$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft File: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft (raw, json) Hash identifier: mEA9fpHeknk05QfXA4BIXPnZjya8GWva0mD+SQhPboM= Subject key identifier: DC:F8:65:33:EF:0D:CC:D7:7D:A0:1E:56:BF:05:D9:71:28:61:DC:0E Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE Certificate issuer: /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Certificate serial: 6591F6CBECBED31E37C55B6F4732401C89787108 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 02:44:01 +0000 Manifest this update: Fri 24 Jul 2026 02:39:01 +0000 Manifest next update: Sat 25 Jul 2026 06:31:01 +0000 Files and hashes: 1: 323430323a346632303a323a3a2f34382d3438203d3e20323133343238.roa (hash: s9oKXRbmyMlcGoDwcLYZ0mRlXD27VylhFpYrWppG6Cs=) 2: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl (hash: m63UlW3p66RTKymPBjBPZgPccTcNzzK6pI+Dix1/6IU=) 3: 323430323a346632303a343a3a2f34382d3438203d3e20313331363330.roa (hash: K1744UKAf+z71qZv3nHhgAju8M4LXcw6dU0movyAPhI=) 4: 323430323a346632303a3a2f33322d3332203d3e20313331363330.roa (hash: 1HkzZ8xzmy/OZUVsiQY7oTz8Rgw5reF3WYzze2HTWVI=) 5: 323430323a346632303a3a2f34382d3438203d3e20313331363330.roa (hash: KzekJ1FxCbwk5Zs9JehhAtPibWkOWnoBzdyUiRP/X0w=) 6: 323430323a346632303a383a3a2f34382d3438203d3e20313331363130.roa (hash: CBTn+HH/6j9S9GFATKmXd9Vsb0PObXQaoSSI5gbsuCM=) 7: 323430323a346632303a333a3a2f34382d3438203d3e20313331363330.roa (hash: ozfaF6UNRXIJr4rje21YQkFsoy4ZzNiP2wPtA0erUeY=) 8: 323430323a346632303a313a3a2f34382d3438203d3e20313331363330.roa (hash: Oh96VvwrLrCqa8vzhQmqU/GuluZDVdXi8dtZT8NxrMk=) 9: 323430323a346632303a363a3a2f34382d3438203d3e20323035353932.roa (hash: ptVCjWef1VrczYe3KBp66zk/XGoVyy13oHfgHoxhpdc=) 10: 323430323a346632303a353a3a2f34382d3438203d3e20313331363531.roa (hash: gTOyl2qPamdQWBEKTlWm+cU4E+HBo9WKdvbZuOZ6iKY=) 11: 323430323a346632303a373a3a2f34382d3438203d3e20313331363234.roa (hash: 4Ux61nZxsMvVrX4ijFW8lYSEJLzSwGMHio9lIoYN9PI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:91:f6:cb:ec:be:d3:1e:37:c5:5b:6f:47:32:40:1c:89:78:71:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Validity Not Before: Jul 24 02:39:01 2026 GMT Not After : Jul 25 06:31:01 2026 GMT Subject: CN=DCF86533EF0DCCD77DA01E56BF05D9712861DC0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:08:3a:12:c6:92:ce:91:00:88:b3:da:d0: e0:d9:9d:c7:38:a0:a2:c1:37:70:73:9f:6c:1e:97: 17:90:15:94:2f:9b:2a:32:49:97:4b:43:6c:18:04: 41:22:b8:98:30:45:45:e8:e0:9f:b7:0d:69:6f:db: 50:3c:cd:be:9f:74:c9:41:c2:05:c5:9f:48:a2:ca: 4d:94:2b:83:7c:67:76:31:bb:79:a6:d6:1a:e4:a8: 6e:dc:77:00:4d:d5:f9:f6:43:4f:b1:cf:6d:a5:79: 24:33:c9:4c:87:8c:90:bd:f8:8f:06:23:9b:55:ba: e8:a0:8e:db:4e:8e:ba:4c:bd:08:a9:85:32:e6:17: 40:7a:4d:e6:c4:81:25:19:ce:3f:2a:1f:65:37:b7: a2:93:b2:9b:f0:6c:a4:4f:b8:67:5e:65:f5:94:6f: 5b:50:9f:1b:28:8e:6a:49:35:54:7f:36:07:48:04: d8:40:82:d3:0d:28:de:e7:f9:34:cd:4d:d7:b5:10: 2d:ac:bd:13:81:ff:09:93:45:9e:61:a5:79:c9:94: 4a:3e:11:e1:e4:47:8c:d1:3c:5f:21:c3:19:36:e5: ff:c9:23:aa:d4:3f:48:93:40:a8:50:26:71:13:39: be:36:35:20:d0:61:54:b2:fe:e1:f5:74:5f:1b:f2: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F8:65:33:EF:0D:CC:D7:7D:A0:1E:56:BF:05:D9:71:28:61:DC:0E X509v3 Authority Key Identifier: keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b5:33:35:51:5e:7a:5d:3a:b7:45:dc:7f:23:36:f6:f7:3d: 34:ab:41:e3:f0:0f:3c:8c:a9:33:12:8f:83:cb:2e:e9:9a:00: e9:01:1c:c6:3a:5e:12:9a:3c:36:d4:73:f6:2c:19:61:2a:dd: 86:e7:7e:7d:9a:e1:18:41:32:d6:29:94:b1:70:eb:a1:a8:77: 47:7d:0d:55:8b:26:8e:8e:ca:46:00:a7:2d:ec:1f:99:3b:55: 74:3a:fd:f5:a2:78:27:f0:c8:95:b7:ae:ac:11:92:9b:5f:69: 5f:87:21:2f:5b:3a:2e:a9:eb:c2:21:ec:f0:a1:35:81:bc:c3: 67:0e:4b:cf:47:73:be:19:0c:f8:c2:55:7e:0f:5c:6e:19:83: 25:f9:20:26:72:29:1e:f2:87:d6:51:27:63:00:8f:0b:2f:ba: 38:ff:c4:62:66:d2:05:f9:e8:c8:e3:04:1a:69:6d:52:ef:dc: 1e:39:18:7f:42:d3:5b:0d:c8:a4:fe:9f:9c:9d:fc:63:32:88: 43:6e:30:72:bb:ec:b9:84:57:09:e2:15:3b:df:d2:16:0b:6e: 31:77:7c:4d:b3:e8:9a:f7:b2:b3:f5:92:a5:18:50:e7:5a:d9: a6:b3:b3:d9:4d:33:59:86:f1:07:88:91:05:22:0c:d9:f6:e1: a5:12:bb:c2 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUZZH2y+y+0x43xVtvRzJAHIl4cQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YyRkEwRTlBOUI3QTM2NEQ0OUEyRUE2MUVGMzg5Njcw OUM0QURBRTAeFw0yNjA3MjQwMjM5MDFaFw0yNjA3MjUwNjMxMDFaMDMxMTAvBgNV BAMTKERDRjg2NTMzRUYwRENDRDc3REEwMUU1NkJGMDVEOTcxMjg2MURDMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/gg6EsaSzpEAiLPa0ODZncc4 oKLBN3Bzn2welxeQFZQvmyoySZdLQ2wYBEEiuJgwRUXo4J+3DWlv21A8zb6fdMlB wgXFn0iiyk2UK4N8Z3Yxu3mm1hrkqG7cdwBN1fn2Q0+xz22leSQzyUyHjJC9+I8G I5tVuuigjttOjrpMvQiphTLmF0B6TebEgSUZzj8qH2U3t6KTspvwbKRPuGdeZfWU b1tQnxsojmpJNVR/NgdIBNhAgtMNKN7n+TTNTde1EC2svROB/wmTRZ5hpXnJlEo+ EeHkR4zRPF8hwxk25f/JI6rUP0iTQKhQJnETOb42NSDQYVSy/uH1dF8b8m0bAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU3PhlM+8NzNd9oB5WvwXZcShh3A4wHwYDVR0j BBgwFoAUPy+g6am3o2TUmi6mHvOJZwnEra4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MC8zRjJGQTBFOUE5QjdBMzY0RDQ5QTJFQTYxRUYzODk2NzA5QzRBREFFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGMkZBMEU5QTlCN0EzNjRENDlBMkVBNjFFRjM4 OTY3MDlDNEFEQUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8wLzNGMkZBMEU5QTlCN0Ez NjRENDlBMkVBNjFFRjM4OTY3MDlDNEFEQUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+tTM1UV56XTq3 Rdx/Izb29z00q0Hj8A88jKkzEo+Dyy7pmgDpARzGOl4Smjw21HP2LBlhKt2G5359 muEYQTLWKZSxcOuhqHdHfQ1ViyaOjspGAKct7B+ZO1V0Ov31ongn8MiVt66sEZKb X2lfhyEvWzouqevCIezwoTWBvMNnDkvPR3O+GQz4wlV+D1xuGYMl+SAmcike8ofW USdjAI8LL7o4/8RiZtIF+ejI4wQaaW1S79weORh/QtNbDcik/p+cnfxjMohDbjBy u+y5hFcJ4hU739IWC24xd3xNs+ia97Kz9ZKlGFDnWtmms7PZTTNZhvEHiJEFIgzZ 9uGlErvC -----END CERTIFICATE-----Generated at Fri Jul 24 05:42:05 2026 by rpki-client