Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
File:                     BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft (raw, json)
Hash identifier:          uO13bs5sd96IZngv8pvMS4LSwr6R+Q5CCt3RW4uR4Mk=
Subject key identifier:   37:F6:A8:5D:86:E3:76:64:9A:77:88:9D:78:42:17:74:A6:07:91:F0
Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Certificate issuer:       /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Certificate serial:       064FE3203C10ADD230F814E8F1DD5518C9186716
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
Manifest number:          7A
Signing time:             Thu 23 Jul 2026 17:41:20 +0000
Manifest this update:     Thu 23 Jul 2026 17:36:20 +0000
Manifest next update:     Fri 24 Jul 2026 19:19:20 +0000
Files and hashes:         1: 36312e35382e3135362e302f32342d3234203d3e2034373830.roa (hash: ydt9hMckPX29HhaelI1yEn5OVWjFOsSp+qBDl1RekUg=)
                          2: 3131362e3131382e3132382e302f31382d3234203d3e2034373830.roa (hash: PtKE62y+yE6DwPW6zGAf3uxt0w6IMKlZmiTDemTMmr8=)
                          3: 36312e35382e3135392e302f32342d3234203d3e2034373830.roa (hash: P83vvLtADac4CpYyM1jVs8euovYFXqAR6oMCZB7Yz48=)
                          4: 36312e36372e33322e302f32302d3234203d3e203138303439.roa (hash: 5TSD7IAJTUtca/JhpYT5ZfcIFmgz0hL1IcOGaYieaT0=)
                          5: 35382e39392e36342e302f31382d3234203d3e203138303439.roa (hash: y0aWcVRtgQos8yX3SOGsgmafs7OuToLrYIr2HfBsxIY=)
                          6: 36312e36372e31362e302f32302d3234203d3e203138303439.roa (hash: J+yPEl8By54tH+Jm4/avT7CSPEp9DA459UsBHRBFLME=)
                          7: 36312e36372e33322e302f32302d3234203d3e203138303436.roa (hash: hX1OzJK2K8xIjInCZgAcMFYStO0HP129X+xSZgBjvYc=)
                          8: 34392e3231332e3137352e302f32342d3234203d3e2034373830.roa (hash: qIllHeU3733/uSdeS8GOGvhOLLMPgB9owDGgjK1kGyQ=)
                          9: 3130332e3138302e32322e302f32332d3234203d3e203138303439.roa (hash: Ad0xmF4dBZSrw8fdYabi0/+yVcKWs8x3ce9m/BD2exQ=)
                          10: 3231312e37332e3136302e302f31392d3234203d3e203138303439.roa (hash: owvcnNoENGEPg6mZ2ivtP7YIXznHlSrEcA/67pxQ/OM=)
                          11: 36312e36302e3232342e302f32302d3234203d3e203138303439.roa (hash: wwOdvfXGe34C+6TqwsKKYLkV69iMFzDLMMxpSYitHJY=)
                          12: 3131362e3131382e3137362e302f32302d3234203d3e203138303436.roa (hash: QO6frV8aS6PVAILYRtHoeeGycA5ehxDpVQIfYin59M4=)
                          13: 32372e3130302e36342e302f31382d3234203d3e2034373830.roa (hash: armp4XeQEN/JTnHYvQdjmbC2KfUtleHC2MK7hOj8xjA=)
                          14: 35382e39392e302e302f31382d3234203d3e203138303439.roa (hash: 0Ln5X/ej8hAf9GsZklkD3K9ADOESrdVXvzquzP7hZhM=)
                          15: 35382e39392e302e302f31382d3234203d3e2034373830.roa (hash: FaO0ocS+d1/6PUb8prDNt7a9l1UGZpiQkD24IdtJUeg=)
