
$ rpki-client -vvf rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
File: 9CF435443DFA11640A4A46810E4972A2EFC22116.mft (raw, json)
Hash identifier: G2WsYXkdvv3meVWLwYnbwFoh10H8BEeEouUNYgkqpOM=
Subject key identifier: 08:5B:5D:92:6E:59:91:C8:43:2E:2B:0D:BB:13:E7:B2:C1:82:16:7A
Authority key identifier: 9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16
Certificate issuer: /CN=9CF435443DFA11640A4A46810E4972A2EFC22116
Certificate serial: 1C424967949B0380B276F79ABBBE98797EAA4136
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
Manifest number: 43
Signing time: Tue 30 Jun 2026 05:58:13 +0000
Manifest this update: Tue 30 Jun 2026 05:53:13 +0000
Manifest next update: Wed 01 Jul 2026 07:12:13 +0000
Files and hashes: 1: 9CF435443DFA11640A4A46810E4972A2EFC22116.crl (hash: kZplM6x4/JcD95O5sWy+kzNJmo11/bN08DBDeYbtZTg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl
rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Jul 2026 07:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:42:49:67:94:9b:03:80:b2:76:f7:9a:bb:be:98:79:7e:aa:41:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CF435443DFA11640A4A46810E4972A2EFC22116
Validity
Not Before: Jun 30 05:53:13 2026 GMT
Not After : Jul 1 07:12:13 2026 GMT
Subject: CN=085B5D926E5991C8432E2B0DBB13E7B2C182167A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:09:e8:3d:08:ac:e3:1e:6a:2f:02:76:10:
35:f2:5f:d0:2b:e3:ae:a4:4c:75:d0:65:94:5c:bf:
c8:3a:f7:e4:c2:90:ae:dd:9c:42:f8:93:5a:b9:12:
b5:e2:7d:a1:f3:4e:3a:6a:37:c6:b9:a1:13:22:15:
0f:5b:a8:df:28:37:dc:9b:50:83:1f:4a:49:0d:6a:
6d:31:43:90:a9:53:3c:c2:7e:c1:24:ba:2c:d6:d4:
fb:d7:22:d0:68:fb:61:05:d4:3d:05:89:a4:8b:6d:
19:09:4f:2c:2a:cf:09:3a:ff:6c:e2:fe:af:e9:cd:
fa:95:76:3b:01:ab:b3:8e:8f:9c:59:9d:35:cc:73:
62:34:33:67:21:37:54:57:c2:fd:dc:f4:80:ee:1c:
b8:e9:68:b0:40:b9:72:ce:39:21:ba:ba:0e:37:36:
9f:7d:6a:d3:b1:84:35:6f:c1:2c:d2:43:8a:2e:b6:
49:dc:98:6a:af:c7:bc:f4:75:14:70:b2:2d:63:ff:
07:5c:bf:6e:d4:1e:d7:af:96:3a:cf:4f:f6:f3:ee:
72:90:89:9d:75:02:5f:a1:5c:28:42:45:5f:b8:11:
d9:c6:f6:e8:a2:3d:23:2d:98:af:b8:a7:86:dc:e0:
63:d8:1a:f5:d8:ce:5a:da:e7:fc:9a:a8:eb:87:ea:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5B:5D:92:6E:59:91:C8:43:2E:2B:0D:BB:13:E7:B2:C1:82:16:7A
X509v3 Authority Key Identifier:
keyid:9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3e:e9:5e:6c:12:e6:1a:fe:b0:df:a3:ed:f2:36:3c:84:50:
db:4a:ae:44:3f:f5:35:48:c7:1f:63:16:aa:e1:a5:56:a9:31:
9c:0c:d0:18:6c:e5:d8:76:1d:6f:2c:87:24:cc:c9:f7:6c:37:
77:51:5e:5e:78:4f:22:9d:28:9d:36:75:f8:f9:c2:d8:80:50:
0d:b6:cf:8f:38:33:38:90:86:28:ba:f4:06:4a:44:90:b0:e1:
7c:2d:6a:2f:e5:5c:06:5e:2c:4d:f2:b1:69:48:5a:93:ad:b0:
fe:b2:8d:7f:c9:dd:21:b2:4e:89:06:8d:0e:c0:52:5b:ad:67:
f2:40:03:f9:6e:68:c3:fc:70:c2:54:17:c6:32:e9:21:bc:f0:
a3:37:1b:16:c0:07:ea:ec:09:fd:13:f9:19:1b:3d:34:00:eb:
6b:c0:86:a6:57:3d:d7:ea:4a:28:09:2c:a5:09:64:0c:56:d0:
1b:fa:70:7c:2d:e5:f6:23:0b:d0:ef:92:b7:68:16:b9:d1:44:
1e:57:9e:10:e2:22:47:9c:e2:16:26:fb:ee:50:45:75:f6:74:
1e:e5:9f:74:cb:cb:11:ff:50:6d:a8:49:13:bf:44:01:d3:6f:
a8:f7:cf:77:2c:7d:cd:11:c1:3c:aa:81:a1:c7:5d:c5:9f:49:
a0:f7:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:50 2026 by rpki-client