$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft File: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft (raw, json) Hash identifier: Mdd5DXR0MZxIR/LpllH8Zzpy23s/IUo24SoNE+qRm1I= Subject key identifier: 19:28:A1:6E:21:3C:71:CD:A3:D3:70:AC:91:5F:BE:16:99:F9:B1:C2 Authority key identifier: 31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 Certificate issuer: /CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Certificate serial: 40647F5EA70488295BDEADC961F63A2A841254E8 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft Manifest number: 6A Signing time: Thu 23 Jul 2026 16:03:11 +0000 Manifest this update: Thu 23 Jul 2026 15:58:11 +0000 Manifest next update: Fri 24 Jul 2026 17:45:11 +0000 Files and hashes: 1: 3130332e3135392e38382e302f32332d3234203d3e203331393732.roa (hash: uBJCL+hDXsrLzypekl61CYTy6y1oooM7hy7D2SecWcY=) 2: 3230322e3134382e3231322e302f32332d3234203d3e203331393732.roa (hash: /IijmvgF3E5df29RTHQ7h6ytu6VbgcNgJM8iMgAjKe0=) 3: 31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl (hash: 5beASz/lRlfTxV+LCRrfAgJpfBJL9r1pKRibDZzKXW4=) 4: 3231312e37392e3130382e302f32332d3234203d3e20313332333639.roa (hash: 4OBGIBLB7koiOTORDKBpRQmErNmgCxAih0H1Dz5yNJU=) 5: 3130332e3135392e38382e302f32332d3234203d3e20313332333639.roa (hash: 83VaupmQcP8aGjwKicONhsZqmG/0fmQWoqtdQ72vsQk=) 6: 323430363a636534303a3a2f33322d3634203d3e203331393732.roa (hash: BKJtx+GIQaqxKG+F8DcrnUzVLRxDmkAefIfDjo2DHGY=) 7: 3231312e37392e3130382e302f32332d3234203d3e203331393732.roa (hash: XaWYO4EF8GCnSH9lm/3LpGTaiFlYA9VmdfI3S945iIY=) 8: 3230322e3134382e3231322e302f32332d3234203d3e20313332333639.roa (hash: SzGBARnHtav0Ll1lD5uijTPk6wrNJCucq/5lsmn01uE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:45:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:64:7f:5e:a7:04:88:29:5b:de:ad:c9:61:f6:3a:2a:84:12:54:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68 Validity Not Before: Jul 23 15:58:11 2026 GMT Not After : Jul 24 17:45:11 2026 GMT Subject: CN=1928A16E213C71CDA3D370AC915FBE1699F9B1C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:58:ca:36:75:3c:69:2c:7d:6e:4a:d4:f4: c4:52:e1:11:21:9a:f3:e4:95:d4:e2:6a:2f:1c:f9: f5:80:25:37:ea:51:89:ff:d4:38:31:29:69:18:81: db:e4:e4:fc:77:db:7f:b6:5d:40:5d:d1:0f:b9:af: 9a:70:2f:6f:f2:65:73:ce:39:1d:e0:80:67:1b:9a: 05:15:97:34:8f:1c:3b:35:31:97:ad:a8:6b:4c:e5: 79:78:78:e7:5a:dd:8d:11:bc:f6:6c:f5:4d:a5:61: 16:d1:56:67:48:16:98:45:37:45:28:65:eb:18:82: b9:19:20:64:4b:c5:5e:03:e7:f1:0a:f4:69:fe:8a: 64:07:7a:13:dd:97:e0:3c:32:f5:fe:3f:8b:0b:a9: af:e9:e5:47:b0:55:5e:5a:3b:ad:53:62:80:b0:d1: 94:76:9e:3e:20:ca:77:f8:ad:7d:df:df:cb:bd:45: 5a:af:89:1c:35:27:66:2a:44:ca:23:35:16:7c:6c: 6c:0a:d6:1a:3a:b4:08:04:f3:b5:f4:e4:65:bb:1f: 53:d9:3f:5f:ed:07:87:fe:6b:e2:78:84:0d:de:09: