$ rpki-client -vvf rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft File: 43A480538BE8801E606CB416A45E3AA47153C1FC.mft (raw, json) Hash identifier: ouoBNJnNkBa5w/T0LI1N1dwA6VuYtWxrPKvsJ16qpJM= Subject key identifier: 40:FE:83:11:39:E6:06:01:FA:BB:99:C6:54:38:92:3A:F3:8A:97:7D Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC Certificate issuer: /CN=43A480538BE8801E606CB416A45E3AA47153C1FC Certificate serial: 681F5728D455A97F74E31D17D8D7566B7C4F6FDF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft Manifest number: 48 Signing time: Mon 29 Jun 2026 23:52:35 +0000 Manifest this update: Mon 29 Jun 2026 23:47:35 +0000 Manifest next update: Wed 01 Jul 2026 00:21:35 +0000 Files and hashes: 1: 43A480538BE8801E606CB416A45E3AA47153C1FC.crl (hash: f9MYEZWEwYoIw3jySx8JpLmI7YKyyimu7mFSBOYt4ug=) 2: 3136352e3130312e3135322e302f32342d3234203d3e20323133363037.roa (hash: sHCfIkF9qzIZq8AMwpW+WlyC30zePIr9BmIEP0fn7Y4=) 3: 3136352e3130312e3135332e302f32342d3234203d3e203338383534.roa (hash: ZX435W6mSiU5YOUHhDiSylk5PHASkUUAzDgfNQHjX3k=) 4: 3136352e3130312e3135332e302f32342d3234203d3e20313438393936.roa (hash: MdC/snBV9hQ+u+QY6j955XOCyB5J4gj5q3588sOilYM=) 5: 3136352e3130312e3135322e302f32342d3234203d3e203338383534.roa (hash: U6Zr4HOjD89KuZO9y/utkpWh1ptd3yWY7OAdCYNAdtg=) 6: 3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa (hash: enUvdWAkv3wr02fiLz/3E6iu4tuKeGmnlUzXDsJesQk=) 7: 3136352e3130312e3135322e302f32332d3234203d3e20313334383233.roa (hash: kxyxCW3V2gaGnnDYD9cbiTDaL6NE6NvCZZRwhoM7WZw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 19:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1f:57:28:d4:55:a9:7f:74:e3:1d:17:d8:d7:56:6b:7c:4f:6f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC Validity Not Before: Jun 29 23:47:35 2026 GMT Not After : Jul 1 00:21:35 2026 GMT Subject: CN=40FE831139E60601FABB99C65438923AF38A977D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:60:21:5f:5c:3d:d0:7d:a5:72:d8:e2:2d: 7c:85:07:93:a9:6a:fa:1b:6d:63:83:ad:ce:39:20: 2e:7f:c1:84:b2:03:68:28:9d:d8:4e:db:3f:01:5f: 7f:39:31:ea:68:e3:1c:79:52:80:4c:c4:0c:de:a2: ca:11:b2:c8:34:d2:c3:ee:5f:0b:b7:65:08:b4:56: e8:9d:73:3b:08:e2:00:6c:17:22:76:cd:96:68:6f: b9:bb:b8:29:73:8f:d0:f3:3e:43:89:ee:22:21:89: 96:7d:ab:a3:ee:65:54:25:26:03:49:42:29:b8:e2: 22:b9:99:0a:df:f5:a0:5f:b6:14:64:b8:d6:cd:bd: 5c:84:0b:6d:9c:b4:07:d2:ef:a8:3f:2f:95:11:96: c8:39:34:d8:fa:1c:4a:d5:e4:39:fc:d2:3c:aa:1a: 43:48:52:f9:16:79:a4:07:36:29:d4:1a:ad:52:07: 1f:be:a0:1a:60:57:67:b3:ec:40:4f:c7:12:52:85: 6d:13:84:f3:cf:b1:c7:9a:e5:6f:c8:b9:8b:40:29: fd:79:8d:36:80:e0:76:60:37:8a:47:98:1d:e1:49: 56:54:89:61:50:63:bc:fe:d9:c2:25:90:36:14:d3: 