$ rpki-client -vvvf rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft File: BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft (raw, json) Hash identifier: 7qOn3HW3TZWExvfjE4tVqAQAYmJg/1hRuO3CGPCb/o4= Subject key identifier: 43:C5:8B:81:6A:AB:BB:EF:DF:52:2E:0F:C4:1C:8B:B8:AC:3F:B2:62 Authority key identifier: BA:A9:E1:B5:C5:6A:E2:AB:15:73:F4:DD:34:EE:67:94:3A:E5:D4:D0 Certificate issuer: /CN=BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0 Certificate serial: 4558A7A2B7CA82DBB22EDC9F0B8D67FDC4F0FD40 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft Manifest number: F8 Signing time: Sun 08 Nov 2026 12:57:58 +0000 Manifest this update: Sun 08 Nov 2026 12:52:58 +0000 Manifest next update: Mon 09 Nov 2026 15:12:58 +0000 Files and hashes: 1: BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.crl (hash: 6obsa6ZbYyeS+hJMW/KUgChLGfRZ5mDCBBlMn4j2Qwo=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.crl rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 11:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:58:a7:a2:b7:ca:82:db:b2:2e:dc:9f:0b:8d:67:fd:c4:f0:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0 Validity Not Before: Nov 8 12:52:58 2026 GMT Not After : Nov 9 15:12:58 2026 GMT Subject: CN=43C58B816AABBBEFDF522E0FC41C8BB8AC3FB262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ce:27:86:68:16:d5:68:35:1b:71:ee:da:7a: 81:32:ec:81:48:ac:01:1f:f0:91:be:b7:71:ad:73: 06:a9:31:19:50:67:e9:10:75:0c:3f:fd:59:cf:ee: d4:2c:b1:28:40:75:f9:3a:48:74:dd:2f:a6:18:fd: 08:9e:88:8e:41:ac:7f:ee:5f:d7:70:cb:e1:7b:f5: da:f5:63:c6:e3:9f:89:d2:bf:08:fd:a5:59:6d:15: 1e:7b:c1:01:d8:18:81:04:c0:ff:4a:45:0c:33:33: 84:1c:05:21:ab:1e:11:6b:0d:08:09:fb:c2:c8:92: ae:14:21:93:00:c9:a4:33:a6:6f:11:41:e6:2f:bf: 29:72:84:23:ca:55:5a:5f:59:5d:bc:60:b0:26:55: eb:02:f6:5f:8d:db:02:82:2c:5c:fc:03:80:92:a3: 46:8f:bf:2b:59:15:81:b9:01:89:93:de:95:67:d4: 13:9a:77:a0:1c:7e:84:45:c3:0f:5e:34:ea:4a:17: c9:89:65:76:1c:0e:a4:8d:47:10:83:69:34:ff:4a: 32:08:ff:36:9c:59:09:22:1f:76:c8:21:b6:63:58: fe:f1:ee:cc:f6:26:8e:bb:21:fe:70:c8:ce:63:20: e1:ba:bf:0d:7b:16:52:cd:15:a7:66:c0:64:78:75: 3f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C5:8B:81:6A:AB:BB:EF:DF:52:2E:0F:C4:1C:8B:B8:AC:3F:B2:62 X509v3 Authority Key Identifier: keyid:BA:A9:E1:B5:C5:6A:E2:AB:15:73:F4:DD:34:EE:67:94:3A:E5:D4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fb:e0:96:30:af:01:9b:b5:6a:6c:13:2c:02:6e:34:16:24: 