$ rpki-client -vvvf rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft File: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft (raw, json) Hash identifier: BvUsbaxm/81P1GOnF3qZVWljln4NhepPlofZAzHNUrg= Subject key identifier: 39:EE:A8:37:C1:C8:67:A7:8D:11:EA:0B:D8:3A:01:76:17:7B:CB:DB Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE Certificate issuer: /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Certificate serial: 36838395C481AC4A19DA3CE747730D631049BA94 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft Manifest number: D1 Signing time: Thu 01 Oct 2026 16:50:43 +0000 Manifest this update: Thu 01 Oct 2026 16:45:43 +0000 Manifest next update: Fri 02 Oct 2026 20:22:43 +0000 Files and hashes: 1: 323430323a346632303a363a3a2f34382d3438203d3e20323035353932.roa (hash: ptVCjWef1VrczYe3KBp66zk/XGoVyy13oHfgHoxhpdc=) 2: 323430323a346632303a313a3a2f34382d3438203d3e20313331363330.roa (hash: Oh96VvwrLrCqa8vzhQmqU/GuluZDVdXi8dtZT8NxrMk=) 3: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl (hash: MGUt+1S9VWkzPUkPQ4tRL8Iybe4ushS1swFeqfyyVc4=) 4: 323430323a346632303a323a3a2f34382d3438203d3e20323133343238.roa (hash: s9oKXRbmyMlcGoDwcLYZ0mRlXD27VylhFpYrWppG6Cs=) 5: 323430323a346632303a383a3a2f34382d3438203d3e20313331363130.roa (hash: CBTn+HH/6j9S9GFATKmXd9Vsb0PObXQaoSSI5gbsuCM=) 6: 323430323a346632303a343a3a2f34382d3438203d3e20313331363330.roa (hash: K1744UKAf+z71qZv3nHhgAju8M4LXcw6dU0movyAPhI=) 7: 323430323a346632303a373a3a2f34382d3438203d3e20313331363234.roa (hash: 4Ux61nZxsMvVrX4ijFW8lYSEJLzSwGMHio9lIoYN9PI=) 8: 323430323a346632303a3a2f34382d3438203d3e20313331363330.roa (hash: KzekJ1FxCbwk5Zs9JehhAtPibWkOWnoBzdyUiRP/X0w=) 9: 323430323a346632303a333a3a2f34382d3438203d3e20313331363330.roa (hash: ozfaF6UNRXIJr4rje21YQkFsoy4ZzNiP2wPtA0erUeY=) 10: 323430323a346632303a3a2f33322d3332203d3e20313331363330.roa (hash: 1HkzZ8xzmy/OZUVsiQY7oTz8Rgw5reF3WYzze2HTWVI=) 11: 323430323a346632303a353a3a2f34382d3438203d3e20313331363531.roa (hash: gTOyl2qPamdQWBEKTlWm+cU4E+HBo9WKdvbZuOZ6iKY=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 16:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:83:83:95:c4:81:ac:4a:19:da:3c:e7:47:73:0d:63:10:49:ba:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Validity Not Before: Oct 1 16:45:43 2026 GMT Not After : Oct 2 20:22:43 2026 GMT Subject: CN=39EEA837C1C867A78D11EA0BD83A0176177BCBDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:0e:db:90:b4:46:89:5d:38:ec:bd:4b:ab: c8:e9:01:71:6d:2d:0d:58:55:1a:6e:55:19:a4:e9: f3:56:ad:c6:4c:94:2f:bd:a7:61:8e:25:05:78:68: 9a:64:c6:7c:9d:36:c9:dd:1e:4d:26:b1:63:b9:ca: 5a:15:a2:dc:ab:cd:16:02:eb:64:cb:bf:ef:c5:d2: 65:10:7c:20:87:f0:c9:e5:ab:96:66:9b:35:fd:cc: fc:4f:07:49:4d:75:bf:63:9a:f4:87:9b:64:02:53: ef:8f:e2:5d:d9:4d:0c:ea:67:07:03:8b:8e:5f:ce: 1b:2c:a6:a8:8a:90:24:95:03:f7:03:32:17:bd:96: 7a:f5:48:5a:a6:7d:ee:1f:e9:b9:42:f0:19:27:61: 6b:26:19:03:7c:aa:2d:f6:1a:97:21:8a:1f:92:72: 