$ rpki-client -vvf rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft File: 43A480538BE8801E606CB416A45E3AA47153C1FC.mft (raw, json) Hash identifier: 8aZqnVjEypEE2OoFqyAEci1NEVECz7dv3sDIb3xTaHY= Subject key identifier: 54:F0:65:4F:B6:93:2F:73:F7:38:E5:9A:0B:E6:7B:72:5C:9D:90:27 Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC Certificate issuer: /CN=43A480538BE8801E606CB416A45E3AA47153C1FC Certificate serial: 43FC3F259314901E497020A7C4F18FD002C5BA5C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft Manifest number: 32 Signing time: Sat 13 Jun 2026 05:14:02 +0000 Manifest this update: Sat 13 Jun 2026 05:09:02 +0000 Manifest next update: Sun 14 Jun 2026 05:54:02 +0000 Files and hashes: 1: 3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa (hash: enUvdWAkv3wr02fiLz/3E6iu4tuKeGmnlUzXDsJesQk=) 2: 3136352e3130312e3135322e302f32332d3234203d3e20313334383233.roa (hash: kxyxCW3V2gaGnnDYD9cbiTDaL6NE6NvCZZRwhoM7WZw=) 3: 3136352e3130312e3135322e302f32342d3234203d3e203338383534.roa (hash: U6Zr4HOjD89KuZO9y/utkpWh1ptd3yWY7OAdCYNAdtg=) 4: 43A480538BE8801E606CB416A45E3AA47153C1FC.crl (hash: vj8kaCFAOFHUp6tNfn+rbsaO32k8f5JOmKSrQcZm0RA=) 5: 3136352e3130312e3135332e302f32342d3234203d3e203338383534.roa (hash: ZX435W6mSiU5YOUHhDiSylk5PHASkUUAzDgfNQHjX3k=) 6: 3136352e3130312e3135322e302f32342d3234203d3e20323133363037.roa (hash: sHCfIkF9qzIZq8AMwpW+WlyC30zePIr9BmIEP0fn7Y4=) 7: 3136352e3130312e3135332e302f32342d3234203d3e20313438393936.roa (hash: MdC/snBV9hQ+u+QY6j955XOCyB5J4gj5q3588sOilYM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 22:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fc:3f:25:93:14:90:1e:49:70:20:a7:c4:f1:8f:d0:02:c5:ba:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC Validity Not Before: Jun 13 05:09:02 2026 GMT Not After : Jun 14 05:54:02 2026 GMT Subject: CN=54F0654FB6932F73F738E59A0BE67B725C9D9027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:1d:83:dd:1c:ed:3e:65:9e:19:c4:61:11: 41:30:6c:0c:c4:e5:0c:31:f8:82:ce:a5:f1:1a:5f: 35:4b:fb:4f:27:c8:51:6f:34:d0:5d:75:33:7b:5c: 9a:7b:39:dd:82:52:3a:b6:01:30:45:b3:3a:43:75: b8:80:ee:11:c2:91:72:60:f2:81:5f:ab:5e:bc:31: ad:f3:dc:54:79:bc:99:0c:2b:cd:60:81:7d:9d:5a: 3a:bf:fc:8c:96:03:ec:97:82:4d:ad:e0:45:e5:6a: 14:00:09:cf:c8:be:06:e8:22:3c:34:31:86:04:3c: 45:de:c1:10:c4:4c:c9:5f:de:aa:61:81:38:f4:4d: 08:98:79:8c:3e:46:4b:30:63:24:49:55:2b:97:9f: ff:41:45:05:24:72:c5:87:96:6b:eb:d9:7c:1a:0c: 6c:05:5b:dd:bd:a2:89:e3:06:67:6c:81:32:07:35: 50:5a:79:fa:dc:75:e8:0a:f8:01:b3:4b:ee:ee:1e: f3:42:52:f9:c8:e5:53:98:07:44:c0:9e:32:52:ce: 55:19:26:78:a4:32:52:d1:10:f9:35:a6:af:30:3f: 22:4b:3a:f6:e4:38:c9:1f:ce:af:4d:26:0b:ea:82: dc:bb:ce:a9:d4:97:3f:f0:c7:8d:0f:57:b1:30:19: c5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F0:65:4F:B6:93:2F:73:F7:38:E5:9A:0B:E6:7B:72:5C:9D:90:27 X509v3 Authority Key Identifier: keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:92:2f:85:df:eb:4f:22:3b:94:74:ae:59:2f:09:b1:6e:00: 8e:54:43:f1:be:0f:e5:55:07:b5:f8:d8:95:39:c9:a0:d0:08: de:cd:a8:48:8d:91:ff:ff:01:f7:47:46:bb:2f:40:e8:cf:61: d7:70:a4:85:bd:78:52:04:df:4b:bf:c1:2c:a4:f5:0a:1f:19: c6:57:9a:a7:21:1f:11:d1:be:78:c7:80:a5:2f:94:84:fd:7d: 05:eb:a3:49:34:64:ac:16:f3:f4:a7:c8:2d:54:44:52:14:a4: 58:25:61:a8:44:46:d4:df:09:36:4f:77:e8:70:59:90:ba:4b: 12:8b:48:45:8f:f0:86:73:4b:15:e9:1e:98:0e:e6:c6:de:8e: 2a:98:e4:ad:35:97:0f:2b:fe:98:0c:b7:a1:bc:99:c9:1d:ef: 21:49:27:11:49:d3:9e:94:ad:d3:1a:ad:da:87:7f:38:62:b3: 4a:96:3e:28:36:2b:af:79:32:86:d9:60:c4:87:d2:2c:e9:0d: 19:ec:b6:6a:ad:ab:75:c9:96:1c:30:5b:55:50:c3:2b:12:1a: 02:f6:5e:5a:c5:ba:f8:6b:d6:f7:51:ef:8a:2b:b9:30:89:e1: 7f:4a:ab:b3:f1:ad:54:36:8b:69:2c:f4:75:50:e0:7d:3f:40: 3f:10:93:f3 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUQ/w/JZMUkB5JcCCnxPGP0ALFulwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBNDgwNTM4QkU4ODAxRTYwNkNCNDE2QTQ1RTNBQTQ3 MTUzQzFGQzAeFw0yNjA2MTMwNTA5MDJaFw0yNjA2MTQwNTU0MDJaMDMxMTAvBgNV BAMTKDU0RjA2NTRGQjY5MzJGNzNGNzM4RTU5QTBCRTY3QjcyNUM5RDkwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Eh2D3RztPmWeGcRhEUEwbAzE 5Qwx+ILOpfEaXzVL+08nyFFvNNBddTN7XJp7Od2CUjq2ATBFszpDdbiA7hHCkXJg 8oFfq168Ma3z3FR5vJkMK81ggX2dWjq//IyWA+yXgk2t4EXlahQACc/IvgboIjw0 MYYEPEXewRDETMlf3qphgTj0TQiYeYw+RkswYyRJVSuXn/9BRQUkcsWHlmvr2Xwa DGwFW929oonjBmdsgTIHNVBaefrcdegK+AGzS+7uHvNCUvnI5VOYB0TAnjJSzlUZ JnikMlLREPk1pq8wPyJLOvbkOMkfzq9NJgvqgty7zqnUlz/wx40PV7EwGcXBAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUVPBlT7aTL3P3OOWaC+Z7clydkCcwHwYDVR0j BBgwFoAUQ6SAU4vogB5gbLQWpF46pHFTwfwwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT T04vMS80M0E0ODA1MzhCRTg4MDFFNjA2Q0I0MTZBNDVFM0FBNDcxNTNDMUZDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzQzQTQ4MDUzOEJFODgwMUU2MDZDQjQxNkE0 NUUzQUE0NzE1M0MxRkMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HQU1CRVNPTi8xLzQzQTQ4MDUz OEJFODgwMUU2MDZDQjQxNkE0NUUzQUE0NzE1M0MxRkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMki+F 3+tPIjuUdK5ZLwmxbgCOVEPxvg/lVQe1+NiVOcmg0AjezahIjZH//wH3R0a7L0Do z2HXcKSFvXhSBN9Lv8EspPUKHxnGV5qnIR8R0b54x4ClL5SE/X0F66NJNGSsFvP0 p8gtVERSFKRYJWGoREbU3wk2T3focFmQuksSi0hFj/CGc0sV6R6YDubG3o4qmOSt NZcPK/6YDLehvJnJHe8hSScRSdOelK3TGq3ah384YrNKlj4oNiuveTKG2WDEh9Is 6Q0Z7LZqrat1yZYcMFtVUMMrEhoC9l5axbr4a9b3Ue+KK7kwieF/Squz8a1UNotp LPR1UOB9P0A/EJPz -----END CERTIFICATE-----Generated at Sat Jun 13 11:29:51 2026 by rpki-client