$ rpki-client -vvvf rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft File: 43A480538BE8801E606CB416A45E3AA47153C1FC.mft (raw, json) Hash identifier: abEA4oLgUtBFlYH4IwoAXigL0Q4/O2b8JJJJhauz8fY= Subject key identifier: C2:64:91:CE:26:94:71:03:DD:59:D2:67:B9:09:92:5B:81:96:AC:E0 Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC Certificate issuer: /CN=43A480538BE8801E606CB416A45E3AA47153C1FC Certificate serial: 620767861D7694A5087EB6D8DFCD16F116513FE0 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft Manifest number: CD Signing time: Wed 07 Oct 2026 23:04:59 +0000 Manifest this update: Wed 07 Oct 2026 22:59:59 +0000 Manifest next update: Fri 09 Oct 2026 01:20:59 +0000 Files and hashes: 1: 3136352e3130312e3135322e302f32342d3234203d3e203338383534.roa (hash: U6Zr4HOjD89KuZO9y/utkpWh1ptd3yWY7OAdCYNAdtg=) 2: 3136352e3130312e3135322e302f32332d3234203d3e20313334383233.roa (hash: kxyxCW3V2gaGnnDYD9cbiTDaL6NE6NvCZZRwhoM7WZw=) 3: 3136352e3130312e3135332e302f32342d3234203d3e203338383534.roa (hash: ZX435W6mSiU5YOUHhDiSylk5PHASkUUAzDgfNQHjX3k=) 4: 3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa (hash: enUvdWAkv3wr02fiLz/3E6iu4tuKeGmnlUzXDsJesQk=) 5: 3136352e3130312e3135332e302f32342d3234203d3e20313438393936.roa (hash: MdC/snBV9hQ+u+QY6j955XOCyB5J4gj5q3588sOilYM=) 6: 3136352e3130312e3135322e302f32342d3234203d3e20323133363037.roa (hash: sHCfIkF9qzIZq8AMwpW+WlyC30zePIr9BmIEP0fn7Y4=) 7: 43A480538BE8801E606CB416A45E3AA47153C1FC.crl (hash: u55pE4ecQwdHwdsWcBEbhRq1YwHDnyFXTF42ZbUCGdM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 01:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:07:67:86:1d:76:94:a5:08:7e:b6:d8:df:cd:16:f1:16:51:3f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC Validity Not Before: Oct 7 22:59:59 2026 GMT Not After : Oct 9 01:20:59 2026 GMT Subject: CN=C26491CE26947103DD59D267B909925B8196ACE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9f:1f:4d:b6:ab:98:a3:88:fb:00:1d:49:fc: cc:0f:f4:cf:a0:6d:b2:51:f1:28:00:3a:a0:a6:ff: 57:ff:d0:2b:fd:f7:70:9a:65:e5:23:71:17:b4:f6: cb:7b:34:cf:4d:f0:98:f0:f8:3c:d4:91:23:63:6a: 4d:f7:66:b9:cc:f3:0c:b8:55:c1:18:ce:75:46:7c: 78:11:9a:d7:3c:fc:d7:65:ff:87:e0:36:62:ac:e8: 0d:bd:35:b0:42:86:b9:56:c7:2f:39:28:2a:16:57: 83:3b:76:5f:d6:66:46:f4:c3:68:79:6d:89:f0:c6: e7:91:74:93:5d:01:71:43:1d:f7:21:88:0d:5c:f5: 73:a8:fe:0b:07:26:48:67:b5:4f:b6:df:c0:ca:a4: 5c:c8:d2:3d:15:93:7b:0e:bc:33:aa:3e:cb:a1:38: 08:50:d6:e4:d0:1a:c0:5b:32:7b:41:6a:3f:df:98: d2:dc:9c:9e:b6:4e:70:df:09:b1:21:83:32:49:62: fb:07:c7:a1:20:41:2e:fb:4c:4d:93:a8:76:c9:47: c0:1a:4c:b9:79:68:7e:e4:dd:bf:da:ab:4f:a1:4c: 3b:5e:aa:9e:ce:4d:27:0b:a8:46:26:c8:88:4c:11: 