Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
File:                     9CF435443DFA11640A4A46810E4972A2EFC22116.mft (raw, json)
Hash identifier:          bfLIXKPLfy8pRsZKKWIWnFSHvzXjRDsMpEPnSMayq8c=
Subject key identifier:   72:77:92:B2:CE:CE:33:26:03:7C:18:1A:79:7A:F7:4E:49:95:B0:70
Authority key identifier: 9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16
Certificate issuer:       /CN=9CF435443DFA11640A4A46810E4972A2EFC22116
Certificate serial:       7CF6327C639E3FB54AC8C8CE1F207C43864379B2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
Manifest number:          B7
Signing time:             Thu 24 Sep 2026 21:04:29 +0000
Manifest this update:     Thu 24 Sep 2026 20:59:29 +0000
Manifest next update:     Fri 25 Sep 2026 23:33:29 +0000
Files and hashes:         1: 9CF435443DFA11640A4A46810E4972A2EFC22116.crl (hash: 7VNvmvgsadF7xibkK0/pDW5nTBdRoqOWMH13ewz2jRY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl
                          rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 21:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f6:32:7c:63:9e:3f:b5:4a:c8:c8:ce:1f:20:7c:43:86:43:79:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CF435443DFA11640A4A46810E4972A2EFC22116
        Validity
            Not Before: Sep 24 20:59:29 2026 GMT
            Not After : Sep 25 23:33:29 2026 GMT
        Subject: CN=727792B2CECE3326037C181A797AF74E4995B070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:79:a7:ad:05:41:95:10:52:81:f2:9c:30:
                    10:5d:5c:00:3a:f5:44:f9:e5:65:05:03:72:89:bb:
                    1c:a7:e3:24:e6:5f:84:d5:79:84:c3:a9:44:b9:3c:
                    d2:91:49:f4:70:e0:a7:f5:0e:6a:e9:55:07:58:46:
                    34:cc:7f:21:72:59:00:40:5c:e3:c5:fa:08:8c:44:
                    c1:9a:b9:88:97:dd:20:e4:cc:ed:a0:ab:02:13:d8:
                    a3:cc:a2:4e:98:59:cb:93:43:90:24:6c:e0:39:55:
                    59:f2:26:be:c9:56:e8:ea:6c:a2:67:f6:4c:9c:92:
                    f6:71:db:59:c2:d4:65:35:db:3c:51:14:0c:60:4d:
                    61:98:9e:94:66:82:78:1f:a2:11:ac:bc:52:4b:c8:
                    cc:8b:04:c8:ad:b7:b0:ac:74:d6:e3:44:7c:f2:11:
                    ca:7e:39:73:e5:3e:c2:45:5c:bb:51:11:12:b3:94:
                    1e:48:a3:7d:f8:43:59:1c:53:96:26:15:70:9d:61:
                    4e:db:2c:40:fb:ab:76:80:6a:12:30:07:f9:7c:d9:
                    eb:55:b2:88:d2:fc:de:86:d2:51:74:b4:05:7a:86:
                    c2:b3:0b:e9:dc:a4:50:69:a0:24:a3:39:51:9e:8c:
                    9e:9d:be:b7:21:a2:41:17:f1:0d:67:15:88:bd:f8:
                    d2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:77:92:B2:CE:CE:33:26:03:7C:18:1A:79:7A:F7:4E:49:95:B0:70
            X509v3 Authority Key Identifier:
                keyid:9C:F4:35:44:3D:FA:11:64:0A:4A:46:81:0E:49:72:A2:EF:C2:21:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/9CF435443DFA11640A4A46810E4972A2EFC22116.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/VISIONBAY/0/9CF435443DFA11640A4A46810E4972A2EFC22116.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:51:c0:5f:31:43:c5:1b:82:5d:6c:d6:fe:e8:e4:7a:ed:af:
         55:9f:58:06:9d:ac:09:ed:60:fc:dd:3e:39:a8:58:e0:6b:59:
         18:92:d3:13:2b:ff:61:f4:02:d5:51:08:74:b1:20:c8:50:b5:
         ad:9e:25:c0:f3:21:2d:6c:6a:56:00:23:2c:5b:af:23:8d:fd:
         c9:f6:3a:bb:34:0c:4a:3c:27:cf:2d:ef:ca:15:e3:94:c4:c6:
         c1:b2:1a:ed:00:4d:2a:22:c1:65:8a:bf:6b:30:bd:f2:70:03:
         5d:34:fd:86:ae:f6:6c:42:80:0c:d7:bd:c4:16:40:9b:f7:4a:
         be:77:ba:d8:4b:28:40:1c:b6:ca:1c:8e:e2:ed:b4:a8:5c:41:
         fe:cc:0a:55:15:19:13:65:b6:ea:ba:e5:7b:dd:d8:a4:b7:54:
         cf:97:33:5c:aa:7d:a9:8e:69:03:09:d4:18:69:a9:be:49:c7:
         96:5d:64:81:41:6c:b8:cb:23:a2:f7:81:6a:ba:ca:63:37:f4:
         ac:8a:c5:1c:87:9b:4e:eb:0a:2e:4a:a8:94:15:b1:ef:43:0d:
         7b:09:51:c7:a2:a7:c8:cf:ed:25:8c:fe:1c:45:6f:70:61:50:
         cc:59:8a:20:bf:b1:26:56:7b:eb:6d:d8:4e:4a:aa:d4:a8:b7:
         f2:c7:7c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:01:46 2026 by rpki-client