$ rpki-client -vvvf rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft File: 9CF6ECD13FB5B2029770871AA6E5796104822624.mft (raw, json) Hash identifier: nKLsgcVe2fmx8oxtl91ha39hMw8grjSr16RFIxG80Wk= Subject key identifier: A7:FC:29:BE:3C:2F:CF:B5:64:0B:9C:EA:F6:7C:B4:75:C6:15:3C:32 Authority key identifier: 9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 Certificate issuer: /CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Certificate serial: 493312C83D96AA1A602CA71194419EDE412E0B2B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft Manifest number: 0105 Signing time: Sun 15 Nov 2026 06:11:04 +0000 Manifest this update: Sun 15 Nov 2026 06:06:04 +0000 Manifest next update: Mon 16 Nov 2026 09:38:04 +0000 Files and hashes: 1: 36342e37382e3136302e302f32302d3234203d3e20313332333639.roa (hash: GgXMTkt2H5e9QQpD/IDwW8cfgE25pbmkynI8XBBMpbg=) 2: 9CF6ECD13FB5B2029770871AA6E5796104822624.crl (hash: 0vePB2/IF/9qZDdWfPwVa0LgM9DtyPfbjCVgwU43mRM=) 3: 36342e37382e3136302e302f32302d3234203d3e203331393732.roa (hash: fJ9O2D8T6TBG/ntIcA3JtcHpPY7Bp1wllKnMj7rLb1A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:33:12:c8:3d:96:aa:1a:60:2c:a7:11:94:41:9e:de:41:2e:0b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Validity Not Before: Nov 15 06:06:04 2026 GMT Not After : Nov 16 09:38:04 2026 GMT Subject: CN=A7FC29BE3C2FCFB5640B9CEAF67CB475C6153C32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:48:f5:d9:89:d6:9a:a0:c1:59:a7:9e:21: 76:74:59:f2:5d:6d:45:2c:8d:f8:84:b1:84:86:af: 73:57:e3:b7:ce:0d:04:3f:f4:68:a3:6c:a1:d7:de: 0f:15:0e:8a:a7:d9:ce:47:38:8e:91:2f:70:02:1d: cc:99:87:12:f7:22:f6:a1:78:ed:62:1a:ea:92:ad: e3:d6:54:ea:cb:5d:ba:65:47:29:8d:ea:44:36:26: 40:e0:98:0e:78:8b:ee:1a:9d:f2:77:2f:c8:18:53: ee:50:0e:30:f0:57:a0:55:b9:2f:1d:8b:eb:ba:77: 7f:46:02:a8:a1:86:d0:e5:20:81:57:6d:43:15:a6: a3:3e:89:e4:91:39:37:31:18:99:50:f3:a3:d9:5c: 2e:23:ad:11:2b:6f:82:62:dc:c3:d9:66:c6:54:fe: d5:68:1a:e2:7a:f0:fb:a1:e8:39:c4:63:83:df:90: 58:0f:d9:22:47:65:e2:26:a4:ae:86:3d:89:d1:f2: 7f:dd:f0:e7:68:1b:99:fb:98:95:6e:d6:4d:1f:cd: 69:ff:a4:ef:bf:9d:7e:fe:d2:11:73:07:fb:f8:e9: 96:39:4d:ff:e7:e4:8d:81:9e:ad:cc:5b:24:49:71: fd:c4:75:1c:74:2e:d6:b9:1d:6b:64:b5:4a:3c:37: b1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FC:29:BE:3C:2F:CF:B5:64:0B:9C:EA:F6:7C:B4:75:C6:15:3C:32 X509v3 Authority Key Identifier: