
$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
File: 2332F45F8367B079CBBF58331B603792B98FE14C.mft (raw, json)
Hash identifier: n+VQ57zH7kvCaCQmshuZg9f+ANM9myn4C3+51HO3LWQ=
Subject key identifier: 46:C5:5D:C3:04:BD:DF:40:52:3A:7F:BA:2E:BB:D3:4B:B0:2F:D3:AF
Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
Certificate issuer: /CN=2332F45F8367B079CBBF58331B603792B98FE14C
Certificate serial: 5EC6295CF0C898C9502DFDEB6F84367EDB85A848
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
Manifest number: C4
Signing time: Sat 03 Oct 2026 20:17:06 +0000
Manifest this update: Sat 03 Oct 2026 20:12:06 +0000
Manifest next update: Mon 05 Oct 2026 00:11:06 +0000
Files and hashes: 1: 3231312e37392e3131302e302f32332d3234203d3e2039333034.roa (hash: vfXs11BWbNGaoxQBAVGo/wMk8Ci8VIRwv9JFBm/IA80=)
2: 3231312e37362e3138342e302f32332d3234203d3e2039333034.roa (hash: AdbqBZx7O6awGXHybD+ulNvzAkLHIT+5qzSTTZe3l7U=)
3: 2332F45F8367B079CBBF58331B603792B98FE14C.crl (hash: tMBTkBZwDuDKNlHOrimiMOIhpQI2CNm4VTjwb4hzKcg=)
4: 3130332e31372e3234302e302f32322d3234203d3e2039333034.roa (hash: JsQnApcWG0Br9XWgA/4bt9qFUtjbPIUqmVRTsBx6apc=)
5: 34332e3234302e34342e302f32322d3234203d3e2039333034.roa (hash: Rcyf/AbK/YuoEXF9UB0d8eqwnzO1awB1kaL4uBZD5pg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl
rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 22:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c6:29:5c:f0:c8:98:c9:50:2d:fd:eb:6f:84:36:7e:db:85:a8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C
Validity
Not Before: Oct 3 20:12:06 2026 GMT
Not After : Oct 5 00:11:06 2026 GMT
Subject: CN=46C55DC304BDDF40523A7FBA2EBBD34BB02FD3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e6:2b:e1:91:39:74:50:38:b6:8b:a6:b4:3a:
c5:dd:2e:33:41:bb:7c:eb:64:c8:9b:e7:e9:fa:ca:
51:10:a2:cc:03:df:33:66:fc:4c:c9:30:1a:66:a5:
33:88:a3:69:f0:ad:b5:05:f7:2c:3e:3c:fd:53:85:
b9:13:a8:a6:f0:14:7f:a0:f6:05:f0:7a:6a:12:0e:
fd:ce:ce:34:74:3f:f9:b9:07:d2:a8:27:5b:42:1f:
53:7a:e6:0a:0b:16:04:d0:f7:a4:67:ee:cd:23:8f:
c8:e8:1b:80:77:c5:80:44:b6:38:42:b6:50:b2:ac:
28:8a:45:19:a6:2e:85:4f:19:83:06:f5:f3:36:74:
7d:56:2e:cc:cd:49:8d:a7:5b:70:e9:ce:39:54:57:
66:73:ff:1d:24:a9:86:6e:94:d8:4d:ef:1c:51:0c:
17:0d:72:dd:20:bb:05:2d:30:9f:fe:cd:1f:fa:9b:
d5:a3:32:c0:0a:19:22:93:ef:15:2c:40:d7:ec:3f:
2a:bc:9f:c9:c3:57:5a:a0:ba:a6:05:c2:f5:c5:3c:
74:ba:ff:49:e0:89:d7:a4:ac:78:a3:57:9e:5f:d9:
be:1a:43:bd:88:8a:d0:6c:cf:08:fb:16:da:4e:88:
45:00:ad:c1:82:9f:b4:3e:78:b1:05:ae:96:f0:e0:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C5:5D:C3:04:BD:DF:40:52:3A:7F:BA:2E:BB:D3:4B:B0:2F:D3:AF
X509v3 Authority Key Identifier:
keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:3b:43:ed:de:6a:8b:92:35:b0:5e:b4:de:52:ff:6c:70:8a:
da:c0:8e:e9:55:c1:79:38:95:b3:ab:d8:bd:e8:52:fd:4b:0d:
f9:cb:28:4d:78:0b:c6:c7:45:77:0b:4e:2d:30:67:cc:cd:a9:
5d:e3:7c:b3:44:26:2a:73:94:6d:5f:11:dd:c4:53:a2:07:64:
1f:67:0d:5f:21:1f:94:f9:08:79:f8:7c:71:56:02:7f:8b:17:
2c:70:db:4a:17:0f:62:51:cd:f6:68:a2:86:ed:d1:01:d7:15:
0a:f1:41:f0:d5:09:ea:2a:23:92:01:54:f7:a0:5a:ee:fe:bc:
0d:b5:38:f5:02:56:c5:d7:51:42:5f:62:a0:fe:44:24:49:b7:
37:b2:89:f9:dc:32:17:36:fc:2b:ae:8b:2b:b3:af:eb:db:76:
6e:31:0d:7b:c1:9c:30:bb:2b:a9:36:ac:7b:af:9e:80:1f:a7:
ae:74:4f:c7:2d:76:59:59:08:a0:a7:2e:78:1c:1e:1f:02:11:
68:76:bb:a8:64:5c:d9:f3:ae:d6:e1:c3:e3:b1:7f:06:a2:9f:
37:d1:4f:2a:21:f0:08:5b:47:2f:d7:6a:e0:c9:94:62:d7:fa:
2d:7b:1b:d2:b9:ea:ce:01:f5:bf:3d:75:60:32:75:4c:b5:f5:
df:3f:99:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 09:03:39 2026 by rpki-client