$ rpki-client -vvf rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft File: 80E31B34932B532C4E8E3C56961B54B65049E2EC.mft (raw, json) Hash identifier: HRGSqfg79o+nDQNmIUj3p6ZVCLebBm0+bHn5davIIaQ= Subject key identifier: 4A:66:17:F7:66:65:4C:B9:E5:1E:6F:B8:91:4F:FA:41:2C:51:C2:CC Authority key identifier: 80:E3:1B:34:93:2B:53:2C:4E:8E:3C:56:96:1B:54:B6:50:49:E2:EC Certificate issuer: /CN=80E31B34932B532C4E8E3C56961B54B65049E2EC Certificate serial: 7128ECA911D8FBD442921FB522B3950DD039C5B5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer Subject info access: rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft Manifest number: 07 Signing time: Wed 13 May 2026 06:12:17 +0000 Manifest this update: Wed 13 May 2026 06:07:17 +0000 Manifest next update: Thu 14 May 2026 07:38:17 +0000 Files and hashes: 1: 3130332e3132322e3232342e302f32342d3234203d3e2039333131.roa (hash: fzU8RtsGV4TNCQ7MR55p+XlAPj4v9vlErlpjtlyLj2I=) 2: 80E31B34932B532C4E8E3C56961B54B65049E2EC.crl (hash: eoEUPtj7ELQQfdGzYX8QsuH2rNb2JZRkYMTwATkyTZc=) 3: 3130332e3132322e3232362e302f32342d3234203d3e20313331363138.roa (hash: t/CiG/navgG66/2NbQuoaTxz29Uea1agfBUQ96M71Kg=) 4: 3130332e3132322e3232352e302f32342d3234203d3e20313331363138.roa (hash: sORBzbqmqNWPqZ8veaI5tIb9ZDZdlEJnzWefAvjLc+Y=) 5: 3130332e3132322e3232372e302f32342d3234203d3e20313331363138.roa (hash: X2loQ1JbKCqeWcOjYZ1pP8S0M3dhQIM7WiLMc1+Ob+E=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.crl rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:28:ec:a9:11:d8:fb:d4:42:92:1f:b5:22:b3:95:0d:d0:39:c5:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80E31B34932B532C4E8E3C56961B54B65049E2EC Validity Not Before: May 13 06:07:17 2026 GMT Not After : May 14 07:38:17 2026 GMT Subject: CN=4A6617F766654CB9E51E6FB8914FFA412C51C2CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:96:1d:e0:da:c4:0e:f9:21:b8:f7:61:d1: cb:0a:86:32:fb:7f:49:13:08:99:a3:bd:34:bc:f9: 73:4d:bc:4d:11:01:17:3d:b3:3a:45:57:ea:4a:85: c5:72:45:a9:8d:d1:2c:09:1b:52:d8:e8:1a:2f:c3: 1a:c4:6a:46:68:8b:b9:80:bd:9f:ad:79:67:14:41: f4:dc:0b:ba:fb:eb:99:ed:22:39:b4:d2:9d:e8:54: 5d:01:7e:ef:06:3d:f4:36:a5:4a:a0:10:05:85:ab: 2c:96:bc:38:af:75:d5:64:1f:0d:57:f1:a5:99:a9: 52:54:3b:00:9e:1c:c8:12:c5:36:17:1c:3d:23:e0: 46:40:5e:35:eb:64:56:b4:cf:d9:5d:03:7d:c4:56: c0:ff:88:53:f2:9b:07:28:5d:ef:fd:ef:a7:03:66: 69:c4:89:58:04:be:ad:7a:cd:22:b6:8e:1e:4f:41: c2:71:e5:69:45:62:69:5b:fd:d2:28:4b:8c:ff:e3: 1b:8c:b1:9c:b3:a3:1a:19:83:e5:eb:83:85:c5:dd: 0e:0a:89:5a:55:b5:76:ce:84:b6:f6:fa:aa:1d:8b: 7b:bb:4f:79:02:0a:fa:97:a4:0c:25:4a:e3:56:5c: 3d:d6:14:00:83:27:95:ad:f3:1f:bb:5c:69:ba:3c: 