$ rpki-client -vvvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft File: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft (raw, json) Hash identifier: s1kkPxMD0f5QDNMgg+Xxx4DwtG9kXiISS2pIodI5rK4= Subject key identifier: 38:D0:65:C2:93:9C:3E:A9:42:A9:B4:25:BC:A3:96:B7:33:3D:D4:29 Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Certificate serial: 4CD4150A3C8F9DA44414AA407A784834498CB881 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 15:33:24 +0000 Manifest this update: Sun 15 Nov 2026 15:28:24 +0000 Manifest next update: Mon 16 Nov 2026 17:29:24 +0000 Files and hashes: 1: 323430363a636534303a3a2f33322d3634203d3e203331393732.roa (hash: BKJtx+GIQaqxKG+F8DcrnUzVLRxDmkAefIfDjo2DHGY=) 2: 3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa (hash: 83VaupmQcP8aGjwKicONhsZqmG/0fmQWoqtdQ72vsQk=) 3: 3231312e37332e3130322e302f32332d3234203d3e203331393732.roa (hash: BZZsk08mUYcwTMTfXfB6TG4Y8hhjasOxijDev40W9UE=) 4: 3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa (hash: /IijmvgF3E5df29RTHQ7h6ytu6VbgcNgJM8iMgAjKe0=) 5: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl (hash: TXatZvwxHET/uQUeCi+brpRaYE2ID6s0z4cbTfsWSJM=) 6: 3231312e37392e3130382e302f32332d3234203d3e20313332333639.roa (hash: 4OBGIBLB7koiOTORDKBpRQmErNmgCxAih0H1Dz5yNJU=) 7: 3231312e37392e3130382e302f32332d3234203d3e203331393732.roa (hash: XaWYO4EF8GCnSH9lm/3LpGTaiFlYA9VmdfI3S945iIY=) 8: 3231312e37332e3130322e302f32332d3234203d3e20313332333639.roa (hash: WHMty9+iXYUNiWSnLw/kN5nrX7uOBPI5Gt9KRhY1qM4=) 9: 3130332e3135392e38382e302f32332d3234203d3e203331393732.roa (hash: uBJCL+hDXsrLzypekl61CYTy6y1oooM7hy7D2SecWcY=) 10: 3230322e3134382e3231322e302f32332d3234203d3e20313332333639.roa (hash: SzGBARnHtav0Ll1lD5uijTPk6wrNJCucq/5lsmn01uE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d4:15:0a:3c:8f:9d:a4:44:14:aa:40:7a:78:48:34:49:8c:b8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Validity Not Before: Nov 15 15:28:24 2026 GMT Not After : Nov 16 17:29:24 2026 GMT Subject: CN=38D065C2939C3EA942A9B425BCA396B7333DD429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9e:ce:41:0f:20:f6:56:ce:2f:42:af:2e:27: e1:8f:14:3d:ee:63:d7:86:ec:ee:b3:e7:cd:1f:9a: 73:a4:aa:f7:ad:6a:9a:62:af:c0:90:e7:6a:14:c8: f5:8a:69:f9:51:8a:97:1e:f9:10:df:04:3b:13:76: b5:99:9a:c0:58:dd:d4:07:83:28:57:c6:c3:24:d4: 47:fd:01:b6:b6:d4:7a:79:52:be:89:b9:09:8c:d0: 45:c7:b0:7a:6d:bd:55:41:a8:ba:bc:28:75:6e:ad: 40:45:64:51:ac:2f:72:68:88:e2:ea:c3:5a:14:7d: 4b:04:70:5e:90:dc:01:25:17:f3:2c:af:78:8f:de: 02:cf:e4:91:ae:9e:1e:11:bd:19:76:27:eb:f2:1e: e5:63:aa:c6:40:0c:81:34:0d:4e:71:0d:38:ec:e5: d2:f8:97:11:12:4c:08:e1:b5:34:28:f6:49:95:39: e5:a4:03:68:de:2c:69:b3:51:2f:1b:e5:5d:c5:f5: db:9a:1e:6a:c6:d7:66:85:e7:8e:59:13:d8:2e:9d: a5:cc:f9:87:93:f5:3a:9c:47:a0:c5:aa:a8:a5:e4: 8b:01:7c:49:b9:13:89:99:d3:de:06:17:8d:b5:c1: d2:18:e6:3e:46:2b:20:64:61:95:d0:c5:01:77:a2: f6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D0:65:C2:93:9C:3E:A9:42:A9:B4:25:BC:A3:96:B7:33:3D:D4:29 X509v3 Authority Key Identifier: keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:44:03:a7:89:cd:59:48:c1:d8:6c:7a:bd:a5:b4:9a:74:a9: 18:c9:80:14:db:e5:0c:3a:8c:f9:0a:8d:0c:3e:a7:10:45:8b: b7:a1:3b:ce:5f:da:76:1d:a4:2d:b5:5b:1b:2a:59:e2:74:63: 22:24:15:c8:63:eb:45:3d:f6:8d:de:10:4e:a0:71:db:99:ae: 8e:be:86:64:c7:1e:ba:28:5c:e9:bf:07:46:32:bc:f1:00:ad: de:77:95:57:8b:a6:02:ac:40:46:26:f0:a5:b0:30:e7:a2:27: e9:2e:19:27:d1:3f:8d:1b:7c:90:9f:fb:6d:d1:f8:0c:54:f5: ec:05:2f:dc:a7:20:eb:d6:a3:9b:9e:29:cb:8b:b1:aa:da:c5: 91:da:42:67:0b:d8:06:3e:84:2b:89:75:55:75:ca:43:7e:9b: 7e:24:f0:a4:9d:cf:f2:14:fe:67:e0:b5:44:ca:11:72:09:64: 34:02:aa:1b:cd:08:00:47:3e:b3:25:c3:d5:e3:39:06:da:cf: 3c:34:34:b7:57:a2:63:d9:e3:ab:e8:71:0e:20:01:b1:1b:11: 4d:a8:87:c6:d1:3b:20:06:7c:05:50:ef:9a:e8:29:8d:a8:4d: a9:d3:2a:45:8e:79:98:f7:94:f4:d2:7c:2d:7b:18:5c:d3:e6: 34:4a:4d:3c -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUTNQVCjyPnaREFKpAenhINEmMuIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJE QTVBRUI2ODAeFw0yNjExMTUxNTI4MjRaFw0yNjExMTYxNzI5MjRaMDMxMTAvBgNV BAMTKDM4RDA2NUMyOTM5QzNFQTk0MkE5QjQyNUJDQTM5NkI3MzMzREQ0MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNns5BDyD2Vs4vQq8uJ+GPFD3u Y9eG7O6z580fmnOkqvetappir8CQ52oUyPWKaflRipce+RDfBDsTdrWZmsBY3dQH gyhXxsMk1Ef9Aba21Hp5Ur6JuQmM0EXHsHptvVVBqLq8KHVurUBFZFGsL3JoiOLq w1oUfUsEcF6Q3AElF/Msr3iP3gLP5JGunh4RvRl2J+vyHuVjqsZADIE0DU5xDTjs 5dL4lxESTAjhtTQo9kmVOeWkA2jeLGmzUS8b5V3F9duaHmrG12aF545ZE9gunaXM +YeT9TqcR6DFqqil5IsBfEm5E4mZ094GF421wdIY5j5GKyBkYZXQxQF3ovZZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUONBlwpOcPqlCqbQlvKOWtzM91CkwHwYDVR0j BBgwFoAUMYh/Do0X7rTfxzRM5Ihfa9pa62gwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzAvMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS8zMTg4N0YwRThEMTdFRUI0REZDNzM0NENF NDg4NUY2QkRBNUFFQjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzAvMzE4ODdG MEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEZE A6eJzVlIwdhser2ltJp0qRjJgBTb5Qw6jPkKjQw+pxBFi7ehO85f2nYdpC21Wxsq WeJ0YyIkFchj60U99o3eEE6gcduZro6+hmTHHrooXOm/B0YyvPEArd53lVeLpgKs QEYm8KWwMOeiJ+kuGSfRP40bfJCf+23R+AxU9ewFL9ynIOvWo5ueKcuLsaraxZHa QmcL2AY+hCuJdVV1ykN+m34k8KSdz/IU/mfgtUTKEXIJZDQCqhvNCABHPrMlw9Xj OQbazzw0NLdXomPZ46vocQ4gAbEbEU2oh8bROyAGfAVQ75roKY2oTanTKkWOeZj3 lPTSfC17GFzT5jRKTTw= -----END CERTIFICATE-----Generated at Sun Nov 15 22:20:09 2026 by rpki-client