$ rpki-client -vvvf rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft File: 2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft (raw, json) Hash identifier: 14sND0eGkwpG0HbxLUs8W4bPUUz8aI6YGav0EKvNGhc= Subject key identifier: 71:94:66:6B:4C:22:2B:CB:EB:7F:9F:2E:35:0B:B8:FF:4E:83:2A:6B Authority key identifier: 21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E Certificate issuer: /CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E Certificate serial: 3DA354633BBEC0321E8D36EA97A8E394DE514B6F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft Manifest number: B5 Signing time: Tue 22 Sep 2026 11:51:33 +0000 Manifest this update: Tue 22 Sep 2026 11:46:33 +0000 Manifest next update: Wed 23 Sep 2026 14:00:33 +0000 Files and hashes: 1: 3130332e3134362e3231302e302f32332d3234203d3e20313331363637.roa (hash: totaPLv4w3h/keOS204h6s1sWAndNPLEGS0TWucTSQY=) 2: 323430353a613034303a3a2f33322d3336203d3e20313331363637.roa (hash: w3hpJj+HoeJno1FTJaaLoGf0DFxePbcn5GPTViDGefQ=) 3: 2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl (hash: SFN6rlJMdohEW+1KwrJOdB3b7KpGjshdr4/t52KJa9Q=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a3:54:63:3b:be:c0:32:1e:8d:36:ea:97:a8:e3:94:de:51:4b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E Validity Not Before: Sep 22 11:46:33 2026 GMT Not After : Sep 23 14:00:33 2026 GMT Subject: CN=7194666B4C222BCBEB7F9F2E350BB8FF4E832A6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:e8:98:c1:67:c5:4a:a4:fb:8d:42:36:46: 69:dd:15:00:68:55:19:2c:6a:6b:25:1b:69:3f:4e: 66:12:5d:16:21:06:a1:49:ea:3e:99:8d:32:89:b7: fc:99:e7:3a:15:b8:bf:32:84:0a:e5:39:dc:58:4f: d7:71:70:aa:8f:ba:e3:4f:aa:96:ab:22:9d:b8:9e: 2f:4c:d7:f3:21:61:c1:69:3e:ac:36:e8:0c:33:8b: 54:36:00:cb:9d:eb:24:d7:9d:a1:6a:5d:37:e6:a9: e4:a9:38:78:99:ae:48:a7:43:53:7f:d3:43:bc:48: 20:73:b5:92:b8:7b:6e:29:e4:72:06:60:14:c5:f7: c9:0f:9f:98:34:fc:a5:ed:cd:11:db:71:50:7f:b6: 05:68:64:9b:12:70:d6:1b:b4:07:36:92:bb:00:fe: fc:92:be:e6:c1:79:84:13:f0:cf:ec:07:90:bc:66: be:38:6c:79:1e:9f:f0:1e:b7:29:1c:ea:d2:cf:8d: cf:f2:d3:0a:36:f6:06:41:34:fd:44:88:c6:42:7b: 10:8f:a6:3f:bb:0c:49:a6:b5:37:13:17:0d:81:4d: d2:42:19:c5:e1:8d:13:8c:bb:bc:c2:16:48:7a:77: f9:90:0c:be:47:b5:30:74:2c:81:a6:32:53:ce:4d: 5a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:94:66:6B:4C:22:2B:CB:EB:7F:9F:2E:35:0B:B8:FF:4E:83:2A:6B X509v3 Authority Key Identifier: keyid:21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:bd:24:df:09:b9:4d:e3:7f:9f:8d:3e:c2:a9:9d:5f:b1:2d: b7:00:67:3c:94:92:91:cd:1f:95:6c:b5:b8:c2:d5:d5:6a:09: 54:7d:4c:8c:fa:33:d4:0e:f4:9f:0f:1e:50:53:89:3d:11:b2: 05:c0:78:89:83:36:d7:37:67:f6:d3:c1:8a:05:e2:75:6c:01: 00:dd:f4:e2:c1:73:ec:43:ac:4d:5f:78:c2:ea:b5:19:78:96: 38:02:ed:0e:02:3b:06:0c:bf:0a:3e:e9:20:b1:29:1a:9c:c2: 48:85:c4:b4:ae:77:c7:02:63:2e:b5:20:62:26:db:e2:4a:fd: 09:6a:03:1a:ef:18:0a:a1:78:b7:b1:52:f5:8a:5c:3e:19:c4: c2:7f:73:f8:0c:c8:82:9a:b6:db:4f:e1:c1:f8:68:46:b1:ba: fe:55:c1:a1:93:69:d1:07:96:ac:61:a8:f7:3f:6c:7d:84:ea: 21:ec:16:0f:60:c9:df:7b:6a:bd:3f:74:fc:e8:ff:f2:be:4c: 2f:72:5f:9f:9f:f1:ec:2b:d4:53:4a:9d:8f:ac:ad:24:dd:7f: c1:71:0f:83:a1:ee:f2:64:e2:05:3d:8b:7c:b7:ce:97:35:b8: f6:f8:c1:09:f2:cb:54:aa:2f:f1:1a:17:ff:6b:e7:f4:01:31: ba:d0:8e:45 -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUPaNUYzu+wDIejTbql6jjlN5RS28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE2NEQxOUE2MjZGRjVBNDMyN0NBRkM4QjgzRjkzOTdC OEExNDg3RTAeFw0yNjA5MjIxMTQ2MzNaFw0yNjA5MjMxNDAwMzNaMDMxMTAvBgNV BAMTKDcxOTQ2NjZCNEMyMjJCQ0JFQjdGOUYyRTM1MEJCOEZGNEU4MzJBNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9++iYwWfFSqT7jUI2RmndFQBo VRksamslG2k/TmYSXRYhBqFJ6j6ZjTKJt/yZ5zoVuL8yhArlOdxYT9dxcKqPuuNP qparIp24ni9M1/MhYcFpPqw26Awzi1Q2AMud6yTXnaFqXTfmqeSpOHiZrkinQ1N/ 00O8SCBztZK4e24p5HIGYBTF98kPn5g0/KXtzRHbcVB/tgVoZJsScNYbtAc2krsA /vySvubBeYQT8M/sB5C8Zr44bHken/Aetykc6tLPjc/y0wo29gZBNP1EiMZCexCP pj+7DEmmtTcTFw2BTdJCGcXhjROMu7zCFkh6d/mQDL5HtTB0LIGmMlPOTVrRAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUcZRma0wiK8vrf58uNQu4/06DKmswHwYDVR0j BBgwFoAUIWTRmmJv9aQyfK/IuD+Tl7ihSH4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1JPTkVY VC8wLzIxNjREMTlBNjI2RkY1QTQzMjdDQUZDOEI4M0Y5Mzk3QjhBMTQ4N0UuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMjE2NEQxOUE2MjZGRjVBNDMyN0NBRkM4Qjgz RjkzOTdCOEExNDg3RS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dST05FWFQvMC8yMTY0RDE5QTYy NkZGNUE0MzI3Q0FGQzhCODNGOTM5N0I4QTE0ODdFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE70k3wm5 TeN/n40+wqmdX7EttwBnPJSSkc0flWy1uMLV1WoJVH1MjPoz1A70nw8eUFOJPRGy BcB4iYM21zdn9tPBigXidWwBAN304sFz7EOsTV94wuq1GXiWOALtDgI7Bgy/Cj7p ILEpGpzCSIXEtK53xwJjLrUgYibb4kr9CWoDGu8YCqF4t7FS9YpcPhnEwn9z+AzI gpq220/hwfhoRrG6/lXBoZNp0QeWrGGo9z9sfYTqIewWD2DJ33tqvT90/Oj/8r5M L3Jfn5/x7CvUU0qdj6ytJN1/wXEPg6Hu8mTiBT2LfLfOlzW49vjBCfLLVKov8RoX /2vn9AExutCORQ== -----END CERTIFICATE-----Generated at Tue Sep 22 16:34:43 2026 by rpki-client