$ rpki-client -vvvf rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft File: BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft (raw, json) Hash identifier: FrO/76PgI7rGQJ2g9hujYE3/TYA1oMv+S2iT5wT+L3U= Subject key identifier: 85:D7:7F:16:60:FA:E4:23:95:4D:6F:D0:E9:5A:EF:83:CA:10:C9:92 Authority key identifier: BA:A9:E1:B5:C5:6A:E2:AB:15:73:F4:DD:34:EE:67:94:3A:E5:D4:D0 Certificate issuer: /CN=BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0 Certificate serial: 4C83CEAB30B8CF1435E1C2D02776E57E6D6686B7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft Manifest number: C8 Signing time: Sat 03 Oct 2026 12:10:00 +0000 Manifest this update: Sat 03 Oct 2026 12:05:00 +0000 Manifest next update: Sun 04 Oct 2026 12:38:00 +0000 Files and hashes: 1: BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.crl (hash: AILF5mor1ZZvuEGtgQvfNjhA/VwsuDZeKjAXZfkQuSw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.crl rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 12:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:83:ce:ab:30:b8:cf:14:35:e1:c2:d0:27:76:e5:7e:6d:66:86:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0 Validity Not Before: Oct 3 12:05:00 2026 GMT Not After : Oct 4 12:38:00 2026 GMT Subject: CN=85D77F1660FAE423954D6FD0E95AEF83CA10C992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:b2:c8:3d:97:a9:7f:d8:67:09:57:37:da: 3f:96:09:c5:85:3c:82:66:b1:38:16:eb:5e:5d:52: 3e:d6:7f:ff:7f:1a:c5:b8:f4:50:4f:1b:eb:9f:49: b9:bb:8f:05:08:5c:89:12:53:eb:6c:2e:9c:c2:b2: d0:5c:8f:ee:07:ed:7a:58:08:24:74:7a:fe:01:6c: 9b:a0:e2:4c:12:ee:aa:e1:0a:20:95:47:23:68:52: 23:28:2a:d0:e1:e1:01:d3:4a:73:de:b9:ea:ef:64: 2c:d6:7b:70:b4:2e:dd:87:fd:91:cc:e2:f0:fa:09: e3:9a:6c:51:72:2e:7c:22:49:00:ee:1f:22:8e:9d: ed:d7:1f:52:98:21:f0:d6:94:43:ae:fc:73:4f:12: 6e:af:24:70:db:36:b3:46:c0:02:99:e8:fd:d0:cb: ae:a6:e4:68:86:fc:27:3a:7b:0a:5d:64:71:b7:9c: 23:a0:23:c7:be:40:5e:95:30:bf:f2:f4:3c:3a:eb: 26:b4:45:14:80:07:2b:85:b2:cb:42:4c:1b:79:fd: f3:ec:85:fb:21:1f:4a:d3:df:2b:e3:9f:84:99:5e: d1:ef:e7:3b:d4:bf:60:62:7f:21:9f:7d:a2:91:74: ac:79:f4:f1:cc:46:89:9e:81:15:7f:50:0a:86:db: d4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D7:7F:16:60:FA:E4:23:95:4D:6F:D0:E9:5A:EF:83:CA:10:C9:92 X509v3 Authority Key Identifier: keyid:BA:A9:E1:B5:C5:6A:E2:AB:15:73:F4:DD:34:EE:67:94:3A:E5:D4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:25:51:b9:75:08:e1:2a:0d:e9:bc:52:30:96:85:f1:88:df: 