$ rpki-client -vvf rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft File: 9CF435443DFA11640A4A46810E4972A2EFC22116.mft (raw, json) Hash identifier: iy++YNv7I5LPiy8wSkzwKn1OowYg+LM+5O6idYEYpDw= Subject key identifier: 52:30:32:DA:8F:98:06:DF:81:81:E3:79:29:D7:0E:1F:D5:FB:95:CA Authority key identifier: 9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16 Certificate issuer: /CN=9CF435443DFA11640A4A46810E4972A2EFC22116 Certificate serial: B20BFA86BE631DC37AC8D17DD7E0D059E4075E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer Subject info access: rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft Manifest number: 69 Signing time: Tue 28 Jul 2026 07:57:55 +0000 Manifest this update: Tue 28 Jul 2026 07:52:55 +0000 Manifest next update: Wed 29 Jul 2026 09:27:55 +0000 Files and hashes: 1: 9CF435443DFA11640A4A46810E4972A2EFC22116.crl (hash: mSDaMS5j72hFaaqeVPLrS5CgZwtJv4IDmH5+FXG/QMc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: b2:0b:fa:86:be:63:1d:c3:7a:c8:d1:7d:d7:e0:d0:59:e4:07:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CF435443DFA11640A4A46810E4972A2EFC22116 Validity Not Before: Jul 28 07:52:55 2026 GMT Not After : Jul 29 09:27:55 2026 GMT Subject: CN=523032DA8F9806DF8181E37929D70E1FD5FB95CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a9:93:42:4a:5f:d8:56:35:76:b1:de:48:db: 56:01:6b:36:30:2f:ad:10:b2:04:59:ce:b4:8e:d8: 41:b1:d3:ba:c1:a6:e6:c5:2a:a4:7f:ab:c2:86:91: d6:8d:b9:f2:92:98:20:6c:51:79:8d:8b:5c:90:5c: a4:db:d5:39:a6:98:21:43:14:99:0e:b3:bb:d3:ab: ca:f1:94:61:f2:61:2a:1a:ac:99:8b:4b:8e:99:22: 46:d5:12:d0:93:52:5d:90:86:00:84:2d:b4:3e:e8: fb:5b:36:a4:ac:f2:ab:48:ff:28:5f:94:5d:d5:a6: db:3b:69:d3:9e:b7:fe:96:da:92:f7:bb:46:c6:82: 31:0a:36:ed:cc:2a:cb:ec:59:32:76:49:f0:a9:0f: 18:a6:f4:b4:4b:51:b3:d0:37:86:fa:0e:ca:64:b5: fd:d6:dc:d1:cc:41:88:ef:03:d4:92:d6:7a:f8:6e: 13:90:82:88:d1:92:7c:9f:f6:ab:ba:2e:4a:e1:e6: 4e:a8:2e:a5:d0:cd:63:86:18:f0:fb:d5:53:d0:c2: ce:08:3e:cd:c2:79:1e:51:b4:d2:c9:f1:29:8d:66: d3:a1:1c:e5:79:fa:e9:5d:29:84:fd:af:dd:1e:c1: 27:2c:5e:bf:26:18:a5:d0:8b:a5:63:79:0d:c9:96: c6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:30:32:DA:8F:98:06:DF:81:81:E3:79:29:D7:0E:1F:D5:FB:95:CA X509v3 Authority Key Identifier: keyid:9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:db:7d:d5:da:5c:6b:df:4a:b0:75:1f:ef:42:e1:21:d4:5e: 