$ rpki-client -vvvf rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft File: 2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft (raw, json) Hash identifier: 1LAvzTz4wUg6u9LVGE+LUdshrDsAaJXaLWqh586GxQA= Subject key identifier: 2D:34:31:A3:99:C5:B5:3D:15:1F:96:7E:BC:63:58:EB:EE:41:60:3A Authority key identifier: 21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E Certificate issuer: /CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E Certificate serial: 5B605386636CE582C00FD6A3B454EDD22DE7A14E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft Manifest number: BB Signing time: Sun 27 Sep 2026 03:42:54 +0000 Manifest this update: Sun 27 Sep 2026 03:37:54 +0000 Manifest next update: Mon 28 Sep 2026 04:32:54 +0000 Files and hashes: 1: 2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl (hash: qANThwl07S6vOx5q2/lDG+e4SbK9s3rV3fdaUioy6qQ=) 2: 323430353a613034303a3a2f33322d3336203d3e20313331363637.roa (hash: w3hpJj+HoeJno1FTJaaLoGf0DFxePbcn5GPTViDGefQ=) 3: 3130332e3134362e3231302e302f32332d3234203d3e20313331363637.roa (hash: totaPLv4w3h/keOS204h6s1sWAndNPLEGS0TWucTSQY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:60:53:86:63:6c:e5:82:c0:0f:d6:a3:b4:54:ed:d2:2d:e7:a1:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E Validity Not Before: Sep 27 03:37:54 2026 GMT Not After : Sep 28 04:32:54 2026 GMT Subject: CN=2D3431A399C5B53D151F967EBC6358EBEE41603A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:5f:44:97:bb:1b:ad:27:7e:0e:18:a8:ad: 55:e7:8d:ea:d6:1c:d7:e4:00:cd:b0:48:3d:e7:be: 35:80:73:00:ff:89:58:0f:28:d4:e7:94:6a:41:5a: bf:8d:85:46:61:6c:21:fb:ae:97:44:46:88:bb:db: 6d:63:9d:f0:35:a9:56:68:5e:65:68:85:08:67:d2: 52:91:6e:95:cc:b1:e8:8c:68:6a:5b:d2:bd:e5:aa: 29:0b:3b:d7:41:e2:33:2e:6d:a7:ad:f9:de:27:a5: 29:e3:d6:21:ed:1f:88:18:2f:ca:bd:bf:56:ff:1f: 49:32:64:4f:b8:8e:4b:4c:49:f0:83:7f:42:e7:fc: b6:da:9d:7d:dd:55:84:2b:35:78:27:ce:a6:a8:fd: ef:19:15:e4:3f:e1:7a:99:ab:c5:47:b0:0d:19:5c: e3:62:02:66:cc:2b:fc:4f:20:5b:a3:45:1c:53:5a: 3f:c0:27:d6:ec:91:a8:ce:0a:02:f2:ef:d6:78:ec: 9a:1c:15:e2:4a:22:78:81:bd:f3:b7:83:f9:a4:e0: 2c:bb:2d:f3:ed:88:81:4b:2e:c4:8b:7b:2b:a4:32: 53:d8:a4:52:b8:a7:0b:17:08:ff:2b:fa:da:95:41: 51:bc:10:b0:97:06:a6:0d:83:e2:0f:dc:29:21:3a: c1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:34:31:A3:99:C5:B5:3D:15:1F:96:7E:BC:63:58:EB:EE:41:60:3A X509v3 Authority Key Identifier: keyid:21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:25:70:c9:2d:d3:ff:58:14:42:65:4f:21:12:51:9d:62:cf: 