
$ rpki-client -vvf rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
File: 19CD307B99E39576032EDA2043070E1F0D7E34FC.mft (raw, json)
Hash identifier: sI1X9CcYD5OYH1Zc7WhOmcserS2JHWl9hnFRCtN9rGY=
Subject key identifier: 69:69:36:45:12:D2:75:76:C8:D0:88:36:6C:29:71:7C:CD:77:CB:35
Authority key identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC
Certificate issuer: /CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
Certificate serial: B47BD749AC826432F3D3718EF1ECA57C33EDAA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
Manifest number: 31
Signing time: Sat 13 Jun 2026 19:05:19 +0000
Manifest this update: Sat 13 Jun 2026 19:00:19 +0000
Manifest next update: Sun 14 Jun 2026 20:27:19 +0000
Files and hashes: 1: 3130332e36372e3136302e302f32342d3234203d3e2039393135.roa (hash: gMSZ51i6aWVz9x3FjBFTd2IoqA1W+/e4V2ENouMZDKs=)
2: 3130332e36372e3136302e302f32332d3234203d3e20313331363539.roa (hash: cjSMd043hBi+PQ+oqLd19nGxvDa5ak2dzrrrwCJ0UEw=)
3: 3130332e36372e3136302e302f32332d3234203d3e2039393135.roa (hash: 1hM91L7F3/G6h4Of6tkYcdbJGhctsno0oGYZtd2FpCM=)
4: 19CD307B99E39576032EDA2043070E1F0D7E34FC.crl (hash: q8tXx1AIMBvbG4OjhL5EK/1pa27jX8fF2RLs53HrK98=)
5: 3130332e36372e3136312e302f32342d3234203d3e2039393135.roa (hash: 3vl3ngoiwYnQpST2jujOdaU/Gl4KrMDlztcv+fb7Y4w=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl
rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 19:52:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b4:7b:d7:49:ac:82:64:32:f3:d3:71:8e:f1:ec:a5:7c:33:ed:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
Validity
Not Before: Jun 13 19:00:19 2026 GMT
Not After : Jun 14 20:27:19 2026 GMT
Subject: CN=6969364512D27576C8D088366C29717CCD77CB35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ae:16:9a:2a:c5:1f:c1:3c:32:70:5e:36:cf:
f5:33:cd:c2:3a:88:3e:32:d5:fd:4b:9b:fd:5f:60:
e8:de:f1:a6:1b:bb:58:15:93:a0:72:a6:b1:7c:83:
1d:08:82:d3:9f:0c:34:ce:9c:f1:b1:b9:5e:33:96:
64:30:ee:5f:de:78:82:02:83:81:72:a4:b7:c5:1a:
52:72:d5:c5:20:b1:51:75:10:34:df:42:2f:5e:b0:
75:c5:2f:19:c3:6d:42:04:16:22:8a:eb:13:de:04:
78:3c:64:50:33:c3:88:ee:56:13:17:8b:12:10:c8:
68:d5:07:59:56:4d:28:3f:1a:44:09:7b:a3:03:b2:
54:8e:80:46:38:96:e8:2c:4f:9a:22:58:f1:9f:e6:
d2:9a:e9:fc:fa:2c:50:91:98:8e:99:14:41:ef:a5:
3b:48:5f:e0:50:ed:25:a0:e4:ef:1b:90:b5:90:9b:
3e:ce:ee:43:24:b0:41:a7:d2:82:04:2d:a5:b4:03:
6d:31:8b:68:48:e7:dc:be:30:e8:37:b4:1a:89:2e:
fc:51:5a:ea:82:df:c7:c1:da:af:96:f0:f8:1d:b9:
4f:e7:4b:41:f2:87:84:3b:38:63:dd:93:3a:4b:65:
82:da:03:cd:55:af:37:ec:47:1a:d2:77:20:ac:c6:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:69:36:45:12:D2:75:76:C8:D0:88:36:6C:29:71:7C:CD:77:CB:35
X509v3 Authority Key Identifier:
keyid:19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:53:b8:cd:47:c4:4f:ca:ca:8c:bc:7a:8c:96:1d:2e:25:54:
60:cf:b8:5d:9b:0a:3e:59:a9:a3:f3:3b:66:3f:b3:ea:f3:61:
d8:cb:36:23:bc:0b:14:e3:c4:50:27:13:9c:f8:ce:8a:d5:27:
ec:ee:04:de:76:01:78:93:6e:f3:d9:55:ff:6e:60:9f:5a:8a:
4e:e0:92:87:b1:0f:b9:7c:c9:73:bd:55:9e:0a:b6:76:9a:fd:
00:1b:88:8c:ac:b1:38:42:ef:6c:a5:99:15:24:39:9a:6d:0f:
bc:08:e1:63:71:41:22:a9:0a:ed:13:7a:4a:20:7f:db:d8:2f:
bd:c2:81:8c:69:00:2d:34:c9:c6:e6:b3:1d:ab:e3:42:d9:b5:
8f:8f:3d:8c:26:11:77:ef:6f:ad:4b:ae:1c:d3:d8:d9:e4:ba:
d6:76:af:8d:83:ca:6f:73:18:42:49:00:8a:88:c5:61:1e:d5:
0c:b9:94:b4:e7:0c:8f:ad:85:2b:c7:b7:d8:57:3b:57:86:2b:
6e:c9:24:99:5e:fc:1c:47:6b:92:aa:7e:bd:60:7d:b5:a8:20:
66:b6:f1:33:37:d7:99:1d:a7:49:7a:e3:ae:11:c3:a5:8d:16:
83:14:52:05:0e:f8:bc:cd:9c:60:ec:f3:4e:47:b2:5f:2a:aa:
05:a1:0c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:12:35 2026 by rpki-client