Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
File:                     BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft (raw, json)
Hash identifier:          NeT4FGwedV+9up0XEdu7U8XqkEWxBWICIyEarGdw7nY=
Subject key identifier:   22:38:11:30:07:3D:35:28:CD:D8:0A:54:BB:97:C3:F1:9F:8C:81:F7
Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Certificate issuer:       /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Certificate serial:       479F1E54C7179F91BC039844ACF93575BDF92D02
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
Manifest number:          CA
Signing time:             Wed 23 Sep 2026 01:51:14 +0000
Manifest this update:     Wed 23 Sep 2026 01:46:14 +0000
Manifest next update:     Thu 24 Sep 2026 05:22:14 +0000
Files and hashes:         1: 36312e36302e3232342e302f32302d3234203d3e203138303439.roa (hash: wwOdvfXGe34C+6TqwsKKYLkV69iMFzDLMMxpSYitHJY=)
                          2: 36312e36372e33322e302f32302d3234203d3e203138303439.roa (hash: 5TSD7IAJTUtca/JhpYT5ZfcIFmgz0hL1IcOGaYieaT0=)
                          3: 3231312e37332e3136302e302f31392d3234203d3e203138303439.roa (hash: owvcnNoENGEPg6mZ2ivtP7YIXznHlSrEcA/67pxQ/OM=)
                          4: 3231312e37332e3136302e302f31392d3234203d3e2034373830.roa (hash: fkZROjH9L5OZ7zMA0owZ2yHxKXNxT8ygpezbRex/7zo=)
                          5: 35382e39392e36342e302f31382d3234203d3e2034373830.roa (hash: niYgQmkbFiVAxMbJG+jDTd+/Xd0s2kYfl7SmIma9v3I=)
                          6: 36312e35382e3135372e302f32342d3332203d3e2034373830.roa (hash: 5S2TZQmsv+vbqDFIMu5yBQdmS0lbCBTA06cK/OCaVV4=)
                          7: BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl (hash: aaSCD/3iLdirHtBPlSqpca3xICcYrGkUvmQsjxDZa0Y=)
                          8: 36312e35382e3135392e302f32342d3234203d3e2034373830.roa (hash: P83vvLtADac4CpYyM1jVs8euovYFXqAR6oMCZB7Yz48=)
                          9: 36312e36372e31362e302f32302d3234203d3e203138303439.roa (hash: J+yPEl8By54tH+Jm4/avT7CSPEp9DA459UsBHRBFLME=)
                          10: 35382e39392e302e302f31382d3234203d3e2034373830.roa (hash: FaO0ocS+d1/6PUb8prDNt7a9l1UGZpiQkD24IdtJUeg=)
                          11: 3131362e3131382e3132382e302f31382d3234203d3e2034373830.roa (hash: PtKE62y+yE6DwPW6zGAf3uxt0w6IMKlZmiTDemTMmr8=)
                          12: 34392e3231332e3136372e302f32342d3234203d3e2034373830.roa (hash: yx/7YOsbjwjRhQe0U+uGLOP4bLyVd7fSkPkkLHMpe7E=)
                          13: 3131362e3131382e3137362e302f32302d3234203d3e203138303436.roa (hash: QO6frV8aS6PVAILYRtHoeeGycA5ehxDpVQIfYin59M4=)
                          14: 34392e3231332e3132382e302f31372d3234203d3e2034373830.roa (hash: WjsN/gQB782zVCbPzF5wwoFHlpFdlC15xpTrK1jeNHk=)
                          15: 323430333a353230303a3a2f33322d3936203d3e203138303439.roa (hash: 8trP9YMAatCvb5LAMVBWj3aQbEPdTxGi0t42/LC4V24=)
                          16: 36312e36372e33322e302f32302d3234203d3e203138303436.roa (hash: hX1OzJK2K8xIjInCZgAcMFYStO0HP129X+xSZgBjvYc=)
                          17: 3131362e3131382e3132382e302f31382d3234203d3e203138303439.roa (hash: SA+MolmDElRy9IFzjhBqYoLw26M3TnFmXfdfuaY9ICs=)
                          18: 32372e3130302e36342e302f31382d3234203d3e2034373830.roa (hash: armp4XeQEN/JTnHYvQdjmbC2KfUtleHC2MK7hOj8xjA=)
                          19: 34392e3231332e3137352e302f32342d3234203d3e2034373830.roa (hash: qIllHeU3733/uSdeS8GOGvhOLLMPgB9owDGgjK1kGyQ=)
                          20: 32372e3130302e36342e302f31382d3234203d3e203138303439.roa (hash: IgGiKlZi1ecHyeOA+vgVdG2q10raoZibLTHe2fRKeuA=)
                          21: 34392e3231332e3132382e302f31372d3234203d3e203138303439.roa (hash: O+fKDvr5iK/DFMkJaO0nbDsenRDyeSxPSsSdg8z509M=)
