$ rpki-client -vvvf rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft File: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft (raw, json) Hash identifier: 5DEef6pl2trlCMubZMpZbPJtIcrFAvBwVnJCNli7HRU= Subject key identifier: 8D:EF:E8:7C:77:4D:30:F6:9A:A5:2B:9D:3C:30:3A:9C:68:1A:BD:F8 Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE Certificate issuer: /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Certificate serial: 014CC24A362F99B10FE2029F621D00E1E32E1B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft Manifest number: CB Signing time: Sun 27 Sep 2026 08:33:24 +0000 Manifest this update: Sun 27 Sep 2026 08:28:24 +0000 Manifest next update: Mon 28 Sep 2026 09:30:24 +0000 Files and hashes: 1: 323430323a346632303a313a3a2f34382d3438203d3e20313331363330.roa (hash: Oh96VvwrLrCqa8vzhQmqU/GuluZDVdXi8dtZT8NxrMk=) 2: 323430323a346632303a373a3a2f34382d3438203d3e20313331363234.roa (hash: 4Ux61nZxsMvVrX4ijFW8lYSEJLzSwGMHio9lIoYN9PI=) 3: 323430323a346632303a343a3a2f34382d3438203d3e20313331363330.roa (hash: K1744UKAf+z71qZv3nHhgAju8M4LXcw6dU0movyAPhI=) 4: 323430323a346632303a353a3a2f34382d3438203d3e20313331363531.roa (hash: gTOyl2qPamdQWBEKTlWm+cU4E+HBo9WKdvbZuOZ6iKY=) 5: 323430323a346632303a3a2f34382d3438203d3e20313331363330.roa (hash: KzekJ1FxCbwk5Zs9JehhAtPibWkOWnoBzdyUiRP/X0w=) 6: 323430323a346632303a383a3a2f34382d3438203d3e20313331363130.roa (hash: CBTn+HH/6j9S9GFATKmXd9Vsb0PObXQaoSSI5gbsuCM=) 7: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl (hash: 4htwhKDH5hT9HyZAiedyVylvgIBIb57QlIbrCoZ+Akg=) 8: 323430323a346632303a333a3a2f34382d3438203d3e20313331363330.roa (hash: ozfaF6UNRXIJr4rje21YQkFsoy4ZzNiP2wPtA0erUeY=) 9: 323430323a346632303a363a3a2f34382d3438203d3e20323035353932.roa (hash: ptVCjWef1VrczYe3KBp66zk/XGoVyy13oHfgHoxhpdc=) 10: 323430323a346632303a323a3a2f34382d3438203d3e20323133343238.roa (hash: s9oKXRbmyMlcGoDwcLYZ0mRlXD27VylhFpYrWppG6Cs=) 11: 323430323a346632303a3a2f33322d3332203d3e20313331363330.roa (hash: 1HkzZ8xzmy/OZUVsiQY7oTz8Rgw5reF3WYzze2HTWVI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 03:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:4c:c2:4a:36:2f:99:b1:0f:e2:02:9f:62:1d:00:e1:e3:2e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Validity Not Before: Sep 27 08:28:24 2026 GMT Not After : Sep 28 09:30:24 2026 GMT Subject: CN=8DEFE87C774D30F69AA52B9D3C303A9C681ABDF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:26:87:c0:1e:b9:fa:d3:f7:ed:ad:5c:90: 5d:43:0f:f4:00:61:73:ba:3f:06:a4:9e:d5:fa:ce: a9:85:41:0e:c0:b9:62:9d:9e:4b:d2:5d:2a:71:0a: a0:a7:31:86:47:39:2b:c0:36:03:d6:a5:64:26:2f: 84:7f:17:09:9f:35:e2:3b:51:e7:b1:eb:33:78:42: 9f:4c:1b:a9:4e:44:0e:2c:61:63:d4:69:ca:c4:7d: 7f:c4:21:06:b4:70:65:be:fb:32:0a:4a:7c:e8:ba: 43:68:ce:62:e7:c3:40:85:9f:b7:38:f9:1c:2f:be: ed:f4:5d:a2:2f:9b:21:f4:3f:90:2a:9b:fa:6b:81: 4c:3f:df:68:4c:4a:c7:ea:4e:45:a5:41:f2:1c:bc: 01:16:d4:be:51:5d:c9:ee:b0:80:fa:96:a2:13:e9: 82:31:28:36:4c:43:1a:a6:3a:d3:2e:11:d7:ad:e1: 