$ rpki-client -vvf rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft File: BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft (raw, json) Hash identifier: WO1nkEl2tz4EFezpC8JnbjH1LGjjmg+0jhwpqOolXVc= Subject key identifier: C1:C9:95:B9:3C:FC:F7:15:9D:7B:43:2D:74:60:7E:F6:47:78:F5:6A Authority key identifier: BA:A9:E1:B5:C5:6A:E2:AB:15:73:F4:DD:34:EE:67:94:3A:E5:D4:D0 Certificate issuer: /CN=BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0 Certificate serial: 5B3CB22064073738BCE49B948A07E723EDD275E3 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft Manifest number: 86 Signing time: Fri 14 Aug 2026 18:52:47 +0000 Manifest this update: Fri 14 Aug 2026 18:47:47 +0000 Manifest next update: Sat 15 Aug 2026 19:08:47 +0000 Files and hashes: 1: BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.crl (hash: HhcQfX63s95I4lor7CX/C4yD9N6l2awWLrWz5VA6+q8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.crl rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 19:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:3c:b2:20:64:07:37:38:bc:e4:9b:94:8a:07:e7:23:ed:d2:75:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0 Validity Not Before: Aug 14 18:47:47 2026 GMT Not After : Aug 15 19:08:47 2026 GMT Subject: CN=C1C995B93CFCF7159D7B432D74607EF64778F56A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:b4:b4:cc:34:88:a4:c0:5c:6d:ee:ba:28: 76:08:31:7d:f5:8c:9c:38:a3:e2:77:c9:49:2a:bd: 1b:50:b7:ee:62:a0:71:f2:3d:f9:75:d6:e9:37:3d: 15:f6:8f:cf:f2:87:dc:5c:e8:1a:7a:6a:32:13:c9: 7d:f7:59:b3:dc:ea:a2:3c:f8:4e:6a:d8:ff:fc:be: 99:70:ce:d8:44:15:78:9e:25:e5:99:2a:26:36:5f: f2:b5:53:70:e2:37:8c:21:33:27:ba:a7:8e:07:6d: a9:3f:ac:d8:e1:1a:c9:2d:21:78:a1:6c:75:c1:0d: 94:d2:72:e1:7d:d9:1b:4d:0d:a5:78:4c:a0:97:2e: d8:d1:81:0e:64:5d:5b:61:86:91:4e:67:1a:f5:75: 4e:d1:b6:c3:1d:53:dd:3f:09:65:48:dc:50:b5:cd: db:c9:0a:e0:f5:45:fd:a3:97:5b:bd:f7:bd:a9:5b: bd:64:de:44:9e:bd:d2:dc:48:4a:4a:33:b1:26:fe: 17:a8:8a:59:8f:91:b0:08:e9:8f:84:d1:06:1d:c9: 65:1d:14:28:04:ed:e0:bf:0b:32:84:0a:e3:b7:0d: 27:73:35:4d:88:20:a4:85:48:93:7d:5b:ef:ca:86: 61:ae:b0:cf:dc:b4:61:49:cd:92:f1:7d:a6:19:97: 00:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C9:95:B9:3C:FC:F7:15:9D:7B:43:2D:74:60:7E:F6:47:78:F5:6A X509v3 Authority Key Identifier: keyid:BA:A9:E1:B5:C5:6A:E2:AB:15:73:F4:DD:34:EE:67:94:3A:E5:D4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:98:70:25:04:ef:5a:58:24:4f:50:c6:59:a9:03:5a:b5:48: 