$ rpki-client -vvvf rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft File: 43A480538BE8801E606CB416A45E3AA47153C1FC.mft (raw, json) Hash identifier: Qa7JlfdRqmc+iqnKolQ3y9NPkbWTi5G99cc7rb8A+7U= Subject key identifier: 3C:CB:8E:14:55:1B:3B:F3:09:6B:C7:38:0C:5B:FB:B8:B1:98:AB:36 Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC Certificate issuer: /CN=43A480538BE8801E606CB416A45E3AA47153C1FC Certificate serial: 177CA3B31AC2AA1CD530F873B160BB9D8E4DF71E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft Manifest number: 0100 Signing time: Sun 15 Nov 2026 01:44:07 +0000 Manifest this update: Sun 15 Nov 2026 01:39:07 +0000 Manifest next update: Mon 16 Nov 2026 04:29:07 +0000 Files and hashes: 1: 3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa (hash: enUvdWAkv3wr02fiLz/3E6iu4tuKeGmnlUzXDsJesQk=) 2: 3136352e3130312e3135322e302f32342d3234203d3e20323133363037.roa (hash: sHCfIkF9qzIZq8AMwpW+WlyC30zePIr9BmIEP0fn7Y4=) 3: 3136352e3130312e3135332e302f32342d3234203d3e20313438393936.roa (hash: MdC/snBV9hQ+u+QY6j955XOCyB5J4gj5q3588sOilYM=) 4: 3136352e3130312e3135332e302f32342d3234203d3e203338383534.roa (hash: ZX435W6mSiU5YOUHhDiSylk5PHASkUUAzDgfNQHjX3k=) 5: 3136352e3130312e3135322e302f32332d3234203d3e20313334383233.roa (hash: kxyxCW3V2gaGnnDYD9cbiTDaL6NE6NvCZZRwhoM7WZw=) 6: 43A480538BE8801E606CB416A45E3AA47153C1FC.crl (hash: sKYUHh3hpw9G5lRXJbvN+VXWpJ17+JtqDbuBqszgPLQ=) 7: 3136352e3130312e3135322e302f32342d3234203d3e203338383534.roa (hash: U6Zr4HOjD89KuZO9y/utkpWh1ptd3yWY7OAdCYNAdtg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 04:29:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7c:a3:b3:1a:c2:aa:1c:d5:30:f8:73:b1:60:bb:9d:8e:4d:f7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC Validity Not Before: Nov 15 01:39:07 2026 GMT Not After : Nov 16 04:29:07 2026 GMT Subject: CN=3CCB8E14551B3BF3096BC7380C5BFBB8B198AB36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:cd:54:13:87:26:50:ef:05:8b:cc:bb:6d: 4d:d7:bb:19:b7:16:24:6a:73:3b:b0:7f:ba:7a:58: 61:16:40:f2:bc:14:49:93:3e:3b:ca:83:bb:bc:d2: 31:6a:ac:87:0e:9f:5b:b5:c1:8c:69:fa:f7:c7:a2: b8:2b:61:31:c1:10:bd:22:5c:9b:2c:18:03:a9:91: 8f:e2:32:e6:ac:e9:f6:41:41:30:5c:a6:2c:7b:e0: 77:c9:6f:17:b5:48:7d:a3:f2:e2:ea:0d:03:17:d5: 38:b6:4c:45:cb:5d:91:d7:20:82:9a:cf:19:62:28: 28:e4:a1:95:78:50:f4:56:e1:35:40:79:d5:6c:4c: c7:90:78:db:26:39:97:2f:f2:48:5f:1b:3e:fb:81: 5e:e5:e5:19:5b:66:29:ab:0a:32:b8:ce:5e:c6:31: ec:0f:03:d0:e3:84:fb:ef:02:22:c8:b6:03:4c:83: df:98:8e:a8:95:0e:6b:b9:61:22:cb:0f:2f:cb:87: 4f:74:a0:30:2c:ab:d1:b8:53:d9:dc:09:f3:54:76: 3d:76:b9:99:a5:ad:f4:a3:df:7f:5f:2e:43:2e:20: 7e:39:7b:26:ca:50:11:39:54:74:dc:d4:69:f5:72: 