1e:d2:85:7f:1a:f1:3e:dc:72:fd:a1:0c:4e:ba:fc: 5c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FE:83:11:39:E6:06:01:FA:BB:99:C6:54:38:92:3A:F3:8A:97:7D X509v3 Authority Key Identifier: keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:97:fc:79:81:b2:21:25:db:7e:d3:f9:f1:77:b6:76:4e:a0: 71:dc:06:89:f0:19:60:a8:8e:30:a0:f8:5c:b4:0a:f0:8c:df: ef:dc:35:16:9b:77:b0:be:af:7e:c8:a9:e8:01:42:6b:68:d1: b5:44:9e:83:bc:2d:85:8a:c2:13:9d:c8:a5:d1:4e:62:60:d3: 10:e7:1e:39:29:75:7e:00:a8:d3:9f:3e:dd:46:66:d3:8c:00: df:f4:a7:f9:4e:a2:dc:06:76:d4:a7:39:30:47:c3:5f:b9:d5: 07:d1:57:b5:e4:d8:18:6c:5b:3b:90:14:77:12:78:5e:f8:0d: 66:49:cb:aa:54:02:aa:3b:15:dd:c5:1e:ae:3e:8d:b4:1a:6a: 75:23:7d:51:7c:ba:81:7d:2c:3b:34:80:89:32:89:14:9d:93: 12:b2:b6:00:8a:6a:71:99:7f:1b:ee:f5:aa:71:c9:41:0e:77: 67:30:53:26:40:9b:17:51:6f:f5:f1:26:95:bc:9b:0b:2b:4f: d6:f9:66:7c:67:91:58:95:5c:40:0c:b0:6a:10:ad:bd:a4:cd: 8c:16:00:9c:a9:7f:33:58:15:45:2f:f3:74:f2:1f:86:6c:aa: b9:13:b1:2d:d6:2f:88:63:6f:f4:d1:16:1e:6a:f1:5f:69:04: 29:b9:de:7f -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUaB9XKNRVqX904x0X2NdWa3xPb98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBNDgwNTM4QkU4ODAxRTYwNkNCNDE2QTQ1RTNBQTQ3 MTUzQzFGQzAeFw0yNjA2MjkyMzQ3MzVaFw0yNjA3MDEwMDIxMzVaMDMxMTAvBgNV BAMTKDQwRkU4MzExMzlFNjA2MDFGQUJCOTlDNjU0Mzg5MjNBRjM4QTk3N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/GAhX1w90H2lctjiLXyFB5Op avobbWODrc45IC5/wYSyA2gondhO2z8BX385Mepo4xx5UoBMxAzeosoRssg00sPu Xwu3ZQi0VuidczsI4gBsFyJ2zZZob7m7uClzj9DzPkOJ7iIhiZZ9q6PuZVQlJgNJ Qim44iK5mQrf9aBfthRkuNbNvVyEC22ctAfS76g/L5URlsg5NNj6HErV5Dn80jyq GkNIUvkWeaQHNinUGq1SBx++oBpgV2ez7EBPxxJShW0ThPPPscea5W/IuYtAKf15 jTaA4HZgN4pHmB3hSVZUiWFQY7z+2cIlkDYU0x7ShX8a8T7ccv2hDE66/FyXAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUQP6DETnmBgH6u5nGVDiSOvOKl30wHwYDVR0j BBgwFoAUQ6SAU4vogB5gbLQWpF46pHFTwfwwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT T04vMS80M0E0ODA1MzhCRTg4MDFFNjA2Q0I0MTZBNDVFM0FBNDcxNTNDMUZDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzQzQTQ4MDUzOEJFODgwMUU2MDZDQjQxNkE0 NUUzQUE0NzE1M0MxRkMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HQU1CRVNPTi8xLzQzQTQ4MDUz OEJFODgwMUU2MDZDQjQxNkE0NUUzQUE0NzE1M0MxRkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1l/x5 gbIhJdt+0/nxd7Z2TqBx3AaJ8BlgqI4woPhctArwjN/v3DUWm3ewvq9+yKnoAUJr aNG1RJ6DvC2FisITncil0U5iYNMQ5x45KXV+AKjTnz7dRmbTjADf9Kf5TqLcBnbU pzkwR8NfudUH0Ve15NgYbFs7kBR3Enhe+A1mScuqVAKqOxXdxR6uPo20Gmp1I31R fLqBfSw7NICJMokUnZMSsrYAimpxmX8b7vWqcclBDndnMFMmQJsXUW/18SaVvJsL K0/W+WZ8Z5FYlVxADLBqEK29pM2MFgCcqX8zWBVFL/N08h+GbKq5E7Et1i+IY2/0 0RYeavFfaQQpud5/ -----END CERTIFICATE-----Generated at Tue Jun 30 13:10:00 2026 by rpki-client