$ rpki-client -vvf rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft File: 2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft (raw, json) Hash identifier: B5yM50TC43bpU7/UTai0q5Q2g+vvItifVqMriaaRS2g= Subject key identifier: B7:6A:59:14:60:6F:E1:80:2B:2F:9F:3C:B3:9B:08:72:AF:F6:D6:EA Authority key identifier: 21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E Certificate issuer: /CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E Certificate serial: 652AEA801B607FF40256A6DB61A8547609483C51 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 18:01:25 +0000 Manifest this update: Thu 23 Jul 2026 17:56:25 +0000 Manifest next update: Fri 24 Jul 2026 20:15:25 +0000 Files and hashes: 1: 2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl (hash: 4Bllt/Q+msvyB89FOj+O7ZOz4jMuLRCA33BKmPAsews=) 2: 323430353a613034303a3a2f33322d3336203d3e20313331363637.roa (hash: w3hpJj+HoeJno1FTJaaLoGf0DFxePbcn5GPTViDGefQ=) 3: 3130332e3134362e3231302e302f32332d3234203d3e20313331363637.roa (hash: totaPLv4w3h/keOS204h6s1sWAndNPLEGS0TWucTSQY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2a:ea:80:1b:60:7f:f4:02:56:a6:db:61:a8:54:76:09:48:3c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E Validity Not Before: Jul 23 17:56:25 2026 GMT Not After : Jul 24 20:15:25 2026 GMT Subject: CN=B76A5914606FE1802B2F9F3CB39B0872AFF6D6EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:46:0c:4e:bf:ac:09:3f:8a:7f:61:2d:82: 69:18:09:33:76:c2:f6:b2:d6:79:55:52:0f:3f:59: 71:14:12:29:fe:71:fd:5f:93:34:68:fd:8c:8e:b2: 71:52:ad:d3:d0:f3:d3:e6:dd:94:6c:33:db:db:90: 54:fd:be:ce:82:3f:0e:34:0e:e7:53:c1:6d:5c:89: c8:a7:bb:9d:8b:78:7a:66:d5:f7:32:09:2b:36:58: a7:96:5f:68:04:40:72:ed:fd:5c:ca:5f:3c:b3:69: c2:84:f5:88:a7:9a:d4:28:2b:87:a2:6b:04:93:ce: b4:ca:03:cf:26:aa:01:c5:0a:fa:5f:67:e7:c6:68: 85:ab:09:bd:3e:8f:90:dd:ac:cb:dc:e3:a9:f8:5f: 0a:a0:80:52:e3:13:ef:45:c0:db:e9:38:16:bd:0d: 30:02:04:c0:5f:ba:21:d5:4e:e2:ed:8e:31:00:8a: e4:ab:7f:19:34:2f:3d:55:d7:5a:bd:97:a3:e3:fb: 4b:12:45:27:c1:76:37:63:6a:39:36:57:03:47:76: 72:81:07:0d:ae:09:36:fd:85:a7:22:a8:3a:0c:66: 92:30:a1:49:4e:31:ad:ac:7d:33:42:08:d9:d7:1a: b9:77:6c:61:67:de:bd:ed:71:12:08:4a:27:99:c2: 96:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6A:59:14:60:6F:E1:80:2B:2F:9F:3C:B3:9B:08:72:AF:F6:D6:EA X509v3 Authority Key Identifier: keyid:21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:bf:15:5c:20:ec:8c:d6:80:2e:87:32:68:fb:7f:5f:19:09: 