$ rpki-client -vvvf rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft File: 43A480538BE8801E606CB416A45E3AA47153C1FC.mft (raw, json) Hash identifier: EfMLonjzxXzFLa56hpV52zzPNorWIK0j1b9MTYg7zWg= Subject key identifier: 14:40:F5:B0:76:B9:AD:4F:8C:B8:AF:F0:32:70:3F:85:87:CC:BC:1D Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC Certificate issuer: /CN=43A480538BE8801E606CB416A45E3AA47153C1FC Certificate serial: 1186C69CE5B738EBDCD3FB97F2B9B9C2F3C53839 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft Manifest number: BA Signing time: Wed 23 Sep 2026 17:51:58 +0000 Manifest this update: Wed 23 Sep 2026 17:46:58 +0000 Manifest next update: Thu 24 Sep 2026 20:15:58 +0000 Files and hashes: 1: 3136352e3130312e3135332e302f32342d3234203d3e20313438393936.roa (hash: MdC/snBV9hQ+u+QY6j955XOCyB5J4gj5q3588sOilYM=) 2: 43A480538BE8801E606CB416A45E3AA47153C1FC.crl (hash: XJ/23LV0OYke8pe/V0q1Kx11lUUiUFn4IQ0Oz9D9yOE=) 3: 3136352e3130312e3135322e302f32342d3234203d3e20323133363037.roa (hash: sHCfIkF9qzIZq8AMwpW+WlyC30zePIr9BmIEP0fn7Y4=) 4: 3136352e3130312e3135322e302f32342d3234203d3e203338383534.roa (hash: U6Zr4HOjD89KuZO9y/utkpWh1ptd3yWY7OAdCYNAdtg=) 5: 3136352e3130312e3135322e302f32332d3234203d3e20313334383233.roa (hash: kxyxCW3V2gaGnnDYD9cbiTDaL6NE6NvCZZRwhoM7WZw=) 6: 3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa (hash: enUvdWAkv3wr02fiLz/3E6iu4tuKeGmnlUzXDsJesQk=) 7: 3136352e3130312e3135332e302f32342d3234203d3e203338383534.roa (hash: ZX435W6mSiU5YOUHhDiSylk5PHASkUUAzDgfNQHjX3k=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:86:c6:9c:e5:b7:38:eb:dc:d3:fb:97:f2:b9:b9:c2:f3:c5:38:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC Validity Not Before: Sep 23 17:46:58 2026 GMT Not After : Sep 24 20:15:58 2026 GMT Subject: CN=1440F5B076B9AD4F8CB8AFF032703F8587CCBC1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:72:6d:c9:69:5a:fd:0e:71:e7:3e:98:00:89: ea:63:31:1e:e6:ef:55:5c:44:86:54:9e:67:74:4a: 37:70:f1:a6:97:e9:a9:d9:d8:73:bc:c8:28:11:80: 51:65:66:2b:49:5c:be:bf:f3:6b:37:3f:af:6e:bb: 23:2d:90:09:ae:ee:cb:e0:d3:eb:b2:ba:42:70:45: c9:bc:9e:47:d5:65:27:89:f0:a1:b3:3e:bf:9e:3e: bc:6d:db:0b:8e:0f:2d:90:0a:00:99:99:9c:f6:a6: d2:53:6e:8d:cf:ef:de:22:f3:4a:16:76:61:c8:aa: 60:ce:81:80:61:73:9c:29:46:71:ba:cc:c0:2e:85: ef:4e:4c:e7:5f:30:53:2c:9e:05:5d:6e:aa:43:d8: 11:ca:f7:67:6d:8a:f6:1e:fc:c4:76:c5:1b:e0:eb: db:15:58:1c:7b:01:c0:68:63:19:3b:3f:b4:cf:81: 6a:31:4e:b8:23:90:5b:fa:24:14:b2:5d:0e:b5:ee: bd:b4:a6:76:45:5d:b2:9a:4b:f5:87:e5:0d:f3:57: b4:ba:6b:ed:9a:ac:e1:bb:db:b2:6e:f6:fd:7d:2a: 4f:ca:dc:83:1e:bd:a8:6a:84:a6:7e:c7:d5:c4:81: 