88:8e:b9:3e:61:f1:59:94:59:60:2c:29:fe:44:69: 0f:f8:d3:82:c1:8c:71:8c:95:6a:c7:dd:0d:40:17: c2:96:55:92:5d:a3:b3:0e:3e:7c:23:a3:c9:89:19: a5:8e:dc:cc:8d:63:e7:41:eb:08:4c:b8:65:a9:aa: 85:b1:0c:9a:4e:23:bf:4b:d9:f8:b6:f3:29:5f:fa: 25:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:EF:E8:7C:77:4D:30:F6:9A:A5:2B:9D:3C:30:3A:9C:68:1A:BD:F8 X509v3 Authority Key Identifier: keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:92:36:b5:33:99:ae:0c:58:29:e0:a5:2d:9d:f7:86:61:53: 7a:97:ee:47:49:3f:29:b6:81:02:5d:d3:0b:1e:c6:b6:ef:38: fd:3c:2e:aa:cd:80:9a:74:9e:bc:17:d0:10:c4:28:04:20:02: 5f:b5:b4:ff:54:e9:d6:a0:a0:b1:86:f8:c8:2e:31:35:e1:40: bd:c6:90:66:0a:75:bf:de:81:18:64:34:7f:56:ae:0e:ad:c1: f2:97:03:48:8e:27:bb:32:48:af:86:2d:c6:9e:1b:07:5b:2f: f9:9f:ff:d5:40:7d:00:0e:25:e8:c0:f5:1c:7d:2c:5b:63:98: a1:1c:19:03:6a:d3:6b:45:0d:b4:9c:ab:b6:68:f2:fc:03:9b: 96:8e:81:48:3b:71:04:16:bf:d2:e4:34:33:bc:f2:4c:58:a9: b6:94:b3:99:32:18:83:05:ac:03:f7:a0:0f:34:6f:17:5a:d0: 9a:15:d8:10:e9:d6:79:16:b4:a1:34:09:12:3c:65:b9:f7:4d: b2:b8:02:4a:ff:6c:e0:fc:cb:81:e2:ef:93:93:f5:12:0e:d3: ff:a7:93:40:00:79:fe:33:9d:0e:81:0d:e1:f7:9d:43:c1:ae: ee:b6:9e:9b:b6:a8:b1:af:87:16:9e:d0:29:fb:7e:03:f7:12: 42:45:58:a6 -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgITAUzCSjYvmbEP4gKfYh0A4eMuGzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzRjJGQTBFOUE5QjdBMzY0RDQ5QTJFQTYxRUYzODk2NzA5 QzRBREFFMB4XDTI2MDkyNzA4MjgyNFoXDTI2MDkyODA5MzAyNFowMzExMC8GA1UE AxMoOERFRkU4N0M3NzREMzBGNjlBQTUyQjlEM0MzMDNBOUM2ODFBQkRGODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZ3JofAHrn60/ftrVyQXUMP9ABh c7o/BqSe1frOqYVBDsC5Yp2eS9JdKnEKoKcxhkc5K8A2A9alZCYvhH8XCZ814jtR 57HrM3hCn0wbqU5EDixhY9RpysR9f8QhBrRwZb77MgpKfOi6Q2jOYufDQIWftzj5 HC++7fRdoi+bIfQ/kCqb+muBTD/faExKx+pORaVB8hy8ARbUvlFdye6wgPqWohPp gjEoNkxDGqY60y4R163hiI65PmHxWZRZYCwp/kRpD/jTgsGMcYyVasfdDUAXwpZV kl2jsw4+fCOjyYkZpY7czI1j50HrCEy4ZamqhbEMmk4jv0vZ+LbzKV/6JXECAwEA AaOCAewwggHoMB0GA1UdDgQWBBSN7+h8d00w9pqlK508MDqcaBq9+DAfBgNVHSME GDAWgBQ/L6DpqbejZNSaLqYe84lnCcStrjAOBgNVHQ8BAf8EBAMCB4AwYgYDVR0f BFswWTBXoFWgU4ZRcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8w LzNGMkZBMEU5QTlCN0EzNjRENDlBMkVBNjFFRjM4OTY3MDlDNEFEQUUuY3JsMG8G CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu dHcvcnBraS9UV05JQ0NBLzEvM0YyRkEwRTlBOUI3QTM2NEQ0OUEyRUE2MUVGMzg5 NjcwOUM0QURBRS5jZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3lu YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0xBWkNPLzAvM0YyRkEwRTlBOUI3QTM2 NEQ0OUEyRUE2MUVGMzg5NjcwOUM0QURBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADaSNrUzma4MWCng pS2d94ZhU3qX7kdJPym2gQJd0wsexrbvOP08LqrNgJp0nrwX0BDEKAQgAl+1tP9U 6dagoLGG+MguMTXhQL3GkGYKdb/egRhkNH9Wrg6twfKXA0iOJ7sySK+GLcaeGwdb L/mf/9VAfQAOJejA9Rx9LFtjmKEcGQNq02tFDbScq7Zo8vwDm5aOgUg7cQQWv9Lk NDO88kxYqbaUs5kyGIMFrAP3oA80bxda0JoV2BDp1nkWtKE0CRI8Zbn3TbK4Akr/ bOD8y4Hi75OT9RIO0/+nk0AAef4znQ6BDeH3nUPBru62npu2qLGvhxae0Cn7fgP3 EkJFWKY= -----END CERTIFICATE-----Generated at Sun Sep 27 16:30:36 2026 by rpki-client