$ rpki-client -vvvf rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft File: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft (raw, json) Hash identifier: rcJ7pFbisLAHyLInws7AiO5MHrkILMg1FrCAu2hbyVw= Subject key identifier: B7:51:A1:C5:C8:92:F6:DA:F0:CF:C3:E9:D2:BC:E0:C3:BE:AB:15:1E Authority key identifier: BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 Certificate issuer: /CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Certificate serial: 51C3B44A0BA5E8A1CB93265B304D5C9D757F4C6E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft Manifest number: C8 Signing time: Thu 24 Sep 2026 05:22:39 +0000 Manifest this update: Thu 24 Sep 2026 05:17:39 +0000 Manifest next update: Fri 25 Sep 2026 07:36:39 +0000 Files and hashes: 1: 3135312e3135382e3232352e302f32342d3234203d3e20323032373336.roa (hash: BP3tLCNXYvf+Gp0VBeaUsi8XNu18vBFJrKuz4D6/0xk=) 2: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl (hash: MXTAM2Rl/HluhIs0EpdWFlwy+Kjh4AiEhClvGP4M6lY=) 3: 3135312e3135382e3232352e302f32342d3234203d3e20313937353337.roa (hash: OONjtGbImgqa0kIYiLjUQ1P3dRaZmeZTmlX9Ya86T08=) 4: 3135312e3135382e3232342e302f32342d3234203d3e20313331363330.roa (hash: fymSuw1iXX46oyRWIBNdhz3f/dOlk8VWLwtxbZEtRW8=) 5: 3135312e3135382e3232342e302f32332d3233203d3e20313331363330.roa (hash: UGeKbObtquowJEySOq447BwTw1IrQgKYmkBRzzCAemk=) 6: 3135312e3135382e3232352e302f32342d3234203d3e20323136313338.roa (hash: Cr5VaLo8fqDJtkOt63np0AgLIpjR+BhgRM5+gMx49a4=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c3:b4:4a:0b:a5:e8:a1:cb:93:26:5b:30:4d:5c:9d:75:7f:4c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Validity Not Before: Sep 24 05:17:39 2026 GMT Not After : Sep 25 07:36:39 2026 GMT Subject: CN=B751A1C5C892F6DAF0CFC3E9D2BCE0C3BEAB151E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:63:e8:cf:26:08:c9:54:d0:3c:df:c9:35:ab: 04:91:52:bb:9f:36:14:24:d3:01:23:61:a8:09:f1: 98:37:1c:9f:31:31:f1:d2:a2:10:c2:c0:15:ff:92: 58:8d:a6:ee:f4:13:93:7e:e2:ea:19:20:f5:97:2a: 8c:af:5a:35:ba:c6:36:f0:19:11:9a:60:b8:6d:b4: c5:a0:f4:3e:42:7b:65:6b:9e:b8:60:bf:3a:a9:ca: 50:c2:31:a0:42:23:3a:30:47:91:d4:12:2b:79:f0: 59:8b:f4:ac:b9:ca:93:01:7d:44:46:bc:9a:29:27: 48:4a:9c:98:99:c8:d0:45:98:45:e3:43:0a:c7:3b: 62:16:10:6b:a1:98:f0:bd:ed:70:31:fe:55:29:6f: c8:40:69:52:49:e3:0d:95:01:1f:71:c4:94:0b:3f: 1a:54:58:8d:54:32:a8:b9:42:3f:8a:33:21:94:0d: 1f:97:c7:22:e3:c2:ff:bd:a0:f0:32:c9:fa:1b:0a: 0f:2f:1a:17:40:e2:1f:da:f7:0d:b5:91:ae:57:c6: 95:00:8e:49:1a:10:ec:ea:73:04:bf:7e:3e:9a:38: be:97:c4:22:7d:3f:88:ff:7f:52:8a:f1:e7:b1:12: ac:9f:20:23:57:b8:a4:4a:0d:1f:79:5e:dd:87:eb: 