7d:7a:45:73:ba:f8:86:29:86:58:1f:6e:b0:b3:cf:94:49:82: c0:a1:2f:ed:54:f4:77:1c:29:35:de:fe:07:75:ec:ca:cb:bc: 57:17:bb:08:74:23:11:16:96:9f:60:f0:50:80:6a:99:9e:6e: 04:d4:5e:00:20:14:3a:3b:99:d6:a9:2d:53:cd:78:e1:a5:71: cc:2c:a5:e7:74:2d:f7:bb:f1:d3:73:44:49:d0:dc:33:e7:d4: 39:ff:3d:ca:d7:ba:bf:2b:1d:ae:2c:b1:71:aa:8a:b4:c6:14: d2:dd:dc:cb:b2:dd:6b:be:80:f8:2a:a3:7c:7e:39:73:47:cd: a6:67:c6:2c:e7:b9:d7:4a:ec:15:64:7a:63:10:34:59:40:fe: d9:fd:b7:90:63:65:d9:49:80:20:f3:41:83:0b:0d:29:f9:cd: bc:38:b5:49:a4:e4:39:36:2d:cb:ed:77:ea:44:3e:e7:cd:c6: 38:be:ef:00:51:e5:50:89:3f:5d:10:e7:c0:d8:56:cf:a9:c7: c4:60:25:b2:64:50:2c:21:45:a3:14:fd:e2:7a:2a:42:e2:f6: ff:79:2c:8a:80:12:91:13:26:fe:eb:29:65:5d:c2:6b:11:94: 5f:e8:89:9d -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUWzyyIGQHNzi85JuUigfnI+3SdeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOUUxQjVDNTZBRTJBQjE1NzNGNEREMzRFRTY3OTQz QUU1RDREMDAeFw0yNjA4MTQxODQ3NDdaFw0yNjA4MTUxOTA4NDdaMDMxMTAvBgNV BAMTKEMxQzk5NUI5M0NGQ0Y3MTU5RDdCNDMyRDc0NjA3RUY2NDc3OEY1NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwCbS0zDSIpMBcbe66KHYIMX31 jJw4o+J3yUkqvRtQt+5ioHHyPfl11uk3PRX2j8/yh9xc6Bp6ajITyX33WbPc6qI8 +E5q2P/8vplwzthEFXieJeWZKiY2X/K1U3DiN4whMye6p44Hbak/rNjhGsktIXih bHXBDZTScuF92RtNDaV4TKCXLtjRgQ5kXVthhpFOZxr1dU7RtsMdU90/CWVI3FC1 zdvJCuD1Rf2jl1u9972pW71k3kSevdLcSEpKM7Em/heoilmPkbAI6Y+E0QYdyWUd FCgE7eC/CzKECuO3DSdzNU2IIKSFSJN9W+/KhmGusM/ctGFJzZLxfaYZlwA5AgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUwcmVuTz89xWde0MtdGB+9kd49WowHwYDVR0j BBgwFoAUuqnhtcVq4qsVc/TdNO5nlDrl1NAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT T04vMC9CQUE5RTFCNUM1NkFFMkFCMTU3M0Y0REQzNEVFNjc5NDNBRTVENEQwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0JBQTlFMUI1QzU2QUUyQUIxNTczRjRERDM0 RUU2Nzk0M0FFNUQ0RDAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HQU1CRVNPTi8wL0JBQTlFMUI1 QzU2QUUyQUIxNTczRjRERDM0RUU2Nzk0M0FFNUQ0RDAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAumHAl BO9aWCRPUMZZqQNatUh9ekVzuviGKYZYH26ws8+USYLAoS/tVPR3HCk13v4HdezK y7xXF7sIdCMRFpafYPBQgGqZnm4E1F4AIBQ6O5nWqS1TzXjhpXHMLKXndC33u/HT c0RJ0Nwz59Q5/z3K17q/Kx2uLLFxqoq0xhTS3dzLst1rvoD4KqN8fjlzR82mZ8Ys 57nXSuwVZHpjEDRZQP7Z/beQY2XZSYAg80GDCw0p+c28OLVJpOQ5Ni3L7XfqRD7n zcY4vu8AUeVQiT9dEOfA2FbPqcfEYCWyZFAsIUWjFP3ieipC4vb/eSyKgBKREyb+ 6yllXcJrEZRf6Imd -----END CERTIFICATE-----Generated at Sat Aug 15 05:21:10 2026 by rpki-client