$ rpki-client -vvvf rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft File: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft (raw, json) Hash identifier: 7yKqklfjvsk6oYfScAo/B0GIGPRM43UPsfsDBZcQmb4= Subject key identifier: 57:20:EE:E1:A5:D5:59:DA:24:9B:B6:5E:D0:37:13:CB:70:87:30:C6 Authority key identifier: BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 Certificate issuer: /CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Certificate serial: 48AE4D0853DBA9B860736B02EA4FB447E8E23976 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft Manifest number: E0 Signing time: Sun 11 Oct 2026 16:08:09 +0000 Manifest this update: Sun 11 Oct 2026 16:03:09 +0000 Manifest next update: Mon 12 Oct 2026 19:01:09 +0000 Files and hashes: 1: 3135312e3135382e3232352e302f32342d3234203d3e20323032373336.roa (hash: BP3tLCNXYvf+Gp0VBeaUsi8XNu18vBFJrKuz4D6/0xk=) 2: 3135312e3135382e3232342e302f32342d3234203d3e20313331363330.roa (hash: fymSuw1iXX46oyRWIBNdhz3f/dOlk8VWLwtxbZEtRW8=) 3: 3135312e3135382e3232342e302f32332d3233203d3e20313331363330.roa (hash: UGeKbObtquowJEySOq447BwTw1IrQgKYmkBRzzCAemk=) 4: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl (hash: CQ9H0VzndJnUCTTN1yrWsMZzJAxGZO6YDNO4Z+twhl0=) 5: 3135312e3135382e3232352e302f32342d3234203d3e20323136313338.roa (hash: Cr5VaLo8fqDJtkOt63np0AgLIpjR+BhgRM5+gMx49a4=) 6: 3135312e3135382e3232352e302f32342d3234203d3e20313937353337.roa (hash: OONjtGbImgqa0kIYiLjUQ1P3dRaZmeZTmlX9Ya86T08=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 09:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:ae:4d:08:53:db:a9:b8:60:73:6b:02:ea:4f:b4:47:e8:e2:39:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Validity Not Before: Oct 11 16:03:09 2026 GMT Not After : Oct 12 19:01:09 2026 GMT Subject: CN=5720EEE1A5D559DA249BB65ED03713CB708730C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:60:70:09:b3:01:92:3f:b5:e0:95:fa:50: 56:33:51:9f:e9:2d:a7:3a:64:ee:74:73:56:b6:12: a9:3c:ae:e1:fe:f6:f4:a1:44:37:16:c8:dc:81:26: 0a:49:2d:ea:25:85:1c:62:d1:1d:f6:84:41:f8:70: 18:98:13:e4:de:04:8e:25:d5:09:d7:0e:5e:87:82: c5:22:82:19:0f:e2:e3:c9:db:69:59:85:a0:f2:6a: f4:be:23:b0:73:2a:2b:b1:04:0d:0a:7d:85:02:22: a4:a0:28:81:ff:25:b1:d3:1f:08:52:1e:ba:a7:e5: 9c:bc:39:c4:20:77:f3:3e:35:87:fe:f0:89:e4:b2: 1c:54:b5:50:4c:a6:f1:c7:e4:44:1a:e2:c9:5e:cf: f0:d1:b0:e0:ba:bd:83:98:1e:40:22:df:9b:59:9b: d8:03:a9:09:1e:0b:65:69:4f:1a:c4:a0:17:47:86: 67:c3:d2:26:43:eb:62:33:be:d2:79:73:3d:ad:dd: 59:7a:96:cd:3c:b7:78:4b:17:07:0c:d8:f3:6a:bb: be:94:e0:2a:83:2b:d1:55:62:65:b1:67:71:7c:aa: 4e:71:ae:bb:c4:09:25:30:80:2d:c3:96:b8:9c:02: 80:c9:b9:c4:71:2a:8c:e6:c5:23:7a:56:03:ec:68: fb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:20:EE:E1:A5:D5:59:DA:24:9B:B6:5E:D0:37:13:CB:70:87:30:C6 X509v3 Authority Key Identifier: keyid:BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5b:73:d7:02:cd:89:47:13:46:09:95:39:57:2f:f7:b9:ea: aa:99:bd:2b:6c:88:b3:72:07:eb:7b:37:20:4f:7c:37:0e:75: 23:a3:13:93:58:28:d3:75:99:30:fa:e3:c4:f5:fa:64:11:ef: 91:b2:e8:1d:85:57:c1:82:67:75:fe:f4:4d:a6:14:e1:93:9d: 60:9b:2e:98:56:63:ae:e9:fc:94:42:21:c0:7a:7e:97:a8:35: c6:2b:6f:5a:d3:7b:6d:84:e1:f2:3c:d8:7d:b9:23:16:ec:63: 60:69:ad:07:85:53:0d:ba:3e:93:27:b4:a2:7c:c9:9e:b7:95: 22:bb:e0:ec:f9:a1:c3:48:16:b3:a0:f0:1e:6c:d3:c2:ee:de: e6:88:b0:7f:30:52:60:13:4d:47:40:1d:c0:58:6b:77:f6:4c: c2:dc:45:6d:e6:42:74:b0:bb:85:7e:e4:87:9c:44:74:e6:0d: e3:b5:14:55:40:03:e4:7e:1c:8e:9c:05:63:a2:b1:2c:4b:4d: 57:04:0e:1b:2c:53:ae:ff:8a:22:33:5a:e4:81:30:2b:a2:ef: 74:a3:e8:d8:07:b8:89:72:36:14:9f:0d:67:64:3b:be:bb:1d: 41:38:38:22:4c:0f:55:cd:c4:70:69:63:59:39:df:3c:98:4a: 39:b6:f7:1f -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUSK5NCFPbqbhgc2sC6k+0R+jiOXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZEQjQwNDk2QTJFMkZEOUI0RTRGOTZCMzU4OTQxM0Ix RjY3QjEwNTAeFw0yNjEwMTExNjAzMDlaFw0yNjEwMTIxOTAxMDlaMDMxMTAvBgNV BAMTKDU3MjBFRUUxQTVENTU5REEyNDlCQjY1RUQwMzcxM0NCNzA4NzMwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8GBwCbMBkj+14JX6UFYzUZ/p Lac6ZO50c1a2Eqk8ruH+9vShRDcWyNyBJgpJLeolhRxi0R32hEH4cBiYE+TeBI4l 1QnXDl6HgsUighkP4uPJ22lZhaDyavS+I7BzKiuxBA0KfYUCIqSgKIH/JbHTHwhS Hrqn5Zy8OcQgd/M+NYf+8InkshxUtVBMpvHH5EQa4slez/DRsOC6vYOYHkAi35tZ m9gDqQkeC2VpTxrEoBdHhmfD0iZD62IzvtJ5cz2t3Vl6ls08t3hLFwcM2PNqu76U 4CqDK9FVYmWxZ3F8qk5xrrvECSUwgC3DlricAoDJucRxKozmxSN6VgPsaPsJAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUVyDu4aXVWdokm7Ze0DcTy3CHMMYwHwYDVR0j BBgwFoAUv9tASWouL9m05PlrNYlBOx9nsQUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MS9CRkRCNDA0OTZBMkUyRkQ5QjRFNEY5NkIzNTg5NDEzQjFGNjdCMTA1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zL0JGREI0MDQ5NkEyRTJGRDlCNEU0Rjk2QjM1ODk0 MTNCMUY2N0IxMDUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8xL0JGREI0MDQ5NkEyRTJG RDlCNEU0Rjk2QjM1ODk0MTNCMUY2N0IxMDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgW3PXAs2JRxNG CZU5Vy/3ueqqmb0rbIizcgfrezcgT3w3DnUjoxOTWCjTdZkw+uPE9fpkEe+Rsugd hVfBgmd1/vRNphThk51gmy6YVmOu6fyUQiHAen6XqDXGK29a03tthOHyPNh9uSMW 7GNgaa0HhVMNuj6TJ7SifMmet5Uiu+Ds+aHDSBazoPAebNPC7t7miLB/MFJgE01H QB3AWGt39kzC3EVt5kJ0sLuFfuSHnER05g3jtRRVQAPkfhyOnAVjorEsS01XBA4b LFOu/4oiM1rkgTArou90o+jYB7iJcjYUnw1nZDu+ux1BODgiTA9VzcRwaWNZOd88 mEo5tvcf -----END CERTIFICATE-----Generated at Sun Oct 11 22:19:07 2026 by rpki-client