$ rpki-client -vvf rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft File: 43A480538BE8801E606CB416A45E3AA47153C1FC.mft (raw, json) Hash identifier: NqOSRN9gxX7iUiON0w1Am3qTmfwbaTS0n6JRbZMKlGI= Subject key identifier: 2C:C4:35:8D:54:35:93:D7:47:F9:98:28:54:33:C6:42:89:5E:08:4E Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC Certificate issuer: /CN=43A480538BE8801E606CB416A45E3AA47153C1FC Certificate serial: 0445D4FAA335EB9230B1E89E51BB3CB96348FCF1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft Manifest number: 85 Signing time: Fri 14 Aug 2026 18:52:48 +0000 Manifest this update: Fri 14 Aug 2026 18:47:47 +0000 Manifest next update: Sat 15 Aug 2026 22:34:47 +0000 Files and hashes: 1: 3136352e3130312e3135322e302f32342d3234203d3e20323133363037.roa (hash: sHCfIkF9qzIZq8AMwpW+WlyC30zePIr9BmIEP0fn7Y4=) 2: 3136352e3130312e3135322e302f32332d3234203d3e20313334383233.roa (hash: kxyxCW3V2gaGnnDYD9cbiTDaL6NE6NvCZZRwhoM7WZw=) 3: 3136352e3130312e3135332e302f32342d3234203d3e20313438393936.roa (hash: MdC/snBV9hQ+u+QY6j955XOCyB5J4gj5q3588sOilYM=) 4: 43A480538BE8801E606CB416A45E3AA47153C1FC.crl (hash: /aOEnW9dFeTSPBSPYBUBLNVbkr3ipNvg5n26Sv1XBrc=) 5: 3136352e3130312e3135322e302f32342d3234203d3e203338383534.roa (hash: U6Zr4HOjD89KuZO9y/utkpWh1ptd3yWY7OAdCYNAdtg=) 6: 3136352e3130312e3135332e302f32342d3234203d3e203338383534.roa (hash: ZX435W6mSiU5YOUHhDiSylk5PHASkUUAzDgfNQHjX3k=) 7: 3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa (hash: enUvdWAkv3wr02fiLz/3E6iu4tuKeGmnlUzXDsJesQk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 22:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:45:d4:fa:a3:35:eb:92:30:b1:e8:9e:51:bb:3c:b9:63:48:fc:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC Validity Not Before: Aug 14 18:47:47 2026 GMT Not After : Aug 15 22:34:47 2026 GMT Subject: CN=2CC4358D543593D747F998285433C642895E084E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:78:93:f4:2d:7d:0f:83:15:a3:8b:50:27: 05:01:ec:b4:75:cb:a5:a9:5b:56:c0:a1:bb:61:2d: e8:e4:f4:b1:58:75:0f:d7:4d:ad:2b:06:c8:33:a3: e9:ba:9c:99:63:7c:d9:dc:21:61:0b:fe:a2:66:45: 1c:ef:4e:0a:e9:78:0f:1e:a0:07:63:9f:a7:27:ad: b3:0d:96:c7:2f:28:67:57:85:0d:b3:a4:72:93:5d: 79:9b:7d:46:fc:3d:d9:63:0a:b8:75:55:6c:64:6a: 1b:31:08:a3:b4:a4:f0:f5:eb:0b:f0:04:df:2c:9b: f1:2e:2b:4c:7f:3d:67:a5:4e:b0:ea:fe:bd:2c:ed: 3f:8d:bc:34:7a:38:40:7c:92:1b:c4:a2:7c:42:59: 60:b0:91:d1:77:01:ac:59:50:24:09:04:6a:09:d5: 83:11:3a:3d:56:60:6c:7b:81:8a:f4:ca:1d:83:e6: f0:bc:6b:94:69:23:3c:9d:cc:b6:55:53:4b:85:72: 4b:1b:4f:16:69:2f:2a:c2:5f:66:93:12:3f:1e:2e: f0:c2:79:2c:bd:6b:6d:c9:e0:54:1c:a6:5e:88:de: 3b:a9:3e:4d:b1:f2:d6:96:c9:91:61:71:ba:fd:ae: 