86:56:5c:e7:74:98:82:3c:cc:bb:cd:ff:e1:b0:56: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CB:8E:14:55:1B:3B:F3:09:6B:C7:38:0C:5B:FB:B8:B1:98:AB:36 X509v3 Authority Key Identifier: keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9a:be:1b:b8:af:13:b7:95:13:79:2d:4c:35:12:5e:d5:0a: cf:03:45:56:90:d7:df:b1:5d:bc:d7:9b:15:d0:3e:cf:74:58: 09:f6:ad:6c:c6:e9:9b:b7:f6:2f:bc:76:66:26:72:bf:25:e2: 27:af:f5:5d:99:8e:db:5b:32:24:d4:99:14:51:e8:7a:51:d1: 48:e1:3d:6b:a4:ad:f9:d3:cf:5f:5f:3f:56:d5:55:cc:a8:03: e4:a6:7e:64:7e:8b:eb:9f:22:39:8e:f2:e2:01:a0:51:c0:c4: 80:92:ea:c1:4f:d2:32:5c:9f:6e:e3:90:a4:92:a7:cd:eb:33: 74:2d:61:43:75:9c:32:cf:14:2e:f2:65:11:7a:36:4a:69:8f: ae:83:52:35:79:3c:29:76:27:cb:49:0e:3b:f7:82:1a:5a:65: 07:b2:36:9a:b5:b3:b5:16:f6:d2:98:72:37:f5:0a:fd:d3:be: 2f:2f:81:7f:8d:ba:5c:34:f2:90:31:63:b3:6c:de:e1:68:e7: 9b:e0:99:06:12:74:df:2a:3e:29:9d:49:20:45:c8:bc:f9:17: 9e:02:af:6c:7b:82:03:68:b6:8d:4f:52:3a:9c:49:aa:f3:ba: e8:6c:1c:e8:b5:1d:1a:17:43:14:ff:8a:59:31:e2:07:72:f1: 6b:77:78:b7 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUF3yjsxrCqhzVMPhzsWC7nY5N9x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBNDgwNTM4QkU4ODAxRTYwNkNCNDE2QTQ1RTNBQTQ3 MTUzQzFGQzAeFw0yNjExMTUwMTM5MDdaFw0yNjExMTYwNDI5MDdaMDMxMTAvBgNV BAMTKDNDQ0I4RTE0NTUxQjNCRjMwOTZCQzczODBDNUJGQkI4QjE5OEFCMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPs1UE4cmUO8Fi8y7bU3Xuxm3 FiRqczuwf7p6WGEWQPK8FEmTPjvKg7u80jFqrIcOn1u1wYxp+vfHorgrYTHBEL0i XJssGAOpkY/iMuas6fZBQTBcpix74HfJbxe1SH2j8uLqDQMX1Ti2TEXLXZHXIIKa zxliKCjkoZV4UPRW4TVAedVsTMeQeNsmOZcv8khfGz77gV7l5RlbZimrCjK4zl7G MewPA9DjhPvvAiLItgNMg9+YjqiVDmu5YSLLDy/Lh090oDAsq9G4U9ncCfNUdj12 uZmlrfSj339fLkMuIH45eybKUBE5VHTc1Gn1coZWXOd0mII8zLvN/+GwVuCVAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUPMuOFFUbO/MJa8c4DFv7uLGYqzYwHwYDVR0j BBgwFoAUQ6SAU4vogB5gbLQWpF46pHFTwfwwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT T04vMS80M0E0ODA1MzhCRTg4MDFFNjA2Q0I0MTZBNDVFM0FBNDcxNTNDMUZDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzQzQTQ4MDUzOEJFODgwMUU2MDZDQjQxNkE0 NUUzQUE0NzE1M0MxRkMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HQU1CRVNPTi8xLzQzQTQ4MDUz OEJFODgwMUU2MDZDQjQxNkE0NUUzQUE0NzE1M0MxRkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLmr4b uK8Tt5UTeS1MNRJe1QrPA0VWkNffsV2815sV0D7PdFgJ9q1sxumbt/YvvHZmJnK/ JeInr/VdmY7bWzIk1JkUUeh6UdFI4T1rpK35089fXz9W1VXMqAPkpn5kfovrnyI5 jvLiAaBRwMSAkurBT9IyXJ9u45CkkqfN6zN0LWFDdZwyzxQu8mURejZKaY+ug1I1 eTwpdifLSQ4794IaWmUHsjaatbO1FvbSmHI39Qr9074vL4F/jbpcNPKQMWOzbN7h aOeb4JkGEnTfKj4pnUkgRci8+ReeAq9se4IDaLaNT1I6nEmq87robBzotR0aF0MU /4pZMeIHcvFrd3i3 -----END CERTIFICATE-----Generated at Sun Nov 15 22:03:49 2026 by rpki-client