
$ rpki-client -vvf rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
File: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft (raw, json)
Hash identifier: xOeGnIDDnJSjAqM3BEWiUYAUZkRpA2G3rBPtT4HAOYI=
Subject key identifier: 81:8E:5A:B5:FF:1B:6B:0B:2F:4B:18:41:7A:56:9E:D7:69:1E:B7:89
Authority key identifier: 16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
Certificate issuer: /CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
Certificate serial: 474D63122AB82F93C8F52804FFFB883411902760
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
Manifest number: 33
Signing time: Wed 17 Jun 2026 05:36:51 +0000
Manifest this update: Wed 17 Jun 2026 05:31:51 +0000
Manifest next update: Thu 18 Jun 2026 06:43:51 +0000
Files and hashes: 1: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl (hash: tfDG00Dbzuj27BMA6ZE+aqXAZRxp293HHlSbA0Q5ju4=)
2: 3135312e3135382e38382e302f32332d3234203d3e20313331363332.roa (hash: c6jDK+d+OW0nq16fGHUI84OiS+BXXy5ZOIm0keyUDog=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl
rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 06:43:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:4d:63:12:2a:b8:2f:93:c8:f5:28:04:ff:fb:88:34:11:90:27:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
Validity
Not Before: Jun 17 05:31:51 2026 GMT
Not After : Jun 18 06:43:51 2026 GMT
Subject: CN=818E5AB5FF1B6B0B2F4B18417A569ED7691EB789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:48:e9:a9:c3:b2:0d:64:a1:4e:e9:2e:50:5d:
da:de:9c:55:45:0b:d5:73:5b:20:28:6f:9f:af:45:
29:75:d4:38:c3:22:8e:2e:c1:ef:1a:00:5b:76:c8:
3b:53:d6:11:f9:e5:04:98:7c:91:d0:4a:41:60:c0:
b5:a4:c8:b8:e0:14:57:60:49:50:75:1f:58:cd:f3:
c8:e9:71:8b:0e:67:2a:9f:40:c7:98:8d:c9:88:96:
77:d6:92:a6:2b:ae:26:8a:99:78:aa:96:41:de:b8:
5a:26:af:43:5d:c3:d3:7a:81:39:89:d6:0c:e5:da:
8c:f3:ab:a1:fc:79:80:62:55:a5:5e:d0:f7:ea:c0:
1e:6a:00:f3:04:cf:89:15:bb:67:ef:1a:15:88:f3:
2e:14:fe:a2:9b:fc:01:63:01:4a:2e:29:0f:2c:1f:
73:38:6c:fc:96:94:ee:ba:1d:db:17:9d:6f:13:9a:
13:fc:73:5b:0a:be:5b:4e:9e:ef:e9:4a:29:70:2b:
b9:60:d9:81:7a:5c:63:55:ce:bd:12:f7:38:15:ad:
29:80:3b:8c:8d:8f:ff:f0:ef:a2:9f:ec:06:7a:60:
26:c1:f4:6d:a7:52:05:6e:42:2c:03:d0:c8:ec:08:
29:83:14:a2:5e:ff:e2:9e:22:04:aa:3f:d5:31:74:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:8E:5A:B5:FF:1B:6B:0B:2F:4B:18:41:7A:56:9E:D7:69:1E:B7:89
X509v3 Authority Key Identifier:
keyid:16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0d:92:e6:fb:77:06:91:b2:dd:2a:39:b4:61:e6:37:91:5a:
36:3f:45:4f:c2:08:f5:ae:b3:ef:cb:77:78:fc:59:55:a5:a8:
04:72:78:68:2b:ea:34:81:de:88:90:fc:76:d1:f5:cb:64:ef:
b1:cc:6a:a7:a8:60:7d:06:ea:5e:f2:2d:8a:3c:39:5d:52:21:
70:d0:64:f7:e7:5e:6a:ba:19:64:5c:67:2e:60:68:f6:9c:7a:
45:2d:66:ca:db:ac:85:c9:59:5f:cf:c1:24:e3:a0:fa:1f:9d:
d8:fc:ca:c7:59:cd:81:a4:61:8e:ce:b2:91:d1:dc:54:db:6d:
32:bb:c4:ef:3b:c8:b0:e6:15:66:af:ca:43:c2:02:2c:5f:cd:
ff:34:53:45:da:0d:08:b3:97:b5:9c:0d:8b:aa:29:47:af:27:
15:f6:1b:ae:fb:b6:b6:bf:05:30:44:d6:00:99:64:ba:e9:c0:
f6:64:af:32:a5:ed:78:90:4f:80:ba:80:d1:30:d7:ca:83:40:
d1:73:c3:c6:9e:8a:30:f6:51:ae:51:0e:d3:cd:b5:e7:15:68:
ee:14:a9:ce:6c:89:58:e9:68:9e:8b:88:65:4e:69:27:4e:0e:
a7:b9:92:24:8a:f0:3f:c7:cd:6e:16:e8:5c:24:d7:ff:d9:6b:
82:64:1f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:39:05 2026 by rpki-client