
$ rpki-client -vvvf rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
File: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft (raw, json)
Hash identifier: gTDecqPKW3UlePQbD5hllv1PvvHBetThPcaP1i9+0yU=
Subject key identifier: 83:52:70:C3:A5:3B:2F:BF:52:A6:8B:53:F7:7F:17:E4:83:1C:2E:3E
Authority key identifier: 16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
Certificate issuer: /CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
Certificate serial: 73273BD052B72498EC08F2C8A601F9D342D2AE06
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
Manifest number: B9
Signing time: Thu 24 Sep 2026 18:08:33 +0000
Manifest this update: Thu 24 Sep 2026 18:03:33 +0000
Manifest next update: Fri 25 Sep 2026 18:12:33 +0000
Files and hashes: 1: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl (hash: 2/2B3iO2YyzF/k+/qhx3cbsknTGxmmhYiveq5enky08=)
2: 3135312e3135382e38382e302f32332d3234203d3e20313331363332.roa (hash: c6jDK+d+OW0nq16fGHUI84OiS+BXXy5ZOIm0keyUDog=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl
rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 18:12:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:27:3b:d0:52:b7:24:98:ec:08:f2:c8:a6:01:f9:d3:42:d2:ae:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
Validity
Not Before: Sep 24 18:03:33 2026 GMT
Not After : Sep 25 18:12:33 2026 GMT
Subject: CN=835270C3A53B2FBF52A68B53F77F17E4831C2E3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:2d:1f:80:6a:1f:fc:15:78:dc:1a:1d:6d:
c7:ef:a4:18:31:52:fd:8b:94:ec:d2:4d:7f:1e:e5:
6f:84:7f:eb:30:52:5b:73:14:b7:b7:cc:ca:0a:6d:
06:d3:68:66:33:8b:f0:fe:72:e1:71:1a:2f:e4:f7:
c9:3b:09:32:ba:84:5f:6d:b5:5c:8e:dc:85:f5:cc:
65:4a:9b:7d:d3:1b:36:0a:0b:5a:be:4b:72:cd:c9:
e0:7b:6d:1e:be:f7:3f:4d:c5:a3:5d:fa:5f:a3:3d:
b6:1b:a6:67:b5:27:40:fe:9a:97:c0:29:60:22:a2:
e6:d7:dc:a9:5f:85:ab:3f:de:c7:14:27:bc:87:17:
26:ce:57:99:53:ae:e7:2f:ea:62:c7:47:3f:f6:91:
1f:34:2a:c3:ac:38:24:b3:bf:75:99:ca:f0:ea:fd:
c0:7a:87:56:1c:c1:c4:a7:98:bb:55:43:64:48:41:
62:67:71:be:a3:a3:3c:fd:cd:5e:26:7b:5f:89:49:
e0:f1:ad:6a:0a:ed:06:45:c8:8e:d2:6f:97:0f:dd:
67:05:8c:39:d3:e7:f4:85:63:9d:dd:f6:b0:f8:1a:
c4:0d:83:84:00:9a:05:9c:bc:72:ec:1e:f2:f7:8d:
93:52:a5:1d:a8:b8:8f:0b:a7:9f:b2:b2:e5:f4:35:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:52:70:C3:A5:3B:2F:BF:52:A6:8B:53:F7:7F:17:E4:83:1C:2E:3E
X509v3 Authority Key Identifier:
keyid:16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f4:fb:dd:f6:94:a3:5b:66:51:87:07:54:87:56:a0:87:bd:
1d:63:e8:8a:e9:3a:5e:9a:16:7f:33:11:ab:15:6f:4a:3b:f1:
1e:86:04:32:3f:a1:45:6b:6f:cf:da:6c:17:a2:f2:c3:00:c0:
af:b2:7d:21:7e:d3:1c:92:95:ae:2f:be:c5:3c:5d:fd:aa:4e:
f3:9d:77:9d:f5:be:51:a5:a2:90:5b:bf:4f:27:23:f6:b7:69:
29:32:47:4f:a4:89:fd:d2:aa:fa:4b:ab:4b:d3:c8:d2:8b:ed:
6a:2d:c6:53:e9:1e:28:01:99:2d:ad:10:2b:8d:eb:87:00:8c:
35:ea:35:82:60:8e:ca:c1:b2:70:a7:5c:1a:22:e2:ab:47:93:
b8:68:17:cd:a5:e6:c9:fd:61:4d:96:79:03:85:3f:33:8c:64:
70:6a:33:a8:db:b0:67:03:01:4d:69:51:aa:6f:f0:61:19:6e:
ae:f0:7a:1d:76:f5:20:e0:31:dc:15:17:c1:16:a6:5a:2a:07:
c8:ab:f5:8b:e9:fd:01:72:3a:ca:37:a0:86:b4:31:dc:25:9e:
f8:dd:0d:72:c4:bc:89:39:45:09:30:2a:24:43:08:3f:ca:3e:
e3:4d:87:f7:69:27:b3:26:56:09:82:33:ed:55:c3:05:7d:ca:
e1:be:09:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:46:40 2026 by rpki-client