2d:39:8c:97:09:ac:4b:26:28:f8:a7:6f:d2:b4:1c:27:b0:a8: 5c:54:ab:46:65:62:a6:57:57:95:1c:6a:7e:62:0b:b7:d2:17: 11:f7:35:34:07:f7:af:9c:70:39:df:5f:d2:7b:3b:c8:12:e2: 87:53:c5:ed:75:9e:d0:97:a9:12:6b:02:d9:ba:5d:06:21:3c: ee:67:91:38:a9:73:b0:57:c9:1d:09:66:57:39:c8:10:1f:7d: 9a:48:6b:86:db:38:da:4c:62:dc:62:bd:37:01:6c:d2:43:7c: 2d:53:18:29:48:3d:e2:0e:22:fc:4b:5f:38:d3:83:0c:b8:48: 60:35:7a:60:dc:a7:43:ff:0e:8c:e4:63:cc:c7:ae:3a:42:1b: ce:9b:52:af:4f:32:77:b4:2b:54:03:a4:15:c4:ce:02:13:95: ef:27:93:e3:99:ff:3b:99:bc:00:eb:3b:75:b1:fe:60:6e:0a: 9d:e6:7b:65:51:f3:59:5b:d3:66:0b:9a:37:7e:a1:d5:e7:6c: 28:30:c0:1b:6b:6b:7e:70:ac:18:55:29:9b:92:56:65:19:8e: 87:95:d6:66:55:3e:31:4e:36:3a:22:41:ee:26:e4:ba:3d:95: fe:d4:06:5d -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUTIPOqzC4zxQ14cLQJ3blfm1mhrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOUUxQjVDNTZBRTJBQjE1NzNGNEREMzRFRTY3OTQz QUU1RDREMDAeFw0yNjEwMDMxMjA1MDBaFw0yNjEwMDQxMjM4MDBaMDMxMTAvBgNV BAMTKDg1RDc3RjE2NjBGQUU0MjM5NTRENkZEMEU5NUFFRjgzQ0ExMEM5OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs77LIPZepf9hnCVc32j+WCcWF PIJmsTgW615dUj7Wf/9/GsW49FBPG+ufSbm7jwUIXIkSU+tsLpzCstBcj+4H7XpY CCR0ev4BbJug4kwS7qrhCiCVRyNoUiMoKtDh4QHTSnPeuervZCzWe3C0Lt2H/ZHM 4vD6CeOabFFyLnwiSQDuHyKOne3XH1KYIfDWlEOu/HNPEm6vJHDbNrNGwAKZ6P3Q y66m5GiG/Cc6ewpdZHG3nCOgI8e+QF6VML/y9Dw66ya0RRSAByuFsstCTBt5/fPs hfshH0rT3yvjn4SZXtHv5zvUv2BifyGffaKRdKx59PHMRomegRV/UAqG29SNAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUhdd/FmD65COVTW/Q6Vrvg8oQyZIwHwYDVR0j BBgwFoAUuqnhtcVq4qsVc/TdNO5nlDrl1NAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT T04vMC9CQUE5RTFCNUM1NkFFMkFCMTU3M0Y0REQzNEVFNjc5NDNBRTVENEQwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0JBQTlFMUI1QzU2QUUyQUIxNTczRjRERDM0 RUU2Nzk0M0FFNUQ0RDAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HQU1CRVNPTi8wL0JBQTlFMUI1 QzU2QUUyQUIxNTczRjRERDM0RUU2Nzk0M0FFNUQ0RDAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTJVG5 dQjhKg3pvFIwloXxiN8tOYyXCaxLJij4p2/StBwnsKhcVKtGZWKmV1eVHGp+Ygu3 0hcR9zU0B/evnHA531/SezvIEuKHU8XtdZ7Ql6kSawLZul0GITzuZ5E4qXOwV8kd CWZXOcgQH32aSGuG2zjaTGLcYr03AWzSQ3wtUxgpSD3iDiL8S18404MMuEhgNXpg 3KdD/w6M5GPMx646QhvOm1KvTzJ3tCtUA6QVxM4CE5XvJ5Pjmf87mbwA6zt1sf5g bgqd5ntlUfNZW9NmC5o3fqHV52woMMAba2t+cKwYVSmbklZlGY6HldZmVT4xTjY6 IkHuJuS6PZX+1AZd -----END CERTIFICATE-----Generated at Sun Oct 4 07:03:42 2026 by rpki-client