$ rpki-client -vvvf rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft File: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft (raw, json) Hash identifier: pjTJh/m1mI2GW2KUvxHQPFMqZu5v0fMtPeasafEOglc= Subject key identifier: 8A:9F:E4:FC:29:84:72:9C:3E:7E:A3:7C:58:2E:25:7C:4D:11:58:7C Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE Certificate issuer: /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Certificate serial: 02701A0880BF59A1926FD7395D122CB4EE3B156E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft Manifest number: C3 Signing time: Mon 21 Sep 2026 14:22:22 +0000 Manifest this update: Mon 21 Sep 2026 14:17:22 +0000 Manifest next update: Tue 22 Sep 2026 15:57:22 +0000 Files and hashes: 1: 323430323a346632303a383a3a2f34382d3438203d3e20313331363130.roa (hash: CBTn+HH/6j9S9GFATKmXd9Vsb0PObXQaoSSI5gbsuCM=) 2: 323430323a346632303a3a2f34382d3438203d3e20313331363330.roa (hash: KzekJ1FxCbwk5Zs9JehhAtPibWkOWnoBzdyUiRP/X0w=) 3: 323430323a346632303a333a3a2f34382d3438203d3e20313331363330.roa (hash: ozfaF6UNRXIJr4rje21YQkFsoy4ZzNiP2wPtA0erUeY=) 4: 323430323a346632303a323a3a2f34382d3438203d3e20323133343238.roa (hash: s9oKXRbmyMlcGoDwcLYZ0mRlXD27VylhFpYrWppG6Cs=) 5: 323430323a346632303a373a3a2f34382d3438203d3e20313331363234.roa (hash: 4Ux61nZxsMvVrX4ijFW8lYSEJLzSwGMHio9lIoYN9PI=) 6: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl (hash: I7IjGU86+xiK/YPnDbdMdb1qaLXUmWC2E3E2gzsiqw4=) 7: 323430323a346632303a3a2f33322d3332203d3e20313331363330.roa (hash: 1HkzZ8xzmy/OZUVsiQY7oTz8Rgw5reF3WYzze2HTWVI=) 8: 323430323a346632303a363a3a2f34382d3438203d3e20323035353932.roa (hash: ptVCjWef1VrczYe3KBp66zk/XGoVyy13oHfgHoxhpdc=) 9: 323430323a346632303a353a3a2f34382d3438203d3e20313331363531.roa (hash: gTOyl2qPamdQWBEKTlWm+cU4E+HBo9WKdvbZuOZ6iKY=) 10: 323430323a346632303a313a3a2f34382d3438203d3e20313331363330.roa (hash: Oh96VvwrLrCqa8vzhQmqU/GuluZDVdXi8dtZT8NxrMk=) 11: 323430323a346632303a343a3a2f34382d3438203d3e20313331363330.roa (hash: K1744UKAf+z71qZv3nHhgAju8M4LXcw6dU0movyAPhI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 15:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:70:1a:08:80:bf:59:a1:92:6f:d7:39:5d:12:2c:b4:ee:3b:15:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Validity Not Before: Sep 21 14:17:22 2026 GMT Not After : Sep 22 15:57:22 2026 GMT Subject: CN=8A9FE4FC2984729C3E7EA37C582E257C4D11587C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:b0:75:d0:49:ae:b3:f7:73:f8:ba:ad:d1: ea:a9:96:3b:a9:89:b1:bb:80:ad:8c:75:d0:05:5f: 39:54:83:4d:23:f0:4f:be:ef:b9:e4:50:02:ea:65: 36:59:80:ca:a9:65:e3:df:77:ca:b8:16:8b:ee:7a: 05:a6:4e:fd:37:fc:d2:20:4d:79:8b:ee:d9:8f:22: 6a:4a:34:d4:30:ff:1a:de:bd:64:70:36:6c:7e:79: 38:91:30:d6:ab:95:65:e3:c9:07:5c:5b:f1:16:9e: f0:bf:3b:f4:45:1c:81:db:f0:00:3b:01:ab:36:e7: 4b:48:45:c6:49:aa:d5:71:58:71:d8:b3:1c:8e:ed: 20:6a:34:41:0d:57:f2:7d:fc:fe:9e:55:1c:34:26: 7e:c1:25:35:12:81:55:a8:16:7b:80:4a:82:cc:04: 