Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
File:                     19CD307B99E39576032EDA2043070E1F0D7E34FC.mft (raw, json)
Hash identifier:          sI1X9CcYD5OYH1Zc7WhOmcserS2JHWl9hnFRCtN9rGY=
Subject key identifier:   69:69:36:45:12:D2:75:76:C8:D0:88:36:6C:29:71:7C:CD:77:CB:35
Authority key identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC
Certificate issuer:       /CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
Certificate serial:       B47BD749AC826432F3D3718EF1ECA57C33EDAA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
Manifest number:          31
Signing time:             Sat 13 Jun 2026 19:05:19 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 20:27:19 +0000
Files and hashes:         1: 3130332e36372e3136302e302f32342d3234203d3e2039393135.roa (hash: gMSZ51i6aWVz9x3FjBFTd2IoqA1W+/e4V2ENouMZDKs=)
                          2: 3130332e36372e3136302e302f32332d3234203d3e20313331363539.roa (hash: cjSMd043hBi+PQ+oqLd19nGxvDa5ak2dzrrrwCJ0UEw=)
                          3: 3130332e36372e3136302e302f32332d3234203d3e2039393135.roa (hash: 1hM91L7F3/G6h4Of6tkYcdbJGhctsno0oGYZtd2FpCM=)
                          4: 19CD307B99E39576032EDA2043070E1F0D7E34FC.crl (hash: q8tXx1AIMBvbG4OjhL5EK/1pa27jX8fF2RLs53HrK98=)
                          5: 3130332e36372e3136312e302f32342d3234203d3e2039393135.roa (hash: 3vl3ngoiwYnQpST2jujOdaU/Gl4KrMDlztcv+fb7Y4w=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl
                          rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 19:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b4:7b:d7:49:ac:82:64:32:f3:d3:71:8e:f1:ec:a5:7c:33:ed:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
        Validity
            Not Before: Jun 13 19:00:19 2026 GMT
            Not After : Jun 14 20:27:19 2026 GMT
        Subject: CN=6969364512D27576C8D088366C29717CCD77CB35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:16:9a:2a:c5:1f:c1:3c:32:70:5e:36:cf:
                    f5:33:cd:c2:3a:88:3e:32:d5:fd:4b:9b:fd:5f:60:
                    e8:de:f1:a6:1b:bb:58:15:93:a0:72:a6:b1:7c:83:
                    1d:08:82:d3:9f:0c:34:ce:9c:f1:b1:b9:5e:33:96:
                    64:30:ee:5f:de:78:82:02:83:81:72:a4:b7:c5:1a:
                    52:72:d5:c5:20:b1:51:75:10:34:df:42:2f:5e:b0:
                    75:c5:2f:19:c3:6d:42:04:16:22:8a:eb:13:de:04:
                    78:3c:64:50:33:c3:88:ee:56:13:17:8b:12:10:c8:
                    68:d5:07:59:56:4d:28:3f:1a:44:09:7b:a3:03:b2:
                    54:8e:80:46:38:96:e8:2c:4f:9a:22:58:f1:9f:e6:
                    d2:9a:e9:fc:fa:2c:50:91:98:8e:99:14:41:ef:a5:
                    3b:48:5f:e0:50:ed:25:a0:e4:ef:1b:90:b5:90:9b:
                    3e:ce:ee:43:24:b0:41:a7:d2:82:04:2d:a5:b4:03:
                    6d:31:8b:68:48:e7:dc:be:30:e8:37:b4:1a:89:2e:
                    fc:51:5a:ea:82:df:c7:c1:da:af:96:f0:f8:1d:b9:
                    4f:e7:4b:41:f2:87:84:3b:38:63:dd:93:3a:4b:65:
                    82:da:03:cd:55:af:37:ec:47:1a:d2:77:20:ac:c6:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:69:36:45:12:D2:75:76:C8:D0:88:36:6C:29:71:7C:CD:77:CB:35
            X509v3 Authority Key Identifier:
                keyid:19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:53:b8:cd:47:c4:4f:ca:ca:8c:bc:7a:8c:96:1d:2e:25:54:
         60:cf:b8:5d:9b:0a:3e:59:a9:a3:f3:3b:66:3f:b3:ea:f3:61:
         d8:cb:36:23:bc:0b:14:e3:c4:50:27:13:9c:f8:ce:8a:d5:27:
         ec:ee:04:de:76:01:78:93:6e:f3:d9:55:ff:6e:60:9f:5a:8a:
         4e:e0:92:87:b1:0f:b9:7c:c9:73:bd:55:9e:0a:b6:76:9a:fd:
         00:1b:88:8c:ac:b1:38:42:ef:6c:a5:99:15:24:39:9a:6d:0f:
         bc:08:e1:63:71:41:22:a9:0a:ed:13:7a:4a:20:7f:db:d8:2f:
         bd:c2:81:8c:69:00:2d:34:c9:c6:e6:b3:1d:ab:e3:42:d9:b5:
         8f:8f:3d:8c:26:11:77:ef:6f:ad:4b:ae:1c:d3:d8:d9:e4:ba:
         d6:76:af:8d:83:ca:6f:73:18:42:49:00:8a:88:c5:61:1e:d5:
         0c:b9:94:b4:e7:0c:8f:ad:85:2b:c7:b7:d8:57:3b:57:86:2b:
         6e:c9:24:99:5e:fc:1c:47:6b:92:aa:7e:bd:60:7d:b5:a8:20:
         66:b6:f1:33:37:d7:99:1d:a7:49:7a:e3:ae:11:c3:a5:8d:16:
         83:14:52:05:0e:f8:bc:cd:9c:60:ec:f3:4e:47:b2:5f:2a:aa:
         05:a1:0c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:12:35 2026 by rpki-client