$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft File: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft (raw, json) Hash identifier: BtXKUxNJd7PHYT/NPliDM2iwCuOa2RhH/h14VK6r6OQ= Subject key identifier: F2:92:25:26:03:AF:D2:BD:34:5D:3D:F3:3A:13:1D:DB:F2:8E:54:63 Authority key identifier: BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 Certificate issuer: /CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Certificate serial: 08148FD555D2CE2B19038FBDB25B362DB6DF009B Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft Manifest number: 71 Signing time: Fri 24 Jul 2026 02:44:01 +0000 Manifest this update: Fri 24 Jul 2026 02:39:01 +0000 Manifest next update: Sat 25 Jul 2026 03:11:01 +0000 Files and hashes: 1: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl (hash: XyP3SWz4bvrKsDt8SGmjxoUksC/snuOnLCEIm40QLwc=) 2: 3135312e3135382e3232352e302f32342d3234203d3e20313937353337.roa (hash: OONjtGbImgqa0kIYiLjUQ1P3dRaZmeZTmlX9Ya86T08=) 3: 3135312e3135382e3232342e302f32332d3233203d3e20313331363330.roa (hash: UGeKbObtquowJEySOq447BwTw1IrQgKYmkBRzzCAemk=) 4: 3135312e3135382e3232352e302f32342d3234203d3e20323136313338.roa (hash: Cr5VaLo8fqDJtkOt63np0AgLIpjR+BhgRM5+gMx49a4=) 5: 3135312e3135382e3232342e302f32342d3234203d3e20313331363330.roa (hash: fymSuw1iXX46oyRWIBNdhz3f/dOlk8VWLwtxbZEtRW8=) 6: 3135312e3135382e3232352e302f32342d3234203d3e20323032373336.roa (hash: BP3tLCNXYvf+Gp0VBeaUsi8XNu18vBFJrKuz4D6/0xk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:14:8f:d5:55:d2:ce:2b:19:03:8f:bd:b2:5b:36:2d:b6:df:00:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Validity Not Before: Jul 24 02:39:01 2026 GMT Not After : Jul 25 03:11:01 2026 GMT Subject: CN=F292252603AFD2BD345D3DF33A131DDBF28E5463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:e9:eb:c3:6a:a9:08:23:69:80:76:32:c8: 9e:3f:96:bd:2e:33:0d:5d:41:33:0d:39:fd:20:ca: 66:0c:60:63:9b:43:51:d2:79:ae:9f:3f:9e:65:fd: 91:d4:51:cd:31:2e:91:25:22:09:92:21:4d:08:17: 94:0f:ad:ff:58:ac:f0:73:54:5a:52:b9:63:94:b0: 19:fa:00:88:a5:08:dd:54:bf:9a:2b:52:01:78:b7: 38:73:1f:59:c9:63:6d:3f:35:1a:56:dd:d0:d2:35: 67:bc:fe:72:59:84:67:aa:b1:08:1e:67:96:18:11: 00:a4:ba:e6:b7:b2:22:06:bc:48:3c:e9:37:61:09: fd:9c:30:e8:c5:3c:5a:08:e0:25:a8:0c:8c:4e:7e: ce:28:98:c6:24:62:a3:ab:08:80:c4:3f:f9:02:56: 41:f6:46:89:e0:c2:83:49:ec:b7:e8:d9:ef:a9:67: 58:62:c8:41:2e:5e:ac:07:04:00:76:a7:b9:8d:1a: 23:3a:00:d5:91:04:65:25:6b:c1:5d:3c:94:97:09: 23:e4:03:87:8b:45:88:a9:63:0c:3c:35:bb:d4:fc: 69:6e:c8:62:2e:04:d0:48:59:5d:0f:22:69:df:97: a4:6c:9b:f3:29:06:c3:b3:7b:c4:0a:14:e8:69:86: 31:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:92:25:26:03:AF:D2:BD:34:5D:3D:F3:3A:13:1D:DB:F2:8E:54:63 X509v3 Authority Key Identifier: keyid:BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:34:c1:09:a9:d2:6a:ee:17:00:14:57:18:0c:04:75:01:37: 9d:51:05:dc:5a:9e:f8:4f:40:26:0f:1f:cf:95:eb:d8:c4:01: 97:14:78:f9:af:3a:3b:70:e7:07:1e:ba:a9:1b:c2:a0:6b:9a: 43:84:ba:9c:92:4f:a0:41:bc:02:91:8d:25:cd:da:9f:22:1a: af:37:df:54:f6:02:b2:1a:d9:8b:02:03:25:f5:5b:cf:22:97: 75:05:1c:85:26:ce:92:f4:f7:bb:29:00:f5:fe:50:21:df:8c: 46:ff:fb:4f:60:86:9c:aa:b9:ac:6c:f5:e7:0d:f6:b2:dd:66: 14:55:1a:e3:a2:95:4a:02:54:18:dd:34:03:8b:5f:45:0e:91: 02:bb:0e:d2:82:54:41:cd:25:e9:40:e7:94:5a:64:21:a4:48: d7:bc:b9:02:1d:5e:ab:b0:2f:18:a2:e7:71:ba:c4:1b:82:38: 47:8a:6c:7b:09:8c:c9:7e:aa:f1:55:fe:4e:91:30:82:3c:06: 34:1f:66:a8:e9:25:08:83:93:08:f2:17:12:fc:76:26:a4:04: d7:4e:b0:1f:00:81:d9:06:33:2c:96:9d:ab:c7:7c:93:70:dd: ac:fd:4f:11:f6:f5:35:f2:53:14:b0:80:f7:f5:46:f5:74:e5: ba:8f:71:5e -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUCBSP1VXSzisZA4+9sls2LbbfAJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZEQjQwNDk2QTJFMkZEOUI0RTRGOTZCMzU4OTQxM0Ix RjY3QjEwNTAeFw0yNjA3MjQwMjM5MDFaFw0yNjA3MjUwMzExMDFaMDMxMTAvBgNV BAMTKEYyOTIyNTI2MDNBRkQyQkQzNDVEM0RGMzNBMTMxRERCRjI4RTU0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUunrw2qpCCNpgHYyyJ4/lr0u Mw1dQTMNOf0gymYMYGObQ1HSea6fP55l/ZHUUc0xLpElIgmSIU0IF5QPrf9YrPBz VFpSuWOUsBn6AIilCN1Uv5orUgF4tzhzH1nJY20/NRpW3dDSNWe8/nJZhGeqsQge Z5YYEQCkuua3siIGvEg86TdhCf2cMOjFPFoI4CWoDIxOfs4omMYkYqOrCIDEP/kC VkH2RongwoNJ7Lfo2e+pZ1hiyEEuXqwHBAB2p7mNGiM6ANWRBGUla8FdPJSXCSPk A4eLRYipYww8NbvU/GluyGIuBNBIWV0PImnfl6Rsm/MpBsOze8QKFOhphjG9AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU8pIlJgOv0r00XT3zOhMd2/KOVGMwHwYDVR0j BBgwFoAUv9tASWouL9m05PlrNYlBOx9nsQUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MS9CRkRCNDA0OTZBMkUyRkQ5QjRFNEY5NkIzNTg5NDEzQjFGNjdCMTA1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zL0JGREI0MDQ5NkEyRTJGRDlCNEU0Rjk2QjM1ODk0 MTNCMUY2N0IxMDUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8xL0JGREI0MDQ5NkEyRTJG RDlCNEU0Rjk2QjM1ODk0MTNCMUY2N0IxMDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGNMEJqdJq7hcA FFcYDAR1ATedUQXcWp74T0AmDx/PlevYxAGXFHj5rzo7cOcHHrqpG8Kga5pDhLqc kk+gQbwCkY0lzdqfIhqvN99U9gKyGtmLAgMl9VvPIpd1BRyFJs6S9Pe7KQD1/lAh 34xG//tPYIacqrmsbPXnDfay3WYUVRrjopVKAlQY3TQDi19FDpECuw7SglRBzSXp QOeUWmQhpEjXvLkCHV6rsC8YoudxusQbgjhHimx7CYzJfqrxVf5OkTCCPAY0H2ao 6SUIg5MI8hcS/HYmpATXTrAfAIHZBjMslp2rx3yTcN2s/U8R9vU18lMUsID39Ub1 dOW6j3Fe -----END CERTIFICATE-----Generated at Fri Jul 24 07:35:09 2026 by rpki-client