$ rpki-client -vvf rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft File: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft (raw, json) Hash identifier: UWhN28V7shzMW8lslJdnbk8jkt7M7/itENfdWzOiyss= Subject key identifier: B1:17:6A:A0:7D:04:51:00:6E:08:D9:53:71:12:96:BE:C4:6F:9E:5A Authority key identifier: BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 Certificate issuer: /CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Certificate serial: 14D8E91FB2B5D8356E12EC6CFB6C6BA72DF46DFB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject info access: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft Manifest number: 7B Signing time: Tue 28 Jul 2026 18:04:39 +0000 Manifest this update: Tue 28 Jul 2026 17:59:39 +0000 Manifest next update: Wed 29 Jul 2026 19:22:39 +0000 Files and hashes: 1: 3135312e3135382e3232342e302f32342d3234203d3e20313331363330.roa (hash: fymSuw1iXX46oyRWIBNdhz3f/dOlk8VWLwtxbZEtRW8=) 2: 3135312e3135382e3232352e302f32342d3234203d3e20313937353337.roa (hash: OONjtGbImgqa0kIYiLjUQ1P3dRaZmeZTmlX9Ya86T08=) 3: 3135312e3135382e3232352e302f32342d3234203d3e20323136313338.roa (hash: Cr5VaLo8fqDJtkOt63np0AgLIpjR+BhgRM5+gMx49a4=) 4: BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl (hash: /JHRIpaHr7q6U1q82Xr1rs9NTSz/etJb52wn5iBjpYc=) 5: 3135312e3135382e3232342e302f32332d3233203d3e20313331363330.roa (hash: UGeKbObtquowJEySOq447BwTw1IrQgKYmkBRzzCAemk=) 6: 3135312e3135382e3232352e302f32342d3234203d3e20323032373336.roa (hash: BP3tLCNXYvf+Gp0VBeaUsi8XNu18vBFJrKuz4D6/0xk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/3/C49BAE2430BEEC354C1B14F226E761FC9BDCF005.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/xJuuJDC-7DVMGxTyJudh_Jvc8AU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:d8:e9:1f:b2:b5:d8:35:6e:12:ec:6c:fb:6c:6b:a7:2d:f4:6d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BFDB40496A2E2FD9B4E4F96B3589413B1F67B105 Validity Not Before: Jul 28 17:59:39 2026 GMT Not After : Jul 29 19:22:39 2026 GMT Subject: CN=B1176AA07D0451006E08D953711296BEC46F9E5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f7:0f:72:2e:1e:62:8d:38:08:c1:d9:34:da: 1d:d4:55:cf:b5:7b:25:79:99:8d:69:47:4f:ba:cf: 84:cf:1c:b3:44:69:a5:b2:a9:f2:02:e9:98:3e:b0: d7:7a:1c:9b:32:a9:6c:8f:7c:12:24:cc:ed:de:57: 19:1e:6e:92:c6:48:bc:36:6d:d2:bb:d4:43:1a:12: 38:e5:dd:25:a3:62:6e:41:78:a3:15:47:c0:2e:f5: 8f:6f:cf:b2:5f:2e:12:2b:66:a1:db:c5:38:2e:fa: cd:e6:46:30:5d:a5:df:81:fc:39:b9:6e:36:b1:ae: 70:47:4e:a6:77:8f:a5:ad:62:28:20:a8:cf:25:6d: 95:fa:a9:85:fd:e6:f2:82:b4:fd:81:31:f7:8f:eb: 68:1a:00:c7:e9:a1:8f:11:14:58:8a:13:a7:2b:2f: 6b:3f:e7:40:08:93:aa:2b:30:0e:98:83:36:5e:fc: e3:c1:08:1c:92:de:e9:5b:77:56:65:0e:85:2a:36: c6:22:82:84:41:e9:4a:bb:de:c6:cf:c5:52:75:5d: c2:1f:b2:eb:86:bc:69:f1:fe:9d:eb:d4:32:08:32: e0:d6:e7:7a:3f:28:e5:d6:6b:45:d3:15:69:5d:cb: 69:1f:20:6e:09:5a:eb:36:04:57:99:58:9d:86:6b: 1a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:17:6A:A0:7D:04:51:00:6E:08:D9:53:71:12:96:BE:C4:6F:9E:5A X509v3 Authority Key Identifier: keyid:BF:DB:40:49:6A:2E:2F:D9:B4:E4:F9:6B:35:89:41:3B:1F:67:B1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/LAZCO/1/BFDB40496A2E2FD9B4E4F96B3589413B1F67B105.