$ rpki-client -vvf rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft File: 2332F45F8367B079CBBF58331B603792B98FE14C.mft (raw, json) Hash identifier: Qjl0xev8gxNSdgUYhyHFKacYvtWejSQPPZeKqRxeBlo= Subject key identifier: CA:14:29:76:72:FE:F9:21:D3:5E:99:09:F9:9C:22:FC:F2:96:AB:64 Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C Certificate issuer: /CN=2332F45F8367B079CBBF58331B603792B98FE14C Certificate serial: 0858C3871BFADC7A187BB6DACFC2D98B1E4374FF Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft Manifest number: 6B Signing time: Tue 28 Jul 2026 14:14:09 +0000 Manifest this update: Tue 28 Jul 2026 14:09:09 +0000 Manifest next update: Wed 29 Jul 2026 17:25:09 +0000 Files and hashes: 1: 3231312e37362e3138342e302f32332d3234203d3e2039333034.roa (hash: AdbqBZx7O6awGXHybD+ulNvzAkLHIT+5qzSTTZe3l7U=) 2: 3231312e37392e3131302e302f32332d3234203d3e2039333034.roa (hash: vfXs11BWbNGaoxQBAVGo/wMk8Ci8VIRwv9JFBm/IA80=) 3: 3130332e31372e3234302e302f32322d3234203d3e2039333034.roa (hash: JsQnApcWG0Br9XWgA/4bt9qFUtjbPIUqmVRTsBx6apc=) 4: 34332e3234302e34342e302f32322d3234203d3e2039333034.roa (hash: Rcyf/AbK/YuoEXF9UB0d8eqwnzO1awB1kaL4uBZD5pg=) 5: 2332F45F8367B079CBBF58331B603792B98FE14C.crl (hash: jEhVRwDnsVC5aOkfv1z3SIzbX2M1IRRTRhBeS6YyCfM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:58:c3:87:1b:fa:dc:7a:18:7b:b6:da:cf:c2:d9:8b:1e:43:74:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C Validity Not Before: Jul 28 14:09:09 2026 GMT Not After : Jul 29 17:25:09 2026 GMT Subject: CN=CA14297672FEF921D35E9909F99C22FCF296AB64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:c0:a5:62:56:01:72:69:8d:8a:76:f5:7a: ac:4a:f2:3f:db:7c:c4:ee:c9:09:d1:55:79:67:9c: 18:fb:d0:7b:0d:e5:d2:ce:02:f0:04:2e:69:c2:ee: 5c:d8:4d:29:0d:04:4e:35:47:c6:5f:7d:0f:7b:a9: e9:f9:a0:68:56:35:ca:85:b6:fd:fd:3a:d6:29:18: 13:10:f5:dd:99:a9:be:b0:03:64:42:c7:ae:d2:8c: 14:3c:36:b2:f2:30:30:c5:d2:d3:48:6e:ed:47:c0: 04:c3:cf:cd:83:e8:43:fe:2a:16:7b:bb:d7:b8:71: ff:0f:e9:74:63:cd:48:60:be:e7:a0:9f:cf:38:03: ae:d8:c8:6a:f3:06:80:3f:9c:ba:38:86:d6:8a:8e: d1:9d:a9:fe:11:63:18:2a:bc:42:0f:dd:56:a1:a6: 6b:7a:c9:7c:8a:71:ad:a2:4b:be:32:7c:56:15:a3: 20:c9:5a:af:78:17:70:bc:11:48:87:91:66:a5:f7: 41:e7:ba:fc:9e:d8:62:ff:2a:5d:ea:01:b1:79:a6: e4:d3:04:26:35:b1:2f:38:15:67:ea:3a:92:45:4a: bf:c1:b4:ae:e3:f1:15:5f:aa:fd:f5:20:09:18:ac: 9b:be:27:6a:ca:1f:a2:50:fd:76:a1:22:42:ca:8d: b4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:14:29:76:72:FE:F9:21:D3:5E:99:09:F9:9C:22:FC:F2:96:AB:64 X509v3 