$ rpki-client -vvvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft File: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft (raw, json) Hash identifier: rjomjGH0LJiZDmehoCBooTjYR4cSw8rax7unN4QI2XM= Subject key identifier: 64:6C:D0:0F:DC:45:A2:BA:90:44:6A:34:FC:21:86:FC:28:00:76:90 Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Certificate serial: 2D59070B1CBA23EBE7FE83C885365068A4EF470A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft Manifest number: BF Signing time: Wed 23 Sep 2026 10:32:18 +0000 Manifest this update: Wed 23 Sep 2026 10:27:18 +0000 Manifest next update: Thu 24 Sep 2026 13:42:18 +0000 Files and hashes: 1: 3231312e37392e3130382e302f32332d3234203d3e203331393732.roa (hash: XaWYO4EF8GCnSH9lm/3LpGTaiFlYA9VmdfI3S945iIY=) 2: 3231312e37392e3130382e302f32332d3234203d3e20313332333639.roa (hash: 4OBGIBLB7koiOTORDKBpRQmErNmgCxAih0H1Dz5yNJU=) 3: 3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa (hash: 83VaupmQcP8aGjwKicONhsZqmG/0fmQWoqtdQ72vsQk=) 4: 3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa (hash: /IijmvgF3E5df29RTHQ7h6ytu6VbgcNgJM8iMgAjKe0=) 5: 3231312e37332e3130322e302f32332d3234203d3e203331393732.roa (hash: BZZsk08mUYcwTMTfXfB6TG4Y8hhjasOxijDev40W9UE=) 6: 3230322e3134382e3231322e302f32332d3234203d3e20313332333639.roa (hash: SzGBARnHtav0Ll1lD5uijTPk6wrNJCucq/5lsmn01uE=) 7: 323430363a636534303a3a2f33322d3634203d3e203331393732.roa (hash: BKJtx+GIQaqxKG+F8DcrnUzVLRxDmkAefIfDjo2DHGY=) 8: 3130332e3135392e38382e302f32332d3234203d3e203331393732.roa (hash: uBJCL+hDXsrLzypekl61CYTy6y1oooM7hy7D2SecWcY=) 9: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl (hash: Iz1b97ilnZbJi777pxcufn38Mf2ssgu2CvqkleIAHrg=) 10: 3231312e37332e3130322e302f32332d3234203d3e20313332333639.roa (hash: WHMty9+iXYUNiWSnLw/kN5nrX7uOBPI5Gt9KRhY1qM4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:59:07:0b:1c:ba:23:eb:e7:fe:83:c8:85:36:50:68:a4:ef:47:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Validity Not Before: Sep 23 10:27:18 2026 GMT Not After : Sep 24 13:42:18 2026 GMT Subject: CN=646CD00FDC45A2BA90446A34FC2186FC28007690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c2:5b:01:a4:d7:39:35:df:ab:32:aa:0e:74: 08:6d:95:6c:5e:de:1a:6d:e5:75:37:4f:64:d1:08: 26:c2:ed:2a:ed:42:e4:eb:d2:33:b8:9d:a1:73:03: d0:c8:38:5a:7a:1f:c7:93:f3:60:5e:a8:53:b3:23: 37:de:33:c8:b4:6b:69:de:09:e0:40:71:96:d0:97: 22:83:b6:64:11:46:69:95:25:f3:85:33:4a:ad:fa: 44:7a:23:16:82:8e:8f:d8:bf:c8:71:8d:67:7c:56: 5f:04:32:2e:95:8b:fe:39:e3:7b:e1:9c:e0:85:8e: f7:cd:f8:5a:3f:c7:5d:a5:6a:bd:d7:55:e8:af:52: 53:65:b3:a2:a3:c8:33:0e:93:22:9f:88:87:c9:56: 03:a1:d9:a7:3c:17:37:3e:57:5e:80:f3:74:20:67: 51:a3:be:28:1c:36:ac:f7:eb:be:60:aa:a2:ba:57: 