4b:c3:8a:36:7c:d5:80:b3:4c:fe:bd:84:88:a0:da:14:11:f1: 5a:13:d2:2e:ab:58:d8:8c:b9:9b:0c:1a:e3:01:70:a0:c1:c8: 46:50:f4:97:41:b7:e0:2b:c1:1e:3a:1d:cb:48:8c:81:d8:28: be:af:bc:f8:8d:01:1b:bb:d3:31:27:e5:01:fe:4e:8b:87:f2: c3:74:d6:26:7b:58:e2:4b:4e:92:e4:b3:be:e1:df:df:8d:08: a4:c3:c9:eb:19:7d:9c:35:42:cb:25:bc:42:4e:bd:37:58:49: 1b:03:6d:9a:7b:d4:cf:7a:ac:9b:20:70:cb:d0:6f:45:ff:f7: 12:86:71:58:9b:70:6c:9b:9a:dc:d3:fd:31:ce:35:e1:96:36: f5:25:05:f7:6e:d8:91:10:ed:80:66:85:49:cd:23:95:1b:f8: a6:51:9f:03:5d:7b:11:bd:5b:ba:3d:c9:66:76:db:23:da:cc: 25:14:e9:90:61:a9:da:c4:e3:58:03:27:d5:60:72:2c:a8:cd: 28:c7:87:5c:66:e2:b3:ec:c6:35:d9:0b:a6:4c:17:99:6b:a8: 4a:77:88:74:3c:a7:ee:0d:e3:d5:a7:51:8a:04:f9:ba:78:5c: f4:c7:ef:86 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIURVinorfKgtuyLtyfC41n/cTw/UAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOUUxQjVDNTZBRTJBQjE1NzNGNEREMzRFRTY3OTQz QUU1RDREMDAeFw0yNjExMDgxMjUyNThaFw0yNjExMDkxNTEyNThaMDMxMTAvBgNV BAMTKDQzQzU4QjgxNkFBQkJCRUZERjUyMkUwRkM0MUM4QkI4QUMzRkIyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjzieGaBbVaDUbce7aeoEy7IFI rAEf8JG+t3GtcwapMRlQZ+kQdQw//VnP7tQssShAdfk6SHTdL6YY/QieiI5BrH/u X9dwy+F79dr1Y8bjn4nSvwj9pVltFR57wQHYGIEEwP9KRQwzM4QcBSGrHhFrDQgJ +8LIkq4UIZMAyaQzpm8RQeYvvylyhCPKVVpfWV28YLAmVesC9l+N2wKCLFz8A4CS o0aPvytZFYG5AYmT3pVn1BOad6AcfoRFww9eNOpKF8mJZXYcDqSNRxCDaTT/SjII /zacWQkiH3bIIbZjWP7x7sz2Jo67If5wyM5jIOG6vw17FlLNFadmwGR4dT8RAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUQ8WLgWqru+/fUi4PxByLuKw/smIwHwYDVR0j BBgwFoAUuqnhtcVq4qsVc/TdNO5nlDrl1NAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT T04vMC9CQUE5RTFCNUM1NkFFMkFCMTU3M0Y0REQzNEVFNjc5NDNBRTVENEQwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0JBQTlFMUI1QzU2QUUyQUIxNTczRjRERDM0 RUU2Nzk0M0FFNUQ0RDAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HQU1CRVNPTi8wL0JBQTlFMUI1 QzU2QUUyQUIxNTczRjRERDM0RUU2Nzk0M0FFNUQ0RDAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBM++CW MK8Bm7VqbBMsAm40FiRLw4o2fNWAs0z+vYSIoNoUEfFaE9Iuq1jYjLmbDBrjAXCg wchGUPSXQbfgK8EeOh3LSIyB2Ci+r7z4jQEbu9MxJ+UB/k6Lh/LDdNYme1jiS06S 5LO+4d/fjQikw8nrGX2cNULLJbxCTr03WEkbA22ae9TPeqybIHDL0G9F//cShnFY m3Bsm5rc0/0xzjXhljb1JQX3btiREO2AZoVJzSOVG/imUZ8DXXsRvVu6Pclmdtsj 2swlFOmQYanaxONYAyfVYHIsqM0ox4dcZuKz7MY12QumTBeZa6hKd4h0PKfuDePV p1GKBPm6eFz0x++G -----END CERTIFICATE-----Generated at Mon Nov 9 07:33:17 2026 by rpki-client