Authority Key Identifier: keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:4a:0f:5f:0d:16:87:df:2b:f1:05:a3:27:47:ef:c8:6d:4d: f9:d3:a1:8b:5d:4d:bb:51:29:af:52:2e:f6:3f:69:54:9c:95: 62:5b:b6:b8:10:e4:a8:bf:06:3d:c6:9e:57:f2:3b:19:7f:7a: 88:e4:ff:6a:ef:e2:59:f1:24:9b:1b:6d:d8:47:bb:b9:26:43: 50:b6:7f:ea:cc:23:e2:0c:98:34:49:2a:75:44:e0:13:cf:dd: 0a:2b:98:14:8f:88:ad:7b:60:22:a0:1b:60:e0:23:a2:78:b8: 50:8f:e4:58:52:7a:8c:a9:39:28:8b:8e:44:e8:8a:d1:fc:c3: 46:10:d0:84:c0:bc:27:95:e9:82:fa:dc:1b:c1:56:b3:65:47: 33:d5:b0:b0:73:98:0e:db:2c:71:fe:af:0c:f1:09:b2:e7:17: 3b:7a:47:41:10:da:42:5a:6b:a0:49:9d:6a:f6:50:95:ef:ba: 8f:cd:8c:b7:d0:a7:45:e7:4b:f9:ba:32:8e:b9:7a:06:9c:4c: 48:7c:37:19:08:f4:d0:6c:4d:a0:9e:58:0d:80:a5:d5:95:20: d0:bb:97:c9:66:1a:f5:37:24:39:89:29:4c:05:a0:5e:41:57: 7a:9e:e5:a5:af:ce:fc:33:c7:4b:45:c7:d5:41:5b:d5:c0:a2: 2a:c9:33:fa -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUCFjDhxv63HoYe7baz8LZix5DdP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkY0NUY4MzY3QjA3OUNCQkY1ODMzMUI2MDM3OTJC OThGRTE0QzAeFw0yNjA3MjgxNDA5MDlaFw0yNjA3MjkxNzI1MDlaMDMxMTAvBgNV BAMTKENBMTQyOTc2NzJGRUY5MjFEMzVFOTkwOUY5OUMyMkZDRjI5NkFCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHMClYlYBcmmNinb1eqxK8j/b fMTuyQnRVXlnnBj70HsN5dLOAvAELmnC7lzYTSkNBE41R8ZffQ97qen5oGhWNcqF tv39OtYpGBMQ9d2Zqb6wA2RCx67SjBQ8NrLyMDDF0tNIbu1HwATDz82D6EP+KhZ7 u9e4cf8P6XRjzUhgvuegn884A67YyGrzBoA/nLo4htaKjtGdqf4RYxgqvEIP3Vah pmt6yXyKca2iS74yfFYVoyDJWq94F3C8EUiHkWal90Hnuvye2GL/Kl3qAbF5puTT BCY1sS84FWfqOpJFSr/BtK7j8RVfqv31IAkYrJu+J2rKH6JQ/XahIkLKjbRXAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUyhQpdnL++SHTXpkJ+Zwi/PKWq2QwHwYDVR0j BBgwFoAUIzL0X4NnsHnLv1gzG2A3krmP4UwwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVPTENZ LzAvMjMzMkY0NUY4MzY3QjA3OUNCQkY1ODMzMUI2MDM3OTJCOThGRTE0Qy5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8yMzMyRjQ1RjgzNjdCMDc5Q0JCRjU4MzMxQjYw Mzc5MkI5OEZFMTRDLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVPTENZLzAvMjMzMkY0NUY4MzY3 QjA3OUNCQkY1ODMzMUI2MDM3OTJCOThGRTE0Qy5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK9KD18NFoff K/EFoydH78htTfnToYtdTbtRKa9SLvY/aVSclWJbtrgQ5Ki/Bj3GnlfyOxl/eojk /2rv4lnxJJsbbdhHu7kmQ1C2f+rMI+IMmDRJKnVE4BPP3QormBSPiK17YCKgG2Dg I6J4uFCP5FhSeoypOSiLjkToitH8w0YQ0ITAvCeV6YL63BvBVrNlRzPVsLBzmA7b LHH+rwzxCbLnFzt6R0EQ2kJaa6BJnWr2UJXvuo/NjLfQp0XnS/m6Mo65egacTEh8 NxkI9NBsTaCeWA2ApdWVINC7l8lmGvU3JDmJKUwFoF5BV3qe5aWvzvwzx0tFx9VB W9XAoirJM/o= -----END CERTIFICATE-----Generated at Tue Jul 28 17:09:04 2026 by rpki-client