53:4b:40:03:2e:7c:a4:ba:90:1b:28:ba:7f:38:4a: 9a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:64:91:CE:26:94:71:03:DD:59:D2:67:B9:09:92:5B:81:96:AC:E0 X509v3 Authority Key Identifier: keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:43:e2:ac:22:0a:1b:4a:fe:6c:cb:70:28:79:f6:d9:b9:59: 83:7e:55:0a:2d:d0:f6:54:18:c7:14:e6:ea:8b:82:80:a7:9a: 30:c3:2d:8c:7b:10:a5:35:a1:87:13:d9:0c:86:b7:ef:69:99: e5:15:47:4f:d8:17:96:b5:22:37:81:be:93:10:14:fd:91:12: 3e:31:8a:63:37:14:8b:bb:51:ee:9c:60:bc:09:d5:e6:b9:38: 48:88:08:eb:da:c2:c4:98:61:33:5d:51:b7:b6:ff:da:a5:25: 46:3d:d8:bc:89:90:08:1a:30:59:18:74:c9:c3:50:bb:30:86: 2d:0a:df:5a:e1:e3:53:17:c4:b7:41:d3:79:20:09:2c:e0:c8: 66:27:c3:c3:6d:cd:b0:c5:e7:56:17:3b:17:34:73:22:77:57: fe:7c:0b:24:ec:76:ee:5c:25:ed:a1:24:a9:e4:fb:e5:35:65: 99:df:6d:6d:cf:38:51:39:94:e1:2c:1b:62:d6:7f:fb:46:0a: 9c:e6:d9:93:62:b2:bf:30:35:04:98:b0:20:09:f5:df:26:5c: 51:45:74:1c:9d:ba:8e:b1:2b:fd:de:1f:cc:96:0e:8f:fa:b2: 98:bc:9c:d6:d6:5d:10:4b:9d:e3:2c:16:6e:e5:b5:1b:f5:9d: 93:87:73:f6 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUYgdnhh12lKUIfrbY380W8RZRP+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBNDgwNTM4QkU4ODAxRTYwNkNCNDE2QTQ1RTNBQTQ3 MTUzQzFGQzAeFw0yNjEwMDcyMjU5NTlaFw0yNjEwMDkwMTIwNTlaMDMxMTAvBgNV BAMTKEMyNjQ5MUNFMjY5NDcxMDNERDU5RDI2N0I5MDk5MjVCODE5NkFDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCnx9NtquYo4j7AB1J/MwP9M+g bbJR8SgAOqCm/1f/0Cv993CaZeUjcRe09st7NM9N8Jjw+DzUkSNjak33ZrnM8wy4 VcEYznVGfHgRmtc8/Ndl/4fgNmKs6A29NbBChrlWxy85KCoWV4M7dl/WZkb0w2h5 bYnwxueRdJNdAXFDHfchiA1c9XOo/gsHJkhntU+238DKpFzI0j0Vk3sOvDOqPsuh OAhQ1uTQGsBbMntBaj/fmNLcnJ62TnDfCbEhgzJJYvsHx6EgQS77TE2TqHbJR8Aa TLl5aH7k3b/aq0+hTDteqp7OTScLqEYmyIhMEVNLQAMufKS6kBsoun84SpqdAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUwmSRziaUcQPdWdJnuQmSW4GWrOAwHwYDVR0j BBgwFoAUQ6SAU4vogB5gbLQWpF46pHFTwfwwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT T04vMS80M0E0ODA1MzhCRTg4MDFFNjA2Q0I0MTZBNDVFM0FBNDcxNTNDMUZDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzQzQTQ4MDUzOEJFODgwMUU2MDZDQjQxNkE0 NUUzQUE0NzE1M0MxRkMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HQU1CRVNPTi8xLzQzQTQ4MDUz OEJFODgwMUU2MDZDQjQxNkE0NUUzQUE0NzE1M0MxRkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBzQ+Ks IgobSv5sy3AoefbZuVmDflUKLdD2VBjHFObqi4KAp5owwy2MexClNaGHE9kMhrfv aZnlFUdP2BeWtSI3gb6TEBT9kRI+MYpjNxSLu1HunGC8CdXmuThIiAjr2sLEmGEz XVG3tv/apSVGPdi8iZAIGjBZGHTJw1C7MIYtCt9a4eNTF8S3QdN5IAks4MhmJ8PD bc2wxedWFzsXNHMid1f+fAsk7HbuXCXtoSSp5PvlNWWZ321tzzhROZThLBti1n/7 Rgqc5tmTYrK/MDUEmLAgCfXfJlxRRXQcnbqOsSv93h/Mlg6P+rKYvJzW1l0QS53j LBZu5bUb9Z2Th3P2 -----END CERTIFICATE-----Generated at Thu Oct 8 12:32:17 2026 by rpki-client