$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft File: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft (raw, json) Hash identifier: 6YyReMVhjtiBnBbx4zi6ecWeo9LJmr5bja3x5wFKQk8= Subject key identifier: 0B:D9:5A:66:B7:08:38:80:38:A7:A0:BB:7A:EA:11:B7:0A:8D:63:0F Authority key identifier: BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 Certificate issuer: /CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Certificate serial: 1CFBE069C7AECF6BDD1E094FFB0C3E8F014840D2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft Manifest number: 60 Signing time: Sat 11 Jul 2026 15:09:46 +0000 Manifest this update: Sat 11 Jul 2026 15:04:46 +0000 Manifest next update: Sun 12 Jul 2026 19:05:46 +0000 Files and hashes: 1: 3135312e3135382e3232352e302f32342d3234203d3e20313937353337.roa (hash: OONjtGbImgqa0kIYiLjUQ1P3dRaZmeZTmlX9Ya86T08=) 2: 3135312e3135382e3232352e302f32342d3234203d3e20323136313338.roa (hash: Cr5VaLo8fqDJtkOt63np0AgLIpjR+BhgRM5+gMx49a4=) 3: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl (hash: lQt4AfQALC1sYQVZB0tTFU5Ww3l2pNJFXEKC/UpuQZs=) 4: 3135312e3135382e3232352e302f32342d3234203d3e20323032373336.roa (hash: BP3tLCNXYvf+Gp0VBeaUsi8XNu18vBFJrKuz4D6/0xk=) 5: 3135312e3135382e3232342e302f32342d3234203d3e20313331363330.roa (hash: fymSuw1iXX46oyRWIBNdhz3f/dOlk8VWLwtxbZEtRW8=) 6: 3135312e3135382e3232342e302f32332d3233203d3e20313331363330.roa (hash: UGeKbObtquowJEySOq447BwTw1IrQgKYmkBRzzCAemk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 19:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:fb:e0:69:c7:ae:cf:6b:dd:1e:09:4f:fb:0c:3e:8f:01:48:40:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Validity Not Before: Jul 11 15:04:46 2026 GMT Not After : Jul 12 19:05:46 2026 GMT Subject: CN=0BD95A66B708388038A7A0BB7AEA11B70A8D630F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:85:9b:00:7d:ec:4f:e2:31:3f:98:3c:8b: 28:b2:b4:62:f7:0b:dd:0c:2d:bf:b5:ea:31:38:bf: 73:4d:43:ed:05:af:30:da:05:86:7c:85:72:eb:57: bd:f7:04:21:dd:f3:53:89:60:1d:e4:0c:62:a1:1a: 8b:4e:92:aa:e7:af:75:ff:e8:59:22:ac:78:02:dc: 5e:93:59:5e:e4:fd:56:fd:84:13:08:5d:f3:ab:cd: 03:98:be:9a:76:c2:71:ae:3d:2b:e9:7b:61:16:55: 9f:83:11:f6:48:d7:a8:af:e9:b5:d8:60:5d:35:db: ff:d1:4f:2c:56:12:92:c8:4f:83:1e:a8:c3:b3:08: 30:93:23:d6:68:f5:c3:6e:57:ce:6f:f2:bf:42:3f: 44:9f:a4:6b:db:3a:5c:80:58:0c:29:e8:d4:6d:a4: 18:14:12:cf:36:25:7f:4f:7b:51:fc:5a:99:d9:cf: a9:bc:00:9b:45:ea:0f:c9:8b:e7:8f:9c:a2:a5:f2: 08:9e:d2:95:55:ee:28:4a:01:09:59:02:da:60:e4: 9c:b6:23:dd:4e:bb:1d:92:90:f1:2c:f3:d8:89:bb: 4e:57:e4:f8:b1:c6:77:7c:48:f8:0f:27:9b:32:3d: a6:63:e6:63:c5:e0:c8:4a:a1:fb:be:94:fa:98:9b: