Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
File:                     9CF435443DFA11640A4A46810E4972A2EFC22116.mft (raw, json)
Hash identifier:          rB7F8gjh6VZE9iPWUuRuCYsgxqNQaUVn3DTtSkkvqco=
Subject key identifier:   36:7A:AF:E5:21:19:74:DE:51:66:02:EB:7D:6A:BD:DB:20:39:B9:0F
Authority key identifier: 9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16
Certificate issuer:       /CN=9CF435443DFA11640A4A46810E4972A2EFC22116
Certificate serial:       2ABE5B1E4EC45E5F178BB34813A7DE29830C578E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
Manifest number:          2C
Signing time:             Sat 13 Jun 2026 00:48:33 +0000
Manifest this update:     Sat 13 Jun 2026 00:43:33 +0000
Manifest next update:     Sun 14 Jun 2026 03:22:33 +0000
Files and hashes:         1: 9CF435443DFA11640A4A46810E4972A2EFC22116.crl (hash: eTkavaj0YTQsVlHacyMKa0A/E5kA7gaZ4afmGWI4zsI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl
                          rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:be:5b:1e:4e:c4:5e:5f:17:8b:b3:48:13:a7:de:29:83:0c:57:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CF435443DFA11640A4A46810E4972A2EFC22116
        Validity
            Not Before: Jun 13 00:43:33 2026 GMT
            Not After : Jun 14 03:22:33 2026 GMT
        Subject: CN=367AAFE5211974DE516602EB7D6ABDDB2039B90F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:65:8c:5d:f0:36:83:b8:11:7e:89:0f:eb:62:
                    e3:e7:91:29:aa:c4:2d:e0:34:77:70:c9:10:4a:c6:
                    20:65:2a:37:eb:99:bd:cd:d3:28:7a:0f:20:08:2d:
                    af:5d:0a:48:26:3f:54:bf:0b:fc:6d:3d:c1:c9:f0:
                    a4:44:17:ec:af:bb:91:da:fd:76:93:d6:db:f9:d7:
                    1a:cd:e9:9d:6f:be:9c:25:32:f0:13:e7:df:18:85:
                    8b:d0:81:a9:70:d3:ea:bc:aa:bb:fa:99:54:a1:01:
                    c6:67:85:ee:95:ea:a0:42:9d:ec:16:6b:12:5d:35:
                    30:ca:e9:fc:fb:88:81:d9:9b:9d:fe:f1:31:3a:a8:
                    9f:e5:04:0d:0f:ed:a9:fd:85:d2:64:40:8a:76:83:
                    25:89:4a:6f:29:90:00:38:66:18:ef:39:9b:89:1e:
                    fd:da:8d:3d:81:45:6c:7c:40:e8:00:13:9b:c0:97:
                    36:4e:38:6c:93:44:d4:a3:28:d6:38:7d:38:8d:f6:
                    34:a7:1d:c8:e2:e6:62:29:c1:06:3d:42:d8:dd:7d:
                    ea:83:17:70:cc:61:6e:ca:4a:6b:ad:8d:08:35:d4:
                    bb:5e:20:91:d7:f8:a5:7e:e4:eb:80:e5:dc:d2:45:
                    a4:53:a1:cb:ea:36:e6:b2:b6:74:40:dd:91:c5:e6:
                    b8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7A:AF:E5:21:19:74:DE:51:66:02:EB:7D:6A:BD:DB:20:39:B9:0F
            X509v3 Authority Key Identifier:
                keyid:9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ef:a9:e3:05:59:df:a7:7e:a5:f9:b8:a8:f3:76:aa:3f:5b:
         7d:c4:42:2f:f8:dd:14:fa:bd:3c:1a:b4:86:34:28:bb:81:9d:
         ef:e2:be:56:15:16:aa:c9:ef:57:c8:3f:e4:bb:a5:d1:7a:6b:
         e0:19:f7:cd:e9:43:e0:ef:2d:6c:9f:59:b3:09:39:55:07:23:
         ed:88:cd:94:e9:6d:e4:ef:7c:8f:61:8d:d0:64:80:0d:25:5a:
         79:d0:01:ab:38:a8:69:f4:d1:19:04:ee:39:2f:df:3e:16:69:
         fd:09:6c:9a:10:2a:95:bb:dd:d5:41:dc:f4:bc:19:4f:5b:3e:
         d8:b9:85:ee:1c:1c:fc:af:f4:aa:99:f9:65:81:a2:c2:53:56:
         2c:1a:3d:59:93:bb:f8:a1:6f:09:02:1e:f4:5e:ab:20:bb:a0:
         51:6f:8d:6d:d8:31:22:3b:46:15:0b:64:c8:38:7e:8f:27:bb:
         41:a8:27:bc:0c:46:dc:12:33:db:11:59:60:91:8b:70:bb:e5:
         cf:f0:fa:6c:e4:3e:8f:61:e5:68:97:08:f7:94:9d:1e:08:27:
         f3:fb:e6:e2:2a:94:42:24:bd:82:94:81:6c:0f:a8:59:97:3b:
         89:e7:11:45:f6:d2:ac:c3:46:d1:13:68:51:09:6f:0d:5f:61:
         84:eb:94:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:52 2026 by rpki-client