7b:65:8d:91:f5:1e:8f:a7:22:c5:c6:8e:c8:ec:ca:17:0c:5d: f6:d3:a2:d6:ac:8f:f7:35:c4:8e:63:fa:51:1d:66:ea:fa:b8: be:25:a3:a0:d9:50:d6:91:e6:97:4c:47:0f:95:82:b6:27:cc: 20:e6:a5:d7:55:26:29:64:08:67:e9:49:26:74:f8:4b:8f:25: e8:33:e4:84:42:52:04:db:ec:cd:29:52:d1:c0:8e:29:40:e2: 03:86:b6:04:ae:bc:73:33:2c:c7:ba:02:ed:84:3b:04:59:4b: 18:9b:0d:8b:aa:a3:a7:17:84:f0:4d:bf:d9:4a:6d:0e:7c:c2: f5:b6:51:b0:11:33:b6:4a:9b:bb:78:43:2c:c8:43:7d:9b:d9: d4:64:11:1d:82:87:5b:0b:c2:0c:61:2f:f6:57:d1:ab:bc:2b: c8:8f:ec:2c:ea:11:90:49:88:4c:aa:4e:84:31:fd:93:dc:78: 67:93:b0:29:77:43:d3:f3:ce:af:fe:07:6f:4a:ca:8d:16:2a: 8c:e5:a7:7c:03:09:b6:df:31:fb:1b:e3:d0:32:06:88:90:b7: 92:4e:b1:bb:8f:3a:32:7c:b0:65:2a:5e:bf:ef:49:7e:4b:bf: 99:77:a1:0b -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUW2BThmNs5YLAD9ajtFTt0i3noU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE2NEQxOUE2MjZGRjVBNDMyN0NBRkM4QjgzRjkzOTdC OEExNDg3RTAeFw0yNjA5MjcwMzM3NTRaFw0yNjA5MjgwNDMyNTRaMDMxMTAvBgNV BAMTKDJEMzQzMUEzOTlDNUI1M0QxNTFGOTY3RUJDNjM1OEVCRUU0MTYwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrA19El7sbrSd+DhiorVXnjerW HNfkAM2wSD3nvjWAcwD/iVgPKNTnlGpBWr+NhUZhbCH7rpdERoi7221jnfA1qVZo XmVohQhn0lKRbpXMseiMaGpb0r3lqikLO9dB4jMubaet+d4npSnj1iHtH4gYL8q9 v1b/H0kyZE+4jktMSfCDf0Ln/LbanX3dVYQrNXgnzqao/e8ZFeQ/4XqZq8VHsA0Z XONiAmbMK/xPIFujRRxTWj/AJ9bskajOCgLy79Z47JocFeJKIniBvfO3g/mk4Cy7 LfPtiIFLLsSLeyukMlPYpFK4pwsXCP8r+tqVQVG8ELCXBqYNg+IP3CkhOsGdAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQULTQxo5nFtT0VH5Z+vGNY6+5BYDowHwYDVR0j BBgwFoAUIWTRmmJv9aQyfK/IuD+Tl7ihSH4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1JPTkVY VC8wLzIxNjREMTlBNjI2RkY1QTQzMjdDQUZDOEI4M0Y5Mzk3QjhBMTQ4N0UuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMjE2NEQxOUE2MjZGRjVBNDMyN0NBRkM4Qjgz RjkzOTdCOEExNDg3RS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dST05FWFQvMC8yMTY0RDE5QTYy NkZGNUE0MzI3Q0FGQzhCODNGOTM5N0I4QTE0ODdFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSVwyS3T /1gUQmVPIRJRnWLPe2WNkfUej6cixcaOyOzKFwxd9tOi1qyP9zXEjmP6UR1m6vq4 viWjoNlQ1pHml0xHD5WCtifMIOal11UmKWQIZ+lJJnT4S48l6DPkhEJSBNvszSlS 0cCOKUDiA4a2BK68czMsx7oC7YQ7BFlLGJsNi6qjpxeE8E2/2UptDnzC9bZRsBEz tkqbu3hDLMhDfZvZ1GQRHYKHWwvCDGEv9lfRq7wryI/sLOoRkEmITKpOhDH9k9x4 Z5OwKXdD0/POr/4Hb0rKjRYqjOWnfAMJtt8x+xvj0DIGiJC3kk6xu486MnywZSpe v+9Jfku/mXehCw== -----END CERTIFICATE-----Generated at Sun Sep 27 06:40:56 2026 by rpki-client