
$ rpki-client -vvvf rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
File: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft (raw, json)
Hash identifier: dkQ7WoHr80WXqUejrOBTqUGMp2xDS6rRMdV1F7z9lQc=
Subject key identifier: 83:C0:EC:36:3F:27:F6:4B:7C:36:95:57:C2:AD:4B:02:F5:7A:AB:FB
Authority key identifier: 16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
Certificate issuer: /CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
Certificate serial: 18CAE672A548781D4CB024A7D4B2EC06378E02F0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
Manifest number: D4
Signing time: Wed 14 Oct 2026 21:32:10 +0000
Manifest this update: Wed 14 Oct 2026 21:27:10 +0000
Manifest next update: Fri 16 Oct 2026 00:54:10 +0000
Files and hashes: 1: 1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl (hash: mJn9xWtzxsMxKKOL3LJUu2eo+ghXL2u8BnLPoaclGzI=)
2: 3135312e3135382e38382e302f32332d3234203d3e20313331363332.roa (hash: c6jDK+d+OW0nq16fGHUI84OiS+BXXy5ZOIm0keyUDog=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl
rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 22:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ca:e6:72:a5:48:78:1d:4c:b0:24:a7:d4:b2:ec:06:37:8e:02:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1629AA64FC9217803FA2FCA3C5A8E5A358B9089B
Validity
Not Before: Oct 14 21:27:10 2026 GMT
Not After : Oct 16 00:54:10 2026 GMT
Subject: CN=83C0EC363F27F64B7C369557C2AD4B02F57AABFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:d0:21:97:c7:cc:9f:4e:9d:6c:b6:bc:5a:
6e:fb:66:d5:39:29:fd:d1:b5:54:b5:13:97:41:9e:
14:da:69:27:d0:2c:3a:3e:fa:e8:04:15:a8:45:c5:
03:a6:37:f4:67:dc:f4:fd:f3:aa:a4:6c:17:98:50:
a1:f6:85:2a:26:dd:b5:92:f3:5d:74:48:78:83:4a:
b5:b4:3c:e7:a0:0d:1c:ec:ef:2f:fa:c3:e4:b0:a9:
5e:a2:87:10:94:18:c6:f9:ba:23:cd:e4:ab:ba:ce:
fa:0f:0f:ec:f2:37:14:99:92:cb:a7:e4:36:6c:1e:
4a:5d:4c:c7:f9:ad:12:fb:a4:91:ca:a5:53:76:e2:
f7:7c:17:3b:9a:f9:8d:d4:99:6a:42:fe:c5:66:59:
56:93:f9:10:fd:9a:a4:f6:dd:8f:37:e5:6a:a3:f2:
c2:34:5e:a5:f4:88:d7:e6:ce:69:0c:31:67:16:b4:
bb:45:6e:2b:10:96:2f:47:8b:bb:c2:fa:ea:26:b5:
96:91:b5:a0:56:f2:c2:3b:59:f3:a8:89:68:46:f3:
87:88:25:79:da:63:f7:9f:f4:b3:ee:bc:6d:b7:84:
8d:b5:f1:20:3c:6a:89:56:a1:a6:bd:9a:d2:29:28:
3c:b7:36:7c:ce:5e:f1:9c:e9:48:d9:c4:25:49:2b:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C0:EC:36:3F:27:F6:4B:7C:36:95:57:C2:AD:4B:02:F5:7A:AB:FB
X509v3 Authority Key Identifier:
keyid:16:29:AA:64:FC:92:17:80:3F:A2:FC:A3:C5:A8:E5:A3:58:B9:08:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GMICLOUD_P/1/1629AA64FC9217803FA2FCA3C5A8E5A358B9089B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:86:8c:2a:53:0f:f5:53:c2:e1:b6:77:e4:58:57:25:b0:d9:
