
$ rpki-client -vvf rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
File: 19CD307B99E39576032EDA2043070E1F0D7E34FC.mft (raw, json)
Hash identifier: 5bTe0cVArNql10BQz628J7g0ZY6Xm9Jn1QOR7bbpbFo=
Subject key identifier: DF:20:67:8D:95:E6:A9:73:A7:90:7F:63:EE:B5:AF:C8:73:2F:38:0B
Authority key identifier: 19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC
Certificate issuer: /CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
Certificate serial: 576F185F7262773BDF2BA2A1F29690AB7246C26C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
Manifest number: 67
Signing time: Fri 24 Jul 2026 04:07:30 +0000
Manifest this update: Fri 24 Jul 2026 04:02:30 +0000
Manifest next update: Sat 25 Jul 2026 07:36:30 +0000
Files and hashes: 1: 3130332e36372e3136312e302f32342d3234203d3e2039393135.roa (hash: 3vl3ngoiwYnQpST2jujOdaU/Gl4KrMDlztcv+fb7Y4w=)
2: 3130332e36372e3136302e302f32332d3234203d3e2039393135.roa (hash: 1hM91L7F3/G6h4Of6tkYcdbJGhctsno0oGYZtd2FpCM=)
3: 19CD307B99E39576032EDA2043070E1F0D7E34FC.crl (hash: C5ZDkyEhhYGF5yTzVqIFxGJkGTTSC293VZOeNKMhNso=)
4: 3130332e36372e3136302e302f32342d3234203d3e2039393135.roa (hash: gMSZ51i6aWVz9x3FjBFTd2IoqA1W+/e4V2ENouMZDKs=)
5: 3130332e36372e3136302e302f32332d3234203d3e20313331363539.roa (hash: cjSMd043hBi+PQ+oqLd19nGxvDa5ak2dzrrrwCJ0UEw=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl
rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6f:18:5f:72:62:77:3b:df:2b:a2:a1:f2:96:90:ab:72:46:c2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19CD307B99E39576032EDA2043070E1F0D7E34FC
Validity
Not Before: Jul 24 04:02:30 2026 GMT
Not After : Jul 25 07:36:30 2026 GMT
Subject: CN=DF20678D95E6A973A7907F63EEB5AFC8732F380B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:d7:c3:30:cb:ff:13:4c:97:b5:2e:ee:60:
52:a5:80:df:09:40:50:d8:fd:b0:d5:b6:41:59:2a:
81:13:d8:ed:f6:75:e6:b9:f1:8c:80:76:27:75:82:
71:fa:64:ae:9e:ac:e1:f1:9d:72:15:05:11:eb:68:
67:e9:76:8e:e2:4d:49:5a:30:14:a7:19:64:53:92:
81:0d:05:b1:76:5c:24:ad:85:69:e0:3e:8e:95:e2:
60:51:99:e2:5b:e7:21:a7:7a:4f:ca:45:19:41:d7:
4f:9a:4a:60:b5:f9:cb:a3:b8:73:c0:5b:c2:7f:ef:
23:3f:f6:13:60:8f:a0:a1:ee:8e:32:2c:4c:28:7b:
35:bc:1e:24:cf:69:02:3d:34:57:4d:ac:b6:3b:52:
fc:39:24:2e:cf:64:27:98:37:9d:19:3d:02:55:fd:
58:cf:d3:1c:01:ac:94:d5:9e:e1:19:b1:9a:0c:a5:
b8:5f:cd:0d:09:0e:ef:56:ab:41:9f:45:0e:0b:3d:
2b:26:7c:e0:a5:51:11:be:11:13:ee:b1:a2:96:43:
13:4a:ec:d3:9e:7d:f0:72:0c:13:b3:25:cf:55:1d:
a1:ca:e9:86:fc:fa:a6:c6:ff:fc:fd:18:c3:2e:da:
37:a6:0a:34:8f:74:90:8e:00:26:e1:c2:e7:e7:b6:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:67:8D:95:E6:A9:73:A7:90:7F:63:EE:B5:AF:C8:73:2F:38:0B
X509v3 Authority Key Identifier:
keyid:19:CD:30:7B:99:E3:95:76:03:2E:DA:20:43:07:0E:1F:0D:7E:34:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/19CD307B99E39576032EDA2043070E1F0D7E34FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LEEMON/0/19CD307B99E39576032EDA2043070E1F0D7E34FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:57:7a:51:74:f4:dd:5a:5c:ee:f0:d6:bb:24:30:44:0a:b2:
8d:5f:da:95:7a:4c:33:00:e4:b7:42:d5:4d:16:5c:8d:46:8d:
5f:ac:c5:60:af:93:57:24:4b:e0:1a:30:42:27:05:86:e3:f8:
57:e5:3e:48:7a:76:46:42:00:d8:8e:40:42:97:88:b2:6b:4d:
71:81:c2:ed:80:11:2e:be:9b:59:04:5f:71:ea:ee:ad:40:f4:
34:d0:45:a0:c5:2b:f9:41:19:d8:42:8e:b8:f3:f2:da:d1:a4:
bc:0c:9e:da:e0:93:22:c6:90:45:ee:ae:f1:8c:16:d0:79:97:
3c:2a:28:d9:d0:64:5f:16:d9:79:5d:c5:ad:01:c8:f8:21:4d:
80:58:8c:3b:e5:75:fa:23:64:7a:c0:2f:c1:c8:f6:f4:33:d1:
48:7e:4f:58:fa:56:1c:b6:e1:d9:fd:0e:32:d5:17:57:60:32:
79:a1:47:9d:a2:fe:11:9d:e0:20:7f:a5:ce:4e:ec:81:a8:f0:
2b:72:34:5a:03:39:98:5e:ca:1c:d2:c5:59:ca:a9:2c:6a:24:
73:4d:8d:39:fa:f3:b8:13:2c:87:82:e0:c5:d2:f2:a6:77:f2:
1c:ca:6f:7b:7c:45:46:64:14:4e:bc:f3:35:df:bb:32:c8:2c:
29:df:42:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:36:23 2026 by rpki-client