
$ rpki-client -vvf rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
File: 19CD307B99E39576032EDA2043070E1F0D7E34FC.mft (raw, json)
Hash identifier: a/uRkNB+2p82bWvYS24OnWS4tHvGR/d4Cw0G33lnQAs=
Subject key identifier: C4:6C:EB:16:3B:10:13:8D:AE:2E:ED:B2:7F:D9:F0:11:12:17:6E:D2
Authority key identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC
Certificate issuer: /CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
Certificate serial: 353182F8FDFFE185B713C179C51592CF1EC665A6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
Manifest number: 84
Signing time: Sat 15 Aug 2026 02:59:08 +0000
Manifest this update: Sat 15 Aug 2026 02:54:08 +0000
Manifest next update: Sun 16 Aug 2026 06:46:08 +0000
Files and hashes: 1: 3130332e36372e3136302e302f32342d3234203d3e2039393135.roa (hash: gMSZ51i6aWVz9x3FjBFTd2IoqA1W+/e4V2ENouMZDKs=)
2: 3130332e36372e3136312e302f32342d3234203d3e2039393135.roa (hash: 3vl3ngoiwYnQpST2jujOdaU/Gl4KrMDlztcv+fb7Y4w=)
3: 3130332e36372e3136302e302f32332d3234203d3e2039393135.roa (hash: 1hM91L7F3/G6h4Of6tkYcdbJGhctsno0oGYZtd2FpCM=)
4: 19CD307B99E39576032EDA2043070E1F0D7E34FC.crl (hash: 3vOZ89Q3cqBZwb2sBBpFNJjzEK2SBMNEfQrgMTSbmQE=)
5: 3130332e36372e3136302e302f32332d3234203d3e20313331363539.roa (hash: cjSMd043hBi+PQ+oqLd19nGxvDa5ak2dzrrrwCJ0UEw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl
rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 16 Aug 2026 03:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:31:82:f8:fd:ff:e1:85:b7:13:c1:79:c5:15:92:cf:1e:c6:65:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
Validity
Not Before: Aug 15 02:54:08 2026 GMT
Not After : Aug 16 06:46:08 2026 GMT
Subject: CN=C46CEB163B10138DAE2EEDB27FD9F01112176ED2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:01:34:02:cd:49:7b:61:ac:05:41:51:eb:
6a:26:d7:c0:e2:a5:ed:83:45:4b:9a:b0:02:2a:ab:
6f:7e:49:ee:c9:93:50:ab:e5:5c:b0:3e:82:73:25:
e8:b8:d0:61:f6:04:42:e6:6c:d7:38:a5:9b:51:e2:
1f:9e:42:40:4c:90:4b:0f:f4:cb:51:a1:fb:57:b4:
6f:41:8a:10:0f:e4:a3:af:dc:70:64:89:cb:cc:d3:
97:82:92:ca:7e:66:65:0e:0a:2b:03:de:c6:6f:c0:
38:97:ec:dd:f1:0f:e7:5e:dc:8b:bd:eb:31:a4:61:
63:42:53:67:80:e5:7f:48:e9:16:6b:e8:2e:82:9d:
6c:55:df:5f:ab:20:b4:a2:69:7f:63:00:c9:7c:fb:
aa:f4:05:0f:0b:f5:27:48:2d:8f:48:54:c9:91:ca:
cc:12:71:71:b5:f7:4f:76:8a:f2:24:e1:61:c3:bb:
22:09:4c:ed:ad:57:57:7b:e8:f2:56:59:24:a7:fa:
d3:5d:79:d3:07:9d:ea:ea:a9:47:a0:d4:bb:57:4a:
91:28:f5:b3:c0:f1:73:d1:23:b6:9a:8e:00:e8:aa:
c1:6a:3b:3c:22:2c:76:94:86:7e:d0:33:c9:31:23:
7d:df:30:f6:65:e8:62:fd:4b:9e:1f:72:74:7e:1b:
5a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6C:EB:16:3B:10:13:8D:AE:2E:ED:B2:7F:D9:F0:11:12:17:6E:D2
X509v3 Authority Key Identifier:
keyid:19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c9:c4:98:2b:e4:9b:3d:5e:f0:ed:65:f3:a0:ec:70:01:98:
38:80:17:23:bc:09:6d:5c:92:c6:e6:9f:b4:87:cc:ec:1a:d7:
6c:f1:1e:f7:a8:4a:85:01:26:aa:3f:36:06:b6:e7:43:d7:68:
a7:7b:4a:19:f5:88:0a:41:4f:f9:69:76:1f:db:72:67:4e:7e:
b3:4d:4b:d4:e7:ad:87:ef:a3:e9:8e:fa:32:eb:62:e7:41:5e:
37:c1:c0:92:c9:18:5c:1a:03:93:e8:a1:7f:83:b3:25:9f:91:
7b:09:dc:a9:af:e2:97:49:c5:31:d9:b4:27:84:cd:12:34:21:
d0:ce:06:c7:a8:18:af:ec:cd:7b:61:24:33:51:09:32:de:70:
44:21:c2:ce:f2:fa:dc:d5:a4:fe:5f:b3:21:fa:18:5d:3f:bf:
b9:08:d4:4a:1f:9c:61:70:a3:c7:40:d5:66:8e:97:0c:e4:2c:
86:b2:fc:cd:60:bd:ea:14:99:9c:6b:56:d6:1d:eb:a4:0e:64:
4f:a0:ee:92:01:23:f1:34:3a:24:88:4a:01:9b:9c:0a:0a:37:
6e:3b:32:c1:78:a6:25:c9:a0:b8:1b:87:85:6e:f2:9e:a1:a3:
f7:d9:02:cb:d6:44:03:92:e2:96:c4:aa:37:65:c9:fc:5f:85:
b1:8b:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:21:27 2026 by rpki-client