
$ rpki-client -vvvf rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
File: 9CF435443DFA11640A4A46810E4972A2EFC22116.mft (raw, json)
Hash identifier: z4PPezi0GX1hHbWMvEXPF4q1JUTO/Dvr/VyYA9Q4o5E=
Subject key identifier: AE:B7:27:31:87:BA:94:27:E5:CA:3C:42:C1:D1:D7:48:CA:0E:6C:1F
Authority key identifier: 9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16
Certificate issuer: /CN=9CF435443DFA11640A4A46810E4972A2EFC22116
Certificate serial: 0E7538BDEA20AA41C5B03767B95AE321AA88D475
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
Manifest number: C8
Signing time: Wed 07 Oct 2026 09:47:46 +0000
Manifest this update: Wed 07 Oct 2026 09:42:46 +0000
Manifest next update: Thu 08 Oct 2026 12:57:46 +0000
Files and hashes: 1: 9CF435443DFA11640A4A46810E4972A2EFC22116.crl (hash: WZEKv3hMusu9A+JO+60nkUwCVI5jzj8hS9IeN5Jo0dQ=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl
rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 12:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:75:38:bd:ea:20:aa:41:c5:b0:37:67:b9:5a:e3:21:aa:88:d4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CF435443DFA11640A4A46810E4972A2EFC22116
Validity
Not Before: Oct 7 09:42:46 2026 GMT
Not After : Oct 8 12:57:46 2026 GMT
Subject: CN=AEB7273187BA9427E5CA3C42C1D1D748CA0E6C1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:c4:86:27:1b:73:d8:b8:35:1d:cf:e0:e2:
12:5e:5a:dd:36:50:2f:65:49:58:3a:aa:1b:14:42:
fb:25:96:bf:ae:a1:6c:f5:3f:27:0a:0c:67:a5:5d:
a3:c8:07:f2:2e:03:69:d8:36:6f:c7:30:95:f2:cc:
d0:9a:4c:ed:f2:3a:55:f6:e9:10:51:2d:b3:8d:26:
8a:4c:2a:66:40:68:fb:71:d4:ff:ae:22:48:fc:b6:
88:e8:1c:24:59:26:d5:90:e2:e6:a4:1a:c5:02:06:
64:04:21:d9:7f:43:57:a4:bb:ae:5f:d1:58:c9:ce:
b8:5b:c4:82:35:37:91:82:b3:18:06:22:77:11:fc:
08:09:53:10:79:d4:ac:29:be:45:e8:c2:e8:09:9a:
c0:ef:b2:e6:8a:96:5c:ac:ea:4a:ba:d2:98:c9:63:
0e:df:ea:d4:93:1f:b1:d6:bc:cf:87:22:aa:9f:cc:
36:58:09:ef:06:1a:74:fc:4d:b5:9f:b2:9f:3e:0c:
b6:72:11:5d:38:8f:62:ea:b9:f4:59:38:66:3d:45:
20:65:35:d0:87:cf:62:45:2e:e5:95:ca:ca:6f:8d:
41:94:f9:69:8b:89:b3:12:b1:b9:df:21:e9:ca:b4:
ec:15:6b:d3:68:31:12:dc:b7:be:67:7f:de:aa:31:
67:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B7:27:31:87:BA:94:27:E5:CA:3C:42:C1:D1:D7:48:CA:0E:6C:1F
X509v3 Authority Key Identifier:
keyid:9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4c:25:f1:ed:71:cc:19:fd:59:e9:32:a1:0b:09:a2:91:7f:
37:ce:f7:82:4b:21:65:c2:0e:02:ce:93:d6:8e:47:39:2b:36:
3f:69:b0:5e:ee:45:98:f6:32:9a:c9:33:70:2c:af:9d:ac:e3:
19:b1:cb:dd:13:c8:0a:41:f2:f2:61:66:2d:2f:75:55:4a:4b:
b0:16:d0:42:9b:15:55:f9:04:d3:05:80:18:06:40:af:2d:c8:
0b:37:0f:97:68:62:85:16:46:45:f5:38:6c:4d:bd:cb:53:7d:
28:4d:17:bd:e6:71:e7:ec:43:3f:5f:02:ba:b3:3e:a9:38:66:
58:6c:b6:d0:ed:8c:49:80:d1:79:8b:ca:32:d4:ec:bd:bf:af:
68:2f:72:ba:f8:64:e2:02:4b:d7:dc:b9:e0:88:67:77:26:56:
f4:27:7d:23:ed:5f:39:a2:78:7b:59:e0:a6:24:4f:15:18:16:
04:3e:62:6b:cd:c2:e1:00:47:09:16:fa:82:36:58:fa:72:d1:
b8:ea:a4:4f:ae:92:0c:12:4e:28:82:0b:63:fc:b8:df:68:6d:
82:a4:18:2c:87:8e:17:8c:6b:7e:8d:a0:5a:e2:59:8b:12:18:
e6:94:2a:47:16:78:9c:46:29:c0:02:c8:cd:c3:6a:4f:98:6d:
28:29:46:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:46:31 2026 by rpki-client