$ rpki-client -vvvf rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft File: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft (raw, json) Hash identifier: kDNm8w97qlIikp+k3+uBcMjhjU8WtOOCCYnxfikIrr4= Subject key identifier: 23:0A:97:C4:D8:A7:4E:58:58:25:6E:E6:AD:D6:C6:ED:88:96:75:79 Authority key identifier: 16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B Certificate issuer: /CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B Certificate serial: 03D8134E22DA39EF0B60E12A1C01B3AD562ADD37 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft Manifest number: BA Signing time: Fri 25 Sep 2026 10:12:41 +0000 Manifest this update: Fri 25 Sep 2026 10:07:41 +0000 Manifest next update: Sat 26 Sep 2026 12:49:41 +0000 Files and hashes: 1: 3135312e3135382e38382e302f32332d3234203d3e20313331363332.roa (hash: c6jDK+d+OW0nq16fGHUI84OiS+BXXy5ZOIm0keyUDog=) 2: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl (hash: l9YDuhHLV7g+FRxPVWvA10Cd/Ohsli0pVSXg+dOSJl0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 22:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d8:13:4e:22:da:39:ef:0b:60:e1:2a:1c:01:b3:ad:56:2a:dd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B Validity Not Before: Sep 25 10:07:41 2026 GMT Not After : Sep 26 12:49:41 2026 GMT Subject: CN=230A97C4D8A74E5858256EE6ADD6C6ED88967579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:4e:81:63:2b:cc:9b:27:11:1c:01:4c:c8: 87:d1:3b:ee:31:a1:a7:1d:7d:0a:00:af:07:b4:e5: f2:ca:87:4e:f1:31:62:7b:8e:1d:99:13:e9:05:f1: f0:03:fd:63:a0:c7:c1:48:a8:66:cd:1e:c9:79:21: f1:a0:3c:94:d3:01:b7:16:19:92:0a:75:38:f6:2a: 0c:dd:4b:3c:b6:35:03:f7:bc:76:39:6c:ce:1d:a8: df:91:90:b8:0f:1d:fd:85:c0:f5:01:5f:7d:ca:b1: 18:87:75:18:39:ca:34:c1:12:b4:7c:f1:48:a1:0a: be:c7:0e:dc:61:46:0f:12:e2:2c:fd:3b:10:5c:d8: 0e:1f:c4:c7:dd:a5:77:b7:33:28:91:b2:c0:38:65: 52:f9:c8:99:79:41:e1:ef:89:ef:58:1b:00:00:6d: ce:9a:63:13:4d:ab:eb:c9:40:7c:68:32:e2:ad:88: ae:d9:5c:81:2c:6e:64:94:77:cc:8e:c0:ce:e1:71: 77:c8:bc:2a:1a:5f:92:b2:94:4d:bf:e6:e9:50:5e: 38:08:64:28:30:d0:ae:62:a3:93:de:66:16:ef:c7: b4:b9:dd:6c:a0:0f:9e:37:d5:4d:7c:57:75:6b:32: 30:d7:ee:93:17:d9:a1:34:f0:3b:e8:a4:5c:c0:c2: d2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0A:97:C4:D8:A7:4E:58:58:25:6E:E6:AD:D6:C6:ED:88:96:75:79 X509v3 Authority Key Identifier: keyid:16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d6:db:62:fa:53:10:55:1c:4c:a2:9c:e9:be:a7:7e:50:fb: 