41:7f:2b:2b:dd:37:12:74:3c:6b:b0:49:34:62:6b: 19:61:14:d0:df:ec:4e:95:b8:74:dd:dc:2c:a0:b7: e8:1b:ef:d1:e5:cc:8e:25:c1:68:f7:b1:a6:60:1c: 83:dc:7a:80:ee:69:fd:e3:e9:62:65:73:52:43:a8: 66:58:41:9e:d3:5a:c3:bc:40:27:a4:26:20:2b:09: ec:3d:3c:a7:3c:90:55:f3:da:1f:f2:26:fb:72:bd: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EE:A8:37:C1:C8:67:A7:8D:11:EA:0B:D8:3A:01:76:17:7B:CB:DB X509v3 Authority Key Identifier: keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:14:f3:b8:4e:4a:e8:c8:85:64:39:51:0a:65:a4:be:5c:ff: 63:93:cb:f4:dc:a6:1b:ed:da:e3:13:f7:ca:8d:51:e7:ae:c0: ff:59:dc:34:02:3b:63:09:59:ce:77:b8:44:69:c5:e5:fc:59: d8:c5:d9:aa:c1:c3:cf:7d:34:ba:2a:08:dc:68:28:1f:ae:ab: 36:9d:50:f3:59:ae:d8:ce:e2:86:4b:cd:6e:ba:c7:ef:5a:d9: 11:61:69:a3:93:9b:55:6d:ae:14:73:44:19:46:dd:de:ba:85: d8:52:f9:32:e1:c0:c8:c6:da:74:71:56:29:54:8e:a6:80:77: 1c:db:4b:1b:5b:b4:29:c2:1d:3f:a4:d9:92:52:89:83:70:5d: 8e:87:f2:04:ed:e7:4f:57:35:3b:a1:c9:3b:72:11:ba:4e:5a: 7f:98:f7:fb:0f:f3:9a:aa:57:4d:d5:1a:28:ac:50:40:8a:80: 02:5f:a5:16:f1:29:f0:c9:b9:6e:ff:9b:37:eb:b4:c8:58:2b: 8d:ba:99:38:e1:82:b9:78:a9:43:02:0b:c4:b4:e5:07:ad:e3: 5b:eb:4c:81:d6:83:37:59:d2:a0:e1:b6:4d:79:80:aa:39:cc: ff:b6:ef:2c:45:0c:37:87:ff:c6:27:9f:f5:86:fe:9c:fd:09: 75:77:c9:a6 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUNoODlcSBrEoZ2jznR3MNYxBJupQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YyRkEwRTlBOUI3QTM2NEQ0OUEyRUE2MUVGMzg5Njcw OUM0QURBRTAeFw0yNjEwMDExNjQ1NDNaFw0yNjEwMDIyMDIyNDNaMDMxMTAvBgNV BAMTKDM5RUVBODM3QzFDODY3QTc4RDExRUEwQkQ4M0EwMTc2MTc3QkNCREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS0A7bkLRGiV047L1Lq8jpAXFt LQ1YVRpuVRmk6fNWrcZMlC+9p2GOJQV4aJpkxnydNsndHk0msWO5yloVotyrzRYC 62TLv+/F0mUQfCCH8Mnlq5ZmmzX9zPxPB0lNdb9jmvSHm2QCU++P4l3ZTQzqZwcD i45fzhsspqiKkCSVA/cDMhe9lnr1SFqmfe4f6blC8BknYWsmGQN8qi32Gpchih+S ckF/KyvdNxJ0PGuwSTRiaxlhFNDf7E6VuHTd3Cygt+gb79HlzI4lwWj3saZgHIPc eoDuaf3j6WJlc1JDqGZYQZ7TWsO8QCekJiArCew9PKc8kFXz2h/yJvtyvQZ7AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUOe6oN8HIZ6eNEeoL2DoBdhd7y9swHwYDVR0j BBgwFoAUPy+g6am3o2TUmi6mHvOJZwnEra4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MC8zRjJGQTBFOUE5QjdBMzY0RDQ5QTJFQTYxRUYzODk2NzA5QzRBREFFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGMkZBMEU5QTlCN0EzNjRENDlBMkVBNjFFRjM4 OTY3MDlDNEFEQUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8wLzNGMkZBMEU5QTlCN0Ez NjRENDlBMkVBNjFFRjM4OTY3MDlDNEFEQUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCsFPO4TkroyIVk OVEKZaS+XP9jk8v03KYb7drjE/fKjVHnrsD/Wdw0AjtjCVnOd7hEacXl/FnYxdmq wcPPfTS6KgjcaCgfrqs2nVDzWa7YzuKGS81uusfvWtkRYWmjk5tVba4Uc0QZRt3e uoXYUvky4cDIxtp0cVYpVI6mgHcc20sbW7Qpwh0/pNmSUomDcF2Oh/IE7edPVzU7 ock7chG6Tlp/mPf7D/OaqldN1RoorFBAioACX6UW8Snwyblu/5s367TIWCuNupk4 4YK5eKlDAgvEtOUHreNb60yB1oM3WdKg4bZNeYCqOcz/tu8sRQw3h//GJ5/1hv6c /Ql1d8mm -----END CERTIFICATE-----Generated at Fri Oct 2 08:27:55 2026 by rpki-client