8b:33:9e:24:b1:08:a0:c3:14:49:1e:94:58:ec:2a:a2:a7:8e: 79:67:c9:25:4b:97:2f:c0:5d:8f:ae:d8:74:56:8d:c2:0c:33: 08:8d:62:4a:8d:4e:8e:43:53:73:83:59:07:3f:02:28:e4:c2: 9d:26:2e:18:38:45:a7:5d:4f:94:41:ff:0f:1c:e5:57:4d:71: 80:8d:cf:c7:65:c1:a6:42:c9:bd:f4:47:3c:11:72:ff:2e:e9: 2f:b2:b0:59:05:ef:55:57:4d:9b:5e:ee:20:5b:7c:a5:cc:24: c5:62:3b:a3:2a:9a:5b:f1:d8:cd:22:22:72:28:b8:ef:cd:68: 58:25:e3:14:e3:5f:a4:7c:c5:da:b0:fe:52:10:a3:97:a2:f0: 93:98:d9:f4:1c:80:a7:e5:c1:7f:5e:b2:95:f3:3b:88:cf:ce: fb:56:d8:98:54:32:6c:04:a7:fe:36:30:0f:5c:5b:4f:15:9f: 44:b6:bc:e4:60:67:bc:32:32:ca:75:6d:51:e6:b1:f6:cd:83: 78:35:94:3d:59:8a:db:6e:40:76:95:27:64:1e:69:a7:7b:83: d3:3f:1b:02:c5:2f:74:63:ee:da:bf:c5:95:53:32:e5:66:e4: 8f:10:95:62 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUZSrqgBtgf/QCVqbbYahUdglIPFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE2NEQxOUE2MjZGRjVBNDMyN0NBRkM4QjgzRjkzOTdC OEExNDg3RTAeFw0yNjA3MjMxNzU2MjVaFw0yNjA3MjQyMDE1MjVaMDMxMTAvBgNV BAMTKEI3NkE1OTE0NjA2RkUxODAyQjJGOUYzQ0IzOUIwODcyQUZGNkQ2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvH0YMTr+sCT+Kf2EtgmkYCTN2 wvay1nlVUg8/WXEUEin+cf1fkzRo/YyOsnFSrdPQ89Pm3ZRsM9vbkFT9vs6CPw40 DudTwW1cicinu52LeHpm1fcyCSs2WKeWX2gEQHLt/VzKXzyzacKE9YinmtQoK4ei awSTzrTKA88mqgHFCvpfZ+fGaIWrCb0+j5DdrMvc46n4XwqggFLjE+9FwNvpOBa9 DTACBMBfuiHVTuLtjjEAiuSrfxk0Lz1V11q9l6Pj+0sSRSfBdjdjajk2VwNHdnKB Bw2uCTb9haciqDoMZpIwoUlOMa2sfTNCCNnXGrl3bGFn3r3tcRIISieZwpZVAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUt2pZFGBv4YArL588s5sIcq/21uowHwYDVR0j BBgwFoAUIWTRmmJv9aQyfK/IuD+Tl7ihSH4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1JPTkVY VC8wLzIxNjREMTlBNjI2RkY1QTQzMjdDQUZDOEI4M0Y5Mzk3QjhBMTQ4N0UuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMjE2NEQxOUE2MjZGRjVBNDMyN0NBRkM4Qjgz RjkzOTdCOEExNDg3RS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dST05FWFQvMC8yMTY0RDE5QTYy NkZGNUE0MzI3Q0FGQzhCODNGOTM5N0I4QTE0ODdFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhL8VXCDs jNaALocyaPt/XxkJizOeJLEIoMMUSR6UWOwqoqeOeWfJJUuXL8Bdj67YdFaNwgwz CI1iSo1OjkNTc4NZBz8CKOTCnSYuGDhFp11PlEH/DxzlV01xgI3Px2XBpkLJvfRH PBFy/y7pL7KwWQXvVVdNm17uIFt8pcwkxWI7oyqaW/HYzSIicii4781oWCXjFONf pHzF2rD+UhCjl6Lwk5jZ9ByAp+XBf16ylfM7iM/O+1bYmFQybASn/jYwD1xbTxWf RLa85GBnvDIyynVtUeax9s2DeDWUPVmK225AdpUnZB5pp3uD0z8bAsUvdGPu2r/F lVMy5WbkjxCVYg== -----END CERTIFICATE-----Generated at Fri Jul 24 07:37:44 2026 by rpki-client