$ rpki-client -vvvf rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft File: 9CF6ECD13FB5B2029770871AA6E5796104822624.mft (raw, json) Hash identifier: dcXVBYnfGc4zZ39kR67qGVATtNUqJRoB7V//5FC07uA= Subject key identifier: E4:A5:E2:19:7F:CB:74:52:BD:73:0E:EE:D6:1C:32:DF:8C:B4:DF:3F Authority key identifier: 9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 Certificate issuer: /CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Certificate serial: 33FF990FEFD0CB253024D4429FDDE7FBC3F0EE14 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject info access: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 11:42:54 +0000 Manifest this update: Fri 25 Sep 2026 11:37:54 +0000 Manifest next update: Sat 26 Sep 2026 12:27:54 +0000 Files and hashes: 1: 36342e37382e3136302e302f32302d3234203d3e20313332333639.roa (hash: GgXMTkt2H5e9QQpD/IDwW8cfgE25pbmkynI8XBBMpbg=) 2: 9CF6ECD13FB5B2029770871AA6E5796104822624.crl (hash: 80hndgaJqEwIX+6iLfvdNq31MZiCiyVztwyGqMYBEXY=) 3: 36342e37382e3136302e302f32302d3234203d3e203331393732.roa (hash: fJ9O2D8T6TBG/ntIcA3JtcHpPY7Bp1wllKnMj7rLb1A=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 11:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ff:99:0f:ef:d0:cb:25:30:24:d4:42:9f:dd:e7:fb:c3:f0:ee:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CF6ECD13FB5B2029770871AA6E5796104822624 Validity Not Before: Sep 25 11:37:54 2026 GMT Not After : Sep 26 12:27:54 2026 GMT Subject: CN=E4A5E2197FCB7452BD730EEED61C32DF8CB4DF3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:a3:05:c7:5e:ed:8c:a1:c7:8c:7c:b1:ab: 26:b7:fa:76:99:fe:3f:ab:27:17:52:a1:2a:1e:e1: 6b:82:e0:c7:ed:36:f6:09:1b:5b:b4:53:af:44:5f: 5c:02:d3:6b:95:d3:3e:e2:0c:a4:5c:c8:57:34:d3: 6f:fb:a3:21:08:ec:e0:dc:28:50:92:15:2a:d0:7b: 98:0d:b7:e9:6a:e4:64:49:33:fa:c1:37:b8:4a:04: 03:41:8b:91:d2:db:27:ce:f7:e9:5a:9d:1b:0a:ff: f5:a7:ac:ed:6f:ff:cc:4b:9e:83:11:94:0a:b2:b9: 80:00:de:67:6c:0e:f2:c4:f7:3c:fe:8d:54:aa:ea: 3b:9b:53:fc:43:92:55:17:44:62:55:51:98:c7:32: 72:4a:54:72:d1:ce:c4:1c:bc:d8:7d:27:81:9e:53: db:0b:be:ee:67:ba:46:81:78:95:6a:c5:80:05:2c: 08:f0:c2:77:42:d4:ad:16:c5:07:2d:ce:3a:2d:d3: c2:6b:b0:49:21:af:05:f7:c6:5d:d8:ba:39:fe:ec: c0:d6:5f:e6:b7:21:33:f4:08:c3:60:90:ac:fd:20: 0e:ff:aa:fa:24:0c:b7:96:8f:5f:d0:32:ab:11:a0: 86:90:bf:81:85:b2:b2:50:68:ab:63:55:fe:57:17: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A5:E2:19:7F:CB:74:52:BD:73:0E:EE:D6:1C:32:DF:8C:B4:DF:3F X509v3 Authority Key Identifier: keyid:9C:F6:EC:D1:3F:B5:B2:02:97:70:87:1A:A6:E5:79:61:04:82:26:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/9CF6ECD13FB5B2029770871AA6E5796104822624.