Manifest

$ rpki-client -vvvf rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
File:                     BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft (raw, json)
Hash identifier:          /ZAgAW1z6JX/pcnfuctHeGLiroZijfag6fELGIezLk8=
Subject key identifier:   F4:43:37:75:33:7B:C8:5D:AC:CC:BC:98:C9:18:28:B1:1B:8B:70:4C
Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Certificate issuer:       /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Certificate serial:       5F3454DA4713D10AEA6D284F05D15C61D11C4E8F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
Manifest number:          CB
Signing time:             Wed 23 Sep 2026 21:23:15 +0000
Manifest this update:     Wed 23 Sep 2026 21:18:15 +0000
Manifest next update:     Fri 25 Sep 2026 00:57:15 +0000
Files and hashes:         1: 35382e39392e36342e302f31382d3234203d3e2034373830.roa (hash: niYgQmkbFiVAxMbJG+jDTd+/Xd0s2kYfl7SmIma9v3I=)
                          2: 36312e36372e31362e302f32302d3234203d3e203138303439.roa (hash: J+yPEl8By54tH+Jm4/avT7CSPEp9DA459UsBHRBFLME=)
                          3: 36312e36302e3232342e302f32302d3234203d3e203138303439.roa (hash: wwOdvfXGe34C+6TqwsKKYLkV69iMFzDLMMxpSYitHJY=)
                          4: 35382e39392e302e302f31382d3234203d3e2034373830.roa (hash: FaO0ocS+d1/6PUb8prDNt7a9l1UGZpiQkD24IdtJUeg=)
                          5: 3231312e37332e3136302e302f31392d3234203d3e2034373830.roa (hash: fkZROjH9L5OZ7zMA0owZ2yHxKXNxT8ygpezbRex/7zo=)
                          6: 36312e36372e33322e302f32302d3234203d3e203138303436.roa (hash: hX1OzJK2K8xIjInCZgAcMFYStO0HP129X+xSZgBjvYc=)
                          7: 3131362e3131382e3132382e302f31382d3234203d3e2034373830.roa (hash: PtKE62y+yE6DwPW6zGAf3uxt0w6IMKlZmiTDemTMmr8=)
                          8: 3231312e37332e3136302e302f31392d3234203d3e203138303439.roa (hash: owvcnNoENGEPg6mZ2ivtP7YIXznHlSrEcA/67pxQ/OM=)
                          9: 35382e39392e302e302f31382d3234203d3e203138303439.roa (hash: 0Ln5X/ej8hAf9GsZklkD3K9ADOESrdVXvzquzP7hZhM=)
                          10: 34392e3231332e3132382e302f31372d3234203d3e2034373830.roa (hash: WjsN/gQB782zVCbPzF5wwoFHlpFdlC15xpTrK1jeNHk=)
                          11: 32372e3130302e36342e302f31382d3234203d3e2034373830.roa (hash: armp4XeQEN/JTnHYvQdjmbC2KfUtleHC2MK7hOj8xjA=)
                          12: BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl (hash: Cu1FaNcvPmPT0TBatxQ+iEIm65WKOKQnCe8Ojwn52aQ=)
                          13: 3131362e3131382e3137362e302f32302d3234203d3e203138303436.roa (hash: QO6frV8aS6PVAILYRtHoeeGycA5ehxDpVQIfYin59M4=)
                          14: 36312e36372e33322e302f32302d3234203d3e203138303439.roa (hash: 5TSD7IAJTUtca/JhpYT5ZfcIFmgz0hL1IcOGaYieaT0=)
                          15: 36312e35382e3135372e302f32342d3332203d3e2034373830.roa (hash: 5S2TZQmsv+vbqDFIMu5yBQdmS0lbCBTA06cK/OCaVV4=)
