$ rpki-client -vvvf rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft File: 5677B1A39333120442A665B3D25D187209211BAE.mft (raw, json) Hash identifier: pgp8G4z3B8d68qbrjjBY9whDlsYygAvopnu3QuTMRUI= Subject key identifier: C4:9E:F0:69:63:DC:A2:47:96:E5:4D:50:53:F2:A9:1A:10:76:87:D6 Authority key identifier: 56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE Certificate issuer: /CN=5677B1A39333120442A665B3D25D187209211BAE Certificate serial: 5D20F7DF5D4A0C1C2F147CFF69A5EE23F535E0BA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft Manifest number: B7 Signing time: Thu 24 Sep 2026 08:44:15 +0000 Manifest this update: Thu 24 Sep 2026 08:39:15 +0000 Manifest next update: Fri 25 Sep 2026 11:04:15 +0000 Files and hashes: 1: 323430363a626663303a3a2f33322d3438203d3e203138303431.roa (hash: KDiZaxw5XGQhywqutmhDqziZArSBlF5hTPaIVss/WdY=) 2: 5677B1A39333120442A665B3D25D187209211BAE.crl (hash: 5mcNRsBfDXzJw03j36h/ifXn+fcISzKk48YrJb9MYNQ=) 3: 3130332e3135382e3138362e302f32342d3234203d3e203138303431.roa (hash: k/cF66xPcsmZ1x0DE1Ndr3+3JZ48QVlyjQhQ8TgIR4A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:20:f7:df:5d:4a:0c:1c:2f:14:7c:ff:69:a5:ee:23:f5:35:e0:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5677B1A39333120442A665B3D25D187209211BAE Validity Not Before: Sep 24 08:39:15 2026 GMT Not After : Sep 25 11:04:15 2026 GMT Subject: CN=C49EF06963DCA24796E54D5053F2A91A107687D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7d:88:30:ae:d4:7b:ae:32:53:a7:b4:ee:cb: c5:24:5e:7f:73:a2:e1:96:1a:00:df:1d:3a:15:05: 41:90:e0:d2:3f:0e:5f:ef:29:e7:74:67:44:1a:81: 81:67:54:94:3f:6e:50:93:94:7c:e3:68:89:b7:56: a2:54:9e:f7:5f:37:42:0f:7b:7c:a2:ab:27:b2:cd: 5d:58:01:b7:8b:06:e4:ae:24:46:92:5f:b6:34:a8: 50:7f:23:e0:37:02:ed:e0:43:86:78:4a:ff:23:ae: 63:a1:8e:da:29:78:d3:fa:83:48:b8:ca:65:06:44: b5:3a:a7:c1:1d:71:0d:ca:61:24:2d:79:5d:a0:cf: 37:a0:e6:ec:6f:40:68:ec:7a:15:10:aa:fc:68:63: 0c:60:c6:53:ab:a4:0c:08:88:17:b7:7a:81:ea:2c: 76:e7:52:52:99:a5:75:23:08:86:f2:5c:d1:d8:ac: 92:42:1c:40:9c:f9:12:1a:c9:b4:45:fc:c0:d6:65: 10:23:91:6c:8c:5b:79:72:46:47:fb:07:5e:6a:02: 24:61:93:45:01:10:ee:8d:c9:6e:f2:d1:bb:51:be: be:6a:40:e3:36:c4:76:b8:0d:cf:7a:57:fe:45:b5: 01:16:53:98:0b:91:0a:92:55:a2:38:d6:c2:6b:1d: d8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9E:F0:69:63:DC:A2:47:96:E5:4D:50:53:F2:A9:1A:10:76:87:D6 X509v3 Authority Key Identifier: keyid:56:77:B1:A3:93:33:12:04:42:A6:65:B3:D2:5D:18:72:09:21:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/5677B1A39333120442A665B3D25D187209211BAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NEBULAX/0/5677B1A39333120442A665B3D25D187209211BAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:95:53:44:59:cf:82:48:72:e1:d1:95:9d:b0:8d:9b:2d:c7: 7b:a7:78:11:13:f2:fe:02:87:b0:8d:40:3e:67:0d:6d:99:eb: 4d:69:4c:12:8b:7f:28:bc:9d:ce:93:49:3d:39:d0:33:1a:6e: c4:a0:95:cf:c6:3a:cc:4f:3a:8f:34:63:63:10:8c:f3:32:b8: 3e:55:58:fb:0c:b7:8e:ec:6f:a4:88:8a:b6:1f:27:58:75:74: 77:ea:ff:25:04:3e:81:7b:08:6e:6e:b1:4b:39:66:ad:8f:14: eb:33:08:59:5d:7b:85:9e:cb:0e:5f:ff:68:81:a1:b3:32:af: 8a:65:59:80:e9:2e:27:3a:8d:63:93:5c:26:8f:6f:6f:99:09: c0:85:9b:2d:09:54:df:24:71:9d:c6:2b:9b:17:df:9d:a4:71: 8e:6e:5f:4b:d8:07:22:c6:e6:8c:a2:20:6d:dd:c3:0b:55:17: f7:30:c7:a4:56:eb:38:b6:aa:c4:eb:f6:14:2d:c3:b1:05:67: 6c:f6:40:5a:9c:b3:b9:f1:70:04:fc:5a:ec:5a:29:1a:46:37: 93:66:33:9c:ee:a0:02:a0:1f:44:5e:49:33:97:c5:b9:eb:8e: 51:dc:58:a2:c5:35:6a:55:85:b7:a6:18:88:ce:e1:ff:22:aa: d4:32:c1:a5 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUXSD3311KDBwvFHz/aaXuI/U14LowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1RDE4NzIw OTIxMUJBRTAeFw0yNjA5MjQwODM5MTVaFw0yNjA5MjUxMTA0MTVaMDMxMTAvBgNV BAMTKEM0OUVGMDY5NjNEQ0EyNDc5NkU1NEQ1MDUzRjJBOTFBMTA3Njg3RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyfYgwrtR7rjJTp7Tuy8UkXn9z ouGWGgDfHToVBUGQ4NI/Dl/vKed0Z0QagYFnVJQ/blCTlHzjaIm3VqJUnvdfN0IP e3yiqyeyzV1YAbeLBuSuJEaSX7Y0qFB/I+A3Au3gQ4Z4Sv8jrmOhjtopeNP6g0i4 ymUGRLU6p8EdcQ3KYSQteV2gzzeg5uxvQGjsehUQqvxoYwxgxlOrpAwIiBe3eoHq LHbnUlKZpXUjCIbyXNHYrJJCHECc+RIaybRF/MDWZRAjkWyMW3lyRkf7B15qAiRh k0UBEO6NyW7y0btRvr5qQOM2xHa4Dc96V/5FtQEWU5gLkQqSVaI41sJrHdhPAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUxJ7waWPcokeW5U1QU/KpGhB2h9YwHwYDVR0j BBgwFoAUVnexo5MzEgRCpmWz0l0YcgkhG64wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTkVCVUxB WC8wLzU2NzdCMUEzOTMzMzEyMDQ0MkE2NjVCM0QyNUQxODcyMDkyMTFCQUUuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvNTY3N0IxQTM5MzMzMTIwNDQyQTY2NUIzRDI1 RDE4NzIwOTIxMUJBRS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL05FQlVMQVgvMC81Njc3QjFBMzkz MzMxMjA0NDJBNjY1QjNEMjVEMTg3MjA5MjExQkFFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZVTRFnP gkhy4dGVnbCNmy3He6d4ERPy/gKHsI1APmcNbZnrTWlMEot/KLydzpNJPTnQMxpu xKCVz8Y6zE86jzRjYxCM8zK4PlVY+wy3juxvpIiKth8nWHV0d+r/JQQ+gXsIbm6x SzlmrY8U6zMIWV17hZ7LDl//aIGhszKvimVZgOkuJzqNY5NcJo9vb5kJwIWbLQlU 3yRxncYrmxffnaRxjm5fS9gHIsbmjKIgbd3DC1UX9zDHpFbrOLaqxOv2FC3DsQVn bPZAWpyzufFwBPxa7FopGkY3k2YznO6gAqAfRF5JM5fFueuOUdxYosU1alWFt6YY iM7h/yKq1DLBpQ== -----END CERTIFICATE-----Generated at Thu Sep 24 20:58:20 2026 by rpki-client