Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
File:                     9CF435443DFA11640A4A46810E4972A2EFC22116.mft (raw, json)
Hash identifier:          mJcDvWU9apxq5fCNSyhBy4aUt83z9H0nffcaj7J+r24=
Subject key identifier:   AF:C0:BF:F8:B3:B9:42:D2:38:33:06:29:EC:F1:6A:E2:77:DE:99:96
Authority key identifier: 9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16
Certificate issuer:       /CN=9CF435443DFA11640A4A46810E4972A2EFC22116
Certificate serial:       7A3C3ED53ED1DB867AB88DC3A558E7FF2CCF1E9A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
Manifest number:          03
Signing time:             Wed 13 May 2026 03:56:39 +0000
Manifest this update:     Wed 13 May 2026 03:51:39 +0000
Manifest next update:     Thu 14 May 2026 03:56:39 +0000
Files and hashes:         1: 9CF435443DFA11640A4A46810E4972A2EFC22116.crl (hash: ZxNdqMGR74v9hjQK93bFKyjll0pf/O+NlUg2TDWQFrE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl
                          rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3c:3e:d5:3e:d1:db:86:7a:b8:8d:c3:a5:58:e7:ff:2c:cf:1e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CF435443DFA11640A4A46810E4972A2EFC22116
        Validity
            Not Before: May 13 03:51:39 2026 GMT
            Not After : May 14 03:56:39 2026 GMT
        Subject: CN=AFC0BFF8B3B942D238330629ECF16AE277DE9996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:3d:41:e7:09:0b:7a:61:f0:2e:85:8f:30:
                    be:54:5d:5e:c9:58:83:27:4d:d4:db:3a:b4:30:42:
                    b9:46:9c:3b:6d:06:02:b2:06:fd:78:68:23:5a:89:
                    3a:93:07:88:3c:f0:96:76:47:32:2e:83:f2:f5:6d:
                    7e:1b:e9:1f:a5:01:2f:6b:de:03:e5:e5:f5:68:67:
                    88:f5:5b:bd:24:a0:d1:24:a0:f6:e0:01:c4:87:75:
                    d5:3e:11:d3:38:0a:c0:d2:23:71:2f:0f:b8:1c:97:
                    5a:6f:c6:32:06:98:17:1d:57:af:ed:5b:8b:07:96:
                    67:60:fd:87:4a:28:39:0c:95:13:5b:b0:b2:19:96:
                    97:c8:e4:e0:41:1b:57:2f:50:56:04:74:d3:0c:30:
                    21:4a:17:fe:ae:b7:21:aa:8c:62:74:35:f5:77:da:
                    bf:a7:d1:4d:a6:14:fb:28:11:43:1e:8f:bb:41:44:
                    7d:77:b2:98:74:92:c0:24:bc:b4:0b:19:f8:84:76:
                    9d:6d:e9:ce:20:78:7c:79:4d:1c:d2:be:a5:8b:13:
                    05:e4:c9:fd:a3:f4:79:c1:7d:4e:8e:ce:3a:d8:82:
                    30:50:aa:fd:b6:8e:b1:b6:b1:fe:b8:99:75:34:bb:
                    51:e9:f4:e3:45:a0:d2:6c:4b:12:05:bd:14:38:a9:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C0:BF:F8:B3:B9:42:D2:38:33:06:29:EC:F1:6A:E2:77:DE:99:96
            X509v3 Authority Key Identifier:
                keyid:9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f3:37:1e:b1:84:6a:1e:91:31:42:ab:95:8b:e1:60:c6:8f:
         79:7b:f5:43:3e:47:c4:f1:27:eb:e3:92:81:c6:17:3b:68:5d:
         1a:aa:9d:cc:83:c9:5a:00:66:a1:8c:1e:7e:fc:df:23:97:f4:
         24:7b:a6:ae:e2:4f:8f:04:9a:83:d6:44:24:af:5e:4d:73:da:
         19:e3:62:7b:71:7f:d1:d1:8c:67:d0:30:5c:8d:33:b2:8e:30:
         0f:d3:47:d5:f3:26:c7:e7:5d:86:4a:23:f4:ad:54:17:93:14:
         20:34:c0:26:25:1e:ce:5a:13:81:ef:58:d0:76:9e:ee:e7:f8:
         b9:62:f7:ab:ad:e1:d6:63:a5:69:64:f1:67:41:17:d1:f1:93:
         41:c9:a3:f2:0c:e2:64:4f:d2:b8:54:6c:88:5f:b9:a6:02:53:
         b6:e8:b2:63:be:e2:a6:a1:a9:cc:d0:ea:03:66:56:e8:6a:6e:
         52:86:b1:eb:5e:17:de:83:44:fa:18:a1:8d:4b:d2:6e:ad:fa:
         60:53:28:b2:21:25:26:8f:16:e9:ed:78:47:77:a9:be:8a:c9:
         39:30:17:89:46:94:74:76:db:56:9f:ba:b5:1e:45:fc:da:2a:
         fd:64:71:d5:93:76:3d:f8:8d:a7:46:41:f3:7d:49:61:01:cf:
         5d:f5:68:d8
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUejw+1T7R24Z6uI3DpVjn/yzPHpowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNGNDM1NDQzREZBMTE2NDBBNEE0NjgxMEU0OTcyQTJF
RkMyMjExNjAeFw0yNjA1MTMwMzUxMzlaFw0yNjA1MTQwMzU2MzlaMDMxMTAvBgNV
BAMTKEFGQzBCRkY4QjNCOTQyRDIzODMzMDYyOUVDRjE2QUUyNzdERTk5OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCytz1B5wkLemHwLoWPML5UXV7J
WIMnTdTbOrQwQrlGnDttBgKyBv14aCNaiTqTB4g88JZ2RzIug/L1bX4b6R+lAS9r
3gPl5fVoZ4j1W70koNEkoPbgAcSHddU+EdM4CsDSI3EvD7gcl1pvxjIGmBcdV6/t
W4sHlmdg/YdKKDkMlRNbsLIZlpfI5OBBG1cvUFYEdNMMMCFKF/6utyGqjGJ0NfV3
2r+n0U2mFPsoEUMej7tBRH13sph0ksAkvLQLGfiEdp1t6c4geHx5TRzSvqWLEwXk
yf2j9HnBfU6OzjrYgjBQqv22jrG2sf64mXU0u1Hp9ONFoNJsSxIFvRQ4qVQFAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUr8C/+LO5QtI4MwYp7PFq4nfemZYwHwYDVR0j
BBgwFoAUnPQ1RD36EWQKSkaBDklyou/CIRYwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud
HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVklTSU9O
QkFZLzAvOUNGNDM1NDQzREZBMTE2NDBBNEE0NjgxMEU0OTcyQTJFRkMyMjExNi5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvMS85Q0Y0MzU0NDNERkExMTY0MEE0QTQ2ODEw
RTQ5NzJBMkVGQzIyMTE2LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG
VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVklTSU9OQkFZLzAvOUNGNDM1
NDQzREZBMTE2NDBBNEE0NjgxMEU0OTcyQTJFRkMyMjExNi5tZnQwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADTz
Nx6xhGoekTFCq5WL4WDGj3l79UM+R8TxJ+vjkoHGFztoXRqqncyDyVoAZqGMHn78
3yOX9CR7pq7iT48EmoPWRCSvXk1z2hnjYntxf9HRjGfQMFyNM7KOMA/TR9XzJsfn
XYZKI/StVBeTFCA0wCYlHs5aE4HvWNB2nu7n+Lli96ut4dZjpWlk8WdBF9Hxk0HJ
o/IM4mRP0rhUbIhfuaYCU7bosmO+4qahqczQ6gNmVuhqblKGseteF96DRPoYoY1L
0m6t+mBTKLIhJSaPFunteEd3qb6KyTkwF4lGlHR221afurUeRfzaKv1kcdWTdj34
jadGQfN9SWEBz131aNg=
-----END CERTIFICATE-----
Generated at Wed May 13 20:36:09 2026 by rpki-client