42:76:89:b9:43:b2:db:19:df:56:6a:ed:bd:56:00: 34:f7:ac:83:43:b6:05:58:9c:f2:2a:1c:db:a2:20: bc:b1:7a:cf:d0:7c:28:27:f1:92:2c:89:ef:49:4e: f8:3d:5f:61:88:ec:8c:ac:9a:01:4b:ca:ff:bc:19: 30:b0:30:8e:3d:35:df:bb:c6:09:85:7b:7b:b7:ea: 87:a0:96:65:b1:15:1f:d1:25:a6:20:21:f5:e8:f6: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9F:E4:FC:29:84:72:9C:3E:7E:A3:7C:58:2E:25:7C:4D:11:58:7C X509v3 Authority Key Identifier: keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:05:f3:6c:91:47:cd:b1:7a:4c:dc:f8:e7:c3:41:dc:ea:24: bb:d7:23:0f:4b:a2:8c:e9:81:36:5e:72:f7:39:31:f3:24:07: 38:d1:84:a3:ad:55:f5:4e:c0:03:0b:a2:c3:ff:f3:2c:ce:e8: 3f:89:33:65:b0:54:21:e0:0f:ac:8b:1c:a5:04:99:27:3a:24: 93:b8:09:2b:32:4f:91:e3:f0:91:88:71:df:29:ab:cd:15:3d: 13:8e:03:38:60:0a:ab:f0:4c:aa:c9:e2:8e:45:c6:d0:19:5d: 66:3e:d7:2d:1d:a2:4c:a3:e9:27:0c:5a:65:f2:81:45:34:9c: 19:c2:68:8a:b5:cf:46:cb:72:22:ac:86:c6:36:a5:4c:7a:ff: 00:fa:17:f3:ff:8c:47:91:d3:37:ad:ac:ce:27:c5:bd:58:31: 0d:2f:e1:1a:6c:80:0f:8d:49:5f:71:80:b2:f1:e0:ed:32:5c: 9a:e9:ac:77:f4:23:47:42:3c:1a:ae:31:c5:5b:a5:06:15:89: 26:4e:ff:91:35:22:05:1c:55:64:73:44:0f:5a:77:05:59:cd: 96:8f:d5:35:42:eb:ed:72:27:f3:db:eb:49:f0:21:f8:99:0a: d9:06:24:31:b3:a0:7a:a1:68:02:f7:d5:c6:c0:81:2c:4a:b6: 01:7b:de:8e -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUAnAaCIC/WaGSb9c5XRIstO47FW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YyRkEwRTlBOUI3QTM2NEQ0OUEyRUE2MUVGMzg5Njcw OUM0QURBRTAeFw0yNjA5MjExNDE3MjJaFw0yNjA5MjIxNTU3MjJaMDMxMTAvBgNV BAMTKDhBOUZFNEZDMjk4NDcyOUMzRTdFQTM3QzU4MkUyNTdDNEQxMTU4N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8K7B10Emus/dz+Lqt0eqpljup ibG7gK2MddAFXzlUg00j8E++77nkUALqZTZZgMqpZePfd8q4FovuegWmTv03/NIg TXmL7tmPImpKNNQw/xrevWRwNmx+eTiRMNarlWXjyQdcW/EWnvC/O/RFHIHb8AA7 Aas250tIRcZJqtVxWHHYsxyO7SBqNEENV/J9/P6eVRw0Jn7BJTUSgVWoFnuASoLM BEJ2iblDstsZ31Zq7b1WADT3rINDtgVYnPIqHNuiILyxes/QfCgn8ZIsie9JTvg9 X2GI7IysmgFLyv+8GTCwMI49Nd+7xgmFe3u36oeglmWxFR/RJaYgIfXo9hdvAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUip/k/CmEcpw+fqN8WC4lfE0RWHwwHwYDVR0j BBgwFoAUPy+g6am3o2TUmi6mHvOJZwnEra4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MC8zRjJGQTBFOUE5QjdBMzY0RDQ5QTJFQTYxRUYzODk2NzA5QzRBREFFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGMkZBMEU5QTlCN0EzNjRENDlBMkVBNjFFRjM4 OTY3MDlDNEFEQUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8wLzNGMkZBMEU5QTlCN0Ez NjRENDlBMkVBNjFFRjM4OTY3MDlDNEFEQUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDgBfNskUfNsXpM 3Pjnw0Hc6iS71yMPS6KM6YE2XnL3OTHzJAc40YSjrVX1TsADC6LD//Mszug/iTNl sFQh4A+sixylBJknOiSTuAkrMk+R4/CRiHHfKavNFT0TjgM4YAqr8EyqyeKORcbQ GV1mPtctHaJMo+knDFpl8oFFNJwZwmiKtc9Gy3IirIbGNqVMev8A+hfz/4xHkdM3 razOJ8W9WDENL+EabIAPjUlfcYCy8eDtMlya6ax39CNHQjwarjHFW6UGFYkmTv+R NSIFHFVkc0QPWncFWc2Wj9U1Quvtcifz2+tJ8CH4mQrZBiQxs6B6oWgC99XGwIEs SrYBe96O -----END CERTIFICATE-----Generated at Tue Sep 22 02:25:17 2026 by rpki-client