$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft File: 19CD307B99E39576032EDA2043070E1F0D7E34FC.mft (raw, json) Hash identifier: ROWQhHpX9sIST5Q7qDK0HveAWR5zqDJaOY8uv5hS3i0= Subject key identifier: EC:C7:2B:01:C1:6E:F2:B9:1B:4B:67:BC:06:DE:04:59:F1:55:D3:69 Authority key identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC Certificate issuer: /CN=19CD307B99E39576032EDA2043070E1F0D7E34FC Certificate serial: 2D7E36FE82945B2D6397CE42EB144BB80613B02C Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft Manifest number: B6 Signing time: Mon 21 Sep 2026 12:22:05 +0000 Manifest this update: Mon 21 Sep 2026 12:17:05 +0000 Manifest next update: Tue 22 Sep 2026 12:35:05 +0000 Files and hashes: 1: 3130332e36372e3136302e302f32332d3234203d3e2039393135.roa (hash: 1hM91L7F3/G6h4Of6tkYcdbJGhctsno0oGYZtd2FpCM=) 2: 19CD307B99E39576032EDA2043070E1F0D7E34FC.crl (hash: SzLqVXlwiujx5/yl8RzUXrrzqBfYI9kV37QpSiIMuPE=) 3: 3130332e36372e3136302e302f32342d3234203d3e2039393135.roa (hash: gMSZ51i6aWVz9x3FjBFTd2IoqA1W+/e4V2ENouMZDKs=) 4: 3130332e36372e3136312e302f32342d3234203d3e2039393135.roa (hash: 3vl3ngoiwYnQpST2jujOdaU/Gl4KrMDlztcv+fb7Y4w=) 5: 3130332e36372e3136302e302f32332d3234203d3e20313331363539.roa (hash: cjSMd043hBi+PQ+oqLd19nGxvDa5ak2dzrrrwCJ0UEw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:7e:36:fe:82:94:5b:2d:63:97:ce:42:eb:14:4b:b8:06:13:b0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19CD307B99E39576032EDA2043070E1F0D7E34FC Validity Not Before: Sep 21 12:17:05 2026 GMT Not After : Sep 22 12:35:05 2026 GMT Subject: CN=ECC72B01C16EF2B91B4B67BC06DE0459F155D369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:bd:83:0d:34:52:fe:ee:d6:38:3f:73:f0:5d: df:9b:03:1b:8d:42:4f:cd:ad:91:f9:e9:9f:23:13: 7b:43:13:b2:f7:32:28:d7:d6:f5:c7:85:3e:ed:50: 6c:db:62:9a:10:57:b1:48:24:64:cd:19:8d:5a:72: b3:70:57:28:3e:0f:8d:20:65:42:a1:f5:ff:03:5e: c3:d1:09:7b:26:b7:51:c1:cd:d5:3a:6c:3a:20:8b: 52:21:b5:b0:ed:88:fa:0c:65:dd:58:e7:4d:98:57: b1:da:92:88:78:1a:fa:3e:75:7f:15:46:fe:18:a9: 8b:19:ba:c1:40:a9:68:59:b0:ef:9b:ae:7c:15:bc: 49:f7:87:27:37:cf:dd:82:3d:84:27:4c:ab:c1:54: 9a:c4:5b:03:4f:f8:6e:b5:a9:9c:5d:00:3b:50:24: 73:98:b5:bd:42:88:cb:65:35:06:25:82:32:6c:61: 00:18:f0:a6:3e:b6:37:27:58:fd:e6:fa:24:ed:c7: 7a:fb:5d:83:b6:6c:60:31:d6:31:f4:22:61:0d:4f: 4a:c7:8d:b2:26:7b:6e:fc:31:fe:e1:c4:af:a3:c7: a6:7b:2c:65:58:7d:48:5c:ba:ee:64:40:a5:80:af: 92:a8:c1:32:1b:1a:e2:94:af:bb:cb:86:7d:d8:b4: 56:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C7:2B:01:C1:6E:F2:B9:1B:4B:67:BC:06:DE:04:59:F1:55:D3:69 