f9:df:0f:f4:4a:4e:ab:3f:65:bb:6c:0a:40:41:2b:5e:31:09:
bc:70:be:6b:aa:17:f4:f4:5b:bb:6f:13:21:29:4c:8d:c6:1a:
19:29:ba:8d:82:29:77:d0:41:e1:fd:cd:b2:9e:2c:eb:b4:2e:
46:50:d7:dd:81:8e:1b:ec:ab:c5:75:b4:f7:3f:51:ed:dc:0b:
9f:03:f1:e1:d6:6c:6b:ef:e0:c5:aa:24:e9:8f:99:69:83:87:
4e:50:95:bf:a7:5c:22:e8:fb:a2:73:3f:62:cd:5b:39:87:0e:
1a:53:da:91:30:7c:a4:e8:f4:e3:11:9c:d3:02:0a:53:e7:42:
11:49:df:28:e1:8a:60:cb:a8:da:5a:6b:5f:24:2d:6c:1a:61:
30:de:b8:9b:cc:25:c3:9b:f2:cc:57:54:fd:d8:86:68:fc:8d:
90:dc:13:ac:43:ef:0b:97:db:b6:14:35:bf:0a:8d:92:ae:10:
67:26:52:a6:24:48:0b:af:8e:fc:91:e1:28:68:a3:ae:05:bc:
29:dd:bf:3c:6a:7a:2e:8c:66:b0:76:d7:63:f0:0e:c1:67:ef:
21:88:c2:fc:52:22:67:10:7d:56:6d:67:36:af:3d:dd:53:04:
4d:b2:b0:ec
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUGMrmcqVIeB1MsCSn1LLsBjeOAvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYyOUFBNjRGQzkyMTc4MDNGQTJGQ0EzQzVBOEU1QTM1
OEI5MDg5QjAeFw0yNjEwMTQyMTI3MTBaFw0yNjEwMTYwMDU0MTBaMDMxMTAvBgNV
BAMTKDgzQzBFQzM2M0YyN0Y2NEI3QzM2OTU1N0MyQUQ0QjAyRjU3QUFCRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YdAhl8fMn06dbLa8Wm77ZtU5
Kf3RtVS1E5dBnhTaaSfQLDo++ugEFahFxQOmN/Rn3PT986qkbBeYUKH2hSom3bWS
8110SHiDSrW0POegDRzs7y/6w+SwqV6ihxCUGMb5uiPN5Ku6zvoPD+zyNxSZksun
5DZsHkpdTMf5rRL7pJHKpVN24vd8Fzua+Y3UmWpC/sVmWVaT+RD9mqT23Y835Wqj
8sI0XqX0iNfmzmkMMWcWtLtFbisQli9Hi7vC+uomtZaRtaBW8sI7WfOoiWhG84eI
JXnaY/ef9LPuvG23hI218SA8aolWoaa9mtIpKDy3NnzOXvGc6UjZxCVJKzGtAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUg8DsNj8n9kt8NpVXwq1LAvV6q/swHwYDVR0j
BBgwFoAUFimqZPySF4A/ovyjxajlo1i5CJswDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR01JQ0xP
VURfUC8xLzE2MjlBQTY0RkM5MjE3ODAzRkEyRkNBM0M1QThFNUEzNThCOTA4OUIu
Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBLzMvMTYyOUFBNjRGQzkyMTc4MDNGQTJGQ0Ez
QzVBOEU1QTM1OEI5MDg5Qi5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL
hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dNSUNMT1VEX1AvMS8xNjI5
QUE2NEZDOTIxNzgwM0ZBMkZDQTNDNUE4RTVBMzU4QjkwODlCLm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
LoaMKlMP9VPC4bZ35FhXJbDZ+d8P9EpOqz9lu2wKQEErXjEJvHC+a6oX9PRbu28T
ISlMjcYaGSm6jYIpd9BB4f3Nsp4s67QuRlDX3YGOG+yrxXW09z9R7dwLnwPx4dZs
a+/gxaok6Y+ZaYOHTlCVv6dcIuj7onM/Ys1bOYcOGlPakTB8pOj04xGc0wIKU+dC
EUnfKOGKYMuo2lprXyQtbBphMN64m8wlw5vyzFdU/diGaPyNkNwTrEPvC5fbthQ1
vwqNkq4QZyZSpiRIC6+O/JHhKGijrgW8Kd2/PGp6LoxmsHbXY/AOwWfvIYjC/FIi
ZxB9Vm1nNq893VMETbKw7A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:14:20 2026 by rpki-client