a4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D9:5A:66:B7:08:38:80:38:A7:A0:BB:7A:EA:11:B7:0A:8D:63:0F X509v3 Authority Key Identifier: keyid:BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:c1:52:39:81:48:fe:4f:ac:49:35:5d:eb:86:aa:58:40:3b: 78:a2:af:1e:9d:86:01:54:c9:59:3e:cd:cd:67:7a:6c:0d:ca: 9a:9c:c0:26:8f:9c:f3:7f:f9:bf:fd:62:79:1e:d0:81:53:fb: cd:b8:72:d9:66:52:0d:95:78:4f:d6:0d:94:95:76:c3:1d:03: d0:bd:ff:f9:0d:be:2b:ad:9b:c3:dc:2c:48:a8:88:70:b5:80: c1:08:8c:4e:0e:77:1e:81:61:bc:e4:0a:a7:64:54:fa:ff:37: 2a:d3:5b:59:3a:2c:b0:7f:9d:0d:53:e0:55:f7:af:1b:47:c9: d7:96:16:89:63:5a:d5:bb:9a:c3:58:81:06:47:5f:b8:0f:ef: 5c:4a:d9:3f:7e:2c:e4:86:06:e3:82:15:aa:4c:ef:43:b7:ad: e1:b2:53:13:4d:f7:6b:a3:11:46:f5:cd:f9:e9:87:56:d1:e7: cc:8f:42:6f:44:06:e0:33:aa:cc:93:53:8d:18:d8:1e:ed:d3: 1f:3a:93:2d:fb:35:fb:2d:92:80:89:29:5c:2d:7f:78:64:a0: af:aa:26:16:7f:fe:9b:76:b5:95:bd:43:2b:4c:b2:84:77:94: 32:21:ef:3e:9f:88:13:23:18:f2:fd:5b:3f:b7:28:03:af:fc: b2:ce:c4:81 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUHPvgaceuz2vdHglP+ww+jwFIQNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZEQjQwNDk2QTJFMkZEOUI0RTRGOTZCMzU4OTQxM0Ix RjY3QjEwNTAeFw0yNjA3MTExNTA0NDZaFw0yNjA3MTIxOTA1NDZaMDMxMTAvBgNV BAMTKDBCRDk1QTY2QjcwODM4ODAzOEE3QTBCQjdBRUExMUI3MEE4RDYzMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKDoWbAH3sT+IxP5g8iyiytGL3 C90MLb+16jE4v3NNQ+0FrzDaBYZ8hXLrV733BCHd81OJYB3kDGKhGotOkqrnr3X/ 6FkirHgC3F6TWV7k/Vb9hBMIXfOrzQOYvpp2wnGuPSvpe2EWVZ+DEfZI16iv6bXY YF012//RTyxWEpLIT4MeqMOzCDCTI9Zo9cNuV85v8r9CP0SfpGvbOlyAWAwp6NRt pBgUEs82JX9Pe1H8WpnZz6m8AJtF6g/Ji+ePnKKl8gie0pVV7ihKAQlZAtpg5Jy2 I91Oux2SkPEs89iJu05X5Pixxnd8SPgPJ5syPaZj5mPF4MhKofu+lPqYm6TTAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUC9laZrcIOIA4p6C7euoRtwqNYw8wHwYDVR0j BBgwFoAUv9tASWouL9m05PlrNYlBOx9nsQUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MS9CRkRCNDA0OTZBMkUyRkQ5QjRFNEY5NkIzNTg5NDEzQjFGNjdCMTA1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zL0JGREI0MDQ5NkEyRTJGRDlCNEU0Rjk2QjM1ODk0 MTNCMUY2N0IxMDUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8xL0JGREI0MDQ5NkEyRTJG RDlCNEU0Rjk2QjM1ODk0MTNCMUY2N0IxMDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTwVI5gUj+T6xJ NV3rhqpYQDt4oq8enYYBVMlZPs3NZ3psDcqanMAmj5zzf/m//WJ5HtCBU/vNuHLZ ZlINlXhP1g2UlXbDHQPQvf/5Db4rrZvD3CxIqIhwtYDBCIxODncegWG85AqnZFT6 /zcq01tZOiywf50NU+BV968bR8nXlhaJY1rVu5rDWIEGR1+4D+9cStk/fizkhgbj ghWqTO9Dt63hslMTTfdroxFG9c356YdW0efMj0JvRAbgM6rMk1ONGNge7dMfOpMt +zX7LZKAiSlcLX94ZKCvqiYWf/6bdrWVvUMrTLKEd5QyIe8+n4gTIxjy/Vs/tygD r/yyzsSB -----END CERTIFICATE-----Generated at Sun Jul 12 12:04:34 2026 by rpki-client