8f:f5:1e:58:5c:03:9d:66:91:8c:c6:fd:d9:75:d1:7b:51:3e: 0f:35:5b:cb:ff:6e:76:36:62:5e:61:e0:8e:a3:9d:df:81:ca: 2f:c6:a8:72:28:60:0c:43:1f:0c:c8:d3:02:55:88:69:aa:16: 9e:ec:e7:15:32:b0:26:7c:88:fa:bb:e9:93:50:a8:a7:e6:73: ac:a2:f8:07:4b:44:24:50:73:86:0b:f6:a7:2b:3b:f0:7c:8f: ed:f8:42:76:f3:c2:70:b2:26:07:96:c7:cb:e6:71:9b:72:40: a9:a7:e6:4f:d1:03:bb:6f:32:b5:b3:e3:cb:2e:a6:22:6b:0d: a0:c1:eb:a5:e0:c9:60:67:9d:d2:f7:26:99:7c:73:9d:2f:40: 09:cd:ea:70:0e:51:f2:72:6d:95:53:fd:e9:9a:d0:5c:72:c6: 3d:6a:01:68:d2:7b:8d:39:7e:77:41:6c:78:22:48:3b:8d:2c: cd:2c:20:bc:95:e8:6f:f0:26:64:e6:3d:df:c0:9b:0f:a8:42: fb:e0:0d:05:b0:8a:87:25:3c:6b:aa:3f:89:1f:6f:05:a6:18: 58:56:4a:31:c2:05:22:04:c3:e6:e6:55:ad:98:82:42:45:1d: d6:e9:e8:a4 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUA9gTTiLaOe8LYOEqHAGzrVYq3TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYyOUFBNjRGQzkyMTc4MDNGQTJGQ0EzQzVBOEU1QTM1 OEI5MDg5QjAeFw0yNjA5MjUxMDA3NDFaFw0yNjA5MjYxMjQ5NDFaMDMxMTAvBgNV BAMTKDIzMEE5N0M0RDhBNzRFNTg1ODI1NkVFNkFERDZDNkVEODg5Njc1NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFOE6BYyvMmycRHAFMyIfRO+4x oacdfQoArwe05fLKh07xMWJ7jh2ZE+kF8fAD/WOgx8FIqGbNHsl5IfGgPJTTAbcW GZIKdTj2KgzdSzy2NQP3vHY5bM4dqN+RkLgPHf2FwPUBX33KsRiHdRg5yjTBErR8 8UihCr7HDtxhRg8S4iz9OxBc2A4fxMfdpXe3MyiRssA4ZVL5yJl5QeHvie9YGwAA bc6aYxNNq+vJQHxoMuKtiK7ZXIEsbmSUd8yOwM7hcXfIvCoaX5KylE2/5ulQXjgI ZCgw0K5io5PeZhbvx7S53WygD5431U18V3VrMjDX7pMX2aE08DvopFzAwtKZAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUIwqXxNinTlhYJW7mrdbG7YiWdXkwHwYDVR0j BBgwFoAUFimqZPySF4A/ovyjxajlo1i5CJswDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR01JQ0xP VURfUC8xLzE2MjlBQTY0RkM5MjE3ODAzRkEyRkNBM0M1QThFNUEzNThCOTA4OUIu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzMvMTYyOUFBNjRGQzkyMTc4MDNGQTJGQ0Ez QzVBOEU1QTM1OEI5MDg5Qi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dNSUNMT1VEX1AvMS8xNjI5 QUE2NEZDOTIxNzgwM0ZBMkZDQTNDNUE4RTVBMzU4QjkwODlCLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA HdbbYvpTEFUcTKKc6b6nflD7j/UeWFwDnWaRjMb92XXRe1E+DzVby/9udjZiXmHg jqOd34HKL8aocihgDEMfDMjTAlWIaaoWnuznFTKwJnyI+rvpk1Cop+ZzrKL4B0tE JFBzhgv2pys78HyP7fhCdvPCcLImB5bHy+Zxm3JAqafmT9EDu28ytbPjyy6mImsN oMHrpeDJYGed0vcmmXxznS9ACc3qcA5R8nJtlVP96ZrQXHLGPWoBaNJ7jTl+d0Fs eCJIO40szSwgvJXob/AmZOY938CbD6hC++ANBbCKhyU8a6o/iR9vBaYYWFZKMcIF IgTD5uZVrZiCQkUd1unopA== -----END CERTIFICATE-----Generated at Fri Sep 25 13:27:24 2026 by rpki-client