
$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft
File: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft (raw, json)
Hash identifier: pm4yEATXGS+ip/LkJGdLSAbSYAj2K8vjEQFNHe4lDb8=
Subject key identifier: 82:F1:C0:8C:15:06:B1:64:26:43:C9:C7:6F:E5:99:3C:02:AC:D4:EC
Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE
Certificate issuer: /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE
Certificate serial: 5492FD2943DF433FEBF0A82424128836AEB484B8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft
Manifest number: 79
Signing time: Tue 28 Jul 2026 20:39:50 +0000
Manifest this update: Tue 28 Jul 2026 20:34:50 +0000
Manifest next update: Wed 29 Jul 2026 23:36:50 +0000
Files and hashes: 1: 323430323a346632303a3a2f33322d3332203d3e20313331363330.roa (hash: 1HkzZ8xzmy/OZUVsiQY7oTz8Rgw5reF3WYzze2HTWVI=)
2: 323430323a346632303a3a2f34382d3438203d3e20313331363330.roa (hash: KzekJ1FxCbwk5Zs9JehhAtPibWkOWnoBzdyUiRP/X0w=)
3: 323430323a346632303a353a3a2f34382d3438203d3e20313331363531.roa (hash: gTOyl2qPamdQWBEKTlWm+cU4E+HBo9WKdvbZuOZ6iKY=)
4: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl (hash: k/onrh9MJcd6BsjhU5AihG13BPrdq8uqTLyIsRMa0p4=)
5: 323430323a346632303a333a3a2f34382d3438203d3e20313331363330.roa (hash: ozfaF6UNRXIJr4rje21YQkFsoy4ZzNiP2wPtA0erUeY=)
6: 323430323a346632303a373a3a2f34382d3438203d3e20313331363234.roa (hash: 4Ux61nZxsMvVrX4ijFW8lYSEJLzSwGMHio9lIoYN9PI=)
7: 323430323a346632303a323a3a2f34382d3438203d3e20323133343238.roa (hash: s9oKXRbmyMlcGoDwcLYZ0mRlXD27VylhFpYrWppG6Cs=)
8: 323430323a346632303a343a3a2f34382d3438203d3e20313331363330.roa (hash: K1744UKAf+z71qZv3nHhgAju8M4LXcw6dU0movyAPhI=)
9: 323430323a346632303a363a3a2f34382d3438203d3e20323035353932.roa (hash: ptVCjWef1VrczYe3KBp66zk/XGoVyy13oHfgHoxhpdc=)
10: 323430323a346632303a313a3a2f34382d3438203d3e20313331363330.roa (hash: Oh96VvwrLrCqa8vzhQmqU/GuluZDVdXi8dtZT8NxrMk=)
11: 323430323a346632303a383a3a2f34382d3438203d3e20313331363130.roa (hash: CBTn+HH/6j9S9GFATKmXd9Vsb0PObXQaoSSI5gbsuCM=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl
rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:36:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:92:fd:29:43:df:43:3f:eb:f0:a8:24:24:12:88:36:ae:b4:84:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE
Validity
Not Before: Jul 28 20:34:50 2026 GMT
Not After : Jul 29 23:36:50 2026 GMT
Subject: CN=82F1C08C1506B1642643C9C76FE5993C02ACD4EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:ff:84:52:e6:f7:88:4b:46:0d:ef:14:aa:
45:4c:70:8e:46:9c:2a:02:81:09:50:3a:ca:a0:e3:
f9:1b:89:a9:cc:b9:09:cf:7c:44:12:b2:46:31:e2:
09:a4:1f:7e:5f:6b:43:5d:07:c7:b8:43:ec:52:4e:
30:87:f5:df:46:fa:66:30:25:25:69:9b:eb:f7:ce:
63:ab:ba:ae:f3:e7:2d:db:7e:00:9d:54:8b:de:59:
93:29:67:d5:4b:7b:1d:16:42:6a:21:6a:16:74:e9:
5f:54:52:02:68:eb:9a:96:d6:c5:8b:67:38:67:43:
b0:ec:24:23:01:30:90:44:fb:44:19:ff:8c:48:b0:
30:93:3f:a0:0c:21:06:06:84:66:bd:45:70:57:01:
60:5c:34:6c:29:67:b8:a2:44:e4:5b:19:16:f4:48:
d4:82:70:b7:67:9e:5e:62:3a:7f:1b:90:bd:5d:d5:
88:9d:f5:2b:47:ee:27:ef:4b:bc:49:09:15:e0:b6:
a4:6a:eb:6e:c6:ad:c9:59:4d:2d:c9:6d:ae:45:5a:
12:58:ef:58:84:02:54:88:2e:02:97:57:17:80:c4:
e6:63:75:9a:73:ca:6f:05:54:7d:98:4b:45:c6:4a:
6c:6b:7d:dc:6f:08:17:93:db:68:5b:26:c4:62:fa:
0c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F1:C0:8C:15:06:B1:64:26:43:C9:C7:6F:E5:99:3C:02:AC:D4:EC
X509v3 Authority Key Identifier:
keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:6c:98:54:3a:e3:6e:80:c3:61:5c:0a:66:af:d4:55:bc:d5:
6f:dd:e5:74:dd:e3:a4:f4:21:4e:09:dc:98:3a:48:31:12:ce:
3c:17:9a:d1:f5:d0:45:cd:3a:a3:e0:83:75:fb:06:6e:51:9a:
a5:e7:61:0c:fc:70:06:56:ac:a9:07:49:9d:a5:30:34:ed:32:
23:91:61:fa:5a:95:c1:83:09:81:3e:30:9b:95:bb:4a:eb:43:
f4:75:01:ef:97:81:1b:3f:1a:c7:9f:5a:cd:c9:ab:c0:40:60:
45:d7:8a:a5:5b:c4:cd:9e:13:ca:fe:cb:04:79:0d:0f:78:a8:
67:00:5a:4a:9c:b4:03:75:a6:aa:73:d3:67:be:6a:7c:ef:13:
f4:63:4b:23:6c:c2:de:a9:3e:9d:ae:cc:79:8b:22:34:50:32:
91:fb:de:43:8e:15:1b:ba:12:b7:57:16:0e:37:25:44:87:82:
9c:05:69:6a:54:8f:99:19:79:84:ca:d4:24:67:43:ca:b5:75:
82:b3:d4:46:64:7e:e2:30:c9:7b:05:47:61:5f:0c:49:d5:73:
c8:d4:b9:39:90:97:8b:76:e9:fa:af:03:38:9d:bd:5f:c7:49:
8a:84:9b:5e:d4:20:4e:53:a6:27:0c:f8:9e:e9:09:d0:b7:86:
69:d4:6b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:16 2026 by rpki-client