$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft File: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft (raw, json) Hash identifier: qVGUs+EUT940XCjRPtmfgZ5kxxzeaEPuAIeG3k7ixvA= Subject key identifier: D0:42:AF:9C:44:35:91:7F:B0:6E:69:7B:A5:89:11:C4:47:7C:D1:52 Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE Certificate issuer: /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Certificate serial: 06C6D02723ED3A7D09676BC90851693AA794CE01 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft Manifest number: 36 Signing time: Sat 13 Jun 2026 04:34:00 +0000 Manifest this update: Sat 13 Jun 2026 04:29:00 +0000 Manifest next update: Sun 14 Jun 2026 07:27:00 +0000 Files and hashes: 1: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl (hash: ogwgXl5TkdVmaDT0YeXngorgWI9v2o/aPRW1umn5748=) 2: 323430323a346632303a353a3a2f34382d3438203d3e20313331363330.roa (hash: bU1HQDuT0IRVu34E/RZMoTgSImGbDCROI5x6EQPDfzA=) 3: 323430323a346632303a333a3a2f34382d3438203d3e20313331363330.roa (hash: ozfaF6UNRXIJr4rje21YQkFsoy4ZzNiP2wPtA0erUeY=) 4: 323430323a346632303a3a2f34382d3438203d3e20313331363330.roa (hash: KzekJ1FxCbwk5Zs9JehhAtPibWkOWnoBzdyUiRP/X0w=) 5: 323430323a346632303a313a3a2f34382d3438203d3e20313331363330.roa (hash: Oh96VvwrLrCqa8vzhQmqU/GuluZDVdXi8dtZT8NxrMk=) 6: 323430323a346632303a343a3a2f34382d3438203d3e20313331363330.roa (hash: K1744UKAf+z71qZv3nHhgAju8M4LXcw6dU0movyAPhI=) 7: 323430323a346632303a323a3a2f34382d3438203d3e20323133343238.roa (hash: s9oKXRbmyMlcGoDwcLYZ0mRlXD27VylhFpYrWppG6Cs=) 8: 323430323a346632303a3a2f33322d3332203d3e20313331363330.roa (hash: 1HkzZ8xzmy/OZUVsiQY7oTz8Rgw5reF3WYzze2HTWVI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 00:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c6:d0:27:23:ed:3a:7d:09:67:6b:c9:08:51:69:3a:a7:94:ce:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE Validity Not Before: Jun 13 04:29:00 2026 GMT Not After : Jun 14 07:27:00 2026 GMT Subject: CN=D042AF9C4435917FB06E697BA58911C4477CD152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bc:5b:c4:86:cc:07:b0:42:09:b8:82:c1:0b: 2a:6d:fe:bd:46:ff:dc:f0:7e:5f:51:be:44:75:7b: 36:8b:bd:bc:87:09:69:64:95:ca:a8:53:56:3e:70: 65:1c:d9:5d:aa:90:72:21:42:7d:50:ef:ee:1f:40: b6:2b:63:b9:5c:33:d5:90:50:b5:5e:40:75:2c:b4: 92:2a:bf:9e:4b:28:37:0f:4b:7d:69:44:12:0c:c3: f1:03:7c:39:88:63:05:a1:f2:16:f1:82:0e:38:d2: 09:1a:eb:ea:05:79:41:03:40:72:f3:c4:48:b6:75: a7:69:5a:74:ee:c5:4a:40:bf:d7:6d:0b:c7:4c:4c: 43:73:9f:bd:e3:4c:00:b4:c4:60:22:72:75:4c:dc: 6f:c4:2b:1a:47:e4:e8:00:65:39:dc:80:0b:0f:4f: a4:19:ee:38:4f:6f:47:da:df:f2:4d:81:2a:8b:a8: a3:fd:2c:07:ac:00:24:81:0f:e5:93:0b:43:3c:a6: 94:df:b0:59:cf:dc:37:d2:25:bf:20:01:73:4a:8e: f4:c7:1d:c2:ee:5a:1a:d3:52:29:ba:cb:78:7a:23: 