$ rpki-client -vvvf rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft File: BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft (raw, json) Hash identifier: tVcIjiZFeeeg+CHIlOiqgrtg7caBNwa/z7H+0bKqqTU= Subject key identifier: EC:37:9D:AE:E1:D4:7D:14:49:8A:1B:B8:30:0F:60:1D:B6:ED:7C:3F Authority key identifier: BA:A9:E1:B5:C5:6A:E2:AB:15:73:F4:DD:34:EE:67:94:3A:E5:D4:D0 Certificate issuer: /CN=BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0 Certificate serial: 79A778DD1348119EF186F402CDF7A96CFF69D03C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft Manifest number: B8 Signing time: Mon 21 Sep 2026 07:31:32 +0000 Manifest this update: Mon 21 Sep 2026 07:26:32 +0000 Manifest next update: Tue 22 Sep 2026 10:21:32 +0000 Files and hashes: 1: BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.crl (hash: mUahzUcATJuiaf1Vio/UtQzcYQWpuHqWvMqgZ8TKpqM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.crl rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a7:78:dd:13:48:11:9e:f1:86:f4:02:cd:f7:a9:6c:ff:69:d0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0 Validity Not Before: Sep 21 07:26:32 2026 GMT Not After : Sep 22 10:21:32 2026 GMT Subject: CN=EC379DAEE1D47D14498A1BB8300F601DB6ED7C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6b:2f:29:f4:95:9c:2b:78:14:67:a5:a7:2d: 0a:a4:39:49:9d:89:14:f3:f9:a6:90:cf:17:66:7f: a1:ba:29:72:db:53:8b:9e:19:c0:e0:6d:4b:c7:10: 8a:34:1a:c6:96:bf:4d:3e:8e:22:00:00:12:b6:88: c0:ce:07:d2:ad:32:36:8d:22:73:87:fc:d8:82:24: 20:bd:69:89:f2:d9:d8:48:4e:4c:6a:04:b0:4c:09: 48:31:ca:e7:84:ed:3d:0a:4f:e6:94:aa:cf:61:52: 1e:d4:54:f3:af:55:b6:b4:5e:4c:36:4a:72:31:88: e3:74:68:4b:a4:52:84:d6:1f:fd:54:c6:82:73:25: 6f:ed:61:26:77:d3:00:ee:2b:70:ff:d6:e2:71:1a: 7b:08:ad:f0:15:5f:de:39:fa:c0:1d:18:ea:f9:5c: 1b:7f:bd:e6:20:9c:19:5f:ba:22:af:db:44:c4:9b: 7f:d4:39:00:de:e2:f2:3a:e0:7c:dd:bc:31:e8:e6: 52:7d:ed:0d:2d:04:5b:f8:8e:23:ed:7d:67:04:ed: 89:fa:43:45:8a:12:bf:6b:00:53:37:4d:79:de:04: 4f:84:1b:22:a9:39:b3:f1:47:e2:41:a4:29:73:0d: 66:a9:ff:8b:26:8b:6c:d7:8f:5d:48:0f:61:3d:7a: 2d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:37:9D:AE:E1:D4:7D:14:49:8A:1B:B8:30:0F:60:1D:B6:ED:7C:3F X509v3 Authority Key Identifier: keyid:BA:A9:E1:B5:C5:6A:E2:AB:15:73:F4:DD:34:EE:67:94:3A:E5:D4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/0/BAA9E1B5C56AE2AB1573F4DD34EE67943AE5D4D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d2:55:94:9d:fe:d0:9c:b8:bf:82:ed:08:6e:bb:47:2e:00: 