$ rpki-client -vvf rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft File: 9CF6ECD13FB5B2029770871AA6E5796104822624.mft (raw, json) Hash identifier: hrw8hXTVMpCWNgesGE04y/qpY4NbfnSqkMSVkS3yjDM= Subject key identifier: C2:D5:80:EA:65:CC:7D:11:74:6D:B7:A3:EF:D7:E9:D4:58:AC:77:1A Authority key identifier: 9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 Certificate issuer: /CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Certificate serial: 0A26DA4C85E543B26913770385E26D7F579EC2B3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft Manifest number: 6B Signing time: Fri 24 Jul 2026 00:07:04 +0000 Manifest this update: Fri 24 Jul 2026 00:02:04 +0000 Manifest next update: Sat 25 Jul 2026 00:28:04 +0000 Files and hashes: 1: 36342e37382e3136302e302f32302d3234203d3e20313332333639.roa (hash: GgXMTkt2H5e9QQpD/IDwW8cfgE25pbmkynI8XBBMpbg=) 2: 9CF6ECD13FB5B2029770871AA6E5796104822624.crl (hash: USudmDvENrFVSOWk0nQ+haAjTFmsrRHGvaoM2iTcFA8=) 3: 36342e37382e3136302e302f32302d3234203d3e203331393732.roa (hash: fJ9O2D8T6TBG/ntIcA3JtcHpPY7Bp1wllKnMj7rLb1A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:26:da:4c:85:e5:43:b2:69:13:77:03:85:e2:6d:7f:57:9e:c2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Validity Not Before: Jul 24 00:02:04 2026 GMT Not After : Jul 25 00:28:04 2026 GMT Subject: CN=C2D580EA65CC7D11746DB7A3EFD7E9D458AC771A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5e:dc:f8:f5:d8:ed:4a:84:79:57:2b:65:1a: ae:2e:c8:14:6a:e3:7a:fb:22:83:93:5b:1c:f5:2b: 28:fe:e9:47:48:06:48:eb:65:4b:b0:42:a2:ca:d8: 5e:1a:f2:a8:03:98:5a:4e:3e:5c:6f:5b:24:45:b7: de:65:fe:d8:55:0e:09:68:dc:c8:9c:49:49:c9:f7: d0:60:61:db:0b:ac:f1:77:06:d9:40:17:f8:30:69: 7d:ac:4c:ac:68:0d:7f:c9:82:8b:0f:27:29:10:ac: 3f:28:9f:c6:d3:49:eb:cd:e4:33:ec:a9:3e:2f:84: 57:e5:27:da:78:f0:f4:9a:5f:8c:c8:9e:d0:ce:4f: 77:47:77:e8:6e:57:19:38:ff:8f:e4:76:ad:a3:ec: 4e:92:57:a0:96:c4:e4:97:42:18:d6:a9:c2:16:99: 6e:31:d9:3c:cc:ff:c4:9b:65:59:88:71:90:ac:1d: b8:d5:db:0e:d8:b6:be:f3:25:d4:30:81:0c:52:3e: a8:4f:90:ed:dc:32:cd:90:b8:19:6e:2f:e4:e2:79: 35:9b:33:6d:5c:7b:0d:7a:29:f2:66:ef:45:f0:af: be:58:9e:1b:4d:1a:eb:96:22:49:f4:c5:ca:ea:e0: 67:5d:fc:82:45:8f:ff:07:ed:34:be:84:8f:11:8e: 5d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D5:80:EA:65:CC:7D:11:74:6D:B7:A3:EF:D7:E9:D4:58:AC:77:1A X509v3 Authority Key Identifier: keyid:9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:31:b5:36:d9:1a:86:a1:d9:54:6d:f7:2c:a8:45:f4:91:b6: 65:ea:95:4b:5c:ef:4c:47:9d:19:e9:50:d4:62:37:ca:40:b0: 39:86:b4:c6:55:4c:76:4e:94:7c:9f:a2:9a:64:cd:db:63:1d: ad:9b:8d:ee:d4:36:2a:31:3d:22:0e:1d:49:b6:ce:96:fa:41: d1:0d:07:aa:9a:69:23:98:56:8f:86:33:d0:fd:7e:57:c7:1e: a1:1b:9f:be:de:ee:2e:2c:f5:9b:b2:9d:42:72:f9:66:64:20: e5:94:73:7d:fc:a2:f8:d9:b0:d9:f8:9c:98:73:02:76:3c:1a: 5b:36:f8:3a:a1:0e:e4:c4:b0:15:9f:b0:04:1f:73:a7:c5:54: fa:bc:a0:b7:6c:eb:83:be:10:bd:b2:d4:67:2f:13:fe:b1:8f: 0c:47:9e:29:4b:36:84:7d:18:f7:9a:5f:c9:56:1b:8d:96:24: 08:70:1d:7b:b1:ec:a7:bd:1e:18:92:8f:77:7d:e7:ad:dc:29: b9:c3:3f:13:c5:6e:1b:3a:81:92:3d:4c:0a:c8:7f:f4:1d:cd: 6e:17:1d:6e:27:b3:22:c5:b7:92:88:b4:24:f1:4c:21:19:39: b9:e9:a9:83:2e:29:c2:55:3e:db:ce:3b:a3:11:c7:ca:ee:e9: 9e:3e:15:91 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUCibaTIXlQ7JpE3cDheJtf1eewrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEw NDgyMjYyNDAeFw0yNjA3MjQwMDAyMDRaFw0yNjA3MjUwMDI4MDRaMDMxMTAvBgNV BAMTKEMyRDU4MEVBNjVDQzdEMTE3NDZEQjdBM0VGRDdFOUQ0NThBQzc3MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlXtz49djtSoR5VytlGq4uyBRq 43r7IoOTWxz1Kyj+6UdIBkjrZUuwQqLK2F4a8qgDmFpOPlxvWyRFt95l/thVDglo 3MicSUnJ99BgYdsLrPF3BtlAF/gwaX2sTKxoDX/JgosPJykQrD8on8bTSevN5DPs qT4vhFflJ9p48PSaX4zIntDOT3dHd+huVxk4/4/kdq2j7E6SV6CWxOSXQhjWqcIW mW4x2TzM/8SbZVmIcZCsHbjV2w7Ytr7zJdQwgQxSPqhPkO3cMs2QuBluL+TieTWb M21cew16KfJm70Xwr75YnhtNGuuWIkn0xcrq4Gdd/IJFj/8H7TS+hI8Rjl1ZAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUwtWA6mXMfRF0bbej79fp1FisdxowHwYDVR0j BBgwFoAUnPbs0T+1sgKXcIcapuV5YQSCJiQwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzEvOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC85Q0Y2RUNEMTNGQjVCMjAyOTc3MDg3MUFB NkU1Nzk2MTA0ODIyNjI0LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzEvOUNGNkVD RDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADEx tTbZGoah2VRt9yyoRfSRtmXqlUtc70xHnRnpUNRiN8pAsDmGtMZVTHZOlHyfoppk zdtjHa2bje7UNioxPSIOHUm2zpb6QdENB6qaaSOYVo+GM9D9flfHHqEbn77e7i4s 9ZuynUJy+WZkIOWUc338ovjZsNn4nJhzAnY8Gls2+DqhDuTEsBWfsAQfc6fFVPq8 oLds64O+EL2y1GcvE/6xjwxHnilLNoR9GPeaX8lWG42WJAhwHXux7Ke9HhiSj3d9 563cKbnDPxPFbhs6gZI9TArIf/QdzW4XHW4nsyLFt5KItCTxTCEZObnpqYMuKcJV PtvOO6MRx8ru6Z4+FZE= -----END CERTIFICATE-----Generated at Fri Jul 24 16:54:48 2026 by rpki-client