                          16: 34392e3231332e3136372e302f32342d3234203d3e2034373830.roa (hash: yx/7YOsbjwjRhQe0U+uGLOP4bLyVd7fSkPkkLHMpe7E=)
                          17: BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl (hash: azw8EoEt2ySj/8mJjd2gXku1E0hxRR+Gp4OX2XPOgrY=)
                          18: 3231312e37332e3136302e302f31392d3234203d3e2034373830.roa (hash: fkZROjH9L5OZ7zMA0owZ2yHxKXNxT8ygpezbRex/7zo=)
                          19: 32372e3130302e36342e302f31382d3234203d3e203138303439.roa (hash: IgGiKlZi1ecHyeOA+vgVdG2q10raoZibLTHe2fRKeuA=)
                          20: 34392e3231332e3132382e302f31372d3234203d3e2034373830.roa (hash: WjsN/gQB782zVCbPzF5wwoFHlpFdlC15xpTrK1jeNHk=)
                          21: 36312e35382e3135372e302f32342d3332203d3e2034373830.roa (hash: 5S2TZQmsv+vbqDFIMu5yBQdmS0lbCBTA06cK/OCaVV4=)
                          22: 36312e35382e3132382e302f31392d3234203d3e203138303439.roa (hash: ZY+Hn7xWEDgVkrk72Ltk6Ert8bzYI3YcEDyiLk1KwmQ=)
                          23: 35382e39392e36342e302f31382d3234203d3e2034373830.roa (hash: niYgQmkbFiVAxMbJG+jDTd+/Xd0s2kYfl7SmIma9v3I=)
                          24: 34392e3231332e3132382e302f31372d3234203d3e203138303439.roa (hash: O+fKDvr5iK/DFMkJaO0nbDsenRDyeSxPSsSdg8z509M=)
                          25: 323430333a353230303a3a2f33322d3936203d3e203138303439.roa (hash: 8trP9YMAatCvb5LAMVBWj3aQbEPdTxGi0t42/LC4V24=)
                          26: 3131362e3131382e3132382e302f31382d3234203d3e203138303439.roa (hash: SA+MolmDElRy9IFzjhBqYoLw26M3TnFmXfdfuaY9ICs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
                          rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 19:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4f:e3:20:3c:10:ad:d2:30:f8:14:e8:f1:dd:55:18:c9:18:67:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
        Validity
            Not Before: Jul 23 17:36:20 2026 GMT
            Not After : Jul 24 19:19:20 2026 GMT
        Subject: CN=37F6A85D86E376649A77889D78421774A60791F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:82:46:90:c2:ce:52:50:91:4b:f2:f8:ef:e3:
                    02:5f:e2:e0:5b:82:a5:83:92:07:95:f9:a2:35:f4:
                    06:a8:d5:db:9f:82:83:cd:57:32:3e:54:0c:ca:5f:
                    d6:f1:8e:05:fe:04:bf:a7:67:63:5a:b1:ce:c4:f0:
                    e8:a0:0a:d1:e4:1b:89:f6:74:52:2a:8b:87:34:d0:
                    cc:54:34:96:53:01:ed:46:e0:b6:f4:7d:fd:86:f8:
                    9b:d8:b8:06:38:3e:84:c8:c4:ea:dc:5f:8a:47:20:
                    df:4a:90:b2:6a:1f:33:3d:02:2d:71:6e:43:76:73:
                    a1:bf:0f:41:59:67:2a:c8:c4:48:7c:84:f3:88:28:
                    1e:15:cf:e7:e8:a0:ea:98:4b:32:4b:fe:78:3d:8d:
                    6f:14:d0:7b:97:df:cf:9a:2f:eb:ca:fd:79:28:25:
                    f4:81:23:b1:d2:b9:c0:01:73:77:cf:51:17:78:db:
                    c7:d3:9d:b4:5a:48:86:47:0c:46:03:12:3b:dc:be:
                    f5:de:f1:c9:e2:38:68:c0:f1:c7:6c:43:ac:ed:b9:
                    41:32:c4:83:bd:38:a5:80:fd:22:5b:ea:d9:84:cc:
                    aa:55:76:94:83:31:27:90:83:c8:cb:2e:8c:87:1d:
                    1d:6c:bf:61:f5:d0:3d:5b:ae:f4:c8:25:5e:8b:05:
                    21:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F6:A8:5D:86:E3:76:64:9A:77:88:9D:78:42:17:74:A6:07:91:F0
            X509v3 Authority Key Identifier:
                keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3a:ac:99:a7:d5:74:77:42:df:96:6d:02:db:0f:fc:09:7c:
         b8:24:18:fe:bc:38:9a:eb:cd:78:ff:a7:b6:4f:eb:99:04:dd:
         aa:30:13:ac:99:e8:8e:1b:46:2a:a6:8f:34:f3:47:9a:1c:df:
         bc:2e:bc:06:89:48:1a:05:2d:e0:d0:a3:11:ed:b6:96:4a:bc:
         42:89:f7:61:01:4c:a5:27:6d:db:47:be:2c:3f:50:ea:c5:bf:
         4c:da:d0:79:5c:34:bb:3b:c3:74:52:e9:eb:52:1c:3e:af:61:
         e2:86:7a:88:4f:f2:b9:04:13:1a:08:97:8d:d1:66:b6:23:bf:
         f6:0b:38:2f:63:f4:42:bb:28:21:e2:c8:ef:8b:a4:da:5c:dc:
         96:7d:57:50:cb:1c:f6:d8:bf:9e:fa:4e:17:e9:b0:64:8b:04:
         0c:dc:0b:10:db:bb:13:ea:0c:74:e5:6d:93:80:24:a2:3b:f2:
         43:0a:a4:70:ed:68:35:e5:b2:fb:a8:ab:9a:a2:9c:77:8a:25:
         14:f5:82:c0:2a:d1:8a:7c:bb:3c:88:4d:fa:55:4b:e1:af:99:
         5e:c7:56:83:61:41:89:e6:67:08:51:a8:58:2b:c4:ef:63:f1:
         f2:0c:0c:19:f2:db:93:46:0c:0b:c7:63:b4:4d:37:da:bb:45:
         5f:b7:06:63
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUBk/jIDwQrdIw+BTo8d1VGMkYZxYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3M0Qy
NDdBNTYwRjAeFw0yNjA3MjMxNzM2MjBaFw0yNjA3MjQxOTE5MjBaMDMxMTAvBgNV
BAMTKDM3RjZBODVEODZFMzc2NjQ5QTc3ODg5RDc4NDIxNzc0QTYwNzkxRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgkaQws5SUJFL8vjv4wJf4uBb
gqWDkgeV+aI19Aao1dufgoPNVzI+VAzKX9bxjgX+BL+nZ2Nasc7E8OigCtHkG4n2
dFIqi4c00MxUNJZTAe1G4Lb0ff2G+JvYuAY4PoTIxOrcX4pHIN9KkLJqHzM9Ai1x
bkN2c6G/D0FZZyrIxEh8hPOIKB4Vz+fooOqYSzJL/ng9jW8U0HuX38+aL+vK/Xko
JfSBI7HSucABc3fPURd428fTnbRaSIZHDEYDEjvcvvXe8cniOGjA8cdsQ6ztuUEy
xIO9OKWA/SJb6tmEzKpVdpSDMSeQg8jLLoyHHR1sv2H10D1brvTIJV6LBSEFAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQUN/aoXYbjdmSad4ideEIXdKYHkfAwHwYDVR0j
BBgwFoAUvML37QzVZ3yYh+DyS6jnPSR6Vg8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElOUC8w
L0JDQzJGN0VEMENENTY3N0M5ODg3RTBGMjRCQThFNzNEMjQ3QTU2MEYuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3
M0QyNDdBNTYwRi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RJTlAvMC9CQ0MyRjdFRDBDRDU2NzdD
OTg4N0UwRjI0QkE4RTczRDI0N0E1NjBGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDqsmafVdHdC35Zt
AtsP/Al8uCQY/rw4muvNeP+ntk/rmQTdqjATrJnojhtGKqaPNPNHmhzfvC68BolI
GgUt4NCjEe22lkq8Qon3YQFMpSdt20e+LD9Q6sW/TNrQeVw0uzvDdFLp61IcPq9h
4oZ6iE/yuQQTGgiXjdFmtiO/9gs4L2P0QrsoIeLI74uk2lzcln1XUMsc9ti/nvpO
F+mwZIsEDNwLENu7E+oMdOVtk4AkojvyQwqkcO1oNeWy+6irmqKcd4olFPWCwCrR
iny7PIhN+lVL4a+ZXsdWg2FBieZnCFGoWCvE72Px8gwMGfLbk0YMC8djtE032rtF
X7cGYw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:17:51 2026 by rpki-client