$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft File: 19CD307B99E39576032EDA2043070E1F0D7E34FC.mft (raw, json) Hash identifier: E/3am/lplvbqBfCbGzyVrTX6Fm3lfpslS0U+9Osav9s= Subject key identifier: 13:B7:CC:49:89:8E:2C:BB:B6:64:CF:BE:28:26:E7:C1:E0:40:CE:E8 Authority key identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC Certificate issuer: /CN=19CD307B99E39576032EDA2043070E1F0D7E34FC Certificate serial: 0D15C3D4BE4DA368E8F89FD25639E6C5CCF0C5FB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft Manifest number: C3 Signing time: Thu 01 Oct 2026 04:06:46 +0000 Manifest this update: Thu 01 Oct 2026 04:01:46 +0000 Manifest next update: Fri 02 Oct 2026 06:09:46 +0000 Files and hashes: 1: 3130332e36372e3136302e302f32342d3234203d3e2039393135.roa (hash: gMSZ51i6aWVz9x3FjBFTd2IoqA1W+/e4V2ENouMZDKs=) 2: 3130332e36372e3136302e302f32332d3234203d3e2039393135.roa (hash: 1hM91L7F3/G6h4Of6tkYcdbJGhctsno0oGYZtd2FpCM=) 3: 3130332e36372e3136312e302f32342d3234203d3e2039393135.roa (hash: 3vl3ngoiwYnQpST2jujOdaU/Gl4KrMDlztcv+fb7Y4w=) 4: 3130332e36372e3136302e302f32332d3234203d3e20313331363539.roa (hash: cjSMd043hBi+PQ+oqLd19nGxvDa5ak2dzrrrwCJ0UEw=) 5: 19CD307B99E39576032EDA2043070E1F0D7E34FC.crl (hash: 0NFiD70nPjY/fIMITIqbFcJS7dIVPziPu8/bQlST58E=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:15:c3:d4:be:4d:a3:68:e8:f8:9f:d2:56:39:e6:c5:cc:f0:c5:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19CD307B99E39576032EDA2043070E1F0D7E34FC Validity Not Before: Oct 1 04:01:46 2026 GMT Not After : Oct 2 06:09:46 2026 GMT Subject: CN=13B7CC49898E2CBBB664CFBE2826E7C1E040CEE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ba:66:fc:75:2b:36:e9:73:f9:1e:57:38:5a: 5d:68:55:1d:1b:09:c1:3f:b4:16:8f:10:5d:2b:02: 37:65:1f:07:d5:93:aa:31:a1:81:8a:74:b3:c7:36: 3d:8d:49:81:fa:78:b5:1c:e5:ef:15:8e:73:63:b4: 5f:5a:e8:05:af:fc:85:dd:9f:8e:a8:fb:4b:6a:96: 52:2f:4b:46:e6:af:42:6b:76:14:59:48:06:71:83: 61:29:da:e9:26:64:34:84:24:58:d3:17:8f:58:b9: be:5b:4f:13:02:80:47:9f:f9:b2:dd:55:f1:0b:d6: f0:d6:88:7f:ff:77:45:c5:af:f2:6e:ce:cc:45:a5: 3b:ca:61:ed:31:10:2c:73:b0:f9:db:45:88:ae:2f: 6e:fc:1b:4f:ec:62:5d:4e:82:b3:41:1a:74:e6:5a: e6:bd:cf:71:e4:d4:bd:d8:a9:5c:ea:ff:86:2b:34: 14:91:0e:7a:c4:ea:fa:90:34:c2:90:21:3d:0e:8c: cc:7b:92:3d:5a:0b:94:0a:a1:2f:2f:01:3b:83:c6: b7:f9:d3:ad:38:56:11:d0:63:ff:86:6e:98:b2:e1: 25:6d:b4:30:8d:a4:af:cf:2e:12:e2:f1:40:c6:2b: 68:73:f3:15:af:e6:09:1e:2b:f0:61:a0:fd:7d:27: ef:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B7:CC:49:89:8E:2C:BB:B6:64:CF:BE:28:26:E7:C1:E0:40:CE:E8 