$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft File: voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft (raw, json) Hash identifier: dhGSpr1NnkT81G3w3YDvnn5xNhySR3m4WuadcTnvXc4= Subject key identifier: BC:6A:8D:32:65:E5:7C:E7:9D:9C:0B:2C:E8:07:E8:B7:5A:09:0E:7A Authority key identifier: BE:8C:BC:05:88:CD:2D:17:33:DE:20:FA:04:7A:38:65:78:04:EA:D6 Certificate issuer: /CN=BE8CBC0588CD2D1733DE20FA047A38657804EAD6 Certificate serial: 0112 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft Manifest number: 010F Signing time: Tue 21 Apr 2026 19:04:04 +0000 Manifest this update: Tue 21 Apr 2026 19:04:04 +0000 Manifest next update: Wed 22 Apr 2026 01:04:04 +0000 Files and hashes: 1: Vo0vQFl-YSprpWfMsXwLKw54iQY.roa (hash: cJvpln4Oh1vDxWiT49SXjpKmSRirnpk1kEPNrtQLaMQ=) 2: olRPEWlfrQ15OikVZmtjxH-5CEU.roa (hash: ZfgR+4tM+Ak+euNUopEr5CUJ1nqnV8hPV4D1NB/T++c=) 3: voy8BYjNLRcz3iD6BHo4ZXgE6tY.crl (hash: kNkXoMG7hYabORzdMBlMMS7s28RY/7tTyQ94GUAa6A4=) 4: wukFEv7SxYMTCpHl1xMZaKw7UIg.roa (hash: Go/WKcFAIp1nWMSvLyyotdpg3w0I/a2SuG9y/9UmA+E=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 01:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE8CBC0588CD2D1733DE20FA047A38657804EAD6 Validity Not Before: Apr 21 19:04:04 2026 GMT Not After : Feb 24 15:30:19 2027 GMT Subject: CN=BC6A8D3265E57CE79D9C0B2CE807E8B75A090E7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:a4:4b:ad:13:33:aa:a9:37:01:2b:13:ac: 08:0c:4b:ed:4f:eb:19:ad:d5:0e:2b:7d:0e:af:64: 40:4c:f7:c2:cb:b2:3b:e6:ed:e7:57:95:5e:27:1d: 2e:40:a0:2d:a3:36:ed:f1:d0:9f:f3:a1:99:e0:19: aa:7b:f6:3c:e1:3d:e3:7e:d8:22:56:43:e5:9b:80: 77:db:a5:08:42:e4:53:81:f0:bb:b5:0f:90:15:ac: 30:28:f6:d7:7b:b0:e8:0f:6b:24:b8:8a:87:4d:c7: 26:74:89:64:9e:11:c2:16:17:d5:34:44:bc:7b:f0: b9:de:16:d7:54:95:15:d0:6c:c9:3c:95:c6:39:9f: 81:82:a8:00:b7:e4:20:d3:04:fe:a1:a6:a5:2e:0a: c2:68:d8:ba:2a:b9:65:33:cf:b7:21:f2:d9:87:3d: fa:87:ba:8d:15:0a:55:e0:34:c4:7d:93:fd:f4:da: 36:94:09:78:d8:2d:41:a9:d3:4d:72:5b:7d:38:5c: f9:8d:ac:4c:24:6f:0a:ac:c8:3c:89:5b:af:04:74: 5f:fd:4e:ee:5c:61:74:7e:65:0d:7a:67:9a:2d:47: ad:24:a6:8b:d9:69:2c:13:4a:5e:2b:2f:a7:c9:87: 47:b6:bb:3c:2c:5a:39:2f:b1:4d:d8:e2:97:1d:ed: 0a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6A:8D:32:65:E5:7C:E7:9D:9C:0B:2C:E8:07:E8:B7:5A:09:0E:7A X509v3 Authority Key Identifier: keyid:BE:8C:BC:05:88:CD:2D:17:33:DE:20:FA:04:7A:38:65:78:04:EA:D6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/voy8BYjNLRcz3iD6BHo4ZXgE6tY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LAZCO/voy8BYjNLRcz3iD6BHo4ZXgE6tY.