$ rpki-client -vvf rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft File: 2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft (raw, json) Hash identifier: tQ53/G3aTG88kiQ9/aD+mx4sTkM4TQmUS7gNTHZE2Ek= Subject key identifier: 49:D7:A9:F8:D6:EC:5E:5A:34:7A:5A:2B:CE:29:BC:78:CB:04:FD:D1 Authority key identifier: 21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E Certificate issuer: /CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E Certificate serial: 1B366EFC4805A64FDD912FC905D1E879194595EF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft Manifest number: 6A Signing time: Tue 28 Jul 2026 03:42:24 +0000 Manifest this update: Tue 28 Jul 2026 03:37:24 +0000 Manifest next update: Wed 29 Jul 2026 04:45:24 +0000 Files and hashes: 1: 3130332e3134362e3231302e302f32332d3234203d3e20313331363637.roa (hash: totaPLv4w3h/keOS204h6s1sWAndNPLEGS0TWucTSQY=) 2: 323430353a613034303a3a2f33322d3336203d3e20313331363637.roa (hash: w3hpJj+HoeJno1FTJaaLoGf0DFxePbcn5GPTViDGefQ=) 3: 2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl (hash: KuzJ1HOMIqxGwHoyu+QtOCALta+idf+HeI7DFwdWXUg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 04:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:36:6e:fc:48:05:a6:4f:dd:91:2f:c9:05:d1:e8:79:19:45:95:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E Validity Not Before: Jul 28 03:37:24 2026 GMT Not After : Jul 29 04:45:24 2026 GMT Subject: CN=49D7A9F8D6EC5E5A347A5A2BCE29BC78CB04FDD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:28:6b:84:3d:d1:a4:ae:6f:40:0d:2e:10:a3: 3b:35:b9:f9:5a:27:e2:aa:f5:3a:d7:b5:46:b2:9e: 5c:5e:dd:53:0b:23:3b:af:e1:9a:74:ff:d6:2c:56: bd:31:a8:2d:49:fa:b9:5c:f2:91:92:8c:10:35:5e: df:e7:c9:26:d7:82:fd:c3:72:e2:54:34:bb:66:e5: 9e:9e:a1:95:d2:13:9e:46:06:b3:7f:a0:24:b9:ab: bf:af:86:24:95:b1:af:99:a4:35:36:08:c2:7e:59: f2:ae:a8:0d:19:99:db:90:6d:28:b8:a4:2e:bd:30: 30:9e:da:8e:51:86:78:91:81:42:b9:aa:e5:a6:cd: 6b:f6:dc:bc:3e:b8:36:b9:3f:54:dd:75:82:76:fe: 40:37:73:0e:e2:2c:c2:1e:e8:77:a3:ef:74:4e:0f: 4a:3e:6c:6f:71:52:82:4f:9e:00:e5:85:5f:d0:47: 98:2a:aa:4c:fa:39:32:04:91:35:8e:62:b6:bc:6f: d9:a1:58:ae:9a:83:8e:f5:b6:56:92:0f:4a:eb:0e: d1:df:a2:0d:1b:7b:5d:6c:9c:c6:19:95:12:27:da: c2:b7:25:59:05:b4:32:be:b1:21:d0:c3:0d:4c:7f: 47:ef:76:2a:2f:70:54:b7:40:9a:44:6b:8f:a4:38: cf:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D7:A9:F8:D6:EC:5E:5A:34:7A:5A:2B:CE:29:BC:78:CB:04:FD:D1 X509v3 Authority Key Identifier: keyid:21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:25:46:1f:58:92:3f:6e:17:ec:2f:56:90:89:26:fa:33:91: 0e:49:7b:37:34:5b:c2:e6:e2:9f:6a:5e:b5:dc:5b:06:ce:15: 25:8b:1b:1f:25:c9:e6:b4:2b:dc:14:c1:47:f0:e7:44:89:6f: 65:84:60:1b:b6:25:80:22:e6:eb:64:e4:c0:22:85:10:9c:de: 09:34:4c:1d:93:74:c6:0b:93:55:08:c9:45:2c:9f:e8:ae:e9: 3e:05:bb:11:7e:c8:d4:0b:ff:bd:ff:36:65:b6:11:fd:0e:8e: 76:a8:19:cd:3c:1f:3d:90:9b:de:63:15:c9:93:29:ad:98:04: 8d:ef:d2:af:4b:00:b7:a0:5a:9f:c2:54:73:37:ae:b8:15:db: 1d:75:1b:38:bf:d6:22:c3:36:94:a4:1e:16:d4:26:5e:a3:7e: e3:4e:c2:72:84:ec:c8:9a:5c:16:9c:f6:8c:a9:45:6a:d6:7b: d3:03:4e:37:82:84:25:79:c0:74:c9:ac:15:86:8e:f5:dc:b5: 9a:a5:1f:36:e8:36:55:75:9c:c3:9a:91:14:f8:1e:b8:cf:11: 70:bb:c3:68:bb:8a:69:03:48:ff:18:8c:6d:79:b9:3c:cc:8f: 51:8e:dc:3b:4c:eb:9f:cb:cc:a1:6b:f2:25:a9:14:ea:49:bd: fc:ae:ca:7c -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUGzZu/EgFpk/dkS/JBdHoeRlFle8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE2NEQxOUE2MjZGRjVBNDMyN0NBRkM4QjgzRjkzOTdC OEExNDg3RTAeFw0yNjA3MjgwMzM3MjRaFw0yNjA3MjkwNDQ1MjRaMDMxMTAvBgNV BAMTKDQ5RDdBOUY4RDZFQzVFNUEzNDdBNUEyQkNFMjlCQzc4Q0IwNEZERDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeKGuEPdGkrm9ADS4Qozs1ufla J+Kq9TrXtUaynlxe3VMLIzuv4Zp0/9YsVr0xqC1J+rlc8pGSjBA1Xt/nySbXgv3D cuJUNLtm5Z6eoZXSE55GBrN/oCS5q7+vhiSVsa+ZpDU2CMJ+WfKuqA0ZmduQbSi4 pC69MDCe2o5RhniRgUK5quWmzWv23Lw+uDa5P1TddYJ2/kA3cw7iLMIe6Hej73RO D0o+bG9xUoJPngDlhV/QR5gqqkz6OTIEkTWOYra8b9mhWK6ag471tlaSD0rrDtHf og0be11snMYZlRIn2sK3JVkFtDK+sSHQww1Mf0fvdiovcFS3QJpEa4+kOM+VAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUSdep+NbsXlo0elorzim8eMsE/dEwHwYDVR0j BBgwFoAUIWTRmmJv9aQyfK/IuD+Tl7ihSH4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1JPTkVY VC8wLzIxNjREMTlBNjI2RkY1QTQzMjdDQUZDOEI4M0Y5Mzk3QjhBMTQ4N0UuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMjE2NEQxOUE2MjZGRjVBNDMyN0NBRkM4Qjgz RjkzOTdCOEExNDg3RS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dST05FWFQvMC8yMTY0RDE5QTYy NkZGNUE0MzI3Q0FGQzhCODNGOTM5N0I4QTE0ODdFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSVGH1iS P24X7C9WkIkm+jORDkl7NzRbwubin2petdxbBs4VJYsbHyXJ5rQr3BTBR/DnRIlv ZYRgG7YlgCLm62TkwCKFEJzeCTRMHZN0xguTVQjJRSyf6K7pPgW7EX7I1Av/vf82 ZbYR/Q6OdqgZzTwfPZCb3mMVyZMprZgEje/Sr0sAt6Ban8JUczeuuBXbHXUbOL/W IsM2lKQeFtQmXqN+407CcoTsyJpcFpz2jKlFatZ70wNON4KEJXnAdMmsFYaO9dy1 mqUfNug2VXWcw5qRFPgeuM8RcLvDaLuKaQNI/xiMbXm5PMyPUY7cO0zrn8vMoWvy JakU6km9/K7KfA== -----END CERTIFICATE-----Generated at Tue Jul 28 18:22:55 2026 by rpki-client