$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft File: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft (raw, json) Hash identifier: 8Nwh2W3owej3lR+S79UN+E1LikvA3l6oVqZx/6pItqA= Subject key identifier: 95:17:35:A6:F3:CE:27:1C:72:CD:5B:01:52:73:44:03:BC:AF:31:2B Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE Certificate issuer: /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Certificate serial: 32268246916FF650215C63AE73E004711DF52CCA Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft Manifest number: 90 Signing time: Fri 14 Aug 2026 17:22:40 +0000 Manifest this update: Fri 14 Aug 2026 17:17:40 +0000 Manifest next update: Sat 15 Aug 2026 20:07:40 +0000 Files and hashes: 1: 323430323a346632303a383a3a2f34382d3438203d3e20313331363130.roa (hash: CBTn+HH/6j9S9GFATKmXd9Vsb0PObXQaoSSI5gbsuCM=) 2: 323430323a346632303a363a3a2f34382d3438203d3e20323035353932.roa (hash: ptVCjWef1VrczYe3KBp66zk/XGoVyy13oHfgHoxhpdc=) 3: 323430323a346632303a333a3a2f34382d3438203d3e20313331363330.roa (hash: ozfaF6UNRXIJr4rje21YQkFsoy4ZzNiP2wPtA0erUeY=) 4: 323430323a346632303a313a3a2f34382d3438203d3e20313331363330.roa (hash: Oh96VvwrLrCqa8vzhQmqU/GuluZDVdXi8dtZT8NxrMk=) 5: 323430323a346632303a373a3a2f34382d3438203d3e20313331363234.roa (hash: 4Ux61nZxsMvVrX4ijFW8lYSEJLzSwGMHio9lIoYN9PI=) 6: 323430323a346632303a353a3a2f34382d3438203d3e20313331363531.roa (hash: gTOyl2qPamdQWBEKTlWm+cU4E+HBo9WKdvbZuOZ6iKY=) 7: 323430323a346632303a343a3a2f34382d3438203d3e20313331363330.roa (hash: K1744UKAf+z71qZv3nHhgAju8M4LXcw6dU0movyAPhI=) 8: 323430323a346632303a3a2f33322d3332203d3e20313331363330.roa (hash: 1HkzZ8xzmy/OZUVsiQY7oTz8Rgw5reF3WYzze2HTWVI=) 9: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl (hash: m1d4kP+4sewDTshN5sQp7wGXqBhjGiLhOttcgyRyHzE=) 10: 323430323a346632303a323a3a2f34382d3438203d3e20323133343238.roa (hash: s9oKXRbmyMlcGoDwcLYZ0mRlXD27VylhFpYrWppG6Cs=) 11: 323430323a346632303a3a2f34382d3438203d3e20313331363330.roa (hash: KzekJ1FxCbwk5Zs9JehhAtPibWkOWnoBzdyUiRP/X0w=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 20:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:26:82:46:91:6f:f6:50:21:5c:63:ae:73:e0:04:71:1d:f5:2c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Validity Not Before: Aug 14 17:17:40 2026 GMT Not After : Aug 15 20:07:40 2026 GMT Subject: CN=951735A6F3CE271C72CD5B0152734403BCAF312B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:04:b4:c4:a6:a2:3f:d6:c1:3f:f2:ba:57:b8: 79:f4:54:15:7d:7c:0f:48:69:49:77:4d:b7:5c:6d: c0:45:c1:fd:d4:cd:62:d2:7c:b2:07:f1:e2:48:76: 72:17:28:1e:56:31:34:82:00:2c:bc:2b:bb:6b:22: 05:f6:96:fe:ca:cc:c6:2b:31:21:37:f0:31:9f:77: 57:3b:de:ce:f3:db:3f:4c:e0:b1:7a:1e:4b:af:82: 7e:f3:34:86:04:0a:c6:26:99:33:2f:f4:4b:a3:45: d8:03:60:2c:ce:4c:e6:37:c2:59:61:ed:64:62:c2: 39:a2:d4:fb:e2:3b:06:2a:47:14:41:d7:0f:0d:20: a1:00:19:04:67:7b:45:a0:5b:1a:53:c4:0a:05:dc: 7e:2f:4b:d9:c5:d8:96:8a:c2:44:cd:7a:94:b2:be: 