$ rpki-client -vvvf rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft File: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft (raw, json) Hash identifier: jGctadkPsRY0h/dAlMb2kBARdCyd5zrfzcNx1tMj+/k= Subject key identifier: 3D:8F:4E:35:D3:E4:1A:6B:AC:49:D6:CA:F6:9C:4E:3D:40:7C:12:E1 Authority key identifier: BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 Certificate issuer: /CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Certificate serial: 38C240862CED7D90EEFEFB820BCCC3740EA11995 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft Manifest number: A2 Signing time: Wed 26 Aug 2026 17:29:30 +0000 Manifest this update: Wed 26 Aug 2026 17:24:30 +0000 Manifest next update: Thu 27 Aug 2026 20:48:30 +0000 Files and hashes: 1: 3135312e3135382e3232352e302f32342d3234203d3e20313937353337.roa (hash: OONjtGbImgqa0kIYiLjUQ1P3dRaZmeZTmlX9Ya86T08=) 2: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl (hash: xOx1ZI0Ec943Pvs+4pEhw9VsVtFdAXc28dJQSgqb1yY=) 3: 3135312e3135382e3232342e302f32342d3234203d3e20313331363330.roa (hash: fymSuw1iXX46oyRWIBNdhz3f/dOlk8VWLwtxbZEtRW8=) 4: 3135312e3135382e3232352e302f32342d3234203d3e20323032373336.roa (hash: BP3tLCNXYvf+Gp0VBeaUsi8XNu18vBFJrKuz4D6/0xk=) 5: 3135312e3135382e3232352e302f32342d3234203d3e20323136313338.roa (hash: Cr5VaLo8fqDJtkOt63np0AgLIpjR+BhgRM5+gMx49a4=) 6: 3135312e3135382e3232342e302f32332d3233203d3e20313331363330.roa (hash: UGeKbObtquowJEySOq447BwTw1IrQgKYmkBRzzCAemk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 27 Aug 2026 20:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c2:40:86:2c:ed:7d:90:ee:fe:fb:82:0b:cc:c3:74:0e:a1:19:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Validity Not Before: Aug 26 17:24:30 2026 GMT Not After : Aug 27 20:48:30 2026 GMT Subject: CN=3D8F4E35D3E41A6BAC49D6CAF69C4E3D407C12E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1e:65:f9:e6:cb:fd:88:4e:5e:aa:24:f6:90: 4a:d4:5e:ef:5b:e8:50:b6:7d:76:9f:fe:24:c3:6d: 30:48:bb:50:25:67:2c:d6:9d:e7:31:ef:2a:cb:9b: 70:25:d3:d2:fa:b1:46:2f:e4:b0:d2:54:fa:f3:31: 7d:d0:c1:29:37:e8:02:7b:6d:d4:5a:06:cb:25:30: 2e:1b:fe:c3:21:46:7f:0b:e4:49:3b:e2:f3:b6:28: 85:0c:36:2c:06:cc:a4:ac:62:48:8f:5a:c2:c1:67: 9a:01:36:71:ee:d3:2b:2b:75:c5:04:23:dd:f1:f7: 1d:d4:e1:0c:67:6d:02:8a:b8:9c:0e:77:10:0c:06: ba:35:6a:7c:27:31:44:f3:46:89:8a:5e:f6:90:74: 8b:a6:b1:08:8a:20:c2:8b:97:70:5e:f6:44:07:16: 15:15:a5:7b:df:3a:f2:10:6e:70:3f:3d:93:6f:ae: f0:2c:ea:f3:f2:22:03:92:59:d2:91:46:64:5d:27: 13:67:98:e8:6a:d5:7b:c6:cc:3f:69:9b:a3:27:ca: 14:b6:43:b5:25:7d:f5:99:4c:f4:97:6a:06:15:90: bc:6a:87:42:08:18:57:da:6f:6f:de:df:08:1f:62: 28:11:c2:37:38:13:f5:45:6d:1a:78:82:b0:48:42: 66:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8F:4E:35:D3:E4:1A:6B:AC:49:D6:CA:F6:9C:4E:3D:40:7C:12:E1 X509v3 Authority Key Identifier: keyid:BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b8:41:0f:c9:22:9e:ea:08:d7:57:1f:4f:f2:88:9c:1e:59: 28:bb:e6:69:4c:2e:89:55:02:59:08:a6:56:7e:72:b3:89:da: 7a:f0:50:ee:7f:40:7f:ae:78:30:52:35:af:41:3d:13:46:f7: 3d:4a:c5:81:62:35:ba:4f:fe:10:f8:ea:33:c7:6f:16:53:9c: 72:00:db:e6:84:1b:1e:3e:ca:99:5f:63:64:d8:48:8b:d6:bd: 2d:8d:b8:2d:ef:5b:2f:d1:79:6a:e6:24:f8:53:af:05:4a:3a: 0b:a0:b6:99:b6:e4:cf:31:71:e5:09:16:af:99:70:f6:b3:d9: 81:88:40:99:d8:37:81:51:3e:da:4d:d9:a0:01:16:c5:7f:54: 7f:56:1b:dd:fc:3c:54:9d:4d:31:5b:83:b1:bf:c6:ce:6d:9d: 08:70:db:7a:bf:fa:8a:fe:b9:05:33:da:63:10:c8:b7:70:2e: 0f:c3:68:fa:fc:e8:a0:51:07:11:1e:5a:6d:d9:f1:bc:05:e2: 61:d5:dc:b5:af:54:8b:90:9b:38:67:42:17:bd:6e:31:cf:89: c3:c9:6f:7d:4d:be:0e:e0:b1:a3:e9:87:c5:07:a7:89:36:42: f6:52:9e:5a:52:35:a6:42:5c:cf:42:ac:c4:90:f3:59:5f:72: e6:0b:da:b5 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUOMJAhiztfZDu/vuCC8zDdA6hGZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZEQjQwNDk2QTJFMkZEOUI0RTRGOTZCMzU4OTQxM0Ix RjY3QjEwNTAeFw0yNjA4MjYxNzI0MzBaFw0yNjA4MjcyMDQ4MzBaMDMxMTAvBgNV BAMTKDNEOEY0RTM1RDNFNDFBNkJBQzQ5RDZDQUY2OUM0RTNENDA3QzEyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNHmX55sv9iE5eqiT2kErUXu9b 6FC2fXaf/iTDbTBIu1AlZyzWnecx7yrLm3Al09L6sUYv5LDSVPrzMX3QwSk36AJ7 bdRaBsslMC4b/sMhRn8L5Ek74vO2KIUMNiwGzKSsYkiPWsLBZ5oBNnHu0ysrdcUE I93x9x3U4QxnbQKKuJwOdxAMBro1anwnMUTzRomKXvaQdIumsQiKIMKLl3Be9kQH FhUVpXvfOvIQbnA/PZNvrvAs6vPyIgOSWdKRRmRdJxNnmOhq1XvGzD9pm6MnyhS2 Q7UlffWZTPSXagYVkLxqh0IIGFfab2/e3wgfYigRwjc4E/VFbRp4grBIQmanAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUPY9ONdPkGmusSdbK9pxOPUB8EuEwHwYDVR0j BBgwFoAUv9tASWouL9m05PlrNYlBOx9nsQUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MS9CRkRCNDA0OTZBMkUyRkQ5QjRFNEY5NkIzNTg5NDEzQjFGNjdCMTA1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zL0JGREI0MDQ5NkEyRTJGRDlCNEU0Rjk2QjM1ODk0 MTNCMUY2N0IxMDUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8xL0JGREI0MDQ5NkEyRTJG RDlCNEU0Rjk2QjM1ODk0MTNCMUY2N0IxMDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBeuEEPySKe6gjX Vx9P8oicHlkou+ZpTC6JVQJZCKZWfnKzidp68FDuf0B/rngwUjWvQT0TRvc9SsWB YjW6T/4Q+Oozx28WU5xyANvmhBsePsqZX2Nk2EiL1r0tjbgt71sv0Xlq5iT4U68F SjoLoLaZtuTPMXHlCRavmXD2s9mBiECZ2DeBUT7aTdmgARbFf1R/Vhvd/DxUnU0x W4Oxv8bObZ0IcNt6v/qK/rkFM9pjEMi3cC4Pw2j6/OigUQcRHlpt2fG8BeJh1dy1 r1SLkJs4Z0IXvW4xz4nDyW99Tb4O4LGj6YfFB6eJNkL2Up5aUjWmQlzPQqzEkPNZ X3LmC9q1 -----END CERTIFICATE-----Generated at Thu Aug 27 03:02:04 2026 by rpki-client