8b:df:fc:b4:3a:e6:5f:51:80:d7:5b:a4:5c:7d:4d: 12:34:a1:61:fb:04:92:2b:6d:a1:9e:2e:a6:e1:a6: cf:23:d7:8e:b8:94:06:07:11:cc:5a:c1:f3:fd:1e: 7d:8d:e5:9c:87:a6:82:3c:6a:b4:13:00:65:e4:26: 50:dc:e5:13:eb:df:71:9e:da:6b:cf:80:6b:0c:a4: 23:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6C:D0:0F:DC:45:A2:BA:90:44:6A:34:FC:21:86:FC:28:00:76:90 X509v3 Authority Key Identifier: keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ff:79:95:62:0a:eb:e8:f7:46:90:f3:22:22:81:f7:d9:23: 52:6e:7f:de:e9:72:cc:95:f5:29:ce:60:78:53:06:f0:2e:04: 1c:cc:f1:9c:0c:fd:19:8b:4c:0d:ca:0d:81:28:f6:e9:8f:af: 92:b8:67:d4:23:6a:94:bd:ca:16:81:8e:35:e4:bf:98:3d:20: bf:bc:f6:78:2d:ab:56:05:74:1c:88:e3:21:db:af:0e:4c:8d: f2:e2:5d:c0:01:76:cd:8e:ee:b0:8d:49:5e:de:9c:9a:e0:c3: dd:d7:00:98:4f:75:8d:83:0e:bc:52:b8:26:16:0e:38:c9:07: a6:69:9e:cc:23:a7:66:55:89:e0:81:45:5f:ca:2f:41:82:3f: 4c:c9:58:77:8d:87:bd:6f:26:f2:73:fc:32:c0:26:df:fe:1b: 09:45:a7:21:b3:71:a5:63:49:02:9f:cc:8b:2a:44:e1:7f:22: c4:69:12:64:4e:8e:f9:42:aa:3f:e8:97:46:54:7f:78:89:81: 4a:3f:f7:b1:44:ce:f9:7f:71:c8:59:88:93:ed:e7:12:59:26: d9:37:64:07:7d:e6:98:90:5d:b3:91:d9:81:d4:c4:ca:c1:bb: 7f:5b:b0:8d:9d:1c:35:c2:08:da:e6:5a:d6:91:bd:72:42:08: c1:ce:48:77 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIULVkHCxy6I+vn/oPIhTZQaKTvRwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJE QTVBRUI2ODAeFw0yNjA5MjMxMDI3MThaFw0yNjA5MjQxMzQyMThaMDMxMTAvBgNV BAMTKDY0NkNEMDBGREM0NUEyQkE5MDQ0NkEzNEZDMjE4NkZDMjgwMDc2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRwlsBpNc5Nd+rMqoOdAhtlWxe 3hpt5XU3T2TRCCbC7SrtQuTr0jO4naFzA9DIOFp6H8eT82BeqFOzIzfeM8i0a2ne CeBAcZbQlyKDtmQRRmmVJfOFM0qt+kR6IxaCjo/Yv8hxjWd8Vl8EMi6Vi/4543vh nOCFjvfN+Fo/x12lar3XVeivUlNls6KjyDMOkyKfiIfJVgOh2ac8Fzc+V16A83Qg Z1GjvigcNqz3675gqqK6V4vf/LQ65l9RgNdbpFx9TRI0oWH7BJIrbaGeLqbhps8j 1464lAYHEcxawfP9Hn2N5ZyHpoI8arQTAGXkJlDc5RPr33Ge2mvPgGsMpCMBAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUZGzQD9xForqQRGo0/CGG/CgAdpAwHwYDVR0j BBgwFoAUMYh/Do0X7rTfxzRM5Ihfa9pa62gwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzAvMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS8zMTg4N0YwRThEMTdFRUI0REZDNzM0NENF NDg4NUY2QkRBNUFFQjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzAvMzE4ODdG MEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF// eZViCuvo90aQ8yIigffZI1Juf97pcsyV9SnOYHhTBvAuBBzM8ZwM/RmLTA3KDYEo 9umPr5K4Z9QjapS9yhaBjjXkv5g9IL+89ngtq1YFdByI4yHbrw5MjfLiXcABds2O 7rCNSV7enJrgw93XAJhPdY2DDrxSuCYWDjjJB6Zpnswjp2ZVieCBRV/KL0GCP0zJ WHeNh71vJvJz/DLAJt/+GwlFpyGzcaVjSQKfzIsqROF/IsRpEmROjvlCqj/ol0ZU f3iJgUo/97FEzvl/cchZiJPt5xJZJtk3ZAd95piQXbOR2YHUxMrBu39bsI2dHDXC CNrmWtaRvXJCCMHOSHc= -----END CERTIFICATE-----Generated at Thu Sep 24 03:42:34 2026 by rpki-client