Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
File:                     BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft (raw, json)
Hash identifier:          +7fObpEdMqnd6SeybK3PATtwo9Dia89LDLcBFYBh0AM=
Subject key identifier:   64:10:AF:FE:DD:77:ED:51:01:C2:59:D0:98:13:D8:A1:DE:59:04:46
Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Certificate issuer:       /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Certificate serial:       1004D113223C5F81A0688E2D477C232278F9D46A
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
Manifest number:          1C
Signing time:             Wed 13 May 2026 15:02:54 +0000
Manifest this update:     Wed 13 May 2026 14:57:54 +0000
Manifest next update:     Thu 14 May 2026 15:29:54 +0000
Files and hashes:         1: 3131362e3131382e3137362e302f32302d3234203d3e203138303436.roa (hash: QO6frV8aS6PVAILYRtHoeeGycA5ehxDpVQIfYin59M4=)
                          2: 3231312e37332e3136302e302f31392d3234203d3e203138303439.roa (hash: owvcnNoENGEPg6mZ2ivtP7YIXznHlSrEcA/67pxQ/OM=)
                          3: 3131362e3131382e3132382e302f31382d3234203d3e2034373830.roa (hash: PtKE62y+yE6DwPW6zGAf3uxt0w6IMKlZmiTDemTMmr8=)
                          4: 35382e39392e302e302f31382d3234203d3e203138303439.roa (hash: 0Ln5X/ej8hAf9GsZklkD3K9ADOESrdVXvzquzP7hZhM=)
                          5: 36312e35382e3135392e302f32342d3234203d3e2034373830.roa (hash: P83vvLtADac4CpYyM1jVs8euovYFXqAR6oMCZB7Yz48=)
                          6: 34392e3231332e3132382e302f31372d3234203d3e203138303439.roa (hash: O+fKDvr5iK/DFMkJaO0nbDsenRDyeSxPSsSdg8z509M=)
                          7: BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl (hash: rSYiiUsttgXi0TLA73Sd9BlBt8iDC2qj4MPOXVATbEU=)
                          8: 36312e36372e33322e302f32302d3234203d3e203138303439.roa (hash: 5TSD7IAJTUtca/JhpYT5ZfcIFmgz0hL1IcOGaYieaT0=)
                          9: 36312e36302e3232342e302f32302d3234203d3e203138303439.roa (hash: wwOdvfXGe34C+6TqwsKKYLkV69iMFzDLMMxpSYitHJY=)
                          10: 32372e3130302e36342e302f31382d3234203d3e2034373830.roa (hash: armp4XeQEN/JTnHYvQdjmbC2KfUtleHC2MK7hOj8xjA=)
                          11: 36312e36372e31362e302f32302d3234203d3e203138303439.roa (hash: J+yPEl8By54tH+Jm4/avT7CSPEp9DA459UsBHRBFLME=)
                          12: 36312e36372e33322e302f32302d3234203d3e203138303436.roa (hash: hX1OzJK2K8xIjInCZgAcMFYStO0HP129X+xSZgBjvYc=)
                          13: 35382e39392e36342e302f31382d3234203d3e2034373830.roa (hash: niYgQmkbFiVAxMbJG+jDTd+/Xd0s2kYfl7SmIma9v3I=)
                          14: 323430333a353230303a3a2f33322d3936203d3e203138303439.roa (hash: 8trP9YMAatCvb5LAMVBWj3aQbEPdTxGi0t42/LC4V24=)
                          15: 35382e39392e36342e302f31382d3234203d3e203138303439.roa (hash: y0aWcVRtgQos8yX3SOGsgmafs7OuToLrYIr2HfBsxIY=)