2f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:51:A1:C5:C8:92:F6:DA:F0:CF:C3:E9:D2:BC:E0:C3:BE:AB:15:1E X509v3 Authority Key Identifier: keyid:BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:43:e9:5e:56:c6:e3:51:36:0f:12:47:12:c2:6b:b9:04:42: 88:6c:b0:24:8f:07:1a:20:cd:de:99:a6:6f:cd:3a:4e:46:f4: f4:c9:17:cd:e3:43:56:82:6b:00:4c:ef:63:27:0f:c9:d8:1d: 27:65:50:8a:e5:8e:2e:60:63:55:22:a4:0d:70:fa:25:9c:e9: 14:7d:96:54:8f:c6:c1:1a:92:24:42:47:e6:e9:cd:25:a2:59: 3d:06:03:ce:42:a6:f1:db:2c:17:7d:e8:08:42:5e:8a:5c:77: dc:d1:1c:42:a8:c8:a7:3e:42:b1:80:33:52:86:ec:ab:ff:14: 6f:eb:17:c0:75:fa:ee:16:ef:79:ca:18:d9:c4:7a:db:84:09: a1:88:67:14:66:e8:61:b5:04:f3:68:60:02:47:8b:05:7b:c7: 0e:19:a9:f2:4c:04:61:0b:10:87:5e:ec:4a:e0:93:c2:9f:41: c4:82:f5:c1:40:3d:6a:b0:3e:8d:cf:89:02:b3:03:10:89:98: 9d:5a:f0:ea:4a:79:a1:92:4f:33:f4:63:27:94:64:a0:d8:71: 09:37:39:b7:36:37:d2:4c:cb:ef:88:fc:e6:f8:00:9d:af:80: e9:c3:5d:1c:0d:af:87:35:a2:a6:bd:5a:f6:3f:c7:40:95:eb: 51:dd:c9:16 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUUcO0Sgul6KHLkyZbME1cnXV/TG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZEQjQwNDk2QTJFMkZEOUI0RTRGOTZCMzU4OTQxM0Ix RjY3QjEwNTAeFw0yNjA5MjQwNTE3MzlaFw0yNjA5MjUwNzM2MzlaMDMxMTAvBgNV BAMTKEI3NTFBMUM1Qzg5MkY2REFGMENGQzNFOUQyQkNFMEMzQkVBQjE1MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVY+jPJgjJVNA838k1qwSRUruf NhQk0wEjYagJ8Zg3HJ8xMfHSohDCwBX/kliNpu70E5N+4uoZIPWXKoyvWjW6xjbw GRGaYLhttMWg9D5Ce2VrnrhgvzqpylDCMaBCIzowR5HUEit58FmL9Ky5ypMBfURG vJopJ0hKnJiZyNBFmEXjQwrHO2IWEGuhmPC97XAx/lUpb8hAaVJJ4w2VAR9xxJQL PxpUWI1UMqi5Qj+KMyGUDR+XxyLjwv+9oPAyyfobCg8vGhdA4h/a9w21ka5XxpUA jkkaEOzqcwS/fj6aOL6XxCJ9P4j/f1KK8eexEqyfICNXuKRKDR95Xt2H6y97AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUt1GhxciS9trwz8Pp0rzgw76rFR4wHwYDVR0j BBgwFoAUv9tASWouL9m05PlrNYlBOx9nsQUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MS9CRkRCNDA0OTZBMkUyRkQ5QjRFNEY5NkIzNTg5NDEzQjFGNjdCMTA1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zL0JGREI0MDQ5NkEyRTJGRDlCNEU0Rjk2QjM1ODk0 MTNCMUY2N0IxMDUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8xL0JGREI0MDQ5NkEyRTJG RDlCNEU0Rjk2QjM1ODk0MTNCMUY2N0IxMDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYQ+leVsbjUTYP EkcSwmu5BEKIbLAkjwcaIM3emaZvzTpORvT0yRfN40NWgmsATO9jJw/J2B0nZVCK 5Y4uYGNVIqQNcPolnOkUfZZUj8bBGpIkQkfm6c0lolk9BgPOQqbx2ywXfegIQl6K XHfc0RxCqMinPkKxgDNShuyr/xRv6xfAdfruFu95yhjZxHrbhAmhiGcUZuhhtQTz aGACR4sFe8cOGanyTARhCxCHXuxK4JPCn0HEgvXBQD1qsD6Nz4kCswMQiZidWvDq Snmhkk8z9GMnlGSg2HEJNzm3NjfSTMvviPzm+ACdr4Dpw10cDa+HNaKmvVr2P8dA letR3ckW -----END CERTIFICATE-----Generated at Thu Sep 24 08:39:13 2026 by rpki-client