7d:4e:2a:6b:9f:6a:d3:78:d2:73:4a:3b:4c:fd:88: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C4:35:8D:54:35:93:D7:47:F9:98:28:54:33:C6:42:89:5E:08:4E X509v3 Authority Key Identifier: keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:35:b1:cf:74:e8:fd:a0:60:95:0f:bb:17:ce:56:19:b1:bd: 25:8b:26:02:b3:90:27:1c:f1:3e:5c:65:fc:b8:16:eb:20:a8: 75:a4:45:77:62:87:89:ac:7a:23:24:84:df:34:1e:14:d5:08: 1b:76:6b:3e:cc:8d:d0:43:41:c2:11:5e:8a:a4:53:54:b4:b1: 0e:aa:73:67:0e:06:8e:6d:8b:16:8b:cc:37:55:5b:27:2b:ce: 87:29:33:12:c9:05:2d:be:cf:5f:21:d3:66:18:e2:42:b8:29: 54:23:cb:ee:47:89:d8:ef:92:97:cb:87:9a:90:ce:fc:e9:06: 2d:89:73:36:25:cc:28:c5:75:41:12:ed:53:6b:10:71:eb:65: 8e:80:ee:f7:60:a9:e6:b7:10:43:9e:a2:c1:db:1c:2e:d2:b0: 09:8a:88:bf:23:97:c6:25:04:fe:45:7e:ea:0f:59:60:37:06: fc:fa:15:c7:90:77:4d:59:f5:13:40:8c:b1:a4:3f:d6:de:db: 1d:3d:74:a3:a4:d5:6f:12:71:32:4a:d7:d1:9d:5b:5a:d2:67: 12:61:67:ff:b4:43:6d:63:83:6b:e7:cc:f1:69:09:94:5a:b5: ff:6b:5e:d1:46:08:fe:4f:f7:19:49:df:39:7b:02:28:28:43: 8a:88:ff:30 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUBEXU+qM165IwseieUbs8uWNI/PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBNDgwNTM4QkU4ODAxRTYwNkNCNDE2QTQ1RTNBQTQ3 MTUzQzFGQzAeFw0yNjA4MTQxODQ3NDdaFw0yNjA4MTUyMjM0NDdaMDMxMTAvBgNV BAMTKDJDQzQzNThENTQzNTkzRDc0N0Y5OTgyODU0MzNDNjQyODk1RTA4NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtk3iT9C19D4MVo4tQJwUB7LR1 y6WpW1bAobthLejk9LFYdQ/XTa0rBsgzo+m6nJljfNncIWEL/qJmRRzvTgrpeA8e oAdjn6cnrbMNlscvKGdXhQ2zpHKTXXmbfUb8PdljCrh1VWxkahsxCKO0pPD16wvw BN8sm/EuK0x/PWelTrDq/r0s7T+NvDR6OEB8khvEonxCWWCwkdF3AaxZUCQJBGoJ 1YMROj1WYGx7gYr0yh2D5vC8a5RpIzydzLZVU0uFcksbTxZpLyrCX2aTEj8eLvDC eSy9a23J4FQcpl6I3jupPk2x8taWyZFhcbr9rn1OKmufatN40nNKO0z9iOHDAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQULMQ1jVQ1k9dH+ZgoVDPGQoleCE4wHwYDVR0j BBgwFoAUQ6SAU4vogB5gbLQWpF46pHFTwfwwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT T04vMS80M0E0ODA1MzhCRTg4MDFFNjA2Q0I0MTZBNDVFM0FBNDcxNTNDMUZDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzQzQTQ4MDUzOEJFODgwMUU2MDZDQjQxNkE0 NUUzQUE0NzE1M0MxRkMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HQU1CRVNPTi8xLzQzQTQ4MDUz OEJFODgwMUU2MDZDQjQxNkE0NUUzQUE0NzE1M0MxRkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgNbHP dOj9oGCVD7sXzlYZsb0liyYCs5AnHPE+XGX8uBbrIKh1pEV3YoeJrHojJITfNB4U 1Qgbdms+zI3QQ0HCEV6KpFNUtLEOqnNnDgaObYsWi8w3VVsnK86HKTMSyQUtvs9f IdNmGOJCuClUI8vuR4nY75KXy4eakM786QYtiXM2JcwoxXVBEu1TaxBx62WOgO73 YKnmtxBDnqLB2xwu0rAJioi/I5fGJQT+RX7qD1lgNwb8+hXHkHdNWfUTQIyxpD/W 3tsdPXSjpNVvEnEyStfRnVta0mcSYWf/tENtY4Nr58zxaQmUWrX/a17RRgj+T/cZ Sd85ewIoKEOKiP8w -----END CERTIFICATE-----Generated at Sat Aug 15 10:18:06 2026 by rpki-client