8e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:66:17:F7:66:65:4C:B9:E5:1E:6F:B8:91:4F:FA:41:2C:51:C2:CC X509v3 Authority Key Identifier: keyid:80:E3:1B:34:93:2B:53:2C:4E:8E:3C:56:96:1B:54:B6:50:49:E2:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:b2:d3:60:b7:66:da:1c:e4:d2:e7:84:9d:ff:ca:8c:62:ee: 55:03:e2:a2:e3:47:bd:df:8b:07:1b:26:ac:0b:82:ba:96:05: ae:fd:d7:0f:3b:d8:ab:2c:e2:16:2e:f3:c9:06:bf:3d:08:82: 3f:9f:10:50:34:53:ad:b0:f9:e7:77:8c:fd:43:4b:36:f4:84: 50:93:b9:f6:31:22:b6:af:96:da:f6:0b:90:e3:6b:4b:02:38: 39:cc:6f:bb:34:0d:2a:61:26:75:b3:76:62:0d:ff:5c:ee:26: 5b:6d:38:a4:24:29:95:ea:29:61:eb:8f:b2:0a:b0:ae:bf:61: 8a:7d:05:ab:c7:59:a6:f9:58:3d:05:8d:77:ef:68:de:84:de: bb:4a:a6:28:b4:f8:e2:48:3c:d0:5f:dc:93:80:15:99:07:39: e5:30:5b:43:cf:eb:83:63:58:82:89:99:9c:b4:1f:ad:2b:a5: e4:af:18:b7:e8:f2:2d:8e:ae:2f:b9:64:44:fd:07:7f:86:8c: 83:b6:0d:33:0b:8f:d2:9f:25:f6:74:7d:ca:ab:1e:ad:76:2e: 03:94:b0:c4:6d:35:e0:66:fd:11:f6:e7:a1:a5:74:b8:4d:54: 8f:cb:10:82:56:e9:6c:31:96:9b:9d:cd:fa:d2:be:6e:9a:15: 04:82:89:15 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUcSjsqRHY+9RCkh+1IrOVDdA5xbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBFMzFCMzQ5MzJCNTMyQzRFOEUzQzU2OTYxQjU0QjY1 MDQ5RTJFQzAeFw0yNjA1MTMwNjA3MTdaFw0yNjA1MTQwNzM4MTdaMDMxMTAvBgNV BAMTKDRBNjYxN0Y3NjY2NTRDQjlFNTFFNkZCODkxNEZGQTQxMkM1MUMyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr35Yd4NrEDvkhuPdh0csKhjL7 f0kTCJmjvTS8+XNNvE0RARc9szpFV+pKhcVyRamN0SwJG1LY6BovwxrEakZoi7mA vZ+teWcUQfTcC7r765ntIjm00p3oVF0Bfu8GPfQ2pUqgEAWFqyyWvDivddVkHw1X 8aWZqVJUOwCeHMgSxTYXHD0j4EZAXjXrZFa0z9ldA33EVsD/iFPymwcoXe/976cD ZmnEiVgEvq16zSK2jh5PQcJx5WlFYmlb/dIoS4z/4xuMsZyzoxoZg+Xrg4XF3Q4K iVpVtXbOhLb2+qodi3u7T3kCCvqXpAwlSuNWXD3WFACDJ5Wt8x+7XGm6PI73AgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUSmYX92ZlTLnlHm+4kU/6QSxRwswwHwYDVR0j BBgwFoAUgOMbNJMrUyxOjjxWlhtUtlBJ4uwwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVklTSU9O NFlFUy8wLzgwRTMxQjM0OTMyQjUzMkM0RThFM0M1Njk2MUI1NEI2NTA0OUUyRUMu Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvODBFMzFCMzQ5MzJCNTMyQzRFOEUzQzU2 OTYxQjU0QjY1MDQ5RTJFQy5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1ZJU0lPTjRZRVMvMC84MEUz MUIzNDkzMkI1MzJDNEU4RTNDNTY5NjFCNTRCNjUwNDlFMkVDLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA uLLTYLdm2hzk0ueEnf/KjGLuVQPiouNHvd+LBxsmrAuCupYFrv3XDzvYqyziFi7z yQa/PQiCP58QUDRTrbD553eM/UNLNvSEUJO59jEitq+W2vYLkONrSwI4OcxvuzQN KmEmdbN2Yg3/XO4mW204pCQpleopYeuPsgqwrr9hin0Fq8dZpvlYPQWNd+9o3oTe u0qmKLT44kg80F/ck4AVmQc55TBbQ8/rg2NYgomZnLQfrSul5K8Yt+jyLY6uL7lk RP0Hf4aMg7YNMwuP0p8l9nR9yqserXYuA5SwxG014Gb9EfbnoaV0uE1Uj8sQglbp bDGWm53N+tK+bpoVBIKJFQ== -----END CERTIFICATE-----Generated at Wed May 13 20:33:47 2026 by rpki-client