$ rpki-client -vvvf rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft File: 2332F45F8367B079CBBF58331B603792B98FE14C.mft (raw, json) Hash identifier: hG4Mm505iA0hiV5WJ3AgOYrHiuQBmK3xKjKfkOpEkrc= Subject key identifier: 94:5A:60:FC:56:84:BE:EC:D5:ED:09:33:B7:CC:10:BE:FB:59:DA:A5 Authority key identifier: 23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C Certificate issuer: /CN=2332F45F8367B079CBBF58331B603792B98FE14C Certificate serial: 0270B897543C2F75F34FE9B4C2E7AA9A75E9132E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft Manifest number: F4 Signing time: Mon 09 Nov 2026 01:44:02 +0000 Manifest this update: Mon 09 Nov 2026 01:39:02 +0000 Manifest next update: Tue 10 Nov 2026 04:38:02 +0000 Files and hashes: 1: 3231312e37362e3138342e302f32332d3234203d3e2039333034.roa (hash: AdbqBZx7O6awGXHybD+ulNvzAkLHIT+5qzSTTZe3l7U=) 2: 2332F45F8367B079CBBF58331B603792B98FE14C.crl (hash: MWNRP+rRf+uO5y40m8POUmiKtE2w61wJQWhLOkWA2Qc=) 3: 3130332e31372e3234302e302f32322d3234203d3e2039333034.roa (hash: JsQnApcWG0Br9XWgA/4bt9qFUtjbPIUqmVRTsBx6apc=) 4: 3231312e37392e3131302e302f32332d3234203d3e2039333034.roa (hash: vfXs11BWbNGaoxQBAVGo/wMk8Ci8VIRwv9JFBm/IA80=) 5: 34332e3234302e34342e302f32322d3234203d3e2039333034.roa (hash: Rcyf/AbK/YuoEXF9UB0d8eqwnzO1awB1kaL4uBZD5pg=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 04:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:70:b8:97:54:3c:2f:75:f3:4f:e9:b4:c2:e7:aa:9a:75:e9:13:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2332F45F8367B079CBBF58331B603792B98FE14C Validity Not Before: Nov 9 01:39:02 2026 GMT Not After : Nov 10 04:38:02 2026 GMT Subject: CN=945A60FC5684BEECD5ED0933B7CC10BEFB59DAA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:50:eb:2b:05:18:45:ae:94:2c:1a:00:49:8d: 16:2e:84:a5:80:bf:96:cc:a6:f2:e2:6d:06:91:44: a7:10:74:e4:b3:23:fd:7e:67:2e:e7:a7:43:11:0a: 5c:ca:e3:89:81:f0:48:58:12:e7:06:f0:5c:99:1f: c0:a8:51:1a:2c:11:a0:4a:a0:fc:ee:c9:4e:18:21: 1b:5c:25:c0:24:0c:99:ca:d1:e8:da:62:51:f7:3d: ff:b2:73:68:53:61:2d:6f:4b:e3:11:00:bd:14:a6: 7d:d6:76:01:8e:f3:2d:a8:0a:b0:71:22:d9:3e:44: 7c:ae:b2:7a:e5:50:0d:2a:25:b9:98:58:b7:d6:ce: 02:d7:26:cc:3e:c4:cb:c1:11:2e:51:37:c4:2f:15: 5d:cf:09:1c:72:2d:38:fb:a8:4b:4d:46:8f:2e:4e: a1:fc:0a:f9:47:fe:2a:c4:25:0d:db:5b:f2:87:a7: 3e:2e:7c:90:fb:2f:56:b2:f4:cc:e0:9d:3c:b3:63: cb:ef:d8:e7:ad:7a:b6:85:fc:b7:00:af:77:76:e4: f9:66:22:94:56:99:70:30:16:25:cb:ac:bb:28:e5: 9d:ad:f7:0d:fe:21:36:23:42:29:04:2e:79:9b:70: 91:13:df:4b:3e:8d:09:38:0f:93:6a:16:c7:24:f4: 8c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5A:60:FC:56:84:BE:EC:D5:ED:09:33:B7:CC:10:BE:FB:59:DA:A5 X509v3 Authority Key Identifier: keyid:23:32:F4:5F:83:67:B0:79:CB:BF:58:33:1B:60:37:92:B9:8F:E1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/2332F45F8367B079CBBF58331B603792B98FE14C.