$ rpki-client -vvf rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft File: 9CF435443DFA11640A4A46810E4972A2EFC22116.mft (raw, json) Hash identifier: KLFH1/mjz0R6NP/boR5WNWexWBmMh4Sdpr5ldssZzFo= Subject key identifier: 76:C7:9E:F4:3E:2B:C5:59:A1:BA:01:11:9C:33:FB:DA:0F:4E:14:CE Authority key identifier: 9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16 Certificate issuer: /CN=9CF435443DFA11640A4A46810E4972A2EFC22116 Certificate serial: 46371251355F72C3A669AAB2839790DC31FC6CB5 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer Subject info access: rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft Manifest number: 02 Signing time: Tue 12 May 2026 09:14:50 +0000 Manifest this update: Tue 12 May 2026 09:09:50 +0000 Manifest next update: Wed 13 May 2026 11:52:50 +0000 Files and hashes: 1: 9CF435443DFA11640A4A46810E4972A2EFC22116.crl (hash: XYKg3y4XFSBe1P1+rZ+t+RwicJASFI0v2pUMx1nxYzU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 11:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:37:12:51:35:5f:72:c3:a6:69:aa:b2:83:97:90:dc:31:fc:6c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CF435443DFA11640A4A46810E4972A2EFC22116 Validity Not Before: May 12 09:09:50 2026 GMT Not After : May 13 11:52:50 2026 GMT Subject: CN=76C79EF43E2BC559A1BA01119C33FBDA0F4E14CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:7a:37:d8:84:fa:e3:12:a4:02:1a:c3:9e: fa:b0:1f:2a:bb:c2:3d:ce:bb:d7:cb:f5:28:e9:58: c8:1a:4a:2d:4c:17:12:3e:5b:f7:a3:fc:c5:b2:75: 60:cc:4a:c4:10:bf:03:17:47:9c:58:d9:be:42:a2: 3b:29:ce:a5:1f:54:57:38:a1:ab:f5:a7:9b:c9:07: 85:8e:14:22:b6:ae:bd:98:2b:d6:e0:d6:b9:4f:fb: a1:11:99:84:75:49:48:53:a1:bd:1c:92:17:1a:46: c4:0c:7b:50:d3:41:62:73:12:f4:24:7d:16:a8:90: db:c9:f2:a8:42:2a:96:ef:9e:d2:7b:1a:97:11:97: dd:c9:ed:24:96:80:59:f9:06:a3:2e:d0:fd:28:75: 29:cc:ba:ae:c0:a2:f3:ae:d4:e8:71:a4:17:1e:4b: 4f:31:cb:e4:91:c3:29:6c:9a:29:1b:98:f2:14:09: 03:5b:da:fa:5b:e0:9f:c5:80:8c:d5:c2:17:17:95: 4d:da:1e:6d:6c:ae:59:81:fb:46:c0:03:77:7e:36: 8c:6a:d5:68:4d:67:86:e5:b9:4a:0a:6d:75:fe:57: 54:dc:a2:90:9d:f0:17:51:ab:ef:06:75:d4:8a:8e: 37:32:9b:6f:63:2d:38:ec:54:18:14:18:3e:4b:00: 39:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C7:9E:F4:3E:2B:C5:59:A1:BA:01:11:9C:33:FB:DA:0F:4E:14:CE X509v3 Authority Key Identifier: keyid:9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:9e:4e:66:6d:c8:7e:d1:02:bf:71:3f:c9:c1:50:32:3e:d8: 