$ rpki-client -vvf rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft File: 2332F45F8367B079CBBF58331B603792B98FE14C.mft (raw, json) Hash identifier: CtuvprziB0GUTtO172AxemUuKcXD0QjHUqneDgXt43k= Subject key identifier: F7:A2:CE:2C:D4:29:D8:E5:B4:87:D3:5E:20:90:1F:C1:2D:2D:33:35 Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C Certificate issuer: /CN=2332F45F8367B079CBBF58331B603792B98FE14C Certificate serial: 402651E711F5DAF23364F2797E58FFB94754E7D9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft Manifest number: 46 Signing time: Tue 30 Jun 2026 10:03:38 +0000 Manifest this update: Tue 30 Jun 2026 09:58:38 +0000 Manifest next update: Wed 01 Jul 2026 13:41:38 +0000 Files and hashes: 1: 3231312e37392e3131302e302f32332d3234203d3e2039333034.roa (hash: vfXs11BWbNGaoxQBAVGo/wMk8Ci8VIRwv9JFBm/IA80=) 2: 2332F45F8367B079CBBF58331B603792B98FE14C.crl (hash: FGxU6sgKKb7hY+6mPVTqQ07467ZGUk9NDdE2Ox+tjLc=) 3: 3231312e37362e3138342e302f32332d3234203d3e2039333034.roa (hash: AdbqBZx7O6awGXHybD+ulNvzAkLHIT+5qzSTTZe3l7U=) 4: 34332e3234302e34342e302f32322d3234203d3e2039333034.roa (hash: Rcyf/AbK/YuoEXF9UB0d8eqwnzO1awB1kaL4uBZD5pg=) 5: 3130332e31372e3234302e302f32322d3234203d3e2039333034.roa (hash: JsQnApcWG0Br9XWgA/4bt9qFUtjbPIUqmVRTsBx6apc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 13:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:26:51:e7:11:f5:da:f2:33:64:f2:79:7e:58:ff:b9:47:54:e7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C Validity Not Before: Jun 30 09:58:38 2026 GMT Not After : Jul 1 13:41:38 2026 GMT Subject: CN=F7A2CE2CD429D8E5B487D35E20901FC12D2D3335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c5:c9:81:05:01:4d:5f:47:90:b8:a3:78:91: 12:09:15:cf:5c:91:4e:9b:4c:f5:73:1d:71:ea:a5: 58:b0:1a:1b:11:c5:8b:c9:4a:07:1f:4f:e7:9b:ee: 2c:f5:a4:74:db:db:d5:8b:1f:84:9d:f1:58:48:75: ac:73:b3:02:4b:c7:ef:83:b4:de:c9:9b:62:c2:ab: 72:f2:ad:ae:7a:7f:a4:03:d7:1a:6f:28:10:96:54: 9a:4d:9a:b7:31:00:d3:87:ea:bd:63:b8:95:1d:7b: be:d5:b1:c4:d0:a9:8b:e4:c2:60:45:3d:c4:32:86: 08:e8:61:e4:01:8a:5c:09:21:67:ac:5e:a4:f9:74: 34:96:61:14:d7:5f:08:bb:e0:60:03:2b:9f:4e:6e: 56:e5:59:2f:42:cb:e5:97:f8:a8:30:f2:94:33:a9: 68:b9:2b:b4:a2:ca:54:bb:a4:af:9a:ae:7d:9f:64: 33:19:ca:de:18:c3:64:a2:0c:06:20:5e:22:c7:6d: 12:e2:fc:07:cd:5c:5a:1d:5f:5a:0c:c9:e3:69:3b: 6e:2f:3c:10:e6:b0:df:0a:e0:9f:c3:1f:9b:06:c2: 03:bf:5b:cf:b3:93:3a:f3:0e:a3:eb:56:eb:3e:ec: 9e:52:9d:c6:3c:a1:dc:bb:87:78:0b:60:a4:6f:08: da:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A2:CE:2C:D4:29:D8:E5:B4:87:D3:5E:20:90:1F:C1:2D:2D:33:35 