$ rpki-client -vvf rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft File: 19CD307B99E39576032EDA2043070E1F0D7E34FC.mft (raw, json) Hash identifier: tcaACUJPHpmoyy3TYmn5m7CpfcIsF1+lsNEWlCJbhEo= Subject key identifier: 04:FD:E3:43:C6:4E:F4:FE:1B:24:E0:9C:4F:F0:CC:77:64:1E:7B:D8 Authority key identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC Certificate issuer: /CN=19CD307B99E39576032EDA2043070E1F0D7E34FC Certificate serial: 30D94D1B8F481F0B1B343D3090ADCD349C9BD8BC Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft Manifest number: 47 Signing time: Tue 30 Jun 2026 09:33:34 +0000 Manifest this update: Tue 30 Jun 2026 09:28:34 +0000 Manifest next update: Wed 01 Jul 2026 10:12:34 +0000 Files and hashes: 1: 19CD307B99E39576032EDA2043070E1F0D7E34FC.crl (hash: NdkYASC2cY+LOcPGBLZhhCl4+0F05YISIdd6sD74x70=) 2: 3130332e36372e3136302e302f32342d3234203d3e2039393135.roa (hash: gMSZ51i6aWVz9x3FjBFTd2IoqA1W+/e4V2ENouMZDKs=) 3: 3130332e36372e3136312e302f32342d3234203d3e2039393135.roa (hash: 3vl3ngoiwYnQpST2jujOdaU/Gl4KrMDlztcv+fb7Y4w=) 4: 3130332e36372e3136302e302f32332d3234203d3e20313331363539.roa (hash: cjSMd043hBi+PQ+oqLd19nGxvDa5ak2dzrrrwCJ0UEw=) 5: 3130332e36372e3136302e302f32332d3234203d3e2039393135.roa (hash: 1hM91L7F3/G6h4Of6tkYcdbJGhctsno0oGYZtd2FpCM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 10:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d9:4d:1b:8f:48:1f:0b:1b:34:3d:30:90:ad:cd:34:9c:9b:d8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19CD307B99E39576032EDA2043070E1F0D7E34FC Validity Not Before: Jun 30 09:28:34 2026 GMT Not After : Jul 1 10:12:34 2026 GMT Subject: CN=04FDE343C64EF4FE1B24E09C4FF0CC77641E7BD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:78:47:4f:4c:38:a1:aa:e4:39:5a:c6:a3:00: b5:9b:a1:c9:ab:9a:21:86:5e:52:fd:80:cb:e2:b8: 08:b0:dd:34:f0:20:c9:97:f3:6a:d4:05:73:23:47: 48:35:c1:79:bb:b2:17:34:15:52:1b:32:e8:3b:aa: 65:64:72:7d:df:95:e5:27:6f:11:3a:09:56:18:6a: 08:11:2d:85:65:4d:0f:18:3b:85:0b:57:46:66:99: 7e:77:f3:96:c5:77:d8:08:3c:dd:0d:39:a7:cb:48: 36:c9:04:ed:9c:e3:03:f8:62:02:fc:bc:44:6e:40: 8b:18:e7:f4:66:03:8c:ae:81:6f:f2:1f:fd:41:53: ad:4a:f1:38:25:ff:62:9d:4e:d7:97:78:b6:87:b3: dd:c8:b9:24:4a:bb:da:71:73:74:11:eb:e9:85:ad: b0:a3:9e:82:3e:67:c9:8f:bf:18:da:17:50:a2:9e: 3e:ee:39:67:1c:4c:11:be:43:4f:b2:42:c5:1e:af: 7f:7b:1c:39:da:b9:c1:60:39:84:15:2e:d0:f4:92: 12:57:8c:bb:d4:04:f6:c6:79:3c:a9:73:b7:71:f5: 5d:dc:cd:8d:ec:10:a9:bf:56:33:37:50:c3:cb:62: a2:b9:2d:16:40:1c:f6:ea:48:15:23:e1:1c:96:09: e0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FD:E3:43:C6:4E:F4:FE:1B:24:E0:9C:4F:F0:CC:77:64:1E:7B:D8 