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEOLCY/0/2332F45F8367B079CBBF58331B603792B98FE14C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:c0:ac:04:1c:d7:35:b6:3e:42:7f:57:7d:e0:15:d7:38:10: af:1e:c8:f3:b5:7b:f6:ec:9b:74:72:8d:fb:5d:68:d6:32:9d: 9a:c8:a6:0b:b3:8d:54:bb:54:95:67:6b:49:89:d0:e4:1b:93: b4:f6:b0:67:5a:93:89:0b:63:10:ee:f7:67:38:01:37:eb:05: 5e:7d:5b:26:c5:87:46:ca:73:64:99:77:58:b1:c8:87:58:0e: c4:13:ef:f2:34:af:7e:66:56:4d:32:ac:f1:1e:0f:cf:17:a4: 2c:48:38:9a:37:90:15:c5:94:d1:ea:20:4b:3e:8e:e7:31:6e: 68:9a:dc:cc:4d:97:fc:9d:26:8b:be:f6:57:e8:77:ce:f2:69: 27:99:02:81:19:ed:2c:9b:cc:5b:eb:84:fd:43:fa:8d:28:23: ff:29:bf:f4:a9:8e:13:bb:c9:e5:c2:59:76:12:9f:dc:1b:11: 8a:41:f3:59:93:89:aa:e0:7a:81:01:f0:07:2b:91:30:51:b7: d6:0a:b9:cd:8e:e1:e3:bb:1e:66:79:2d:81:f4:31:74:8a:8e: d9:30:7d:09:fc:bd:f2:2b:76:f0:ed:7e:52:66:6b:ae:e9:72: f9:7a:7e:0e:27:e3:3c:8e:e5:48:bd:a2:9f:e4:69:12:67:1f: 78:8d:ee:57 -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUAnC4l1Q8L3XzT+m0wueqmnXpEy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzMkY0NUY4MzY3QjA3OUNCQkY1ODMzMUI2MDM3OTJC OThGRTE0QzAeFw0yNjExMDkwMTM5MDJaFw0yNjExMTAwNDM4MDJaMDMxMTAvBgNV BAMTKDk0NUE2MEZDNTY4NEJFRUNENUVEMDkzM0I3Q0MxMEJFRkI1OURBQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUOsrBRhFrpQsGgBJjRYuhKWA v5bMpvLibQaRRKcQdOSzI/1+Zy7np0MRClzK44mB8EhYEucG8FyZH8CoURosEaBK oPzuyU4YIRtcJcAkDJnK0ejaYlH3Pf+yc2hTYS1vS+MRAL0Upn3WdgGO8y2oCrBx Itk+RHyusnrlUA0qJbmYWLfWzgLXJsw+xMvBES5RN8QvFV3PCRxyLTj7qEtNRo8u TqH8CvlH/irEJQ3bW/KHpz4ufJD7L1ay9MzgnTyzY8vv2OeteraF/LcAr3d25Plm IpRWmXAwFiXLrLso5Z2t9w3+ITYjQikELnmbcJET30s+jQk4D5NqFsck9IyDAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQUlFpg/FaEvuzV7Qkzt8wQvvtZ2qUwHwYDVR0j BBgwFoAUIzL0X4NnsHnLv1gzG2A3krmP4UwwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVPTENZ LzAvMjMzMkY0NUY4MzY3QjA3OUNCQkY1ODMzMUI2MDM3OTJCOThGRTE0Qy5jcmww bwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50d25p Yy50dy9ycGtpL1RXTklDQ0EvMS8yMzMyRjQ1RjgzNjdCMDc5Q0JCRjU4MzMxQjYw Mzc5MkI5OEZFMTRDLmNlcjBuBggrBgEFBQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJz eW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEVPTENZLzAvMjMzMkY0NUY4MzY3 QjA3OUNCQkY1ODMzMUI2MDM3OTJCOThGRTE0Qy5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANPArAQc1zW2 PkJ/V33gFdc4EK8eyPO1e/bsm3RyjftdaNYynZrIpguzjVS7VJVna0mJ0OQbk7T2 sGdak4kLYxDu92c4ATfrBV59WybFh0bKc2SZd1ixyIdYDsQT7/I0r35mVk0yrPEe D88XpCxIOJo3kBXFlNHqIEs+jucxbmia3MxNl/ydJou+9lfod87yaSeZAoEZ7Syb zFvrhP1D+o0oI/8pv/SpjhO7yeXCWXYSn9wbEYpB81mTiargeoEB8AcrkTBRt9YK uc2O4eO7HmZ5LYH0MXSKjtkwfQn8vfIrdvDtflJma67pcvl6fg4n4zyO5Ui9op/k aRJnH3iN7lc= -----END CERTIFICATE-----Generated at Mon Nov 9 11:21:51 2026 by rpki-client