$ rpki-client -vvf rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft File: 43A480538BE8801E606CB416A45E3AA47153C1FC.mft (raw, json) Hash identifier: nXPa9Gn2bwQRn4r07ytbByseXsivB4W6ma27oiFfZUQ= Subject key identifier: 53:E3:8E:DE:3F:75:D5:52:DC:01:09:F4:BC:FC:EB:BE:95:CE:C3:F0 Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC Certificate issuer: /CN=43A480538BE8801E606CB416A45E3AA47153C1FC Certificate serial: 714F3703013713824125A1365E3FDDE6E8F0C143 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft Manifest number: 0C Signing time: Fri 15 May 2026 10:36:43 +0000 Manifest this update: Fri 15 May 2026 10:31:43 +0000 Manifest next update: Sat 16 May 2026 12:49:43 +0000 Files and hashes: 1: 3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa (hash: enUvdWAkv3wr02fiLz/3E6iu4tuKeGmnlUzXDsJesQk=) 2: 3136352e3130312e3135332e302f32342d3234203d3e203338383534.roa (hash: ZX435W6mSiU5YOUHhDiSylk5PHASkUUAzDgfNQHjX3k=) 3: 43A480538BE8801E606CB416A45E3AA47153C1FC.crl (hash: wUixTYMXJLGRNFDYFJ60SSsBXHZGptqY+2umj+eKR+s=) 4: 3136352e3130312e3135322e302f32332d3234203d3e20313334383233.roa (hash: kxyxCW3V2gaGnnDYD9cbiTDaL6NE6NvCZZRwhoM7WZw=) 5: 3136352e3130312e3135322e302f32342d3234203d3e203338383534.roa (hash: U6Zr4HOjD89KuZO9y/utkpWh1ptd3yWY7OAdCYNAdtg=) 6: 3136352e3130312e3135322e302f32342d3234203d3e20323133363037.roa (hash: sHCfIkF9qzIZq8AMwpW+WlyC30zePIr9BmIEP0fn7Y4=) 7: 3136352e3130312e3135332e302f32342d3234203d3e20313438393936.roa (hash: MdC/snBV9hQ+u+QY6j955XOCyB5J4gj5q3588sOilYM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 12:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4f:37:03:01:37:13:82:41:25:a1:36:5e:3f:dd:e6:e8:f0:c1:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC Validity Not Before: May 15 10:31:43 2026 GMT Not After : May 16 12:49:43 2026 GMT Subject: CN=53E38EDE3F75D552DC0109F4BCFCEBBE95CEC3F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:46:e6:cd:0f:13:d0:fe:d2:12:17:5c:a2:c3: 9b:e2:a7:05:01:e4:5a:7c:69:d8:29:fe:d2:8c:65: 29:1b:7b:63:8b:d3:4a:83:58:bc:5b:71:4d:b2:00: 9e:75:af:c8:09:04:63:ec:c2:80:4f:92:fd:51:36: 3e:07:c3:e3:61:7c:f0:e8:1f:1b:31:a4:62:2f:1e: e6:45:e4:8c:6a:bb:bf:36:47:be:67:0f:d6:8d:2f: 15:39:e3:38:7b:1a:07:03:c5:d0:24:35:1e:cc:04: 3f:aa:9f:9c:64:38:6b:d7:82:b6:c6:db:6f:3a:8e: 78:0e:6f:c0:bb:b8:de:c8:b8:38:da:5a:e0:e2:4a: 42:1a:81:f8:85:14:20:e9:2f:32:eb:bd:c6:e0:ff: c6:87:a4:e3:d8:bd:c1:33:44:d9:36:98:04:b5:57: 67:e1:2e:aa:72:31:d2:b6:a5:99:0b:3c:2f:6a:e8: 57:35:78:f7:8a:d2:53:b3:16:34:94:7d:dc:6e:9a: 88:3a:ed:61:a2:2d:71:d7:18:96:d9:f6:39:56:a4: bf:00:42:76:c3:5c:3b:51:d9:93:f8:54:c7:f9:5a: 50:3a:b3:ca:5f:3c:54:dd:4b:7b:31:e7:1a:98:2b: 