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/NIMBUSCOM/1/9CF6ECD13FB5B2029770871AA6E5796104822624.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:06:24:c9:36:66:c3:07:01:31:1f:cd:10:ec:e8:51:cd:3d: c6:f7:61:b5:64:94:2b:79:cb:41:6b:e2:9b:1d:e5:bb:da:f6: c6:b7:5f:af:db:02:e0:7f:6f:06:80:29:5c:b3:ed:12:37:f7: 8d:d8:6a:5b:60:0f:30:da:da:fe:26:3b:cd:22:04:8c:c3:ef: 69:52:44:9b:c2:60:d1:7a:4d:76:e3:aa:98:c4:9d:09:f2:d8: 2a:fd:9c:17:14:3b:fa:b6:ef:08:33:49:3b:bd:4d:a1:f7:41: 13:81:2f:b6:f3:1a:9c:7d:a3:a4:d2:f4:79:d8:16:e0:a2:f8: d3:f0:bd:64:98:e8:6a:d8:1d:f4:98:ee:a5:79:3d:15:19:2c: af:c1:dc:32:da:a6:90:4d:25:49:eb:f5:46:24:0e:19:2c:ae: 36:25:5e:2c:da:28:f2:1c:28:cd:83:b3:12:03:de:55:02:1d: 15:a1:70:ab:3d:78:65:f2:27:95:e9:85:6b:8c:46:91:44:7d: 8e:05:f5:e6:8f:e6:63:f2:3d:4b:f4:8f:11:b9:93:62:7f:03: 3d:30:ad:ce:de:76:2a:27:f4:a1:88:f6:6b:82:71:04:64:e0: ea:1e:de:b5:05:b6:9e:13:63:da:71:b0:56:df:4c:44:3f:db: 66:ff:04:3a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUM/+ZD+/QyyUwJNRCn93n+8Pw7hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEw NDgyMjYyNDAeFw0yNjA5MjUxMTM3NTRaFw0yNjA5MjYxMjI3NTRaMDMxMTAvBgNV BAMTKEU0QTVFMjE5N0ZDQjc0NTJCRDczMEVFRUQ2MUMzMkRGOENCNERGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gqMFx17tjKHHjHyxqya3+naZ /j+rJxdSoSoe4WuC4MftNvYJG1u0U69EX1wC02uV0z7iDKRcyFc002/7oyEI7ODc KFCSFSrQe5gNt+lq5GRJM/rBN7hKBANBi5HS2yfO9+lanRsK//WnrO1v/8xLnoMR lAqyuYAA3mdsDvLE9zz+jVSq6jubU/xDklUXRGJVUZjHMnJKVHLRzsQcvNh9J4Ge U9sLvu5nukaBeJVqxYAFLAjwwndC1K0WxQctzjot08JrsEkhrwX3xl3Yujn+7MDW X+a3ITP0CMNgkKz9IA7/qvokDLeWj1/QMqsRoIaQv4GFsrJQaKtjVf5XF5DVAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU5KXiGX/LdFK9cw7u1hwy34y03z8wHwYDVR0j BBgwFoAUnPbs0T+1sgKXcIcapuV5YQSCJiQwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVT Q09NLzEvOUNGNkVDRDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMC85Q0Y2RUNEMTNGQjVCMjAyOTc3MDg3MUFB NkU1Nzk2MTA0ODIyNjI0LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTklNQlVTQ09NLzEvOUNGNkVD RDEzRkI1QjIwMjk3NzA4NzFBQTZFNTc5NjEwNDgyMjYyNC5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGkG JMk2ZsMHATEfzRDs6FHNPcb3YbVklCt5y0Fr4psd5bva9sa3X6/bAuB/bwaAKVyz 7RI3943YaltgDzDa2v4mO80iBIzD72lSRJvCYNF6TXbjqpjEnQny2Cr9nBcUO/q2 7wgzSTu9TaH3QROBL7bzGpx9o6TS9HnYFuCi+NPwvWSY6GrYHfSY7qV5PRUZLK/B 3DLappBNJUnr9UYkDhksrjYlXizaKPIcKM2DsxID3lUCHRWhcKs9eGXyJ5XphWuM RpFEfY4F9eaP5mPyPUv0jxG5k2J/Az0wrc7edion9KGI9muCcQRk4Ooe3rUFtp4T Y9pxsFbfTEQ/22b/BDo= -----END CERTIFICATE-----Generated at Sat Sep 26 04:10:03 2026 by rpki-client