X509v3 Authority Key Identifier: keyid:19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:ee:96:d0:76:8a:02:33:4a:5f:fa:16:1c:f3:ea:3d:25:f5: 48:be:fd:1f:64:3b:59:1f:f4:34:87:f8:7e:aa:0a:f4:89:f8: d7:6e:81:55:63:71:39:6c:96:ff:04:c8:d2:78:43:d4:9e:62: bb:1e:48:b5:79:07:fc:7d:e4:64:5b:93:a1:f8:97:46:2e:59: 99:2b:d4:2d:b0:be:60:5a:43:fb:f6:d9:a3:97:a2:21:4f:6f: 27:62:5b:17:70:51:0e:0c:19:ac:a3:7f:02:d9:fd:10:e3:0e: f2:35:e2:f2:5c:86:46:3b:2a:90:65:a7:25:ed:cb:fe:06:d5: 9c:2c:12:ae:a5:10:ac:81:b9:06:6a:97:ee:eb:94:0e:37:cc: 40:4c:11:bb:60:36:ad:f4:92:b2:34:07:53:79:83:0b:dc:fc: 35:59:2e:e9:39:92:e1:b5:39:39:38:e6:8a:80:07:f8:7f:54: 8f:3f:ea:47:76:3c:bb:03:a8:ab:22:bd:57:14:07:cc:36:32: 58:64:f8:35:a7:22:c0:9a:0a:f7:19:bd:2f:13:46:06:36:2d: 89:8b:cc:40:71:a7:21:23:ff:92:0a:b3:ae:0e:c6:4e:e3:90: 2a:f2:b7:90:18:5d:5a:3c:df:d5:f6:39:c1:d3:ba:e8:22:da: c5:6d:4f:45 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIULX42/oKUWy1jl85C6xRLuAYTsCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlDRDMwN0I5OUUzOTU3NjAzMkVEQTIwNDMwNzBFMUYw RDdFMzRGQzAeFw0yNjA5MjExMjE3MDVaFw0yNjA5MjIxMjM1MDVaMDMxMTAvBgNV BAMTKEVDQzcyQjAxQzE2RUYyQjkxQjRCNjdCQzA2REUwNDU5RjE1NUQzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtvYMNNFL+7tY4P3PwXd+bAxuN Qk/NrZH56Z8jE3tDE7L3MijX1vXHhT7tUGzbYpoQV7FIJGTNGY1acrNwVyg+D40g ZUKh9f8DXsPRCXsmt1HBzdU6bDogi1IhtbDtiPoMZd1Y502YV7Hakoh4Gvo+dX8V Rv4YqYsZusFAqWhZsO+brnwVvEn3hyc3z92CPYQnTKvBVJrEWwNP+G61qZxdADtQ JHOYtb1CiMtlNQYlgjJsYQAY8KY+tjcnWP3m+iTtx3r7XYO2bGAx1jH0ImENT0rH jbIme278Mf7hxK+jx6Z7LGVYfUhcuu5kQKWAr5KowTIbGuKUr7vLhn3YtFYPAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU7McrAcFu8rkbS2e8Bt4EWfFV02kwHwYDVR0j BBgwFoAUGc0we5njlXYDLtogQwcOHw1+NPwwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVFTU9O LzAvMTlDRDMwN0I5OUUzOTU3NjAzMkVEQTIwNDMwNzBFMUYwRDdFMzRGQy5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8xOUNEMzA3Qjk5RTM5NTc2MDMyRURBMjA0MzA3 MEUxRjBEN0UzNEZDLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVFTU9OLzAvMTlDRDMwN0I5OUUz OTU3NjAzMkVEQTIwNDMwNzBFMUYwRDdFMzRGQy5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALTultB2igIz Sl/6Fhzz6j0l9Ui+/R9kO1kf9DSH+H6qCvSJ+NdugVVjcTlslv8EyNJ4Q9SeYrse SLV5B/x95GRbk6H4l0YuWZkr1C2wvmBaQ/v22aOXoiFPbydiWxdwUQ4MGayjfwLZ /RDjDvI14vJchkY7KpBlpyXty/4G1ZwsEq6lEKyBuQZql+7rlA43zEBMEbtgNq30 krI0B1N5gwvc/DVZLuk5kuG1OTk45oqAB/h/VI8/6kd2PLsDqKsivVcUB8w2Mlhk +DWnIsCaCvcZvS8TRgY2LYmLzEBxpyEj/5IKs64Oxk7jkCryt5AYXVo839X2OcHT uugi2sVtT0U= -----END CERTIFICATE-----Generated at Mon Sep 21 20:57:01 2026 by rpki-client