c9:a1:de:99:64:68:34:90:35:33:ed:1c:c8:71:0d: a2:e9:6f:7e:25:42:81:80:06:23:b8:02:ba:95:77: f2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:28:A1:6E:21:3C:71:CD:A3:D3:70:AC:91:5F:BE:16:99:F9:B1:C2 X509v3 Authority Key Identifier: keyid:31:88:7F:0E:8D:17:EE:B4:DF:C7:34:4C:E4:88:5F:6B:DA:5A:EB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/0/31887F0E8D17EEB4DFC7344CE4885F6BDA5AEB68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5b:1d:9f:b5:62:62:9d:ff:de:d8:e7:11:52:02:f7:be:4e: 1a:4a:30:92:7c:94:92:2c:07:c9:cc:00:03:6a:e0:f0:93:f0: bc:af:15:2b:cd:51:90:36:e0:e5:a3:98:d5:bd:8f:02:5f:6e: 6f:1f:e1:79:da:5c:6c:58:8c:91:7e:b6:ac:d7:0a:ca:dd:34: ab:c1:f0:5b:b3:cc:b0:0d:83:d4:a8:2f:8b:23:3c:c1:a5:12: 02:9a:c7:cc:0a:46:ac:44:17:f9:e8:19:03:d4:10:5d:55:a7: a5:a5:59:e3:d8:48:d4:f4:c6:e4:1e:20:1d:85:5d:57:40:65: 57:44:f6:d1:d0:4c:34:4d:ee:af:60:e4:0a:ef:e6:d3:b2:31: b1:5c:73:ac:ca:19:c6:dc:99:f9:7f:99:e6:3b:d0:9a:2f:77: 66:99:b3:f5:2e:5c:13:3c:9f:d6:e6:a7:6a:3d:1f:31:b0:f2: b8:5d:14:da:e0:5a:5c:a8:da:07:b9:b3:77:de:05:ed:11:0c: b0:46:b0:6f:27:be:ac:32:1c:c0:0f:29:95:eb:39:a8:46:a5: 5b:23:5b:fc:a1:32:18:a5:16:3e:35:2f:1a:cc:32:c8:91:20: 99:2a:6d:b4:97:ef:32:3b:03:f1:5c:b1:d0:c1:e5:aa:38:a3: 00:e2:a0:74 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUQGR/XqcEiClb3q3JYfY6KoQSVOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJE QTVBRUI2ODAeFw0yNjA3MjMxNTU4MTFaFw0yNjA3MjQxNzQ1MTFaMDMxMTAvBgNV BAMTKDE5MjhBMTZFMjEzQzcxQ0RBM0QzNzBBQzkxNUZCRTE2OTlGOUIxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMljKNnU8aSx9bkrU9MRS4REh mvPkldTiai8c+fWAJTfqUYn/1DgxKWkYgdvk5Px323+2XUBd0Q+5r5pwL2/yZXPO OR3ggGcbmgUVlzSPHDs1MZetqGtM5Xl4eOda3Y0RvPZs9U2lYRbRVmdIFphFN0Uo ZesYgrkZIGRLxV4D5/EK9Gn+imQHehPdl+A8MvX+P4sLqa/p5UewVV5aO61TYoCw 0ZR2nj4gynf4rX3f38u9RVqviRw1J2YqRMojNRZ8bGwK1ho6tAgE87X05GW7H1PZ P1/tB4f+a+J4hA3eCcmh3plkaDSQNTPtHMhxDaLpb34lQoGABiO4ArqVd/LvAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUGSihbiE8cc2j03CskV++Fpn5scIwHwYDVR0j BBgwFoAUMYh/Do0X7rTfxzRM5Ihfa9pa62gwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzAvMzE4ODdGMEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS8zMTg4N0YwRThEMTdFRUI0REZDNzM0NENF NDg4NUY2QkRBNUFFQjY4LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzAvMzE4ODdG MEU4RDE3RUVCNERGQzczNDRDRTQ4ODVGNkJEQTVBRUI2OC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG5b HZ+1YmKd/97Y5xFSAve+ThpKMJJ8lJIsB8nMAANq4PCT8LyvFSvNUZA24OWjmNW9 jwJfbm8f4XnaXGxYjJF+tqzXCsrdNKvB8FuzzLANg9SoL4sjPMGlEgKax8wKRqxE F/noGQPUEF1Vp6WlWePYSNT0xuQeIB2FXVdAZVdE9tHQTDRN7q9g5Arv5tOyMbFc c6zKGcbcmfl/meY70Jovd2aZs/UuXBM8n9bmp2o9HzGw8rhdFNrgWlyo2ge5s3fe Be0RDLBGsG8nvqwyHMAPKZXrOahGpVsjW/yhMhilFj41LxrMMsiRIJkqbbSX7zI7 A/FcsdDB5ao4owDioHQ= -----END CERTIFICATE-----Generated at Fri Jul 24 08:37:48 2026 by rpki-client