
$ rpki-client -vvvf rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft
File: 80E31B34932B532C4E8E3C56961B54B65049E2EC.mft (raw, json)
Hash identifier: CbNW9RWyVi+NLWZY4eRKqpW18WaSewl3SHTArDMOZp0=
Subject key identifier: CF:DB:A5:89:22:B1:41:80:25:F1:50:8C:E8:12:70:6E:F3:78:D7:67
Authority key identifier: 80:E3:1B:34:93:2B:53:2C:4E:8E:3C:56:96:1B:54:B6:50:49:E2:EC
Certificate issuer: /CN=80E31B34932B532C4E8E3C56961B54B65049E2EC
Certificate serial: 48AD5F782FED158798AAF1D1559B2165C553E1AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft
Manifest number: FE
Signing time: Sat 14 Nov 2026 21:47:09 +0000
Manifest this update: Sat 14 Nov 2026 21:42:09 +0000
Manifest next update: Mon 16 Nov 2026 00:54:09 +0000
Files and hashes: 1: 3130332e3132322e3232372e302f32342d3234203d3e20313331363138.roa (hash: X2loQ1JbKCqeWcOjYZ1pP8S0M3dhQIM7WiLMc1+Ob+E=)
2: 3130332e3132322e3232342e302f32342d3234203d3e2039333131.roa (hash: fzU8RtsGV4TNCQ7MR55p+XlAPj4v9vlErlpjtlyLj2I=)
3: 80E31B34932B532C4E8E3C56961B54B65049E2EC.crl (hash: icH9Vluc2VHxLAvcxM6C9QK1hGc02DgaEnGBDF9LNiY=)
4: 3130332e3132322e3232352e302f32342d3234203d3e20313331363138.roa (hash: sORBzbqmqNWPqZ8veaI5tIb9ZDZdlEJnzWefAvjLc+Y=)
5: 3130332e3132322e3232362e302f32342d3234203d3e20313331363138.roa (hash: t/CiG/navgG66/2NbQuoaTxz29Uea1agfBUQ96M71Kg=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.crl
rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 00:54:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ad:5f:78:2f:ed:15:87:98:aa:f1:d1:55:9b:21:65:c5:53:e1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80E31B34932B532C4E8E3C56961B54B65049E2EC
Validity
Not Before: Nov 14 21:42:09 2026 GMT
Not After : Nov 16 00:54:09 2026 GMT
Subject: CN=CFDBA58922B1418025F1508CE812706EF378D767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:0d:76:2d:28:0f:5e:7b:b3:32:af:1f:d4:
b5:c7:91:1f:ec:0b:6c:cf:a2:5d:9e:68:67:72:15:
fe:0a:1a:84:ed:f3:55:c7:5d:8d:2f:a6:a3:8d:9d:
6e:02:26:94:37:ca:ea:80:95:23:07:c4:64:92:ec:
02:5e:85:60:8e:7b:7a:b6:3b:de:03:68:fc:0f:69:
da:76:31:3b:e0:f2:b8:ff:8d:c0:b9:f2:4f:77:9a:
2d:cc:46:9d:71:2c:b9:47:d9:e3:97:d5:ee:44:e8:
02:2a:ad:d5:04:a9:5f:e1:de:ab:3a:d7:fd:76:f2:
e8:ea:9e:f8:8a:78:a0:12:eb:dd:06:64:aa:10:0c:
19:ae:54:99:66:7f:b5:b6:eb:68:a5:9b:df:0e:06:
50:eb:a2:25:57:62:1c:b6:a2:ca:be:7b:d9:e3:05:
1f:2e:76:fc:89:8a:de:54:01:36:34:f6:62:d9:a5:
69:b6:a9:ca:77:56:aa:5e:97:29:d3:17:f2:d7:07:
bf:41:f6:28:b1:d7:58:a1:c9:76:1a:84:be:b2:00:
fa:09:aa:3c:ae:21:fe:91:8b:b8:85:98:b5:df:00:
9f:e7:95:da:55:c9:1a:2f:94:98:73:f2:24:6a:37:
1f:53:52:64:f7:04:af:d4:b3:a9:d4:2e:c6:19:48:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DB:A5:89:22:B1:41:80:25:F1:50:8C:E8:12:70:6E:F3:78:D7:67
X509v3 Authority Key Identifier:
keyid:80:E3:1B:34:93:2B:53:2C:4E:8E:3C:56:96:1B:54:B6:50:49:E2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:45:80:16:43:5e:27:bc:92:78:0c:f2:3b:23:49:aa:0f:8f:
00:e5:a0:dc:47:01:11:e0:06:c6:6c:c4:0c:98:fd:99:48:98:
08:e4:c8:56:39:db:6b:58:01:84:93:bc:2b:cf:c9:22:80:37:
ff:8a:f5:d9:f8:92:05:9f:d3:3f:c1:58:16:05:49:80:21:10:
5c:8c:d9:9e:63:17:d8:0a:75:03:78:0b:50:e3:c4:7c:d1:ca:
a4:2d:1c:56:9a:09:f3:59:d0:ff:43:0b:c0:15:6e:e3:7e:27:
eb:0c:b7:f1:9d:85:1d:46:9b:ac:73:93:b6:ee:a7:dd:64:8f:
23:c7:49:01:72:69:c5:f4:9f:47:9e:4b:bc:e6:07:14:ba:73:
8a:69:ef:f5:8c:7a:2d:15:e3:14:50:f6:44:49:51:95:09:b2:
1d:43:a1:ff:9e:79:85:ef:5d:ae:06:03:4a:57:9e:91:85:74:
1c:8b:30:b7:5a:9b:d7:79:05:1a:01:23:7f:23:37:b3:5f:d4:
0b:61:78:7e:01:3b:30:e1:a9:67:94:12:5f:d3:58:a3:db:75:
c1:db:55:1d:12:fd:dc:4d:02:05:d4:02:e3:a4:fb:78:d4:4b:
ac:8e:4a:17:c5:42:26:96:dd:e9:02:71:ff:f6:6e:9a:4e:6e:
0a:0f:9a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:23:08 2026 by rpki-client