X509v3 Authority Key Identifier: keyid:19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:06:13:9c:d8:c1:2e:4b:0a:a2:42:30:61:0d:f1:02:4a:1c: 8c:7c:a6:b6:1d:78:30:0a:5e:5a:81:f1:d0:7d:ca:2c:60:d3: 7b:a7:99:ee:f6:0a:c9:99:42:99:79:1f:cc:2f:1e:24:b0:56: b4:a4:81:7f:cf:7e:0e:30:83:ca:da:da:8f:0d:31:05:85:87: eb:5a:a3:c5:9d:18:d5:64:7c:5e:7b:72:c3:29:35:0f:73:8d: c4:84:44:3c:5c:7f:14:1e:41:9f:c2:f7:f2:b7:0d:37:c1:41: 4a:26:56:df:a5:4f:05:6c:c1:a0:80:ff:7f:b4:41:2b:6d:fb: ed:7a:8e:cd:cb:fb:69:35:22:a4:4f:12:2c:e7:0a:ec:1b:98: 6d:2f:6d:e8:93:44:43:c2:f8:84:11:48:b7:c3:19:d9:46:01: f3:fa:16:76:42:37:5b:e1:cd:b8:ed:7f:26:65:0a:33:1a:38: 0d:06:38:82:96:bd:1b:7c:32:19:5e:14:57:d2:24:ab:27:5c: c3:1b:1e:3d:27:ac:42:74:b9:70:ef:8a:49:ad:d0:bd:e5:7b: 24:33:56:35:89:4b:c0:fb:67:d4:c6:98:a9:20:a7:b5:87:4c: 07:6d:60:77:3c:5a:73:21:2e:33:2e:b6:2b:45:20:e8:e2:35: a1:6e:88:6d -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUMNlNG49IHwsbND0wkK3NNJyb2LwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlDRDMwN0I5OUUzOTU3NjAzMkVEQTIwNDMwNzBFMUYw RDdFMzRGQzAeFw0yNjA2MzAwOTI4MzRaFw0yNjA3MDExMDEyMzRaMDMxMTAvBgNV BAMTKDA0RkRFMzQzQzY0RUY0RkUxQjI0RTA5QzRGRjBDQzc3NjQxRTdCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoeEdPTDihquQ5WsajALWbocmr miGGXlL9gMviuAiw3TTwIMmX82rUBXMjR0g1wXm7shc0FVIbMug7qmVkcn3fleUn bxE6CVYYaggRLYVlTQ8YO4ULV0ZmmX5385bFd9gIPN0NOafLSDbJBO2c4wP4YgL8 vERuQIsY5/RmA4yugW/yH/1BU61K8Tgl/2KdTteXeLaHs93IuSRKu9pxc3QR6+mF rbCjnoI+Z8mPvxjaF1Cinj7uOWccTBG+Q0+yQsUer397HDnaucFgOYQVLtD0khJX jLvUBPbGeTypc7dx9V3czY3sEKm/VjM3UMPLYqK5LRZAHPbqSBUj4RyWCeCxAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUBP3jQ8ZO9P4bJOCcT/DMd2Qee9gwHwYDVR0j BBgwFoAUGc0we5njlXYDLtogQwcOHw1+NPwwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVFTU9O LzAvMTlDRDMwN0I5OUUzOTU3NjAzMkVEQTIwNDMwNzBFMUYwRDdFMzRGQy5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8xOUNEMzA3Qjk5RTM5NTc2MDMyRURBMjA0MzA3 MEUxRjBEN0UzNEZDLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVFTU9OLzAvMTlDRDMwN0I5OUUz OTU3NjAzMkVEQTIwNDMwNzBFMUYwRDdFMzRGQy5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF8GE5zYwS5L CqJCMGEN8QJKHIx8prYdeDAKXlqB8dB9yixg03unme72CsmZQpl5H8wvHiSwVrSk gX/Pfg4wg8ra2o8NMQWFh+tao8WdGNVkfF57csMpNQ9zjcSERDxcfxQeQZ/C9/K3 DTfBQUomVt+lTwVswaCA/3+0QStt++16js3L+2k1IqRPEiznCuwbmG0vbeiTREPC +IQRSLfDGdlGAfP6FnZCN1vhzbjtfyZlCjMaOA0GOIKWvRt8MhleFFfSJKsnXMMb Hj0nrEJ0uXDvikmt0L3leyQzVjWJS8D7Z9TGmKkgp7WHTAdtYHc8WnMhLjMutitF IOjiNaFuiG0= -----END CERTIFICATE-----Generated at Tue Jun 30 19:09:06 2026 by rpki-client