keyid:9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:02:26:94:fc:4a:fb:e8:8d:07:09:fc:5b:b2:dd:95:62:e7: 46:39:ed:cc:3e:63:88:23:ec:56:9a:93:d1:04:c1:4d:fd:95: 7d:10:ee:2d:64:59:f4:a1:5f:f3:06:12:ae:a6:5d:e1:23:47: 9f:18:2f:fb:0b:3a:63:a4:cd:dc:ad:a2:1a:3f:1c:d7:27:3f: 04:82:3b:8c:80:14:4e:cb:b5:5c:93:e1:89:f8:97:80:f9:fd: c8:fb:53:02:3c:a2:bb:1b:b4:90:ac:ca:89:44:95:a2:f7:e3: c8:80:50:36:3c:3f:73:50:6f:cd:59:65:e1:9a:e2:d2:02:d3: 2e:74:93:c2:a9:72:cd:46:9f:08:b2:32:08:f7:98:f9:bd:68: 09:a7:b7:dc:1f:41:bd:2d:07:7f:4b:fd:92:44:29:eb:df:ee: aa:d1:6b:97:d9:b5:e4:96:93:ad:f0:3c:59:b4:38:61:64:97: 70:c4:69:71:be:f3:c3:6b:c0:c1:d7:34:57:ec:cd:e2:78:1e: 48:00:fe:92:9c:70:e6:3a:66:37:45:a2:86:d1:11:2b:43:9b: a5:ae:1c:55:e4:3d:3d:c9:5e:04:c3:a1:22:85:8e:fb:89:b2: 4c:4b:c0:32:b2:c7:a1:df:f6:aa:de:79:84:83:42:1f:56:7e: e0:78:ef:6b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUSTMSyD2WqhpgLKcRlEGe3kEuCyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEw NDgyMjYyNDAeFw0yNjExMTUwNjA2MDRaFw0yNjExMTYwOTM4MDRaMDMxMTAvBgNV BAMTKEE3RkMyOUJFM0MyRkNGQjU2NDBCOUNFQUY2N0NCNDc1QzYxNTNDMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ykj12YnWmqDBWaeeIXZ0WfJd bUUsjfiEsYSGr3NX47fODQQ/9GijbKHX3g8VDoqn2c5HOI6RL3ACHcyZhxL3Ivah eO1iGuqSrePWVOrLXbplRymN6kQ2JkDgmA54i+4anfJ3L8gYU+5QDjDwV6BVuS8d i+u6d39GAqihhtDlIIFXbUMVpqM+ieSROTcxGJlQ86PZXC4jrRErb4Ji3MPZZsZU /tVoGuJ68Puh6DnEY4PfkFgP2SJHZeImpK6GPYnR8n/d8OdoG5n7mJVu1k0fzWn/ pO+/nX7+0hFzB/v46ZY5Tf/n5I2Bnq3MWyRJcf3EdRx0Lta5HWtktUo8N7FpAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUp/wpvjwvz7VkC5zq9ny0dcYVPDIwHwYDVR0j BBgwFoAUnPbs0T+1sgKXcIcapuV5YQSCJiQwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzEvOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC85Q0Y2RUNEMTNGQjVCMjAyOTc3MDg3MUFB NkU1Nzk2MTA0ODIyNjI0LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzEvOUNGNkVD RDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALcC JpT8SvvojQcJ/Fuy3ZVi50Y57cw+Y4gj7Faak9EEwU39lX0Q7i1kWfShX/MGEq6m XeEjR58YL/sLOmOkzdytoho/HNcnPwSCO4yAFE7LtVyT4Yn4l4D5/cj7UwI8orsb tJCsyolElaL348iAUDY8P3NQb81ZZeGa4tIC0y50k8Kpcs1GnwiyMgj3mPm9aAmn t9wfQb0tB39L/ZJEKevf7qrRa5fZteSWk63wPFm0OGFkl3DEaXG+88NrwMHXNFfs zeJ4HkgA/pKccOY6ZjdFoobREStDm6WuHFXkPT3JXgTDoSKFjvuJskxLwDKyx6Hf 9qreeYSDQh9WfuB472s= -----END CERTIFICATE-----Generated at Sun Nov 15 21:18:24 2026 by rpki-client