$ rpki-client -vvf rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft File: 2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft (raw, json) Hash identifier: C949oc8gnxW1K53eWfUOCp+fR8PQ2QtsZpDrvTcP3os= Subject key identifier: 52:E4:82:19:0A:2A:35:36:44:CE:E2:81:8C:C2:29:19:6B:A0:7C:88 Authority key identifier: 21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E Certificate issuer: /CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E Certificate serial: 0533906C834997F0FD4FD9E1A679E0426EC8B883 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer Subject info access: rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft Manifest number: 45 Signing time: Tue 30 Jun 2026 08:38:25 +0000 Manifest this update: Tue 30 Jun 2026 08:33:25 +0000 Manifest next update: Wed 01 Jul 2026 11:02:25 +0000 Files and hashes: 1: 3130332e3134362e3231302e302f32332d3234203d3e20313331363637.roa (hash: totaPLv4w3h/keOS204h6s1sWAndNPLEGS0TWucTSQY=) 2: 2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl (hash: mcK/XrpmezRcuVRXsEpRTBcHxwVigcMmghano6AMjt8=) 3: 323430353a613034303a3a2f33322d3336203d3e20313331363637.roa (hash: w3hpJj+HoeJno1FTJaaLoGf0DFxePbcn5GPTViDGefQ=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 11:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:33:90:6c:83:49:97:f0:fd:4f:d9:e1:a6:79:e0:42:6e:c8:b8:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E Validity Not Before: Jun 30 08:33:25 2026 GMT Not After : Jul 1 11:02:25 2026 GMT Subject: CN=52E482190A2A353644CEE2818CC229196BA07C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9a:42:7a:8a:bc:fa:86:e5:64:6a:d7:7c:23: 28:b4:06:f6:28:b7:fc:59:df:08:63:e6:75:ed:ec: 73:79:91:96:ef:16:c3:8f:ea:e4:e7:47:42:14:6e: 62:d5:2c:d8:99:a1:eb:7c:2a:16:2c:65:3b:20:41: ff:9e:00:cc:44:c0:a7:64:03:7d:3f:1b:db:f9:18: c0:7c:53:74:5c:71:57:29:db:69:af:a3:4f:2d:46: c6:4f:ab:9d:e2:92:f5:03:32:d5:0c:b3:fa:c9:77: 71:46:6c:4a:fd:2f:03:ad:6c:54:67:6c:2b:2c:e9: 00:f1:63:76:bc:f0:07:ba:06:26:b0:d9:70:eb:52: 02:53:91:ae:a1:ac:df:9a:ba:c6:08:bd:5a:ea:cd: 85:af:70:b3:82:0f:9e:d1:de:87:bf:b4:b4:21:11: c1:12:86:81:ec:d2:f2:17:d4:9f:b9:00:d3:88:9e: 2a:1b:1b:65:f8:b7:e8:a0:e4:db:5e:30:4c:2e:99: 0c:30:19:63:22:f1:64:93:43:58:ac:15:69:f0:8a: 1f:ce:fd:8c:cc:f4:7e:5f:1a:21:d0:63:a1:b9:3b: 07:dd:9d:90:bc:5c:43:f8:74:ae:81:f2:45:08:10: 72:95:2e:df:f8:cc:78:0a:ca:59:6f:c6:02:6a:70: 10:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E4:82:19:0A:2A:35:36:44:CE:E2:81:8C:C2:29:19:6B:A0:7C:88 X509v3 Authority Key Identifier: keyid:21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:2d:8a:b8:f8:ec:a3:a2:11:a9:f0:1e:23:0e:a9:16:b1:21: 00:51:bd:f3:6d:35:47:c6:7c:36:3a:9b:38:5e:66:39:16:ab: b2:e0:c2:80:d7:86:af:8b:06:58:b6:83:52:06:08:5f:50:47: 81:1d:ae:89:ef:aa:31:a5:4e:f3:cc:19:83:f8:7b:78:68:e2: 95:c4:7f:5f:37:ef:69:93:38:1a:1b:05:b9:dd:56:a1:8e:69: 97:25:fe:09:6d:29:66:cb:d4:59:c4:26:d0:37:25:71:ce:e0: 26:6f:d8:93:f2:1f:f0:a6:d8:4a:63:ac:69:a6:70:af:0b:1d: 75:19:28:22:ad:48:55:73:2a:40:2c:42:cd:9c:fc:3a:be:f2: df:74:47:86:9e:20:16:46:cc:43:36:68:c6:19:89:d9:42:3e: 66:a5:a0:ca:9b:a3:66:22:72:57:cc:2e:68:a9:44:95:b8:96: fa:86:38:c0:43:23:dc:cc:8e:d9:e7:a5:2e:58:2a:14:26:a8: d9:fb:64:ee:1c:0a:ba:80:4c:5f:87:53:de:5a:12:2b:9d:88: ce:d5:7a:1a:0b:3c:bb:c6:01:bc:a2:75:82:47:5a:d3:eb:a2: cc:a5:34:97:ea:c5:0f:9b:9e:5e:ce:2a:c5:55:7d:24:aa:be: 25:81:3c:2f -----BEGIN CERTIFICATE----- MIIE5jCCA86gAwIBAgIUBTOQbINJl/D9T9nhpnngQm7IuIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE2NEQxOUE2MjZGRjVBNDMyN0NBRkM4QjgzRjkzOTdC OEExNDg3RTAeFw0yNjA2MzAwODMzMjVaFw0yNjA3MDExMTAyMjVaMDMxMTAvBgNV BAMTKDUyRTQ4MjE5MEEyQTM1MzY0NENFRTI4MThDQzIyOTE5NkJBMDdDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDomkJ6irz6huVkatd8Iyi0BvYo t/xZ3whj5nXt7HN5kZbvFsOP6uTnR0IUbmLVLNiZoet8KhYsZTsgQf+eAMxEwKdk A30/G9v5GMB8U3RccVcp22mvo08tRsZPq53ikvUDMtUMs/rJd3FGbEr9LwOtbFRn bCss6QDxY3a88Ae6Biaw2XDrUgJTka6hrN+ausYIvVrqzYWvcLOCD57R3oe/tLQh EcEShoHs0vIX1J+5ANOIniobG2X4t+ig5NteMEwumQwwGWMi8WSTQ1isFWnwih/O /YzM9H5fGiHQY6G5OwfdnZC8XEP4dK6B8kUIEHKVLt/4zHgKyllvxgJqcBBRAgMB AAGjggHwMIIB7DAdBgNVHQ4EFgQUUuSCGQoqNTZEzuKBjMIpGWugfIgwHwYDVR0j BBgwFoAUIWTRmmJv9aQyfK/IuD+Tl7ihSH4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1JPTkVY VC8wLzIxNjREMTlBNjI2RkY1QTQzMjdDQUZDOEI4M0Y5Mzk3QjhBMTQ4N0UuY3Js MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu aWMudHcvcnBraS9UV05JQ0NBLzEvMjE2NEQxOUE2MjZGRjVBNDMyN0NBRkM4Qjgz RjkzOTdCOEExNDg3RS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dST05FWFQvMC8yMTY0RDE5QTYy NkZGNUE0MzI3Q0FGQzhCODNGOTM5N0I4QTE0ODdFLm1mdDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARC2KuPjs o6IRqfAeIw6pFrEhAFG98201R8Z8NjqbOF5mORarsuDCgNeGr4sGWLaDUgYIX1BH gR2uie+qMaVO88wZg/h7eGjilcR/XzfvaZM4GhsFud1WoY5plyX+CW0pZsvUWcQm 0Dclcc7gJm/Yk/If8KbYSmOsaaZwrwsddRkoIq1IVXMqQCxCzZz8Or7y33RHhp4g FkbMQzZoxhmJ2UI+ZqWgypujZiJyV8wuaKlElbiW+oY4wEMj3MyO2eelLlgqFCao 2ftk7hwKuoBMX4dT3loSK52IztV6Ggs8u8YBvKJ1gkda0+uizKU0l+rFD5ueXs4q xVV9JKq+JYE8Lw== -----END CERTIFICATE-----Generated at Tue Jun 30 19:08:11 2026 by rpki-client