$ rpki-client -vvvf rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft File: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft (raw, json) Hash identifier: lkUMUgrHjKqJuA74zB7KGHMbnLheXJ9BaeFuH0SXEjg= Subject key identifier: 10:AC:70:43:CC:FF:50:52:42:9E:06:C8:7F:65:1F:AB:C0:6A:99:12 Authority key identifier: BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 Certificate issuer: /CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Certificate serial: 582D1E1510C052EADAF5771AADEC582F325873B1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft Manifest number: 0114 Signing time: Sat 14 Nov 2026 05:59:26 +0000 Manifest this update: Sat 14 Nov 2026 05:54:26 +0000 Manifest next update: Sun 15 Nov 2026 08:53:26 +0000 Files and hashes: 1: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl (hash: ZJJF+SBT/fGLUvD3Ba/on6YYt9lyQDW7X4NmSo+H8uE=) 2: 3135312e3135382e3232352e302f32342d3234203d3e20323136313338.roa (hash: Cr5VaLo8fqDJtkOt63np0AgLIpjR+BhgRM5+gMx49a4=) 3: 3135312e3135382e3232342e302f32332d3233203d3e20313331363330.roa (hash: UGeKbObtquowJEySOq447BwTw1IrQgKYmkBRzzCAemk=) 4: 3135312e3135382e3232352e302f32342d3234203d3e20323032373336.roa (hash: BP3tLCNXYvf+Gp0VBeaUsi8XNu18vBFJrKuz4D6/0xk=) 5: 3135312e3135382e3232342e302f32342d3234203d3e20313331363330.roa (hash: fymSuw1iXX46oyRWIBNdhz3f/dOlk8VWLwtxbZEtRW8=) 6: 3135312e3135382e3232352e302f32342d3234203d3e20313937353337.roa (hash: OONjtGbImgqa0kIYiLjUQ1P3dRaZmeZTmlX9Ya86T08=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 08:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:2d:1e:15:10:c0:52:ea:da:f5:77:1a:ad:ec:58:2f:32:58:73:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Validity Not Before: Nov 14 05:54:26 2026 GMT Not After : Nov 15 08:53:26 2026 GMT Subject: CN=10AC7043CCFF5052429E06C87F651FABC06A9912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:31:ad:83:9e:ad:84:d7:f8:ba:67:35:60:3e: 1c:74:d1:a5:ad:69:fa:9a:45:0d:fa:c0:48:b0:a4: 41:c3:e0:30:50:b3:d1:78:08:ee:d4:fc:d0:4d:01: 1a:29:e2:b5:a1:a8:93:a6:b9:19:6f:5f:9e:39:b6: 69:be:1c:c9:07:f2:9f:a9:1a:2b:21:c5:d9:bb:1d: 52:22:2d:d1:ce:9f:cb:5f:89:e4:33:9f:6b:fb:e6: 78:88:8c:77:6d:47:e4:ce:b2:8b:4a:68:27:09:75: 27:fb:91:94:01:91:34:e6:4f:ea:b9:33:35:86:84: 34:cf:ee:5f:f6:c0:43:f4:64:28:d0:38:6c:01:54: 4b:f2:d3:89:f2:a4:d9:1a:d2:a6:d0:75:00:dd:17: d4:2c:ed:c5:93:c0:9d:9b:fa:06:39:4c:93:f1:82: 9a:af:25:ef:45:f1:77:99:1f:09:95:8d:a9:ff:c2: b6:43:a2:36:07:39:da:f3:a0:72:f5:65:a0:ae:9c: 9d:e5:4b:97:39:c9:15:fe:72:a9:21:13:5e:43:08: f4:f2:46:8e:5d:7c:af:6c:99:20:a9:7c:f4:b1:a4: 5a:b2:19:96:d8:6d:79:a6:3f:03:a6:f7:f8:05:40: b9:15:c7:61:7a:0e:fc:a5:77:cf:55:e7:4b:53:99: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AC:70:43:CC:FF:50:52:42:9E:06:C8:7F:65:1F:AB:C0:6A:99:12 X509v3 Authority Key Identifier: keyid:BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:de:c1:4a:8f:a4:32:6e:0b:ec:0a:c7:86:f6:7b:c3:35:d3: 22:32:ce:0b:60:7b:6f:2d:ad:36:64:e7:5a:63:ae:0e:4d:dd: a0:2b:56:5a:03:a6:a9:72:12:b1:bc:68:16:82:8b:43:40:a6: 7b:f5:ac:80:2a:4a:a8:e4:8b:19:6e:4a:96:91:95:62:d9:55: d6:cc:7d:96:9f:97:97:7a:79:d0:02:e4:e0:91:2d:e4:b5:ca: 08:fc:6d:61:58:ab:76:c0:d3:d6:db:5b:07:0a:fa:92:c7:14: 8c:bb:59:4b:59:fa:af:9e:9e:c6:08:b3:b5:84:2e:98:30:a1: 70:43:45:e0:94:9d:d7:81:69:91:c7:e5:12:66:7e:b9:23:52: f5:06:11:19:59:72:a9:3a:2a:90:d5:11:ad:fe:a1:d9:e5:93: 3c:f8:f1:3f:3b:91:6a:7c:50:94:f2:53:87:7b:ba:a2:1d:f9: e9:94:a2:ce:4a:dd:2f:d8:31:48:08:ef:ec:cd:98:c7:70:8b: 23:6a:4c:10:6e:af:05:8b:06:a3:0e:1d:cc:f7:6c:3c:41:df: 40:68:d0:75:a5:39:e9:25:8c:3b:ad:b7:2a:8e:2a:60:eb:e4: a5:19:c5:65:ab:5f:4c:bb:d2:9c:c1:3c:8b:49:98:49:1c:48: 81:23:d9:ea -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUWC0eFRDAUura9XcarexYLzJYc7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZEQjQwNDk2QTJFMkZEOUI0RTRGOTZCMzU4OTQxM0Ix RjY3QjEwNTAeFw0yNjExMTQwNTU0MjZaFw0yNjExMTUwODUzMjZaMDMxMTAvBgNV BAMTKDEwQUM3MDQzQ0NGRjUwNTI0MjlFMDZDODdGNjUxRkFCQzA2QTk5MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Ma2Dnq2E1/i6ZzVgPhx00aWt afqaRQ36wEiwpEHD4DBQs9F4CO7U/NBNARop4rWhqJOmuRlvX545tmm+HMkH8p+p Gishxdm7HVIiLdHOn8tfieQzn2v75niIjHdtR+TOsotKaCcJdSf7kZQBkTTmT+q5 MzWGhDTP7l/2wEP0ZCjQOGwBVEvy04nypNka0qbQdQDdF9Qs7cWTwJ2b+gY5TJPx gpqvJe9F8XeZHwmVjan/wrZDojYHOdrzoHL1ZaCunJ3lS5c5yRX+cqkhE15DCPTy Ro5dfK9smSCpfPSxpFqyGZbYbXmmPwOm9/gFQLkVx2F6Dvyld89V50tTmf8pAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUEKxwQ8z/UFJCngbIf2Ufq8BqmRIwHwYDVR0j BBgwFoAUv9tASWouL9m05PlrNYlBOx9nsQUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MS9CRkRCNDA0OTZBMkUyRkQ5QjRFNEY5NkIzNTg5NDEzQjFGNjdCMTA1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zL0JGREI0MDQ5NkEyRTJGRDlCNEU0Rjk2QjM1ODk0 MTNCMUY2N0IxMDUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8xL0JGREI0MDQ5NkEyRTJG RDlCNEU0Rjk2QjM1ODk0MTNCMUY2N0IxMDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBD3sFKj6Qybgvs CseG9nvDNdMiMs4LYHtvLa02ZOdaY64OTd2gK1ZaA6apchKxvGgWgotDQKZ79ayA Kkqo5IsZbkqWkZVi2VXWzH2Wn5eXennQAuTgkS3ktcoI/G1hWKt2wNPW21sHCvqS xxSMu1lLWfqvnp7GCLO1hC6YMKFwQ0XglJ3XgWmRx+USZn65I1L1BhEZWXKpOiqQ 1RGt/qHZ5ZM8+PE/O5FqfFCU8lOHe7qiHfnplKLOSt0v2DFICO/szZjHcIsjakwQ bq8FiwajDh3M92w8Qd9AaNB1pTnpJYw7rbcqjipg6+SlGcVlq19Mu9KcwTyLSZhJ HEiBI9nq -----END CERTIFICATE-----Generated at Sat Nov 14 22:45:24 2026 by rpki-client