                          22: 35382e39392e302e302f31382d3234203d3e203138303439.roa (hash: 0Ln5X/ej8hAf9GsZklkD3K9ADOESrdVXvzquzP7hZhM=)
                          23: 3130332e3138302e32322e302f32332d3234203d3e203138303439.roa (hash: Ad0xmF4dBZSrw8fdYabi0/+yVcKWs8x3ce9m/BD2exQ=)
                          24: 35382e39392e36342e302f31382d3234203d3e203138303439.roa (hash: y0aWcVRtgQos8yX3SOGsgmafs7OuToLrYIr2HfBsxIY=)
                          25: 36312e35382e3132382e302f31392d3234203d3e203138303439.roa (hash: ZY+Hn7xWEDgVkrk72Ltk6Ert8bzYI3YcEDyiLk1KwmQ=)
                          26: 36312e35382e3135362e302f32342d3234203d3e2034373830.roa (hash: ydt9hMckPX29HhaelI1yEn5OVWjFOsSp+qBDl1RekUg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
                          rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 05:22:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9f:1e:54:c7:17:9f:91:bc:03:98:44:ac:f9:35:75:bd:f9:2d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
        Validity
            Not Before: Sep 23 01:46:14 2026 GMT
            Not After : Sep 24 05:22:14 2026 GMT
        Subject: CN=22381130073D3528CDD80A54BB97C3F19F8C81F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8c:e9:be:53:3a:95:a0:84:d5:28:e1:35:d0:
                    ec:39:6b:09:a6:8b:18:21:4f:45:b4:d8:04:96:e7:
                    5f:d1:18:de:65:8e:69:d0:15:6f:e6:3a:d7:7c:68:
                    b9:7e:ec:a0:21:ae:43:5a:f1:0a:b6:b8:71:39:fe:
                    4b:9c:ce:f6:aa:3a:89:01:a9:66:41:85:0c:03:c5:
                    27:99:c4:fc:85:6f:d9:d8:5f:fd:d3:3a:b4:87:86:
                    b9:4e:15:af:4e:1e:63:e5:83:e4:93:bd:04:a2:30:
                    e9:f3:e8:47:98:77:3d:a4:e0:d3:aa:28:29:b7:f0:
                    5d:86:0a:b3:48:4b:ba:ad:69:3a:ba:97:1b:af:34:
                    97:8a:bd:24:94:c5:81:bf:18:90:c0:93:b8:be:1d:
                    6e:96:a4:c5:69:56:26:c1:63:4f:31:eb:c5:bb:86:
                    2c:23:17:ec:01:33:0e:5c:bd:ae:e4:86:f9:78:70:
                    5e:11:63:00:b2:77:5c:28:9f:b5:60:c4:5d:1c:e2:
                    fc:7b:1b:64:22:31:e2:67:c0:93:1a:49:99:53:81:
                    ee:59:cd:bc:f2:5b:1d:df:db:96:f3:3d:17:4c:4c:
                    84:c6:e9:ec:a2:81:98:cc:49:14:5b:0a:e6:9e:84:
                    52:8e:5a:f7:3a:c7:8f:4a:53:d7:76:f4:b8:94:19:
                    c9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:38:11:30:07:3D:35:28:CD:D8:0A:54:BB:97:C3:F1:9F:8C:81:F7
            X509v3 Authority Key Identifier:
                keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:fc:1e:b7:20:05:68:ea:fb:85:d6:fb:d5:a0:a8:2b:60:73:
         06:e8:32:ab:ce:6d:34:af:4c:f7:0f:03:69:51:79:9e:e2:30:
         96:32:33:bd:67:86:5a:df:bc:51:c1:2d:f9:a4:36:3a:4f:f8:
         e5:f2:63:24:f3:0d:06:88:31:20:17:7c:6b:3f:9d:8b:ba:21:
         65:15:4a:8f:f5:d7:c1:4b:16:ce:99:b9:bc:5d:e2:d5:68:98:
         06:2a:92:52:50:59:2a:2c:0a:a8:03:93:64:45:7c:81:62:1e:
         2f:e4:17:9a:51:6e:1f:e3:1f:3e:d3:ed:81:82:cb:2d:20:40:
         61:88:3a:f7:75:25:c8:fc:24:76:30:5b:fd:5a:e2:6f:6c:2f:
         91:e2:48:57:3e:e6:07:2f:73:c2:38:25:69:fa:a6:19:d6:97:
         85:34:1e:08:1b:c1:b4:53:84:cc:c3:9d:b3:43:3d:a0:8a:f8:
         a6:3b:c5:ef:dd:7b:8f:58:78:0a:ed:77:99:e3:b3:64:5a:3e:
         57:cc:45:16:4d:ac:5b:c4:98:ab:53:ca:5b:f8:19:a7:ee:7c:
         44:d9:12:03:f6:79:0e:a3:8c:d0:79:64:eb:dd:48:3e:3b:de:
         2f:3d:6d:a6:7c:e7:c9:0c:91:3b:62:1d:64:a4:98:95:f6:a4:
         07:74:b5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:19:02 2026 by rpki-client