1e:31:b7:3c:e8:3d:40:09:06:f6:c7:fd:b3:76:a1:ff:79:19: 58:8d:93:a8:34:3e:57:62:9b:ac:9f:4e:03:12:ed:ac:f1:c9: 85:ad:93:19:30:d5:26:75:8b:f7:70:02:c7:3e:08:62:ef:0c: cc:c9:41:4c:c0:41:dc:e3:c3:76:0b:8d:fb:80:eb:16:d4:93: 05:72:48:10:58:eb:e8:d5:93:f1:ef:32:59:67:e7:45:dc:1b: 8f:6c:05:4b:cd:28:df:8c:21:6c:de:5a:f3:54:ce:6c:03:25: 04:de:3b:46:04:61:50:96:2f:8f:e9:fd:11:ec:89:a1:b3:b4: 48:3e:90:be:6d:12:da:9b:64:ae:a5:ad:a6:91:19:e4:e2:84: eb:ea:d5:c7:a6:0c:01:f9:ef:f5:57:42:53:82:f8:2b:04:5b: ac:50:9d:39:f4:a9:50:39:cf:ce:87:91:2b:88:f3:81:de:f3: be:4c:e1:e7:36:ab:fe:f9:7e:f8:0e:d4:a6:c9:45:95:4a:7d: f1:35:2c:03:47:a7:3d:b5:ff:c2:06:fe:06:29:12:e6:3d:83: 10:e4:f5:87:32:73:c7:3f:a3:6b:3e:95:a9:8b:48:4b:a9:ef: 34:93:b2:7a -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIURjcSUTVfcsOmaaqyg5eQ3DH8bLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNGNDM1NDQzREZBMTE2NDBBNEE0NjgxMEU0OTcyQTJF RkMyMjExNjAeFw0yNjA1MTIwOTA5NTBaFw0yNjA1MTMxMTUyNTBaMDMxMTAvBgNV BAMTKDc2Qzc5RUY0M0UyQkM1NTlBMUJBMDExMTlDMzNGQkRBMEY0RTE0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCydno32IT64xKkAhrDnvqwHyq7 wj3Ou9fL9SjpWMgaSi1MFxI+W/ej/MWydWDMSsQQvwMXR5xY2b5CojspzqUfVFc4 oav1p5vJB4WOFCK2rr2YK9bg1rlP+6ERmYR1SUhTob0ckhcaRsQMe1DTQWJzEvQk fRaokNvJ8qhCKpbvntJ7GpcRl93J7SSWgFn5BqMu0P0odSnMuq7AovOu1OhxpBce S08xy+SRwylsmikbmPIUCQNb2vpb4J/FgIzVwhcXlU3aHm1srlmB+0bAA3d+Noxq 1WhNZ4bluUoKbXX+V1TcopCd8BdRq+8GddSKjjcym29jLTjsVBgUGD5LADkjAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUdsee9D4rxVmhugERnDP72g9OFM4wHwYDVR0j BBgwFoAUnPQ1RD36EWQKSkaBDklyou/CIRYwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVklTSU9O QkFZLzAvOUNGNDM1NDQzREZBMTE2NDBBNEE0NjgxMEU0OTcyQTJFRkMyMjExNi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS85Q0Y0MzU0NDNERkExMTY0MEE0QTQ2ODEw RTQ5NzJBMkVGQzIyMTE2LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVklTSU9OQkFZLzAvOUNGNDM1 NDQzREZBMTE2NDBBNEE0NjgxMEU0OTcyQTJFRkMyMjExNi5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAKe TmZtyH7RAr9xP8nBUDI+2B4xtzzoPUAJBvbH/bN2of95GViNk6g0Pldim6yfTgMS 7azxyYWtkxkw1SZ1i/dwAsc+CGLvDMzJQUzAQdzjw3YLjfuA6xbUkwVySBBY6+jV k/HvMlln50XcG49sBUvNKN+MIWzeWvNUzmwDJQTeO0YEYVCWL4/p/RHsiaGztEg+ kL5tEtqbZK6lraaRGeTihOvq1cemDAH57/VXQlOC+CsEW6xQnTn0qVA5z86HkSuI 84He875M4ec2q/75fvgO1KbJRZVKffE1LANHpz21/8IG/gYpEuY9gxDk9Ycyc8c/ o2s+lamLSEup7zSTsno= -----END CERTIFICATE-----Generated at Wed May 13 04:03:59 2026 by rpki-client