Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft
File:                     3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft (raw, json)
Hash identifier:          pm4yEATXGS+ip/LkJGdLSAbSYAj2K8vjEQFNHe4lDb8=
Subject key identifier:   82:F1:C0:8C:15:06:B1:64:26:43:C9:C7:6F:E5:99:3C:02:AC:D4:EC
Authority key identifier: 3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE
Certificate issuer:       /CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE
Certificate serial:       5492FD2943DF433FEBF0A82424128836AEB484B8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft
Manifest number:          79
Signing time:             Tue 28 Jul 2026 20:39:50 +0000
Manifest this update:     Tue 28 Jul 2026 20:34:50 +0000
Manifest next update:     Wed 29 Jul 2026 23:36:50 +0000
Files and hashes:         1: 323430323a346632303a3a2f33322d3332203d3e20313331363330.roa (hash: 1HkzZ8xzmy/OZUVsiQY7oTz8Rgw5reF3WYzze2HTWVI=)
                          2: 323430323a346632303a3a2f34382d3438203d3e20313331363330.roa (hash: KzekJ1FxCbwk5Zs9JehhAtPibWkOWnoBzdyUiRP/X0w=)
                          3: 323430323a346632303a353a3a2f34382d3438203d3e20313331363531.roa (hash: gTOyl2qPamdQWBEKTlWm+cU4E+HBo9WKdvbZuOZ6iKY=)
                          4: 3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl (hash: k/onrh9MJcd6BsjhU5AihG13BPrdq8uqTLyIsRMa0p4=)
                          5: 323430323a346632303a333a3a2f34382d3438203d3e20313331363330.roa (hash: ozfaF6UNRXIJr4rje21YQkFsoy4ZzNiP2wPtA0erUeY=)
                          6: 323430323a346632303a373a3a2f34382d3438203d3e20313331363234.roa (hash: 4Ux61nZxsMvVrX4ijFW8lYSEJLzSwGMHio9lIoYN9PI=)
                          7: 323430323a346632303a323a3a2f34382d3438203d3e20323133343238.roa (hash: s9oKXRbmyMlcGoDwcLYZ0mRlXD27VylhFpYrWppG6Cs=)
                          8: 323430323a346632303a343a3a2f34382d3438203d3e20313331363330.roa (hash: K1744UKAf+z71qZv3nHhgAju8M4LXcw6dU0movyAPhI=)
                          9: 323430323a346632303a363a3a2f34382d3438203d3e20323035353932.roa (hash: ptVCjWef1VrczYe3KBp66zk/XGoVyy13oHfgHoxhpdc=)
                          10: 323430323a346632303a313a3a2f34382d3438203d3e20313331363330.roa (hash: Oh96VvwrLrCqa8vzhQmqU/GuluZDVdXi8dtZT8NxrMk=)
                          11: 323430323a346632303a383a3a2f34382d3438203d3e20313331363130.roa (hash: CBTn+HH/6j9S9GFATKmXd9Vsb0PObXQaoSSI5gbsuCM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl
                          rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 23:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:92:fd:29:43:df:43:3f:eb:f0:a8:24:24:12:88:36:ae:b4:84:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE
        Validity
            Not Before: Jul 28 20:34:50 2026 GMT
            Not After : Jul 29 23:36:50 2026 GMT
        Subject: CN=82F1C08C1506B1642643C9C76FE5993C02ACD4EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:ff:84:52:e6:f7:88:4b:46:0d:ef:14:aa:
                    45:4c:70:8e:46:9c:2a:02:81:09:50:3a:ca:a0:e3:
                    f9:1b:89:a9:cc:b9:09:cf:7c:44:12:b2:46:31:e2:
                    09:a4:1f:7e:5f:6b:43:5d:07:c7:b8:43:ec:52:4e:
                    30:87:f5:df:46:fa:66:30:25:25:69:9b:eb:f7:ce:
                    63:ab:ba:ae:f3:e7:2d:db:7e:00:9d:54:8b:de:59:
                    93:29:67:d5:4b:7b:1d:16:42:6a:21:6a:16:74:e9:
                    5f:54:52:02:68:eb:9a:96:d6:c5:8b:67:38:67:43:
                    b0:ec:24:23:01:30:90:44:fb:44:19:ff:8c:48:b0:
                    30:93:3f:a0:0c:21:06:06:84:66:bd:45:70:57:01:
                    60:5c:34:6c:29:67:b8:a2:44:e4:5b:19:16:f4:48:
                    d4:82:70:b7:67:9e:5e:62:3a:7f:1b:90:bd:5d:d5:
                    88:9d:f5:2b:47:ee:27:ef:4b:bc:49:09:15:e0:b6:
                    a4:6a:eb:6e:c6:ad:c9:59:4d:2d:c9:6d:ae:45:5a:
                    12:58:ef:58:84:02:54:88:2e:02:97:57:17:80:c4:
                    e6:63:75:9a:73:ca:6f:05:54:7d:98:4b:45:c6:4a:
                    6c:6b:7d:dc:6f:08:17:93:db:68:5b:26:c4:62:fa:
                    0c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F1:C0:8C:15:06:B1:64:26:43:C9:C7:6F:E5:99:3C:02:AC:D4:EC
            X509v3 Authority Key Identifier:
                keyid:3F:2F:A0:E9:A9:B7:A3:64:D4:9A:2E:A6:1E:F3:89:67:09:C4:AD:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/0/3F2FA0E9A9B7A364D49A2EA61EF3896709C4ADAE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:6c:98:54:3a:e3:6e:80:c3:61:5c:0a:66:af:d4:55:bc:d5:
         6f:dd:e5:74:dd:e3:a4:f4:21:4e:09:dc:98:3a:48:31:12:ce:
         3c:17:9a:d1:f5:d0:45:cd:3a:a3:e0:83:75:fb:06:6e:51:9a:
         a5:e7:61:0c:fc:70:06:56:ac:a9:07:49:9d:a5:30:34:ed:32:
         23:91:61:fa:5a:95:c1:83:09:81:3e:30:9b:95:bb:4a:eb:43:
         f4:75:01:ef:97:81:1b:3f:1a:c7:9f:5a:cd:c9:ab:c0:40:60:
         45:d7:8a:a5:5b:c4:cd:9e:13:ca:fe:cb:04:79:0d:0f:78:a8:
         67:00:5a:4a:9c:b4:03:75:a6:aa:73:d3:67:be:6a:7c:ef:13:
         f4:63:4b:23:6c:c2:de:a9:3e:9d:ae:cc:79:8b:22:34:50:32:
         91:fb:de:43:8e:15:1b:ba:12:b7:57:16:0e:37:25:44:87:82:
         9c:05:69:6a:54:8f:99:19:79:84:ca:d4:24:67:43:ca:b5:75:
         82:b3:d4:46:64:7e:e2:30:c9:7b:05:47:61:5f:0c:49:d5:73:
         c8:d4:b9:39:90:97:8b:76:e9:fa:af:03:38:9d:bd:5f:c7:49:
         8a:84:9b:5e:d4:20:4e:53:a6:27:0c:f8:9e:e9:09:d0:b7:86:
         69:d4:6b:dc
-----BEGIN CERTIFICATE-----
MIIE4jCCA8qgAwIBAgIUVJL9KUPfQz/r8KgkJBKINq60hLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YyRkEwRTlBOUI3QTM2NEQ0OUEyRUE2MUVGMzg5Njcw
OUM0QURBRTAeFw0yNjA3MjgyMDM0NTBaFw0yNjA3MjkyMzM2NTBaMDMxMTAvBgNV
BAMTKDgyRjFDMDhDMTUwNkIxNjQyNjQzQzlDNzZGRTU5OTNDMDJBQ0Q0RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCdP+EUub3iEtGDe8UqkVMcI5G
nCoCgQlQOsqg4/kbianMuQnPfEQSskYx4gmkH35fa0NdB8e4Q+xSTjCH9d9G+mYw
JSVpm+v3zmOruq7z5y3bfgCdVIveWZMpZ9VLex0WQmohahZ06V9UUgJo65qW1sWL
ZzhnQ7DsJCMBMJBE+0QZ/4xIsDCTP6AMIQYGhGa9RXBXAWBcNGwpZ7iiRORbGRb0
SNSCcLdnnl5iOn8bkL1d1Yid9StH7ifvS7xJCRXgtqRq627GrclZTS3Jba5FWhJY
71iEAlSILgKXVxeAxOZjdZpzym8FVH2YS0XGSmxrfdxvCBeT22hbJsRi+gwHAgMB
AAGjggHsMIIB6DAdBgNVHQ4EFgQUgvHAjBUGsWQmQ8nHb+WZPAKs1OwwHwYDVR0j
BBgwFoAUPy+g6am3o2TUmi6mHvOJZwnEra4wDgYDVR0PAQH/BAQDAgeAMGIGA1Ud
HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v
MC8zRjJGQTBFOUE5QjdBMzY0RDQ5QTJFQTYxRUYzODk2NzA5QzRBREFFLmNybDBv
BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj
LnR3L3Jwa2kvVFdOSUNDQS8xLzNGMkZBMEU5QTlCN0EzNjRENDlBMkVBNjFFRjM4
OTY3MDlDNEFEQUUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5
bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8wLzNGMkZBMEU5QTlCN0Ez
NjRENDlBMkVBNjFFRjM4OTY3MDlDNEFEQUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXbJhUOuNugMNh
XApmr9RVvNVv3eV03eOk9CFOCdyYOkgxEs48F5rR9dBFzTqj4IN1+wZuUZql52EM
/HAGVqypB0mdpTA07TIjkWH6WpXBgwmBPjCblbtK60P0dQHvl4EbPxrHn1rNyavA
QGBF14qlW8TNnhPK/ssEeQ0PeKhnAFpKnLQDdaaqc9Nnvmp87xP0Y0sjbMLeqT6d
rsx5iyI0UDKR+95DjhUbuhK3VxYONyVEh4KcBWlqVI+ZGXmEytQkZ0PKtXWCs9RG
ZH7iMMl7BUdhXwxJ1XPI1Lk5kJeLdun6rwM4nb1fx0mKhJte1CBOU6YnDPie6QnQ
t4Zp1Gvc
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:16 2026 by rpki-client