4a:9c:30:44:73:03:3e:30:10:80:fd:e0:7d:74:6a:d2:ac:55: 02:a7:1e:cd:c1:59:73:a2:52:75:ce:20:a8:9b:43:a9:03:78: 23:42:92:a5:25:18:5b:81:25:aa:20:a3:a8:e3:fe:a9:a5:99: 19:97:71:74:1b:52:52:c2:51:9f:b6:c5:14:fd:96:b5:7a:9a: d9:bd:fd:7f:ab:c8:9a:f6:19:74:e4:6a:c8:62:3a:9c:83:f0: ef:a4:e4:f2:fd:d9:10:3c:fd:04:ea:f2:23:d6:1e:5b:fa:74: ef:70:96:3e:a1:8b:c8:d0:57:f8:b9:ff:7f:65:d1:bc:db:14: bb:c6:a7:11:55:47:33:53:35:a3:6d:f0:ca:49:2b:67:ad:07: 0b:58:77:e8:69:c4:8d:31:a0:62:5e:7f:3f:93:57:e5:75:8b: 97:76:4c:c0:5a:37:71:3f:59:0a:db:ce:34:db:ef:5c:b3:35: 25:b9:1c:56:33:99:28:a4:4d:72:60:23:70:40:19:90:f5:96: be:09:95:51:84:17:59:08:af:2d:75:e7:96:3d:d8:fc:b5:91: 28:d6:10:5f:93:6d:10:a3:7b:9a:01:28:2f:4f:35:b0:b4:5a: 72:3a:4c:cf -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUALIL+oa+Yx3DesjRfdfg0FnkB14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNGNDM1NDQzREZBMTE2NDBBNEE0NjgxMEU0OTcyQTJF RkMyMjExNjAeFw0yNjA3MjgwNzUyNTVaFw0yNjA3MjkwOTI3NTVaMDMxMTAvBgNV BAMTKDUyMzAzMkRBOEY5ODA2REY4MTgxRTM3OTI5RDcwRTFGRDVGQjk1Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4qZNCSl/YVjV2sd5I21YBazYw L60QsgRZzrSO2EGx07rBpubFKqR/q8KGkdaNufKSmCBsUXmNi1yQXKTb1TmmmCFD FJkOs7vTq8rxlGHyYSoarJmLS46ZIkbVEtCTUl2QhgCELbQ+6PtbNqSs8qtI/yhf lF3Vpts7adOet/6W2pL3u0bGgjEKNu3MKsvsWTJ2SfCpDxim9LRLUbPQN4b6Dspk tf3W3NHMQYjvA9SS1nr4bhOQgojRknyf9qu6Lkrh5k6oLqXQzWOGGPD71VPQws4I Ps3CeR5RtNLJ8SmNZtOhHOV5+uldKYT9r90ewScsXr8mGKXQi6VjeQ3JlsazAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUUjAy2o+YBt+BgeN5KdcOH9X7lcowHwYDVR0j BBgwFoAUnPQ1RD36EWQKSkaBDklyou/CIRYwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVklTSU9O QkFZLzAvOUNGNDM1NDQzREZBMTE2NDBBNEE0NjgxMEU0OTcyQTJFRkMyMjExNi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS85Q0Y0MzU0NDNERkExMTY0MEE0QTQ2ODEw RTQ5NzJBMkVGQzIyMTE2LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVklTSU9OQkFZLzAvOUNGNDM1 NDQzREZBMTE2NDBBNEE0NjgxMEU0OTcyQTJFRkMyMjExNi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEzb fdXaXGvfSrB1H+9C4SHUXkqcMERzAz4wEID94H10atKsVQKnHs3BWXOiUnXOIKib Q6kDeCNCkqUlGFuBJaogo6jj/qmlmRmXcXQbUlLCUZ+2xRT9lrV6mtm9/X+ryJr2 GXTkashiOpyD8O+k5PL92RA8/QTq8iPWHlv6dO9wlj6hi8jQV/i5/39l0bzbFLvG pxFVRzNTNaNt8MpJK2etBwtYd+hpxI0xoGJefz+TV+V1i5d2TMBaN3E/WQrbzjTb 71yzNSW5HFYzmSikTXJgI3BAGZD1lr4JlVGEF1kIry1155Y92Py1kSjWEF+TbRCj e5oBKC9PNbC0WnI6TM8= -----END CERTIFICATE-----Generated at Tue Jul 28 22:17:40 2026 by rpki-client