
$ rpki-client -vvf rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft
File: 80E31B34932B532C4E8E3C56961B54B65049E2EC.mft (raw, json)
Hash identifier: YHdC/PMummfFggmbKrZqKgcuL3i3FsEqlulLu+Vg9Uw=
Subject key identifier: FA:D6:EB:44:2A:CD:30:65:97:ED:81:C1:E2:87:32:74:64:DF:C0:82
Authority key identifier: 80:E3:1B:34:93:2B:53:2C:4E:8E:3C:56:96:1B:54:B6:50:49:E2:EC
Certificate issuer: /CN=80E31B34932B532C4E8E3C56961B54B65049E2EC
Certificate serial: 14FAA4395DBFD631098E09962AEBD7D78AD4D7C3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft
Manifest number: 6D
Signing time: Tue 28 Jul 2026 09:03:02 +0000
Manifest this update: Tue 28 Jul 2026 08:58:02 +0000
Manifest next update: Wed 29 Jul 2026 09:19:02 +0000
Files and hashes: 1: 3130332e3132322e3232362e302f32342d3234203d3e20313331363138.roa (hash: t/CiG/navgG66/2NbQuoaTxz29Uea1agfBUQ96M71Kg=)
2: 3130332e3132322e3232342e302f32342d3234203d3e2039333131.roa (hash: fzU8RtsGV4TNCQ7MR55p+XlAPj4v9vlErlpjtlyLj2I=)
3: 3130332e3132322e3232352e302f32342d3234203d3e20313331363138.roa (hash: sORBzbqmqNWPqZ8veaI5tIb9ZDZdlEJnzWefAvjLc+Y=)
4: 3130332e3132322e3232372e302f32342d3234203d3e20313331363138.roa (hash: X2loQ1JbKCqeWcOjYZ1pP8S0M3dhQIM7WiLMc1+Ob+E=)
5: 80E31B34932B532C4E8E3C56961B54B65049E2EC.crl (hash: L4nb2Fl84uBA/tdLMBP/ZCsyz2EHczmIl2u1KtCo8dY=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.crl
rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 07:22:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:fa:a4:39:5d:bf:d6:31:09:8e:09:96:2a:eb:d7:d7:8a:d4:d7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80E31B34932B532C4E8E3C56961B54B65049E2EC
Validity
Not Before: Jul 28 08:58:02 2026 GMT
Not After : Jul 29 09:19:02 2026 GMT
Subject: CN=FAD6EB442ACD306597ED81C1E287327464DFC082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:8e:e9:d2:fc:cf:17:6f:02:fe:3d:c2:6b:
93:20:2e:ee:de:d8:19:11:68:7d:47:76:6d:03:62:
87:42:24:63:1a:76:a4:c7:15:46:32:ed:4e:ea:e6:
96:87:6e:90:75:39:55:e3:f4:07:a8:e0:77:ec:ae:
a2:90:63:cd:5b:4d:c2:33:af:bb:e7:a3:09:b8:d8:
79:93:58:26:96:89:85:3b:00:b0:d1:a8:ab:4e:56:
b8:da:8e:34:92:2e:fa:77:c2:53:77:e5:da:af:7b:
40:7d:0f:15:e8:55:c9:24:e9:9d:63:44:26:cb:e5:
5f:eb:e6:1b:61:9e:3a:2b:90:2e:9d:75:92:f2:c5:
9e:f0:ad:dc:71:17:d6:74:88:90:b1:05:51:ec:ad:
12:3a:c3:7b:59:55:b8:bc:a4:61:35:c9:88:12:77:
1e:3e:5f:da:94:14:df:cc:ab:25:03:dc:66:5a:7e:
20:e3:ea:d6:49:db:53:00:a9:25:05:e1:96:06:0a:
36:ed:78:b5:85:e7:a8:29:8b:fe:5b:42:4e:c7:e7:
6d:a6:d3:99:95:7b:cc:d2:ad:8b:b2:58:df:f6:af:
4d:9f:56:9a:52:8c:e7:11:0d:b0:d6:01:88:a5:d6:
eb:40:b4:03:c1:4c:90:81:b6:ac:48:41:81:37:76:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D6:EB:44:2A:CD:30:65:97:ED:81:C1:E2:87:32:74:64:DF:C0:82
X509v3 Authority Key Identifier:
keyid:80:E3:1B:34:93:2B:53:2C:4E:8E:3C:56:96:1B:54:B6:50:49:E2:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/80E31B34932B532C4E8E3C56961B54B65049E2EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VISION4YES/0/80E31B34932B532C4E8E3C56961B54B65049E2EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:40:ec:b2:85:42:20:26:f5:6d:f8:f0:2b:a0:d8:06:76:07:
bb:2a:ee:ce:6b:d7:ce:6c:bc:7f:de:49:7a:ae:ee:73:39:63:
d6:51:d2:50:38:54:57:4b:d1:ac:e5:53:ba:31:77:bf:87:07:
b7:a5:c7:90:d6:ef:87:69:de:34:a6:5e:6f:1d:52:46:b7:34:
87:4a:35:ec:90:40:6d:52:7d:d9:b9:d4:84:b9:a0:05:ce:35:
0d:1b:d8:af:2c:1c:8f:5e:48:89:1a:09:44:4f:68:39:8d:35:
87:73:43:2d:59:73:e5:28:08:74:34:41:6f:46:a5:56:1f:f7:
aa:cd:d4:a5:b1:7e:6f:0c:27:87:1d:6a:52:35:72:96:e2:c7:
fc:bf:ff:41:32:f9:a0:c3:75:4f:5d:58:5e:c9:52:29:0b:4e:
ea:ec:b1:5b:58:7f:5b:81:4d:2b:ef:17:59:ab:b0:ab:fc:e8:
59:01:cc:36:33:98:7d:10:23:ae:d9:8a:14:45:90:2d:ca:1d:
45:a4:36:e7:ab:f7:7d:f0:4b:d5:92:9c:30:43:9e:ab:8d:78:
01:59:57:ad:55:37:2c:12:ef:4f:0f:25:b1:28:9e:b9:03:6c:
a4:db:3b:09:d0:6d:d0:ba:e8:56:cf:90:af:d8:09:08:67:92:
71:be:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:50:21 2026 by rpki-client