Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
File:                     9CF435443DFA11640A4A46810E4972A2EFC22116.mft (raw, json)
Hash identifier:          FZ5IcDR1m4xK4NyVvmwm4karZCm71eQBMSydMHras+M=
Subject key identifier:   3C:D2:9B:F9:62:41:B4:62:6B:CD:A7:C1:2A:90:52:5E:46:44:A8:EA
Authority key identifier: 9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16
Certificate issuer:       /CN=9CF435443DFA11640A4A46810E4972A2EFC22116
Certificate serial:       1CBE6B3B718699E65DD37D34DB9F83D6AB318BF4
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
Manifest number:          B2
Signing time:             Mon 21 Sep 2026 06:21:22 +0000
Manifest this update:     Mon 21 Sep 2026 06:16:22 +0000
Manifest next update:     Tue 22 Sep 2026 06:30:22 +0000
Files and hashes:         1: 9CF435443DFA11640A4A46810E4972A2EFC22116.crl (hash: cfWsAYmBSw6y9RP2N5oj64wzrJbmHyy/b8bsfeiVnSg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl
                          rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 03:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:be:6b:3b:71:86:99:e6:5d:d3:7d:34:db:9f:83:d6:ab:31:8b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CF435443DFA11640A4A46810E4972A2EFC22116
        Validity
            Not Before: Sep 21 06:16:22 2026 GMT
            Not After : Sep 22 06:30:22 2026 GMT
        Subject: CN=3CD29BF96241B4626BCDA7C12A90525E4644A8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:ee:b1:39:fa:fa:74:79:b5:bd:30:63:fd:
                    e8:02:50:ef:be:6e:f0:a7:af:0a:30:2d:c7:10:f5:
                    40:b6:85:11:4b:a1:d7:44:ec:6f:03:32:67:12:22:
                    95:3f:89:80:6c:da:f9:99:1e:ba:3c:e7:28:1e:af:
                    57:d2:20:3f:1b:b6:ef:21:ff:33:30:d1:b1:f1:4f:
                    d5:c1:ad:c8:42:99:44:c4:74:67:0d:99:20:4c:f0:
                    8f:c1:35:f4:84:d2:37:ea:8c:89:0f:25:a9:87:45:
                    55:ad:c6:38:e8:6f:b9:6a:46:e6:7e:d0:64:cf:d4:
                    15:91:58:6e:05:f3:ba:f1:cf:e7:00:9d:cc:41:80:
                    b8:dc:9c:f5:4a:53:40:02:58:bd:db:6b:10:ff:f9:
                    96:7c:43:6f:2a:49:88:dc:9a:3e:94:76:3f:16:19:
                    80:c2:d9:ab:e5:8c:69:93:dd:61:66:95:28:9f:85:
                    db:39:6f:0b:ed:e5:aa:45:46:c4:56:04:f1:d8:74:
                    1a:08:50:1c:6f:2b:6d:17:52:79:78:08:a2:16:7f:
                    db:d9:f5:4c:da:02:76:20:92:4f:99:7e:f5:1d:d2:
                    7c:2c:55:90:a7:61:c6:4c:92:3a:46:e7:a8:88:54:
                    d6:27:1e:3f:43:4e:13:99:71:09:4b:cb:68:57:cb:
                    29:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D2:9B:F9:62:41:B4:62:6B:CD:A7:C1:2A:90:52:5E:46:44:A8:EA
            X509v3 Authority Key Identifier:
                keyid:9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:93:b0:8e:0e:88:9d:6e:5f:25:84:db:91:fd:7b:5e:ea:6e:
         6e:12:7d:0f:b2:41:c7:c8:ee:e0:8b:6b:a6:ff:60:d1:16:c3:
         8a:e2:dc:9d:2a:1d:73:3b:ef:92:68:11:3d:73:44:89:94:bd:
         97:7a:41:7b:63:6c:e4:f8:1a:c3:d6:82:fa:5f:4d:b4:3c:32:
         56:51:44:15:38:66:2e:63:c4:bc:52:55:15:3c:b6:5b:d5:fa:
         ea:69:19:58:21:36:7e:78:b1:4e:b0:b7:61:9e:3c:ea:2f:08:
         bb:88:7a:be:3d:cd:0f:7a:8e:6a:c7:c0:28:65:fd:ea:b2:f1:
         e8:2f:6a:83:66:6b:cd:8a:51:d6:4d:23:ba:00:fb:3b:bb:e3:
         8e:bf:bc:71:df:f7:78:ac:8f:e6:69:18:ad:27:a1:7f:a1:74:
         ba:f1:01:3a:e4:31:14:96:90:6a:e5:23:dc:40:b7:81:85:6e:
         46:ba:5f:79:73:62:99:4e:6b:77:11:29:20:8d:fb:86:81:40:
         26:b1:82:64:71:f4:b3:bf:8a:2e:16:33:40:89:c2:f8:0d:36:
         b1:63:f3:5e:bb:91:20:e1:d8:62:b4:e7:fa:c1:d9:52:5e:f2:
         ea:11:8c:34:47:1a:89:e5:d0:e2:a4:cc:83:ff:40:a1:23:11:
         e8:15:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:53:43 2026 by rpki-client