X509v3 Authority Key Identifier: keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:85:b5:4a:ba:55:6a:c7:7a:32:23:06:9a:5b:16:43:45:ee: 4a:75:3f:17:14:56:5e:a8:92:54:8e:77:4d:30:2e:61:4a:8e: 5a:d7:03:f4:dd:45:69:53:4d:c6:6b:94:89:41:de:10:9f:2e: db:95:01:dc:75:59:f8:1f:9e:74:2e:31:e8:a1:ae:77:8f:c0: 05:d1:ce:44:61:6e:13:9c:46:eb:bd:da:de:5f:94:f4:33:0f: 89:1a:49:f6:2a:95:bd:be:1e:16:42:5f:db:89:51:29:96:58: d6:69:f8:0a:67:ed:db:82:c4:56:bf:8a:b7:a8:1a:89:45:ab: f6:b9:eb:a0:65:85:13:14:f1:b3:cc:b6:99:df:51:d2:e9:a1: 52:3e:5e:f3:ec:0e:54:15:9b:ee:ce:d2:b3:c0:b9:6d:ac:4f: 24:75:45:44:e9:05:71:fb:e6:14:a9:10:4b:75:16:47:67:c5: 2e:7d:f7:3d:d3:19:f8:8c:e6:e5:7f:1d:96:ae:8e:a1:5d:0f: 54:71:30:1d:f0:f0:b7:11:5b:a7:f8:07:75:b2:e7:08:7d:93: db:29:b2:2b:38:ab:ea:71:cb:82:2d:ce:dd:58:c0:b8:91:c6: 98:b3:3a:e8:c0:e0:72:de:ec:c3:ff:dd:0c:2c:a5:9e:9f:fc: c8:8a:fe:17 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUQCZR5xH12vIzZPJ5flj/uUdU59kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkY0NUY4MzY3QjA3OUNCQkY1ODMzMUI2MDM3OTJC OThGRTE0QzAeFw0yNjA2MzAwOTU4MzhaFw0yNjA3MDExMzQxMzhaMDMxMTAvBgNV BAMTKEY3QTJDRTJDRDQyOUQ4RTVCNDg3RDM1RTIwOTAxRkMxMkQyRDMzMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWxcmBBQFNX0eQuKN4kRIJFc9c kU6bTPVzHXHqpViwGhsRxYvJSgcfT+eb7iz1pHTb29WLH4Sd8VhIdaxzswJLx++D tN7Jm2LCq3Lyra56f6QD1xpvKBCWVJpNmrcxANOH6r1juJUde77VscTQqYvkwmBF PcQyhgjoYeQBilwJIWesXqT5dDSWYRTXXwi74GADK59OblblWS9Cy+WX+Kgw8pQz qWi5K7SiylS7pK+arn2fZDMZyt4Yw2SiDAYgXiLHbRLi/AfNXFodX1oMyeNpO24v PBDmsN8K4J/DH5sGwgO/W8+zkzrzDqPrVus+7J5SncY8ody7h3gLYKRvCNopAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU96LOLNQp2OW0h9NeIJAfwS0tMzUwHwYDVR0j BBgwFoAUIzL0X4NnsHnLv1gzG2A3krmP4UwwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVPTENZ LzAvMjMzMkY0NUY4MzY3QjA3OUNCQkY1ODMzMUI2MDM3OTJCOThGRTE0Qy5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8yMzMyRjQ1RjgzNjdCMDc5Q0JCRjU4MzMxQjYw Mzc5MkI5OEZFMTRDLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVPTENZLzAvMjMzMkY0NUY4MzY3 QjA3OUNCQkY1ODMzMUI2MDM3OTJCOThGRTE0Qy5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANGFtUq6VWrH ejIjBppbFkNF7kp1PxcUVl6oklSOd00wLmFKjlrXA/TdRWlTTcZrlIlB3hCfLtuV Adx1WfgfnnQuMeihrnePwAXRzkRhbhOcRuu92t5flPQzD4kaSfYqlb2+HhZCX9uJ USmWWNZp+Apn7duCxFa/ireoGolFq/a566BlhRMU8bPMtpnfUdLpoVI+XvPsDlQV m+7O0rPAuW2sTyR1RUTpBXH75hSpEEt1FkdnxS599z3TGfiM5uV/HZaujqFdD1Rx MB3w8LcRW6f4B3Wy5wh9k9spsis4q+pxy4Itzt1YwLiRxpizOujA4HLe7MP/3Qws pZ6f/MiK/hc= -----END CERTIFICATE-----Generated at Tue Jun 30 19:07:34 2026 by rpki-client