$ rpki-client -vvvf rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft File: 43A480538BE8801E606CB416A45E3AA47153C1FC.mft (raw, json) Hash identifier: lx6mSmplpzx94blqm1KCbvZYaecfRzr872KqMUcWxJY= Subject key identifier: 5F:F5:43:3A:41:A6:84:C2:D5:C8:28:E0:C4:C7:A1:F0:DE:66:EE:91 Authority key identifier: 43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC Certificate issuer: /CN=43A480538BE8801E606CB416A45E3AA47153C1FC Certificate serial: 7C1D97B2EEC04B9B5D0B50AB98EE267AA9699A56 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft Manifest number: B7 Signing time: Mon 21 Sep 2026 08:01:36 +0000 Manifest this update: Mon 21 Sep 2026 07:56:36 +0000 Manifest next update: Tue 22 Sep 2026 10:57:36 +0000 Files and hashes: 1: 43A480538BE8801E606CB416A45E3AA47153C1FC.crl (hash: sQnt/SBKfXLkdfzR8hBpmmRYV67+aqMxXAQaAYXAUmA=) 2: 3136352e3130312e3135332e302f32342d3234203d3e203338383534.roa (hash: ZX435W6mSiU5YOUHhDiSylk5PHASkUUAzDgfNQHjX3k=) 3: 3136352e3130312e3135322e302f32342d3234203d3e20323133363037.roa (hash: sHCfIkF9qzIZq8AMwpW+WlyC30zePIr9BmIEP0fn7Y4=) 4: 3136352e3130312e3135322e302f32342d3234203d3e20313334383233.roa (hash: enUvdWAkv3wr02fiLz/3E6iu4tuKeGmnlUzXDsJesQk=) 5: 3136352e3130312e3135322e302f32332d3234203d3e20313334383233.roa (hash: kxyxCW3V2gaGnnDYD9cbiTDaL6NE6NvCZZRwhoM7WZw=) 6: 3136352e3130312e3135322e302f32342d3234203d3e203338383534.roa (hash: U6Zr4HOjD89KuZO9y/utkpWh1ptd3yWY7OAdCYNAdtg=) 7: 3136352e3130312e3135332e302f32342d3234203d3e20313438393936.roa (hash: MdC/snBV9hQ+u+QY6j955XOCyB5J4gj5q3588sOilYM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0/C3F27ABBA40D0C146E6599E319B2F8B79656A6F3.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/w_J6u6QNDBRuZZnjGbL4t5ZWpvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 08:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1d:97:b2:ee:c0:4b:9b:5d:0b:50:ab:98:ee:26:7a:a9:69:9a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43A480538BE8801E606CB416A45E3AA47153C1FC Validity Not Before: Sep 21 07:56:36 2026 GMT Not After : Sep 22 10:57:36 2026 GMT Subject: CN=5FF5433A41A684C2D5C828E0C4C7A1F0DE66EE91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:21:b3:56:06:4b:9a:7f:63:a8:84:eb:37: 56:36:f3:98:ab:07:99:53:06:44:e9:54:64:a8:bb: a5:0c:29:93:70:e1:59:79:a6:f6:76:00:bd:63:99: 7e:57:63:d1:57:a6:8d:8a:2f:4a:9d:2b:19:55:27: 3b:c9:e9:f4:a0:92:66:17:91:5a:ee:d8:27:cc:5c: 5e:65:aa:a7:42:90:03:63:36:c9:2d:9a:28:43:76: b3:f3:bf:3a:45:36:d8:87:6e:d6:fb:3c:07:27:e6: 1f:d5:b6:3e:1e:c8:03:b8:d4:c2:2c:a0:d0:e8:53: 55:3e:ad:d9:9c:00:71:dc:de:7d:b2:e5:28:e7:d3: f2:1a:e2:22:de:8f:46:37:3c:f6:d5:a8:07:90:13: 74:ac:99:c3:90:19:42:1d:85:91:6f:de:e7:94:c1: 3e:2e:a8:50:51:48:86:3b:49:f1:79:36:30:80:01: c2:90:b4:87:bc:84:5d:b3:01:da:97:3b:48:20:0e: 48:07:96:30:e8:91:f2:fe:f4:b8:4a:0d:a1:50:dd: 4e:f5:f4:d0:29:1e:71:3f:9b:5f:5b:fd:5c:da:c9: ca:f0:91:03:54:40:70:a3:d5:cc:bb:f2:32:ab:c3: 95:11:6e:2f:d2:6d:a0:85:1b:be:1e:a1:74:ac:bd: ee:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F5:43:3A:41:A6:84:C2:D5:C8:28:E0:C4:C7:A1:F0:DE:66:EE:91 X509v3 Authority Key Identifier: keyid:43:A4:80:53:8B:E8:80:1E:60:6C:B4:16:A4:5E:3A:A4:71:53:C1:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0/43A480538BE8801E606CB416A45E3AA47153C1FC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GAMBESON/1/43A480538BE8801E606CB416A45E3AA47153C1FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:cd:8c:3e:83:8a:9f:cd:29:28:7d:6b:73:dc:d6:a1:7b:01: fa:20:d4:4e:cc:cf:23:79:65:f0:96:33:31:ed:92:3e:0b:2b: 15:43:8b:8c:bd:3a:c8:ec:8d:0d:f3:e7:4c:a0:31:74:f7:24: 79:e6:e8:6d:cc:04:4c:b9:35:9a:1d:7e:fb:1e:73:14:52:38: 6f:0b:7f:37:8c:f9:92:32:9e:59:6b:84:76:41:c0:57:df:43: 41:64:27:54:e2:e2:0e:1d:6a:cc:b2:a5:38:f5:28:99:80:9a: e1:a9:ec:e6:62:b0:7e:1a:20:89:94:63:05:28:26:fe:c4:fe: 12:ef:93:11:ca:84:f9:bb:ca:dc:00:8c:56:0b:3c:4d:19:f4: ff:e3:1f:c1:51:35:d5:1a:77:13:a8:3c:e6:11:41:37:f1:48: 2b:a1:95:d2:ad:c8:6b:7a:18:58:fe:91:b7:6e:f9:02:73:6f: a2:2f:26:27:a8:a0:e2:bf:86:42:fb:81:21:a7:a5:68:74:8e: 28:13:70:b1:1b:66:00:c6:96:c7:0b:01:0c:3b:4b:81:51:4c: 89:e0:c6:f8:f3:f7:9d:24:d3:2f:0d:d6:4d:94:8b:e3:3b:5d: 39:72:dc:83:aa:1d:ed:0a:a8:bd:34:b8:39:4c:c6:76:66:7c: 0b:be:f6:28 -----BEGIN CERTIFICATE----- MIIE6DCCA9CgAwIBAgIUfB2Xsu7AS5tdC1CrmO4meqlpmlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDNBNDgwNTM4QkU4ODAxRTYwNkNCNDE2QTQ1RTNBQTQ3 MTUzQzFGQzAeFw0yNjA5MjEwNzU2MzZaFw0yNjA5MjIxMDU3MzZaMDMxMTAvBgNV BAMTKDVGRjU0MzNBNDFBNjg0QzJENUM4MjhFMEM0QzdBMUYwREU2NkVFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzyGzVgZLmn9jqITrN1Y285ir B5lTBkTpVGSou6UMKZNw4Vl5pvZ2AL1jmX5XY9FXpo2KL0qdKxlVJzvJ6fSgkmYX kVru2CfMXF5lqqdCkANjNsktmihDdrPzvzpFNtiHbtb7PAcn5h/Vtj4eyAO41MIs oNDoU1U+rdmcAHHc3n2y5Sjn0/Ia4iLej0Y3PPbVqAeQE3SsmcOQGUIdhZFv3ueU wT4uqFBRSIY7SfF5NjCAAcKQtIe8hF2zAdqXO0ggDkgHljDokfL+9LhKDaFQ3U71 9NApHnE/m19b/VzaycrwkQNUQHCj1cy78jKrw5URbi/SbaCFG74eoXSsve4fAgMB AAGjggHyMIIB7jAdBgNVHQ4EFgQUX/VDOkGmhMLVyCjgxMeh8N5m7pEwHwYDVR0j BBgwFoAUQ6SAU4vogB5gbLQWpF46pHFTwfwwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR0FNQkVT T04vMS80M0E0ODA1MzhCRTg4MDFFNjA2Q0I0MTZBNDVFM0FBNDcxNTNDMUZDLmNy bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3 bmljLnR3L3Jwa2kvVFdOSUNDQS8wLzQzQTQ4MDUzOEJFODgwMUU2MDZDQjQxNkE0 NUUzQUE0NzE1M0MxRkMuY2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZU cnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9HQU1CRVNPTi8xLzQzQTQ4MDUz OEJFODgwMUU2MDZDQjQxNkE0NUUzQUE0NzE1M0MxRkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0zYw+ g4qfzSkofWtz3NahewH6INROzM8jeWXwljMx7ZI+CysVQ4uMvTrI7I0N8+dMoDF0 9yR55uhtzARMuTWaHX77HnMUUjhvC383jPmSMp5Za4R2QcBX30NBZCdU4uIOHWrM sqU49SiZgJrhqezmYrB+GiCJlGMFKCb+xP4S75MRyoT5u8rcAIxWCzxNGfT/4x/B UTXVGncTqDzmEUE38UgroZXSrchrehhY/pG3bvkCc2+iLyYnqKDiv4ZC+4Ehp6Vo dI4oE3CxG2YAxpbHCwEMO0uBUUyJ4Mb48/edJNMvDdZNlIvjO105ctyDqh3tCqi9 NLg5TMZ2ZnwLvvYo -----END CERTIFICATE-----Generated at Mon Sep 21 17:51:01 2026 by rpki-client