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:4e:05:ad:c9:40:a0:71:78:ed:3f:2c:7a:06:29:51:47:d5: 15:d6:ae:fb:d5:96:86:32:74:60:02:22:96:42:a5:3d:95:1a: f4:e2:e6:f3:a6:c0:8d:f2:96:72:3a:65:1a:15:a8:81:29:e5: 64:7a:d5:30:6e:68:e8:2d:57:ed:44:36:f9:3d:0e:8a:87:8b: 46:2b:f0:f2:b0:f5:4c:52:51:0c:e9:70:4d:e4:45:50:f0:2f: 5b:e0:eb:78:33:16:71:be:31:18:ff:8a:64:5d:da:ab:61:24: 96:3b:66:4c:c4:c2:cd:51:90:3e:30:41:04:39:c9:06:cd:31: 7d:b4:a4:37:37:15:40:26:6a:4c:26:bc:f5:50:10:3a:0f:1a: e6:b9:53:cc:b1:7f:b6:22:44:85:78:13:71:fd:89:56:64:ae: 57:ae:28:6d:6b:30:8f:9b:02:cf:b2:d0:94:52:e3:f2:a8:c7: c6:dc:74:74:97:35:6a:1a:53:ea:e1:7c:10:6f:c3:ef:b9:a9: e2:24:de:9e:cb:53:99:9f:fc:b4:a1:36:fe:7c:f3:76:b9:04: b4:c8:b9:81:d8:52:d9:31:15:be:10:1d:aa:83:d5:5e:7c:6e: ca:c3:a4:88:fb:8d:05:bf:00:b0:cd:43:57:59:5b:00:da:8a: ef:13:d0:15 -----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIUFNjpH7K12DVuEuxs+2xrpy30bfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkZEQjQwNDk2QTJFMkZEOUI0RTRGOTZCMzU4OTQxM0Ix RjY3QjEwNTAeFw0yNjA3MjgxNzU5MzlaFw0yNjA3MjkxOTIyMzlaMDMxMTAvBgNV BAMTKEIxMTc2QUEwN0QwNDUxMDA2RTA4RDk1MzcxMTI5NkJFQzQ2RjlFNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9w9yLh5ijTgIwdk02h3UVc+1 eyV5mY1pR0+6z4TPHLNEaaWyqfIC6Zg+sNd6HJsyqWyPfBIkzO3eVxkebpLGSLw2 bdK71EMaEjjl3SWjYm5BeKMVR8Au9Y9vz7JfLhIrZqHbxTgu+s3mRjBdpd+B/Dm5 bjaxrnBHTqZ3j6WtYiggqM8lbZX6qYX95vKCtP2BMfeP62gaAMfpoY8RFFiKE6cr L2s/50AIk6orMA6YgzZe/OPBCByS3ulbd1ZlDoUqNsYigoRB6Uq73sbPxVJ1XcIf suuGvGnx/p3r1DIIMuDW53o/KOXWa0XTFWldy2kfIG4JWus2BFeZWJ2Gaxp/AgMB AAGjggHsMIIB6DAdBgNVHQ4EFgQUsRdqoH0EUQBuCNlTcRKWvsRvnlowHwYDVR0j BBgwFoAUv9tASWouL9m05PlrNYlBOx9nsQUwDgYDVR0PAQH/BAQDAgeAMGIGA1Ud HwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvTEFaQ08v MS9CRkRCNDA0OTZBMkUyRkQ5QjRFNEY5NkIzNTg5NDEzQjFGNjdCMTA1LmNybDBv BggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS8zL0JGREI0MDQ5NkEyRTJGRDlCNEU0Rjk2QjM1ODk0 MTNCMUY2N0IxMDUuY2VyMG0GCCsGAQUFBwELBGEwXzBdBggrBgEFBQcwC4ZRcnN5 bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9MQVpDTy8xL0JGREI0MDQ5NkEyRTJG RDlCNEU0Rjk2QjM1ODk0MTNCMUY2N0IxMDUubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbTgWtyUCgcXjt Pyx6BilRR9UV1q771ZaGMnRgAiKWQqU9lRr04ubzpsCN8pZyOmUaFaiBKeVketUw bmjoLVftRDb5PQ6Kh4tGK/DysPVMUlEM6XBN5EVQ8C9b4Ot4MxZxvjEY/4pkXdqr YSSWO2ZMxMLNUZA+MEEEOckGzTF9tKQ3NxVAJmpMJrz1UBA6DxrmuVPMsX+2IkSF eBNx/YlWZK5XrihtazCPmwLPstCUUuPyqMfG3HR0lzVqGlPq4XwQb8PvuaniJN6e y1OZn/y0oTb+fPN2uQS0yLmB2FLZMRW+EB2qg9VefG7Kw6SI+40FvwCwzUNXWVsA 2orvE9AV -----END CERTIFICATE-----Generated at Wed Jul 29 07:28:06 2026 by rpki-client