2b:99:e6:9c:ab:fb:c8:6a:2f:67:27:b7:8e:15:50:4d:19:b0: be:77:44:68:2f:ac:0a:60:8e:51:d2:fd:96:e3:4a:6b:ba:55: 32:58:b9:a3:7a:16:25:d9:95:ee:b1:f2:37:b9:29:07:c5:1d: c1:6b:76:c3:09:15:71:11:90:fc:fb:9a:2c:95:6d:e2:9f:8a: 78:18:39:00:15:93:30:ea:7f:70:0b:33:5d:e0:90:81:a2:c2: 09:f9:c8:43:a1:37:88:71:2e:57:f0:22:9a:12:30:6a:cc:39: 74:01:32:7f:33:4a:e4:1a:f2:52:e3:b8:7b:bb:4e:8b:de:51: b4:ae:9b:84:19:11:98:45:a3:c0:f0:55:7d:56:79:9f:cf:82: 50:fc:a8:79:d4:6c:93:70:fe:45:b4:1d:f5:af:cd:07:37:1f: 12:12:56:0f:cf:22:58:c5:a0:75:ec:c8:11:c7:eb:93:8f:5a: 8f:73:12:0f:eb:47:95:85:fb:e9:10:04:2c:9d:29:d8:2b:05: 55:e2:24:dd:8c:64:8e:ce:2f:58:7f:0a:22:10:61:9d:d1:07: d9:56:ec:1f:f2:1f:bf:fa:7f:77:51:17:9b:bc:cf:24:19:3b: 68:6b:33:12 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUead43RNIEZ7xhvQCzfepbP9p0DwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFBOUUxQjVDNTZBRTJBQjE1NzNGNEREMzRFRTY3OTQz QUU1RDREMDAeFw0yNjA5MjEwNzI2MzJaFw0yNjA5MjIxMDIxMzJaMDMxMTAvBgNV BAMTKEVDMzc5REFFRTFENDdEMTQ0OThBMUJCODMwMEY2MDFEQjZFRDdDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIay8p9JWcK3gUZ6WnLQqkOUmd iRTz+aaQzxdmf6G6KXLbU4ueGcDgbUvHEIo0GsaWv00+jiIAABK2iMDOB9KtMjaN InOH/NiCJCC9aYny2dhITkxqBLBMCUgxyueE7T0KT+aUqs9hUh7UVPOvVba0Xkw2 SnIxiON0aEukUoTWH/1UxoJzJW/tYSZ30wDuK3D/1uJxGnsIrfAVX945+sAdGOr5 XBt/veYgnBlfuiKv20TEm3/UOQDe4vI64HzdvDHo5lJ97Q0tBFv4jiPtfWcE7Yn6 Q0WKEr9rAFM3TXneBE+EGyKpObPxR+JBpClzDWap/4smi2zXj11ID2E9ei2LAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQU7DedruHUfRRJihu4MA9gHbbtfD8wHwYDVR0j BBgwFoAUuqnhtcVq4qsVc/TdNO5nlDrl1NAwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT T04vMC9CQUE5RTFCNUM1NkFFMkFCMTU3M0Y0REQzNEVFNjc5NDNBRTVENEQwLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8xL0JBQTlFMUI1QzU2QUUyQUIxNTczRjRERDM0 RUU2Nzk0M0FFNUQ0RDAuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HQU1CRVNPTi8wL0JBQTlFMUI1 QzU2QUUyQUIxNTczRjRERDM0RUU2Nzk0M0FFNUQ0RDAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAC0lWU nf7QnLi/gu0IbrtHLgArmeacq/vIai9nJ7eOFVBNGbC+d0RoL6wKYI5R0v2W40pr ulUyWLmjehYl2ZXusfI3uSkHxR3Ba3bDCRVxEZD8+5oslW3in4p4GDkAFZMw6n9w CzNd4JCBosIJ+chDoTeIcS5X8CKaEjBqzDl0ATJ/M0rkGvJS47h7u06L3lG0rpuE GRGYRaPA8FV9Vnmfz4JQ/Kh51GyTcP5FtB31r80HNx8SElYPzyJYxaB17MgRx+uT j1qPcxIP60eVhfvpEAQsnSnYKwVV4iTdjGSOzi9YfwoiEGGd0QfZVuwf8h+/+n93 URebvM8kGTtoazMS -----END CERTIFICATE-----Generated at Mon Sep 21 10:21:10 2026 by rpki-client