                          16: 34392e3231332e3137352e302f32342d3234203d3e2034373830.roa (hash: qIllHeU3733/uSdeS8GOGvhOLLMPgB9owDGgjK1kGyQ=)
                          17: 32372e3130302e36342e302f31382d3234203d3e203138303439.roa (hash: IgGiKlZi1ecHyeOA+vgVdG2q10raoZibLTHe2fRKeuA=)
                          18: 3131362e3131382e3132382e302f31382d3234203d3e203138303439.roa (hash: SA+MolmDElRy9IFzjhBqYoLw26M3TnFmXfdfuaY9ICs=)
                          19: 36312e35382e3132382e302f31392d3234203d3e203138303439.roa (hash: ZY+Hn7xWEDgVkrk72Ltk6Ert8bzYI3YcEDyiLk1KwmQ=)
                          20: 35382e39392e302e302f31382d3234203d3e2034373830.roa (hash: FaO0ocS+d1/6PUb8prDNt7a9l1UGZpiQkD24IdtJUeg=)
                          21: 34392e3231332e3132382e302f31372d3234203d3e2034373830.roa (hash: WjsN/gQB782zVCbPzF5wwoFHlpFdlC15xpTrK1jeNHk=)
                          22: 3130332e3138302e32322e302f32332d3234203d3e203138303439.roa (hash: Ad0xmF4dBZSrw8fdYabi0/+yVcKWs8x3ce9m/BD2exQ=)
                          23: 36312e35382e3135362e302f32342d3234203d3e2034373830.roa (hash: ydt9hMckPX29HhaelI1yEn5OVWjFOsSp+qBDl1RekUg=)
                          24: 34392e3231332e3136372e302f32342d3234203d3e2034373830.roa (hash: yx/7YOsbjwjRhQe0U+uGLOP4bLyVd7fSkPkkLHMpe7E=)
                          25: 3231312e37332e3136302e302f31392d3234203d3e2034373830.roa (hash: fkZROjH9L5OZ7zMA0owZ2yHxKXNxT8ygpezbRex/7zo=)
                          26: 36312e35382e3135372e302f32342d3332203d3e2034373830.roa (hash: 5S2TZQmsv+vbqDFIMu5yBQdmS0lbCBTA06cK/OCaVV4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
                          rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 15:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:04:d1:13:22:3c:5f:81:a0:68:8e:2d:47:7c:23:22:78:f9:d4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
        Validity
            Not Before: May 13 14:57:54 2026 GMT
            Not After : May 14 15:29:54 2026 GMT
        Subject: CN=6410AFFEDD77ED5101C259D09813D8A1DE590446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4f:84:b9:64:3c:2b:56:fe:98:f7:de:81:dc:
                    42:2f:bb:ab:2f:4c:0a:72:da:53:f2:4f:52:c3:99:
                    ca:ab:8e:2f:46:05:39:68:26:53:df:ba:b9:a0:a8:
                    a5:44:a6:dd:ef:6b:51:fa:9d:1a:f6:77:ac:59:75:
                    e4:f4:29:b9:98:ff:c5:1c:51:d9:af:e1:19:22:6b:
                    e3:f0:b1:70:40:17:b5:d6:90:e9:40:4f:fc:0d:b0:
                    70:07:c7:c1:e8:67:32:ac:7b:b3:da:6c:cc:eb:b7:
                    7a:59:d8:06:7f:eb:77:03:b8:71:db:d1:78:b6:f8:
                    e1:17:38:ce:0e:51:95:e9:8d:b3:7b:2d:44:e0:a3:
                    90:d4:69:4d:ef:07:38:06:19:7e:23:2b:34:e1:74:
                    a9:73:bb:90:30:10:8e:22:8d:2c:77:ba:3b:c7:66:
                    d4:20:a3:b9:f4:b7:ea:24:a5:44:47:1b:1a:b9:2d:
                    1b:44:a5:bd:18:ea:45:f3:a3:72:f4:31:25:39:37:
                    e5:24:44:e4:16:b9:cf:fe:1f:dd:c6:09:9e:62:4e:
                    87:82:5f:6e:2c:82:83:01:67:f4:2c:2d:f3:73:a8:
                    3b:84:90:09:34:c8:66:79:be:0f:82:62:da:6f:df:
                    e1:b8:d7:9f:2c:39:07:62:43:ec:a5:50:03:09:aa:
                    3e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:10:AF:FE:DD:77:ED:51:01:C2:59:D0:98:13:D8:A1:DE:59:04:46
            X509v3 Authority Key Identifier:
                keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:29:a3:80:85:df:72:a5:0b:6c:9e:77:86:a1:96:f5:4d:bf:
         9e:22:9a:92:85:eb:9e:4a:b5:16:f7:aa:36:8d:6c:11:24:27:
         21:1b:47:ae:13:a9:7c:ed:d6:7f:ae:31:c7:50:58:20:14:26:
         e4:51:29:91:f0:5f:f9:d4:f3:30:10:e0:96:5e:11:5f:8f:03:
         f1:d7:75:ea:31:d1:37:b0:e8:7f:f5:28:3d:c8:c6:82:1e:7e:
         8f:a3:15:bc:4d:f7:d9:c4:ee:e9:ef:a5:84:ac:88:d6:2b:c2:
         20:16:61:9b:3b:de:f0:93:ec:de:04:9a:b0:06:d5:12:71:d4:
         06:9e:ab:d9:7b:c6:4a:f5:a8:c4:2c:a1:a8:b2:6a:dc:04:3d:
         50:74:40:0f:27:47:af:7c:b4:55:6b:ef:73:25:84:4b:8a:b3:
         44:a8:51:77:cc:8e:88:b8:73:5a:a9:fe:17:43:ef:59:ad:d3:
         2d:1a:7c:54:72:1f:a2:a4:da:a4:97:c0:cf:26:06:01:b1:62:
         ab:55:ec:e7:56:6a:5a:c7:54:b8:7f:0a:ef:45:db:26:69:1c:
         fc:7f:b6:be:93:75:f0:59:4c:da:25:a3:d5:c8:71:98:08:a8:
         f9:a1:a0:fb:bb:c6:1f:58:be:fa:15:64:3c:4c:7f:5b:3c:1d:
         27:9f:21:a9
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUEATREyI8X4GgaI4tR3wjInj51GowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3M0Qy
NDdBNTYwRjAeFw0yNjA1MTMxNDU3NTRaFw0yNjA1MTQxNTI5NTRaMDMxMTAvBgNV
BAMTKDY0MTBBRkZFREQ3N0VENTEwMUMyNTlEMDk4MTNEOEExREU1OTA0NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiT4S5ZDwrVv6Y996B3EIvu6sv
TApy2lPyT1LDmcqrji9GBTloJlPfurmgqKVEpt3va1H6nRr2d6xZdeT0KbmY/8Uc
Udmv4Rkia+PwsXBAF7XWkOlAT/wNsHAHx8HoZzKse7PabMzrt3pZ2AZ/63cDuHHb
0Xi2+OEXOM4OUZXpjbN7LUTgo5DUaU3vBzgGGX4jKzThdKlzu5AwEI4ijSx3ujvH
ZtQgo7n0t+okpURHGxq5LRtEpb0Y6kXzo3L0MSU5N+UkROQWuc/+H93GCZ5iToeC
X24sgoMBZ/QsLfNzqDuEkAk0yGZ5vg+CYtpv3+G4158sOQdiQ+ylUAMJqj7ZAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUZBCv/t137VEBwlnQmBPYod5ZBEYwHwYDVR0j
BBgwFoAUvML37QzVZ3yYh+DyS6jnPSR6Vg8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElOUC8w
L0JDQzJGN0VEMENENTY3N0M5ODg3RTBGMjRCQThFNzNEMjQ3QTU2MEYuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3
M0QyNDdBNTYwRi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RJTlAvMC9CQ0MyRjdFRDBDRDU2NzdD
OTg4N0UwRjI0QkE4RTczRDI0N0E1NjBGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSmjgIXfcqULbJ53
hqGW9U2/niKakoXrnkq1FveqNo1sESQnIRtHrhOpfO3Wf64xx1BYIBQm5FEpkfBf
+dTzMBDgll4RX48D8dd16jHRN7Dof/UoPcjGgh5+j6MVvE332cTu6e+lhKyI1ivC
IBZhmzve8JPs3gSasAbVEnHUBp6r2XvGSvWoxCyhqLJq3AQ9UHRADydHr3y0VWvv
cyWES4qzRKhRd8yOiLhzWqn+F0PvWa3TLRp8VHIfoqTapJfAzyYGAbFiq1Xs51Zq
WsdUuH8K70XbJmkc/H+2vpN18FlM2iWj1chxmAio+aGg+7vGH1i++hVkPEx/Wzwd
J58hqQ==
-----END CERTIFICATE-----
Generated at Wed May 13 20:33:27 2026 by rpki-client