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:4f:ea:1b:ab:56:c9:ee:87:e4:52:6d:7e:42:bf:08:77:91: ce:66:0d:b9:62:9d:37:28:71:41:5e:3d:87:fe:68:6b:ff:e6: 51:0c:97:e4:6f:63:49:eb:66:65:a7:eb:2d:a4:bd:3b:03:7e: 57:f3:59:0e:a4:91:79:a3:6e:09:6f:bd:1d:bb:e1:3d:f9:d6: fa:c3:21:62:0d:12:ba:a9:96:c0:1c:da:75:22:d2:25:81:35: 9a:c6:cb:02:0a:60:5a:f2:d0:26:14:8e:c9:49:b4:ff:7b:14: c6:3f:6f:f5:d5:37:33:46:f6:49:a2:36:da:99:bd:98:90:79: 8d:4d:95:04:d3:83:2d:03:a9:c2:70:1c:68:21:35:ef:cb:56: a1:56:38:06:9d:89:dc:7d:75:98:aa:b1:0c:e0:cd:76:be:70: 83:5b:e4:c9:bb:47:a5:57:27:10:38:83:96:30:95:6c:e1:2c: 46:7a:1f:33:dc:96:a6:47:42:a8:11:0f:a9:65:d5:39:63:5a: 38:2b:86:bf:34:0f:65:09:af:a7:a0:fb:93:27:34:20:fc:21: 18:2c:98:3d:06:15:3e:86:93:92:12:40:12:43:58:44:b9:34: cc:6e:a0:bf:1f:87:dc:59:11:5a:e7:bc:15:8c:20:58:f8:b7: ad:7c:e4:84 -----BEGIN CERTIFICATE----- MIIE6TCCA9GgAwIBAgICARIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkU4 Q0JDMDU4OENEMkQxNzMzREUyMEZBMDQ3QTM4NjU3ODA0RUFENjAeFw0yNjA0MjEx OTA0MDRaFw0yNzAyMjQxNTMwMTlaMDMxMTAvBgNVBAMTKEJDNkE4RDMyNjVFNTdD RTc5RDlDMEIyQ0U4MDdFOEI3NUEwOTBFN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC/mKRLrRMzqqk3ASsTrAgMS+1P6xmt1Q4rfQ6vZEBM98LLsjvm 7edXlV4nHS5AoC2jNu3x0J/zoZngGap79jzhPeN+2CJWQ+WbgHfbpQhC5FOB8Lu1 D5AVrDAo9td7sOgPayS4iodNxyZ0iWSeEcIWF9U0RLx78LneFtdUlRXQbMk8lcY5 n4GCqAC35CDTBP6hpqUuCsJo2LoquWUzz7ch8tmHPfqHuo0VClXgNMR9k/302jaU CXjYLUGp001yW304XPmNrEwkbwqsyDyJW68EdF/9Tu5cYXR+ZQ16Z5otR60kpovZ aSwTSl4rL6fJh0e2uzwsWjkvsU3Y4pcd7QpdAgMBAAGjggIFMIICATAdBgNVHQ4E FgQUvGqNMmXlfOednAss6Afot1oJDnowHwYDVR0jBBgwFoAUvoy8BYjNLRcz3iD6 BHo4ZXgE6tYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTEFaQ08v dm95OEJZak5MUmN6M2lENkJIbzRaWGdFNnRZLmNybDBgBggrBgEFBQcBAQRUMFIw UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND QS92b3k4QllqTkxSY3ozaUQ2QkhvNFpYZ0U2dFkuY2VyMA4GA1UdDwEB/wQEAwIH gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MQVpDTy92b3k4QllqTkxSY3ozaUQ2Qkhv NFpYZ0U2dFkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEE/q G6tWye6H5FJtfkK/CHeRzmYNuWKdNyhxQV49h/5oa//mUQyX5G9jSetmZafrLaS9 OwN+V/NZDqSReaNuCW+9HbvhPfnW+sMhYg0SuqmWwBzadSLSJYE1msbLAgpgWvLQ JhSOyUm0/3sUxj9v9dU3M0b2SaI22pm9mJB5jU2VBNODLQOpwnAcaCE178tWoVY4 Bp2J3H11mKqxDODNdr5wg1vkybtHpVcnEDiDljCVbOEsRnofM9yWpkdCqBEPqWXV OWNaOCuGvzQPZQmvp6D7kyc0IPwhGCyYPQYVPoaTkhJAEkNYRLk0zG6gvx+H3FkR Wue8FYwgWPi3rXzkhA== -----END CERTIFICATE-----Generated at Wed Apr 22 00:09:16 2026 by rpki-client