6yzaoGiIYZ9f6LYP9dC42TPAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUv3dCKkEcYJBP8AxiahZ4gQ3o46wwHwYDVR0j BBgwFoAUVnexo5MzEgRCpmWz0l0YcgkhG64wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVCVUxB WC8wLzU2NzdCMUEzOTMzMzEyMDQ0MkE2NjVCM0QyNUQxODcyMDkyMTFCQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1 RDE4NzIwOTIxMUJBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FQlVMQVgvMC81Njc3QjFBMzkz MzMxMjA0NDJBNjY1QjNEMjVEMTg3MjA5MjExQkFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzOKQFq9 AdU2ZijQuJPk4NPbxKSlsd0qHRBj2vXRaxRC4KPSssXo8p+7txg6plXWuUouExF8 xJblZS2qjUyuGnhzvxa+FD3IKpFkkYntLmi/Ch6DGg8Rhr9C+JWDGag/ciBn2N4c CagA7rLv+RfDPpETsE05WR3k/+2/nweYw1LU8TJ6eAcxb3B+vV59rIeZNzEtIENL 3ZSIX5h9HU914lXzIn/rJhQaqat7oHc6eteHFJkygWodHfNTam/dLgHf7HuAN8kp cPrYULmuNOd+fjfl+JBwCwdfOz0nbxv2BFAPBvL2e7yIG7MF28THpuwOmG4GwkZP ArH68my34G5HRg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:20:25 2026 by rpki-client