31:50:5c:47:ce:6a:dd:99:40:b7:81:eb:e8:22:6c: 23:53:22:62:fc:8b:6c:cd:40:33:5b:fd:30:42:48: f3:ef:e6:e1:2f:25:6a:2b:83:60:17:4f:49:df:e9: 3e:cc:66:c6:e2:fc:c2:98:d2:e0:af:bf:b9:73:d5: dd:4f:a3:e6:41:95:d1:f0:d4:0a:36:16:49:08:63: f4:12:1a:d1:22:28:0b:93:26:ef:8d:93:d8:8e:8a: de:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:17:35:A6:F3:CE:27:1C:72:CD:5B:01:52:73:44:03:BC:AF:31:2B X509v3 Authority Key Identifier: keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:7d:e2:5e:a4:6e:7a:75:6a:5d:cf:d5:30:f0:ee:9c:df:4e: 65:da:bd:16:08:b5:c1:58:4b:9b:08:f5:2c:bd:cd:2e:9f:56: 38:67:44:ad:de:db:0d:10:ca:7d:9b:8f:1f:b5:ec:93:49:71: 5e:5c:55:0d:30:89:82:b1:9c:87:14:bb:9d:30:3b:b7:3a:75: 06:43:96:4e:da:c2:8a:ef:58:5e:cc:3b:8f:6b:d8:8f:69:da: 2b:48:30:ac:32:4c:ef:d7:62:60:ff:97:b8:0f:92:43:72:7b: c2:39:cb:1c:25:0d:f9:f2:ae:2f:5a:35:70:63:1b:16:d7:11: 81:b3:60:29:a9:5a:4c:04:11:1e:c3:25:00:c1:78:c2:95:6a: 56:66:74:a5:d2:0a:a6:3f:a8:04:f4:d8:9e:87:cf:91:f7:a1: 7d:55:c8:04:be:31:17:da:87:ea:38:dc:d6:fa:2c:68:ea:19: e6:b4:9e:bb:4a:45:37:d3:1e:c7:d3:99:8d:b6:b0:0d:21:81: 7c:b7:14:40:62:fe:21:20:04:00:7d:5e:2c:c3:c7:60:47:e0: 77:b0:88:75:6f:b4:87:4f:90:05:73:54:04:c2:61:09:64:65: b7:2d:a3:3f:b0:e4:b2:dc:93:45:c6:cd:cf:08:98:94:69:f1: cf:a8:26:2b -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUMiaCRpFv9lAhXGOuc+AEcR31LMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YyRkEwRTlBOUI3QTM2NEQ0OUEyRUE2MUVGMzg5Njcw OUM0QURBRTAeFw0yNjA4MTQxNzE3NDBaFw0yNjA4MTUyMDA3NDBaMDMxMTAvBgNV BAMTKDk1MTczNUE2RjNDRTI3MUM3MkNENUIwMTUyNzM0NDAzQkNBRjMxMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSBLTEpqI/1sE/8rpXuHn0VBV9 fA9IaUl3TbdcbcBFwf3UzWLSfLIH8eJIdnIXKB5WMTSCACy8K7trIgX2lv7KzMYr MSE38DGfd1c73s7z2z9M4LF6Hkuvgn7zNIYECsYmmTMv9EujRdgDYCzOTOY3wllh 7WRiwjmi1PviOwYqRxRB1w8NIKEAGQRne0WgWxpTxAoF3H4vS9nF2JaKwkTNepSy vjFQXEfOat2ZQLeB6+gibCNTImL8i2zNQDNb/TBCSPPv5uEvJWorg2AXT0nf6T7M Zsbi/MKY0uCvv7lz1d1Po+ZBldHw1Ao2FkkIY/QSGtEiKAuTJu+Nk9iOit5pAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUlRc1pvPOJxxyzVsBUnNEA7yvMSswHwYDVR0j BBgwFoAUPy+g6am3o2TUmi6mHvOJZwnEra4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MC8zRjJGQTBFOUE5QjdBMzY0RDQ5QTJFQTYxRUYzODk2NzA5QzRBREFFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGMkZBMEU5QTlCN0EzNjRENDlBMkVBNjFFRjM4 OTY3MDlDNEFEQUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8wLzNGMkZBMEU5QTlCN0Ez NjRENDlBMkVBNjFFRjM4OTY3MDlDNEFEQUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgfeJepG56dWpd z9Uw8O6c305l2r0WCLXBWEubCPUsvc0un1Y4Z0St3tsNEMp9m48fteyTSXFeXFUN MImCsZyHFLudMDu3OnUGQ5ZO2sKK71hezDuPa9iPadorSDCsMkzv12Jg/5e4D5JD cnvCOcscJQ358q4vWjVwYxsW1xGBs2ApqVpMBBEewyUAwXjClWpWZnSl0gqmP6gE 9Nieh8+R96F9VcgEvjEX2ofqONzW+ixo6hnmtJ67SkU30x7H05mNtrANIYF8txRA Yv4hIAQAfV4sw8dgR+B3sIh1b7SHT5AFc1QEwmEJZGW3LaM/sOSy3JNFxs3PCJiU afHPqCYr -----END CERTIFICATE-----Generated at Sat Aug 15 05:22:38 2026 by rpki-client