08:ec:9f:c8:70:52:8a:28:eb:8a:48:f6:10:aa:a6: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:40:F5:B0:76:B9:AD:4F:8C:B8:AF:F0:32:70:3F:85:87:CC:BC:1D X509v3 Authority Key Identifier: keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:25:0b:a4:ac:04:fa:40:de:93:eb:fb:99:df:51:df:8f:b8: 40:18:0b:13:e8:f7:38:0e:43:0a:e0:08:f0:9c:ef:43:81:04: 4a:ea:a5:a0:37:39:b1:67:ca:3f:2b:c0:04:14:5a:44:f3:f4: db:97:c6:b2:5d:bb:35:2a:7d:4d:5b:ec:82:a5:46:94:ac:c8: a5:55:36:8e:41:11:61:74:65:6b:c8:64:88:3a:54:6b:a2:f9: 55:6c:c9:6a:2e:e7:cd:18:b4:aa:82:f7:56:92:cd:65:e1:b4: 3e:a9:40:77:26:97:64:0b:34:2d:08:e7:b2:ab:00:57:73:fe: f4:45:ce:7d:83:0f:5e:70:de:c0:0a:b1:f9:65:f2:14:ee:30: e2:76:0c:36:28:b3:2b:5f:39:ac:c6:fd:8d:4d:c4:b0:0f:be: 41:32:c2:46:c2:08:0b:c6:b3:1f:3c:5d:43:4b:fa:b9:44:4f: 3e:c4:73:34:1e:8d:14:e7:90:cb:b6:ab:27:81:5a:b1:22:0d: ee:ac:06:1c:b2:50:57:38:29:ab:de:53:57:72:3e:67:f0:01: 2c:22:94:90:e2:36:73:f2:42:5c:ee:ec:87:c1:c4:35:0d:0a: 51:ac:4e:5b:3f:cd:ea:b0:2b:86:23:7c:e6:e4:af:e6:a1:fe: fa:e1:5d:1e -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUEYbGnOW3OOvc0/uX8rm5wvPFODkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBNDgwNTM4QkU4ODAxRTYwNkNCNDE2QTQ1RTNBQTQ3 MTUzQzFGQzAeFw0yNjA5MjMxNzQ2NThaFw0yNjA5MjQyMDE1NThaMDMxMTAvBgNV BAMTKDE0NDBGNUIwNzZCOUFENEY4Q0I4QUZGMDMyNzAzRjg1ODdDQ0JDMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTcm3JaVr9DnHnPpgAiepjMR7m 71VcRIZUnmd0Sjdw8aaX6anZ2HO8yCgRgFFlZitJXL6/82s3P69uuyMtkAmu7svg 0+uyukJwRcm8nkfVZSeJ8KGzPr+ePrxt2wuODy2QCgCZmZz2ptJTbo3P794i80oW dmHIqmDOgYBhc5wpRnG6zMAuhe9OTOdfMFMsngVdbqpD2BHK92dtivYe/MR2xRvg 69sVWBx7AcBoYxk7P7TPgWoxTrgjkFv6JBSyXQ617r20pnZFXbKaS/WH5Q3zV7S6 a+2arOG727Ju9v19Kk/K3IMevahqhKZ+x9XEgQjsn8hwUooo64pI9hCqphv5AgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUFED1sHa5rU+MuK/wMnA/hYfMvB0wHwYDVR0j BBgwFoAUQ6SAU4vogB5gbLQWpF46pHFTwfwwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT T04vMS80M0E0ODA1MzhCRTg4MDFFNjA2Q0I0MTZBNDVFM0FBNDcxNTNDMUZDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzQzQTQ4MDUzOEJFODgwMUU2MDZDQjQxNkE0 NUUzQUE0NzE1M0MxRkMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HQU1CRVNPTi8xLzQzQTQ4MDUz OEJFODgwMUU2MDZDQjQxNkE0NUUzQUE0NzE1M0MxRkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC9JQuk rAT6QN6T6/uZ31Hfj7hAGAsT6Pc4DkMK4AjwnO9DgQRK6qWgNzmxZ8o/K8AEFFpE 8/Tbl8ayXbs1Kn1NW+yCpUaUrMilVTaOQRFhdGVryGSIOlRrovlVbMlqLufNGLSq gvdWks1l4bQ+qUB3JpdkCzQtCOeyqwBXc/70Rc59gw9ecN7ACrH5ZfIU7jDidgw2 KLMrXzmsxv2NTcSwD75BMsJGwggLxrMfPF1DS/q5RE8+xHM0Ho0U55DLtqsngVqx Ig3urAYcslBXOCmr3lNXcj5n8AEsIpSQ4jZz8kJc7uyHwcQ1DQpRrE5bP83qsCuG I3zm5K/mof764V0e -----END CERTIFICATE-----Generated at Thu Sep 24 06:03:46 2026 by rpki-client