$ rpki-client -vvf rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft File: 19CD307B99E39576032EDA2043070E1F0D7E34FC.mft (raw, json) Hash identifier: zUbzufTWxvyP9dDpv25ybtGnJBdPF6MkCbOgRhtuF+k= Subject key identifier: 09:49:D3:27:DB:EE:72:F9:A1:50:9A:82:28:1D:8D:DE:B9:CB:1A:B4 Authority key identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC Certificate issuer: /CN=19CD307B99E39576032EDA2043070E1F0D7E34FC Certificate serial: 2EA54674667B04FBC7EDB855BD5C405411BD8EF1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft Manifest number: 07 Signing time: Wed 13 May 2026 02:56:27 +0000 Manifest this update: Wed 13 May 2026 02:51:27 +0000 Manifest next update: Thu 14 May 2026 04:10:27 +0000 Files and hashes: 1: 19CD307B99E39576032EDA2043070E1F0D7E34FC.crl (hash: Yixc1WgTqUu5Zhclvjwd2TvagbJyemqDM9NxqUXHVro=) 2: 3130332e36372e3136302e302f32342d3234203d3e2039393135.roa (hash: gMSZ51i6aWVz9x3FjBFTd2IoqA1W+/e4V2ENouMZDKs=) 3: 3130332e36372e3136302e302f32332d3234203d3e2039393135.roa (hash: 1hM91L7F3/G6h4Of6tkYcdbJGhctsno0oGYZtd2FpCM=) 4: 3130332e36372e3136302e302f32332d3234203d3e20313331363539.roa (hash: cjSMd043hBi+PQ+oqLd19nGxvDa5ak2dzrrrwCJ0UEw=) 5: 3130332e36372e3136312e302f32342d3234203d3e2039393135.roa (hash: 3vl3ngoiwYnQpST2jujOdaU/Gl4KrMDlztcv+fb7Y4w=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a5:46:74:66:7b:04:fb:c7:ed:b8:55:bd:5c:40:54:11:bd:8e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19CD307B99E39576032EDA2043070E1F0D7E34FC Validity Not Before: May 13 02:51:27 2026 GMT Not After : May 14 04:10:27 2026 GMT Subject: CN=0949D327DBEE72F9A1509A82281D8DDEB9CB1AB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:41:ee:1c:57:80:3c:49:9a:0a:1f:ac:65: f5:97:b1:0c:e9:56:ca:a9:4c:25:8c:2a:36:c2:6e: e0:f5:5d:1d:74:b2:f9:54:15:82:9e:b4:3b:70:ad: fe:a2:40:67:5d:e7:2d:e3:e1:27:05:b3:3a:cd:6e: 8a:57:a6:1b:40:bb:5e:fc:07:9d:59:2f:b8:90:2f: 76:8f:75:2c:20:b8:c8:dc:1e:a6:8e:0d:34:86:5e: ac:77:72:06:66:f3:17:da:0b:2f:cf:5a:8f:ee:4a: 27:92:ff:d3:f4:fd:0c:40:78:84:5d:53:a2:f8:57: 3d:31:da:9f:64:db:1b:f2:08:87:51:21:a3:46:80: 43:bf:c7:90:0c:90:23:88:ae:32:29:97:ee:69:35: b6:7f:ae:f6:88:0b:81:73:6b:46:be:dd:3e:0b:0f: 61:f4:45:7e:df:52:e1:06:fc:67:a7:b6:71:a8:22: 8e:a8:d4:5a:fe:36:48:43:5c:ff:01:41:bb:fd:20: dc:4c:d6:9c:f4:3c:47:ac:aa:20:87:ed:2c:bb:f6: cc:ce:13:50:cf:a2:17:71:5e:3c:3d:9c:c5:d6:8e: 17:e3:08:36:ed:95:94:a8:aa:cb:f5:65:ab:91:cd: 90:14:b3:96:8e:9f:a7:0f:b3:44:cf:07:f3:49:5e: 23:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:49:D3:27:DB:EE:72:F9:A1:50:9A:82:28:1D:8D:DE:B9:CB:1A:B4 