8b:44:06:0b:5b:65:8f:39:3d:9a:9d:65:8c:ba:61: 16:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E3:8E:DE:3F:75:D5:52:DC:01:09:F4:BC:FC:EB:BE:95:CE:C3:F0 X509v3 Authority Key Identifier: keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:d3:a6:c2:87:34:d6:b5:d5:28:b4:53:0b:df:26:5c:39:95: 90:d9:9a:56:13:72:e5:37:db:c0:d8:32:cb:6a:c9:91:0d:aa: 63:c6:77:da:a9:02:1b:4e:b8:48:9e:ed:ef:3b:09:0b:7d:6d: 08:4c:d9:a8:22:fe:46:50:56:77:e0:0a:4b:f7:fe:74:b8:24: 76:a1:9c:b4:e0:e6:67:85:ae:04:2d:98:5d:a8:64:0b:dd:57: 3a:42:f4:4b:c6:00:d1:7c:8c:37:3a:c4:5a:ef:80:4f:35:8c: f9:eb:9a:4a:d5:32:ed:b6:0e:3f:00:f7:c4:94:00:85:27:d2: 70:60:a1:91:30:e2:66:04:3a:cd:79:b2:a8:99:f2:36:11:aa: 9a:85:11:52:48:67:3b:72:44:68:86:82:cf:dc:ee:f2:35:e4: e2:f4:68:38:b6:95:58:30:31:f3:d5:3e:20:67:93:5e:44:9e: 5b:56:ee:49:8b:af:67:5a:51:12:02:8c:0e:91:74:b1:21:ea: 7d:89:34:95:c2:07:7d:43:5e:78:ba:24:9d:6d:7a:f3:51:55: ca:10:3e:80:d2:8d:ed:28:b0:a3:08:4f:67:fe:5c:c8:97:68: e3:82:d7:da:5f:63:d1:20:bf:96:ce:44:d0:71:c9:71:5a:f6: 47:b7:2a:4b -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUcU83AwE3E4JBJaE2Xj/d5ujwwUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBNDgwNTM4QkU4ODAxRTYwNkNCNDE2QTQ1RTNBQTQ3 MTUzQzFGQzAeFw0yNjA1MTUxMDMxNDNaFw0yNjA1MTYxMjQ5NDNaMDMxMTAvBgNV BAMTKDUzRTM4RURFM0Y3NUQ1NTJEQzAxMDlGNEJDRkNFQkJFOTVDRUMzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWRubNDxPQ/tISF1yiw5vipwUB 5Fp8adgp/tKMZSkbe2OL00qDWLxbcU2yAJ51r8gJBGPswoBPkv1RNj4Hw+NhfPDo HxsxpGIvHuZF5Ixqu782R75nD9aNLxU54zh7GgcDxdAkNR7MBD+qn5xkOGvXgrbG 2286jngOb8C7uN7IuDjaWuDiSkIagfiFFCDpLzLrvcbg/8aHpOPYvcEzRNk2mAS1 V2fhLqpyMdK2pZkLPC9q6Fc1ePeK0lOzFjSUfdxumog67WGiLXHXGJbZ9jlWpL8A QnbDXDtR2ZP4VMf5WlA6s8pfPFTdS3sx5xqYK4tEBgtbZY85PZqdZYy6YRZLAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUU+OO3j911VLcAQn0vPzrvpXOw/AwHwYDVR0j BBgwFoAUQ6SAU4vogB5gbLQWpF46pHFTwfwwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT T04vMS80M0E0ODA1MzhCRTg4MDFFNjA2Q0I0MTZBNDVFM0FBNDcxNTNDMUZDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzQzQTQ4MDUzOEJFODgwMUU2MDZDQjQxNkE0 NUUzQUE0NzE1M0MxRkMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HQU1CRVNPTi8xLzQzQTQ4MDUz OEJFODgwMUU2MDZDQjQxNkE0NUUzQUE0NzE1M0MxRkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDN06bC hzTWtdUotFML3yZcOZWQ2ZpWE3LlN9vA2DLLasmRDapjxnfaqQIbTrhInu3vOwkL fW0ITNmoIv5GUFZ34ApL9/50uCR2oZy04OZnha4ELZhdqGQL3Vc6QvRLxgDRfIw3 OsRa74BPNYz565pK1TLttg4/APfElACFJ9JwYKGRMOJmBDrNebKomfI2EaqahRFS SGc7ckRohoLP3O7yNeTi9Gg4tpVYMDHz1T4gZ5NeRJ5bVu5Ji69nWlESAowOkXSx Iep9iTSVwgd9Q154uiSdbXrzUVXKED6A0o3tKLCjCE9n/lzIl2jjgtfaX2PRIL+W zkTQcclxWvZHtypL -----END CERTIFICATE-----Generated at Sat May 16 04:50:18 2026 by rpki-client