X509v3 Authority Key Identifier: keyid:19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:cb:b5:91:bb:cb:26:b6:78:03:02:a5:38:a6:04:15:6e:52: 57:0c:d4:fd:82:b8:05:ef:6d:18:4e:92:2b:62:d9:51:22:4f: 8f:1e:dc:49:e5:49:7f:df:a2:4a:75:60:c5:20:51:82:6f:70: 44:ab:f1:47:91:f8:99:2f:70:dd:d0:84:5b:c1:01:b7:5f:3e: 95:30:2e:5c:d6:dc:64:01:eb:32:c0:e1:03:61:4f:15:8a:a5: d6:73:3e:a1:8f:0d:ea:4e:cf:fb:49:48:6f:da:d2:f8:50:73: d2:eb:5a:c7:f9:8e:a7:ba:e2:e9:74:eb:58:9f:9a:b4:36:d8: b2:84:9e:70:ff:7a:09:9d:a1:b5:1e:c7:af:ea:99:09:2a:95: 26:25:bf:12:e3:4c:2e:ee:7b:c3:c0:67:4a:fd:aa:e5:24:a5: fe:e9:3f:9d:65:58:ea:2c:db:87:8f:ef:01:8a:3e:f5:2b:ef: fa:f4:f7:d4:a7:a5:48:86:ac:06:74:1c:9a:c0:84:3e:30:3c: 94:0b:28:e0:7e:47:dd:0b:24:87:3a:17:3c:77:f0:ca:21:e7: 25:1b:5a:7e:0b:a3:69:f4:28:40:c8:80:8a:74:7d:5c:25:51: bd:71:cb:4d:0f:2e:c5:8c:c1:48:82:2b:16:a7:45:d8:fd:94: 7d:02:16:08 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUDRXD1L5No2jo+J/SVjnmxczwxfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlDRDMwN0I5OUUzOTU3NjAzMkVEQTIwNDMwNzBFMUYw RDdFMzRGQzAeFw0yNjEwMDEwNDAxNDZaFw0yNjEwMDIwNjA5NDZaMDMxMTAvBgNV BAMTKDEzQjdDQzQ5ODk4RTJDQkJCNjY0Q0ZCRTI4MjZFN0MxRTA0MENFRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSumb8dSs26XP5Hlc4Wl1oVR0b CcE/tBaPEF0rAjdlHwfVk6oxoYGKdLPHNj2NSYH6eLUc5e8VjnNjtF9a6AWv/IXd n46o+0tqllIvS0bmr0JrdhRZSAZxg2Ep2ukmZDSEJFjTF49Yub5bTxMCgEef+bLd VfEL1vDWiH//d0XFr/JuzsxFpTvKYe0xECxzsPnbRYiuL278G0/sYl1OgrNBGnTm Wua9z3Hk1L3YqVzq/4YrNBSRDnrE6vqQNMKQIT0OjMx7kj1aC5QKoS8vATuDxrf5 0604VhHQY/+Gbpiy4SVttDCNpK/PLhLi8UDGK2hz8xWv5gkeK/BhoP19J+9pAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUE7fMSYmOLLu2ZM++KCbnweBAzugwHwYDVR0j BBgwFoAUGc0we5njlXYDLtogQwcOHw1+NPwwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVFTU9O LzAvMTlDRDMwN0I5OUUzOTU3NjAzMkVEQTIwNDMwNzBFMUYwRDdFMzRGQy5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8xOUNEMzA3Qjk5RTM5NTc2MDMyRURBMjA0MzA3 MEUxRjBEN0UzNEZDLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVFTU9OLzAvMTlDRDMwN0I5OUUz OTU3NjAzMkVEQTIwNDMwNzBFMUYwRDdFMzRGQy5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANHLtZG7yya2 eAMCpTimBBVuUlcM1P2CuAXvbRhOkiti2VEiT48e3EnlSX/fokp1YMUgUYJvcESr 8UeR+JkvcN3QhFvBAbdfPpUwLlzW3GQB6zLA4QNhTxWKpdZzPqGPDepOz/tJSG/a 0vhQc9LrWsf5jqe64ul061ifmrQ22LKEnnD/egmdobUex6/qmQkqlSYlvxLjTC7u e8PAZ0r9quUkpf7pP51lWOos24eP7wGKPvUr7/r099SnpUiGrAZ0HJrAhD4wPJQL KOB+R90LJIc6Fzx38Moh5yUbWn4Lo2n0KEDIgIp0fVwlUb1xy00PLsWMwUiCKxan Rdj9lH0CFgg= -----END CERTIFICATE-----Generated at Thu Oct 1 19:45:37 2026 by rpki-client