8b:0d:87:c1:49:7c:c2:94:36:d4:06:b5:ac:a3:ef: 9f:d2:2e:d6:ab:3b:4d:84:d2:f3:4d:a8:38:63:b8: 04:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:42:AF:9C:44:35:91:7F:B0:6E:69:7B:A5:89:11:C4:47:7C:D1:52 X509v3 Authority Key Identifier: keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:97:8f:53:d9:ef:59:18:4c:5b:39:79:9d:a1:e5:f7:57:0f: f5:fd:82:6c:79:47:8a:d6:1d:94:9c:e0:04:41:02:3e:f1:8b: 67:91:d8:fa:e9:ae:ac:62:e1:3d:4c:b2:bd:25:a3:93:6c:a9: e5:06:20:6b:21:03:32:db:93:ea:89:78:98:9a:5c:aa:17:85: e9:10:a7:9d:bd:c2:62:42:70:f5:f5:56:6d:16:94:e7:4b:ae: 9f:8c:84:4d:68:62:7a:d4:df:ca:62:da:33:95:0f:be:71:57: a5:c6:bf:06:c5:6e:9d:80:73:a9:d6:87:cf:df:a5:80:c2:56: f5:3b:61:93:fa:89:23:44:ef:0c:c1:5f:e1:49:e9:5b:13:78: 54:78:06:44:34:a6:f8:d2:24:f3:8b:b3:1d:aa:07:71:5e:2f: 20:94:dc:d7:69:92:66:5b:99:12:d4:98:a6:45:c4:27:4d:13: 07:1e:b9:e1:74:bf:4b:71:06:2e:b6:13:5a:54:1a:fc:e7:b9: f2:bc:b5:ef:f2:40:0f:20:e0:c8:9b:3b:61:97:b6:ac:c9:84: 72:f6:3b:af:a8:8a:a2:b1:51:28:d2:96:72:57:54:71:be:cd: c4:cd:71:a6:46:0e:37:d4:59:dd:9f:7c:b4:a7:a0:06:73:c5: c3:c7:1c:ca -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUBsbQJyPtOn0JZ2vJCFFpOqeUzgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YyRkEwRTlBOUI3QTM2NEQ0OUEyRUE2MUVGMzg5Njcw OUM0QURBRTAeFw0yNjA2MTMwNDI5MDBaFw0yNjA2MTQwNzI3MDBaMDMxMTAvBgNV BAMTKEQwNDJBRjlDNDQzNTkxN0ZCMDZFNjk3QkE1ODkxMUM0NDc3Q0QxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfvFvEhswHsEIJuILBCypt/r1G /9zwfl9RvkR1ezaLvbyHCWlklcqoU1Y+cGUc2V2qkHIhQn1Q7+4fQLYrY7lcM9WQ ULVeQHUstJIqv55LKDcPS31pRBIMw/EDfDmIYwWh8hbxgg440gka6+oFeUEDQHLz xEi2dadpWnTuxUpAv9dtC8dMTENzn73jTAC0xGAicnVM3G/EKxpH5OgAZTncgAsP T6QZ7jhPb0fa3/JNgSqLqKP9LAesACSBD+WTC0M8ppTfsFnP3DfSJb8gAXNKjvTH HcLuWhrTUim6y3h6I4sNh8FJfMKUNtQGtayj75/SLtarO02E0vNNqDhjuAQxAgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQU0EKvnEQ1kX+wbml7pYkRxEd80VIwHwYDVR0j BBgwFoAUPy+g6am3o2TUmi6mHvOJZwnEra4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MC8zRjJGQTBFOUE5QjdBMzY0RDQ5QTJFQTYxRUYzODk2NzA5QzRBREFFLmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8xLzNGMkZBMEU5QTlCN0EzNjRENDlBMkVBNjFFRjM4 OTY3MDlDNEFEQUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8wLzNGMkZBMEU5QTlCN0Ez NjRENDlBMkVBNjFFRjM4OTY3MDlDNEFEQUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDfl49T2e9ZGExb OXmdoeX3Vw/1/YJseUeK1h2UnOAEQQI+8Ytnkdj66a6sYuE9TLK9JaOTbKnlBiBr IQMy25PqiXiYmlyqF4XpEKedvcJiQnD19VZtFpTnS66fjIRNaGJ61N/KYtozlQ++ cVelxr8GxW6dgHOp1ofP36WAwlb1O2GT+okjRO8MwV/hSelbE3hUeAZENKb40iTz i7MdqgdxXi8glNzXaZJmW5kS1JimRcQnTRMHHrnhdL9LcQYuthNaVBr857nyvLXv 8kAPIODImzthl7asyYRy9juvqIqisVEo0pZyV1Rxvs3EzXGmRg431Fndn3y0p6AG c8XDxxzK -----END CERTIFICATE-----Generated at Sat Jun 13 09:07:38 2026 by rpki-client