$ rpki-client -vvf rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft File: 43A480538BE8801E606CB416A45E3AA47153C1FC.mft (raw, json) Hash identifier: 6c6GAcMPWWs3KkqXfk2m4QDuw5rZb0SCkkRhDlrCzVE= Subject key identifier: 4D:B8:C0:26:6D:FB:FA:78:AD:B3:01:62:20:D5:35:3B:73:0F:B6:E3 Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC Certificate issuer: /CN=43A480538BE8801E606CB416A45E3AA47153C1FC Certificate serial: 1D47654F40F30E6E3C1F0DC8232231E8C7F2C3A7 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft Manifest number: 6E Signing time: Tue 28 Jul 2026 13:29:03 +0000 Manifest this update: Tue 28 Jul 2026 13:24:03 +0000 Manifest next update: Wed 29 Jul 2026 16:20:03 +0000 Files and hashes: 1: 3136352e3130312e3135332e302f32342d3234203d3e20313438393936.roa (hash: MdC/snBV9hQ+u+QY6j955XOCyB5J4gj5q3588sOilYM=) 2: 3136352e3130312e3135322e302f32342d3234203d3e203338383534.roa (hash: U6Zr4HOjD89KuZO9y/utkpWh1ptd3yWY7OAdCYNAdtg=) 3: 43A480538BE8801E606CB416A45E3AA47153C1FC.crl (hash: SN4rqe5JKnWINyWk88jfA7KrvmLCWhnDU0TKHpAai/c=) 4: 3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa (hash: enUvdWAkv3wr02fiLz/3E6iu4tuKeGmnlUzXDsJesQk=) 5: 3136352e3130312e3135322e302f32342d3234203d3e20323133363037.roa (hash: sHCfIkF9qzIZq8AMwpW+WlyC30zePIr9BmIEP0fn7Y4=) 6: 3136352e3130312e3135322e302f32332d3234203d3e20313334383233.roa (hash: kxyxCW3V2gaGnnDYD9cbiTDaL6NE6NvCZZRwhoM7WZw=) 7: 3136352e3130312e3135332e302f32342d3234203d3e203338383534.roa (hash: ZX435W6mSiU5YOUHhDiSylk5PHASkUUAzDgfNQHjX3k=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:44:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:47:65:4f:40:f3:0e:6e:3c:1f:0d:c8:23:22:31:e8:c7:f2:c3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC Validity Not Before: Jul 28 13:24:03 2026 GMT Not After : Jul 29 16:20:03 2026 GMT Subject: CN=4DB8C0266DFBFA78ADB3016220D5353B730FB6E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4e:bf:ec:8a:92:f1:49:93:5f:ef:d0:7c:b6: ed:4d:ef:e3:69:81:7f:f9:57:d9:26:0e:01:27:34: ab:23:65:e5:c5:a3:dd:b0:da:be:90:48:d4:ea:9e: af:5b:91:a1:a6:6a:6f:be:7b:6c:5e:53:ee:fe:04: 0a:98:6b:36:90:1c:50:99:4c:b0:7b:80:b1:fc:1a: b5:4a:0d:11:de:65:d9:35:67:fb:99:80:c6:36:3d: 0d:9f:a5:e9:44:f7:3f:82:b9:00:8f:3e:2c:b2:87: 40:3e:dc:b9:f8:cc:d1:92:e4:4c:f6:45:f5:f1:5f: e2:5c:ba:e2:34:a4:e3:b6:c1:49:46:77:09:aa:b4: 00:26:ac:ac:d3:c2:9d:c8:b2:c0:ca:54:bd:81:a4: 03:19:33:d4:d2:47:9c:7e:67:bf:2d:52:e6:8c:1b: d3:6d:a4:2f:5d:74:c1:76:ff:a4:38:0a:b1:49:52: 62:9f:4b:d0:6c:33:70:13:2e:05:b8:0d:1b:46:1f: 64:d0:f3:a1:21:64:4b:98:5c:18:03:94:a3:5e:d7: 3c:a5:13:46:52:19:38:ed:1e:f1:88:d0:fa:70:3e: ce:2a:7e:96:54:0d:d4:61:b5:ae:59:d0:1f:aa:f0: 