X509v3 Authority Key Identifier: keyid:19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fa:83:89:5d:f6:d1:e0:63:3b:5d:e6:98:91:61:2c:7f:53: 23:15:2e:73:d6:79:93:87:aa:90:5c:d0:cf:66:2f:26:6b:48: 48:cd:48:69:ad:f4:25:45:7e:65:68:5e:4a:e7:9c:a4:7f:fa: 18:d0:be:4c:78:41:6b:07:1d:7e:95:6c:36:14:a8:75:ed:09: 61:50:9e:4a:f7:dd:cc:1a:24:53:16:75:93:45:d7:07:d1:56: a6:e0:c2:53:f5:2a:3a:46:a1:09:4e:d2:b7:ac:9f:d3:21:d2: c3:b5:cb:9c:ee:f2:98:92:52:52:8a:9e:7b:46:bc:3e:68:d6: ef:b3:a4:ba:bd:64:e0:3d:92:53:e7:be:a1:ed:08:25:b8:36: 5f:52:c6:dc:15:1b:6a:6a:a2:ab:aa:e6:7a:cc:fa:36:c9:30: bf:f6:d4:85:bf:8f:44:39:24:01:6d:5f:7d:0e:4c:56:13:0b: a0:dd:4f:41:87:73:f1:b5:a7:84:23:c0:1c:b3:92:1b:f0:55: bb:2a:07:01:fd:31:99:4f:5e:e9:f6:7e:34:1c:94:de:8f:3d: fe:68:d7:48:be:24:f9:c0:e4:72:20:86:01:2b:b8:8c:a4:e8: d4:4c:41:04:9c:b9:eb:98:e2:55:67:1a:31:1f:58:1d:1c:55: 68:cf:6f:93 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIULqVGdGZ7BPvH7bhVvVxAVBG9jvEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlDRDMwN0I5OUUzOTU3NjAzMkVEQTIwNDMwNzBFMUYw RDdFMzRGQzAeFw0yNjA1MTMwMjUxMjdaFw0yNjA1MTQwNDEwMjdaMDMxMTAvBgNV BAMTKDA5NDlEMzI3REJFRTcyRjlBMTUwOUE4MjI4MUQ4RERFQjlDQjFBQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXUHuHFeAPEmaCh+sZfWXsQzp VsqpTCWMKjbCbuD1XR10svlUFYKetDtwrf6iQGdd5y3j4ScFszrNbopXphtAu178 B51ZL7iQL3aPdSwguMjcHqaODTSGXqx3cgZm8xfaCy/PWo/uSieS/9P0/QxAeIRd U6L4Vz0x2p9k2xvyCIdRIaNGgEO/x5AMkCOIrjIpl+5pNbZ/rvaIC4Fza0a+3T4L D2H0RX7fUuEG/GentnGoIo6o1Fr+NkhDXP8BQbv9INxM1pz0PEesqiCH7Sy79szO E1DPohdxXjw9nMXWjhfjCDbtlZSoqsv1ZauRzZAUs5aOn6cPs0TPB/NJXiOZAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUCUnTJ9vucvmhUJqCKB2N3rnLGrQwHwYDVR0j BBgwFoAUGc0we5njlXYDLtogQwcOHw1+NPwwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVFTU9O LzAvMTlDRDMwN0I5OUUzOTU3NjAzMkVEQTIwNDMwNzBFMUYwRDdFMzRGQy5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8xOUNEMzA3Qjk5RTM5NTc2MDMyRURBMjA0MzA3 MEUxRjBEN0UzNEZDLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVFTU9OLzAvMTlDRDMwN0I5OUUz OTU3NjAzMkVEQTIwNDMwNzBFMUYwRDdFMzRGQy5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD/6g4ld9tHg Yztd5piRYSx/UyMVLnPWeZOHqpBc0M9mLyZrSEjNSGmt9CVFfmVoXkrnnKR/+hjQ vkx4QWsHHX6VbDYUqHXtCWFQnkr33cwaJFMWdZNF1wfRVqbgwlP1KjpGoQlO0res n9Mh0sO1y5zu8piSUlKKnntGvD5o1u+zpLq9ZOA9klPnvqHtCCW4Nl9SxtwVG2pq oquq5nrM+jbJML/21IW/j0Q5JAFtX30OTFYTC6DdT0GHc/G1p4QjwByzkhvwVbsq BwH9MZlPXun2fjQclN6PPf5o10i+JPnA5HIghgEruIyk6NRMQQScueuY4lVnGjEf WB0cVWjPb5M= -----END CERTIFICATE-----Generated at Wed May 13 20:33:36 2026 by rpki-client