
$ rpki-client -vvf rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft
File: 2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft (raw, json)
Hash identifier: Q1gU6bu4WAI56ScmvAdhON1C7BfIWtJxHELQWjeGONE=
Subject key identifier: E2:C4:3E:AD:45:9A:1F:A8:69:0B:27:1E:6A:A8:04:3A:3F:85:7B:BE
Authority key identifier: 21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E
Certificate issuer: /CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E
Certificate serial: 6FD889B0976058C70F8E6E24274B32783D4CCBA7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft
Manifest number: 05
Signing time: Wed 13 May 2026 05:17:04 +0000
Manifest this update: Wed 13 May 2026 05:12:04 +0000
Manifest next update: Thu 14 May 2026 07:06:04 +0000
Files and hashes: 1: 2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl (hash: pn0KW+uCeb5MLLs5xgSM192tlfThpz3F4N3K+BuBd8E=)
2: 3130332e3134362e3231302e302f32332d3234203d3e20313331363637.roa (hash: totaPLv4w3h/keOS204h6s1sWAndNPLEGS0TWucTSQY=)
3: 323430353a613034303a3a2f33322d3336203d3e20313331363637.roa (hash: w3hpJj+HoeJno1FTJaaLoGf0DFxePbcn5GPTViDGefQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl
rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:06:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d8:89:b0:97:60:58:c7:0f:8e:6e:24:27:4b:32:78:3d:4c:cb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2164D19A626FF5A4327CAFC8B83F9397B8A1487E
Validity
Not Before: May 13 05:12:04 2026 GMT
Not After : May 14 07:06:04 2026 GMT
Subject: CN=E2C43EAD459A1FA8690B271E6AA8043A3F857BBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:0c:17:2f:40:c0:8a:59:14:5e:43:b4:33:
52:20:a9:3a:0f:aa:74:a1:fa:e9:18:16:73:c0:c7:
d1:8c:40:f6:95:a8:df:cb:70:95:b7:3e:99:27:80:
9f:ee:b9:0e:f1:44:e1:31:48:d2:74:f0:02:84:5a:
71:53:bd:55:7a:4a:dc:23:9d:10:90:cb:c7:ae:91:
b7:80:68:f3:9c:74:ca:8c:17:a7:08:7c:7d:11:bf:
f1:1f:0a:bb:f4:d5:1a:68:2c:8b:4c:ae:fc:ff:c9:
80:34:6d:9a:6e:68:ea:19:a2:c5:4a:4b:05:e0:ee:
b2:cb:a9:2b:5b:2f:61:da:2c:f2:61:61:97:b3:57:
0f:74:da:d3:3d:21:a0:0f:f9:38:89:c6:25:e0:69:
ad:f5:6e:20:14:d5:26:15:40:e2:ed:79:9b:4d:88:
1f:6a:39:50:7f:6b:e0:67:8c:54:95:4c:af:4b:12:
49:c6:7b:98:e9:c8:3c:00:44:8c:e6:4d:b2:c3:a2:
10:35:4c:86:a7:6a:d7:1a:4d:d3:f6:aa:e1:ce:25:
9e:e1:e5:5a:2a:7f:91:9b:33:45:b7:e2:a5:74:07:
d9:e1:f1:86:c8:ed:22:12:83:91:9a:61:ee:a2:8d:
3d:a6:78:8e:48:e1:ae:c8:ae:44:39:d5:da:0a:a5:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C4:3E:AD:45:9A:1F:A8:69:0B:27:1E:6A:A8:04:3A:3F:85:7B:BE
X509v3 Authority Key Identifier:
keyid:21:64:D1:9A:62:6F:F5:A4:32:7C:AF:C8:B8:3F:93:97:B8:A1:48:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/GRONEXT/0/2164D19A626FF5A4327CAFC8B83F9397B8A1487E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:46:36:4a:d9:77:92:2b:7b:1e:69:b2:6b:53:b1:10:8e:84:
72:80:b3:00:1f:44:f5:ff:fe:ef:1c:aa:4d:42:52:e6:15:e5:
c2:76:10:c8:d9:4f:8c:2a:40:de:ae:83:7d:6a:3d:24:69:1e:
2f:cb:79:b7:9b:58:47:dd:b9:2a:60:e0:a8:2a:01:81:ed:cf:
d6:1e:f4:ce:b1:d3:29:ad:c1:11:88:b9:7a:8c:70:d1:da:12:
e8:47:20:c4:ad:f0:25:51:0f:ec:bc:f5:71:97:96:ce:3e:4b:
92:c2:3f:a5:f4:4c:16:77:db:9d:bd:51:98:e3:41:7a:fa:e4:
46:88:32:8e:78:be:d3:55:06:c8:43:9b:82:4c:fe:a1:72:8a:
9f:7c:ba:ee:a9:fd:22:67:8a:d1:62:f7:40:8a:2c:aa:c0:ab:
56:a7:a4:ae:5e:21:34:37:a6:de:5b:95:1e:2e:3a:2a:34:70:
7e:1e:4b:6f:4d:53:bf:38:36:3d:f6:fd:15:9e:4a:92:ad:dc:
fb:66:a6:04:f5:c1:34:bd:db:68:9f:f7:ce:bb:70:8a:c7:47:
6b:cb:eb:ce:7f:50:f8:b0:b5:8a:46:fb:37:92:cf:a1:95:c6:
07:d1:d3:08:ff:a9:fc:30:61:42:cc:f8:e3:15:4e:a2:13:1e:
3d:11:1f:91
-----BEGIN CERTIFICATE-----
MIIE5jCCA86gAwIBAgIUb9iJsJdgWMcPjm4kJ0syeD1My6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE2NEQxOUE2MjZGRjVBNDMyN0NBRkM4QjgzRjkzOTdC
OEExNDg3RTAeFw0yNjA1MTMwNTEyMDRaFw0yNjA1MTQwNzA2MDRaMDMxMTAvBgNV
BAMTKEUyQzQzRUFENDU5QTFGQTg2OTBCMjcxRTZBQTgwNDNBM0Y4NTdCQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpnAwXL0DAilkUXkO0M1IgqToP
qnSh+ukYFnPAx9GMQPaVqN/LcJW3PpkngJ/uuQ7xROExSNJ08AKEWnFTvVV6Stwj
nRCQy8eukbeAaPOcdMqMF6cIfH0Rv/EfCrv01RpoLItMrvz/yYA0bZpuaOoZosVK
SwXg7rLLqStbL2HaLPJhYZezVw902tM9IaAP+TiJxiXgaa31biAU1SYVQOLteZtN
iB9qOVB/a+BnjFSVTK9LEknGe5jpyDwARIzmTbLDohA1TIanatcaTdP2quHOJZ7h
5Voqf5GbM0W34qV0B9nh8YbI7SISg5GaYe6ijT2meI5I4a7IrkQ51doKpQJ7AgMB
AAGjggHwMIIB7DAdBgNVHQ4EFgQU4sQ+rUWaH6hpCyceaqgEOj+Fe74wHwYDVR0j
BBgwFoAUIWTRmmJv9aQyfK/IuD+Tl7ihSH4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvR1JPTkVY
VC8wLzIxNjREMTlBNjI2RkY1QTQzMjdDQUZDOEI4M0Y5Mzk3QjhBMTQ4N0UuY3Js
MG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHdu
aWMudHcvcnBraS9UV05JQ0NBLzEvMjE2NEQxOUE2MjZGRjVBNDMyN0NBRkM4Qjgz
RjkzOTdCOEExNDg3RS5jZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNy
c3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0dST05FWFQvMC8yMTY0RDE5QTYy
NkZGNUE0MzI3Q0FGQzhCODNGOTM5N0I4QTE0ODdFLm1mdDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUY2Stl3
kit7Hmmya1OxEI6EcoCzAB9E9f/+7xyqTUJS5hXlwnYQyNlPjCpA3q6DfWo9JGke
L8t5t5tYR925KmDgqCoBge3P1h70zrHTKa3BEYi5eoxw0doS6EcgxK3wJVEP7Lz1
cZeWzj5LksI/pfRMFnfbnb1RmONBevrkRogyjni+01UGyEObgkz+oXKKn3y67qn9
ImeK0WL3QIosqsCrVqekrl4hNDem3luVHi46KjRwfh5Lb01Tvzg2Pfb9FZ5Kkq3c
+2amBPXBNL3baJ/3zrtwisdHa8vrzn9Q+LC1ikb7N5LPoZXGB9HTCP+p/DBhQsz4
4xVOohMePREfkQ==
-----END CERTIFICATE-----
Generated at Wed May 13 20:33:28 2026 by rpki-client