                          16: 34392e3231332e3132382e302f31372d3234203d3e203138303439.roa (hash: O+fKDvr5iK/DFMkJaO0nbDsenRDyeSxPSsSdg8z509M=)
                          17: 36312e35382e3135362e302f32342d3234203d3e2034373830.roa (hash: ydt9hMckPX29HhaelI1yEn5OVWjFOsSp+qBDl1RekUg=)
                          18: 323430333a353230303a3a2f33322d3936203d3e203138303439.roa (hash: 8trP9YMAatCvb5LAMVBWj3aQbEPdTxGi0t42/LC4V24=)
                          19: 36312e35382e3135392e302f32342d3234203d3e2034373830.roa (hash: P83vvLtADac4CpYyM1jVs8euovYFXqAR6oMCZB7Yz48=)
                          20: 3131362e3131382e3132382e302f31382d3234203d3e203138303439.roa (hash: SA+MolmDElRy9IFzjhBqYoLw26M3TnFmXfdfuaY9ICs=)
                          21: 34392e3231332e3137352e302f32342d3234203d3e2034373830.roa (hash: qIllHeU3733/uSdeS8GOGvhOLLMPgB9owDGgjK1kGyQ=)
                          22: 32372e3130302e36342e302f31382d3234203d3e203138303439.roa (hash: IgGiKlZi1ecHyeOA+vgVdG2q10raoZibLTHe2fRKeuA=)
                          23: 34392e3231332e3136372e302f32342d3234203d3e2034373830.roa (hash: yx/7YOsbjwjRhQe0U+uGLOP4bLyVd7fSkPkkLHMpe7E=)
                          24: 36312e35382e3132382e302f31392d3234203d3e203138303439.roa (hash: ZY+Hn7xWEDgVkrk72Ltk6Ert8bzYI3YcEDyiLk1KwmQ=)
                          25: 3130332e3138302e32322e302f32332d3234203d3e203138303439.roa (hash: Ad0xmF4dBZSrw8fdYabi0/+yVcKWs8x3ce9m/BD2exQ=)
                          26: 35382e39392e36342e302f31382d3234203d3e203138303439.roa (hash: y0aWcVRtgQos8yX3SOGsgmafs7OuToLrYIr2HfBsxIY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
                          rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 00:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:34:54:da:47:13:d1:0a:ea:6d:28:4f:05:d1:5c:61:d1:1c:4e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
        Validity
            Not Before: Sep 23 21:18:15 2026 GMT
            Not After : Sep 25 00:57:15 2026 GMT
        Subject: CN=F4433775337BC85DACCCBC98C91828B11B8B704C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:d5:53:7e:72:8d:e5:93:fd:be:7c:e3:ff:
                    3d:1f:63:4f:21:84:85:93:d7:a4:0b:9b:f2:95:3d:
                    5b:6f:1d:83:29:bd:d9:58:a1:93:ae:58:b3:15:d0:
                    23:30:e7:5d:1d:61:93:10:ec:66:d1:a3:af:9b:4e:
                    fb:33:23:14:25:b5:2a:58:97:56:d5:c7:e9:80:8c:
                    6e:92:00:18:1a:ce:e4:32:b9:3d:97:c9:4f:88:d9:
                    bf:00:c2:05:84:5d:4b:84:65:e9:a7:a5:c9:18:be:
                    ee:68:d0:5f:9f:85:17:81:b7:26:dd:72:77:f3:69:
                    98:30:51:59:6e:8c:58:23:28:c2:54:05:6b:2b:fc:
                    d5:17:1b:fa:2c:a0:b0:f6:d7:aa:08:37:28:24:59:
                    b6:3a:69:e2:75:0c:c6:13:97:da:22:fa:3f:5e:bc:
                    83:d7:fd:cc:16:9b:b5:6c:2f:a3:75:bc:26:e8:24:
                    61:ed:38:a8:41:52:0b:d3:68:b9:62:64:7e:85:53:
                    d2:ab:9d:2b:8d:80:5a:14:7f:bb:41:38:8c:6b:b5:
                    30:50:51:cc:33:bd:b7:66:91:ea:38:2e:c6:97:75:
                    cc:59:96:d9:4f:5f:5a:de:3a:8b:6e:54:34:13:ae:
                    85:f5:4a:4d:a6:5e:15:5b:46:b2:98:4c:3b:49:dc:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:43:37:75:33:7B:C8:5D:AC:CC:BC:98:C9:18:28:B1:1B:8B:70:4C
            X509v3 Authority Key Identifier:
                keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:73:d2:c8:6a:29:c7:90:ed:4d:0a:6c:ca:ff:9f:59:13:b1:
         d3:b5:b2:8a:36:5f:dd:46:f1:c1:04:09:a3:26:bd:4c:4c:d2:
         55:76:9d:b2:86:c6:bd:84:dd:9c:d0:d5:f1:e5:7b:f8:b6:5f:
         47:1f:23:bb:1b:8c:dc:19:6b:3b:41:3d:bf:c7:bb:38:84:bc:
         cc:86:8c:7f:55:a7:34:e2:7d:23:0d:97:c5:42:98:87:b8:74:
         f6:a4:2f:9d:9b:3a:c5:d1:b3:4d:c2:9c:78:8b:1a:bc:88:2d:
         8f:29:86:ba:ed:60:83:8e:3f:05:72:6d:09:29:62:37:e3:c8:
         ba:40:14:5b:35:f3:b6:57:6e:5f:94:a3:f3:b5:e9:4d:32:f5:
         fe:d0:b7:29:65:bf:63:f2:18:3d:7b:73:65:56:6f:3a:0b:3b:
         91:d9:b0:8b:19:54:a9:eb:20:cc:8d:a4:fd:ad:92:34:f7:7b:
         2b:cf:6a:a0:eb:d7:62:15:d9:af:8d:08:46:81:98:22:92:f5:
         31:11:4e:a3:0b:33:3e:d6:97:66:b0:f4:8a:f6:c9:7e:e1:7e:
         2c:83:7e:83:9e:78:e3:63:fa:b6:fe:d8:30:df:60:dc:9e:a0:
         36:f4:f3:17:54:1e:27:0b:a4:91:ca:56:be:c8:fe:a6:ff:f1:
         e7:bf:4e:4a
-----BEGIN CERTIFICATE-----
MIIE4DCCA8igAwIBAgIUXzRU2kcT0QrqbShPBdFcYdEcTo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3M0Qy
NDdBNTYwRjAeFw0yNjA5MjMyMTE4MTVaFw0yNjA5MjUwMDU3MTVaMDMxMTAvBgNV
BAMTKEY0NDMzNzc1MzM3QkM4NURBQ0NDQkM5OEM5MTgyOEIxMUI4QjcwNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRGdVTfnKN5ZP9vnzj/z0fY08h
hIWT16QLm/KVPVtvHYMpvdlYoZOuWLMV0CMw510dYZMQ7GbRo6+bTvszIxQltSpY
l1bVx+mAjG6SABgazuQyuT2XyU+I2b8AwgWEXUuEZemnpckYvu5o0F+fhReBtybd
cnfzaZgwUVlujFgjKMJUBWsr/NUXG/osoLD216oINygkWbY6aeJ1DMYTl9oi+j9e
vIPX/cwWm7VsL6N1vCboJGHtOKhBUgvTaLliZH6FU9KrnSuNgFoUf7tBOIxrtTBQ
Ucwzvbdmkeo4LsaXdcxZltlPX1reOotuVDQTroX1Sk2mXhVbRrKYTDtJ3ElxAgMB
AAGjggHqMIIB5jAdBgNVHQ4EFgQU9EM3dTN7yF2szLyYyRgosRuLcEwwHwYDVR0j
BBgwFoAUvML37QzVZ3yYh+DyS6jnPSR6Vg8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVElOUC8w
L0JDQzJGN0VEMENENTY3N0M5ODg3RTBGMjRCQThFNzNEMjQ3QTU2MEYuY3JsMG8G
CCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2EudHduaWMu
dHcvcnBraS9UV05JQ0NBLzEvQkNDMkY3RUQwQ0Q1Njc3Qzk4ODdFMEYyNEJBOEU3
M0QyNDdBNTYwRi5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RJTlAvMC9CQ0MyRjdFRDBDRDU2NzdD
OTg4N0UwRjI0QkE4RTczRDI0N0E1NjBGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXPSyGopx5DtTQps
yv+fWROx07WyijZf3UbxwQQJoya9TEzSVXadsobGvYTdnNDV8eV7+LZfRx8juxuM
3BlrO0E9v8e7OIS8zIaMf1WnNOJ9Iw2XxUKYh7h09qQvnZs6xdGzTcKceIsavIgt
jymGuu1gg44/BXJtCSliN+PIukAUWzXztlduX5Sj87XpTTL1/tC3KWW/Y/IYPXtz
ZVZvOgs7kdmwixlUqesgzI2k/a2SNPd7K89qoOvXYhXZr40IRoGYIpL1MRFOowsz
PtaXZrD0ivbJfuF+LIN+g55442P6tv7YMN9g3J6gNvTzF1QeJwukkcpWvsj+pv/x
579OSg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:31:16 2026 by rpki-client