1b:33:ef:b6:c6:2e:b0:f7:b2:a3:5b:2c:7c:99:2e: bc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B8:C0:26:6D:FB:FA:78:AD:B3:01:62:20:D5:35:3B:73:0F:B6:E3 X509v3 Authority Key Identifier: keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:4a:40:3f:a0:00:a4:54:b3:75:6c:eb:98:b8:3b:b1:c8:2d: 9d:2d:2a:13:a2:70:3f:8b:dd:0b:71:d5:2d:9d:f0:47:cb:68: 99:b0:a6:3c:e5:43:98:89:21:66:2b:44:58:f6:82:7a:de:0f: 78:5d:ae:8b:af:44:a4:10:69:6e:90:c3:ec:87:34:23:1d:b1: c9:4e:1b:19:45:20:32:7d:cb:a4:77:10:b3:88:5b:27:e0:c3: bf:e8:53:98:41:72:67:b1:1b:9a:d1:e9:a5:3b:4c:3a:09:4d: f1:c8:3e:27:15:f9:82:4d:8a:8c:1a:b1:51:cb:88:65:29:36: 3d:09:d0:b2:b5:53:8b:ab:7c:e2:59:c0:65:00:30:c9:a4:0c: 24:24:1d:eb:7c:b6:f4:55:4f:55:86:f5:30:36:80:60:8f:ce: 98:c3:2f:89:0a:2c:ed:5a:a9:90:3c:18:75:64:bb:2d:20:a7: 03:1a:d8:33:d9:c9:ef:47:8d:4e:2c:c2:1f:48:4d:de:cf:9f: 91:3c:a2:b6:e9:bb:3c:48:7b:9d:be:39:f3:0b:2c:22:4b:15: 1f:69:fb:3b:78:27:ab:58:aa:68:37:17:d6:95:7c:9a:41:a2: c4:7c:23:60:9b:c1:ec:cd:07:10:97:e6:6f:4e:ec:29:c7:50: 22:0c:9d:e2 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUHUdlT0DzDm48Hw3IIyIx6Mfyw6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBNDgwNTM4QkU4ODAxRTYwNkNCNDE2QTQ1RTNBQTQ3 MTUzQzFGQzAeFw0yNjA3MjgxMzI0MDNaFw0yNjA3MjkxNjIwMDNaMDMxMTAvBgNV BAMTKDREQjhDMDI2NkRGQkZBNzhBREIzMDE2MjIwRDUzNTNCNzMwRkI2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPTr/sipLxSZNf79B8tu1N7+Np gX/5V9kmDgEnNKsjZeXFo92w2r6QSNTqnq9bkaGmam++e2xeU+7+BAqYazaQHFCZ TLB7gLH8GrVKDRHeZdk1Z/uZgMY2PQ2fpelE9z+CuQCPPiyyh0A+3Ln4zNGS5Ez2 RfXxX+JcuuI0pOO2wUlGdwmqtAAmrKzTwp3IssDKVL2BpAMZM9TSR5x+Z78tUuaM G9NtpC9ddMF2/6Q4CrFJUmKfS9BsM3ATLgW4DRtGH2TQ86EhZEuYXBgDlKNe1zyl E0ZSGTjtHvGI0PpwPs4qfpZUDdRhta5Z0B+q8Bsz77bGLrD3sqNbLHyZLrzRAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUTbjAJm37+nitswFiINU1O3MPtuMwHwYDVR0j BBgwFoAUQ6SAU4vogB5gbLQWpF46pHFTwfwwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT T04vMS80M0E0ODA1MzhCRTg4MDFFNjA2Q0I0MTZBNDVFM0FBNDcxNTNDMUZDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzQzQTQ4MDUzOEJFODgwMUU2MDZDQjQxNkE0 NUUzQUE0NzE1M0MxRkMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HQU1CRVNPTi8xLzQzQTQ4MDUz OEJFODgwMUU2MDZDQjQxNkE0NUUzQUE0NzE1M0MxRkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5SkA/ oACkVLN1bOuYuDuxyC2dLSoTonA/i90LcdUtnfBHy2iZsKY85UOYiSFmK0RY9oJ6 3g94Xa6Lr0SkEGlukMPshzQjHbHJThsZRSAyfcukdxCziFsn4MO/6FOYQXJnsRua 0emlO0w6CU3xyD4nFfmCTYqMGrFRy4hlKTY9CdCytVOLq3ziWcBlADDJpAwkJB3r fLb0VU9VhvUwNoBgj86Ywy+JCiztWqmQPBh1ZLstIKcDGtgz2cnvR41OLMIfSE3e z5+RPKK26bs8SHudvjnzCywiSxUfafs7eCerWKpoNxfWlXyaQaLEfCNgm8HszQcQ l+ZvTuwpx1AiDJ3i -----END CERTIFICATE-----Generated at Tue Jul 28 23:17:34 2026 by rpki-client