Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
File:                     BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft (raw, json)
Hash identifier:          jPugABJlMs70xE2VWiNjvNT6B01FcvGnmXnc8mYyTCo=
Subject key identifier:   4D:29:85:D4:5D:1D:02:59:2A:80:73:7D:91:82:77:C9:87:1D:15:EF
Authority key identifier: BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F
Certificate issuer:       /CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
Certificate serial:       49D5089DDEEF7000D958F413EF41E876BFE5A571
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
Manifest number:          1A
Signing time:             Tue 12 May 2026 01:49:15 +0000
Manifest this update:     Tue 12 May 2026 01:44:15 +0000
Manifest next update:     Wed 13 May 2026 03:47:15 +0000
Files and hashes:         1: 35382e39392e36342e302f31382d3234203d3e2034373830.roa (hash: niYgQmkbFiVAxMbJG+jDTd+/Xd0s2kYfl7SmIma9v3I=)
                          2: 3231312e37332e3136302e302f31392d3234203d3e2034373830.roa (hash: fkZROjH9L5OZ7zMA0owZ2yHxKXNxT8ygpezbRex/7zo=)
                          3: 3231312e37332e3136302e302f31392d3234203d3e203138303439.roa (hash: owvcnNoENGEPg6mZ2ivtP7YIXznHlSrEcA/67pxQ/OM=)
                          4: 34392e3231332e3132382e302f31372d3234203d3e2034373830.roa (hash: WjsN/gQB782zVCbPzF5wwoFHlpFdlC15xpTrK1jeNHk=)
                          5: 35382e39392e302e302f31382d3234203d3e2034373830.roa (hash: FaO0ocS+d1/6PUb8prDNt7a9l1UGZpiQkD24IdtJUeg=)
                          6: 3130332e3138302e32322e302f32332d3234203d3e203138303439.roa (hash: Ad0xmF4dBZSrw8fdYabi0/+yVcKWs8x3ce9m/BD2exQ=)
                          7: 36312e35382e3135392e302f32342d3234203d3e2034373830.roa (hash: P83vvLtADac4CpYyM1jVs8euovYFXqAR6oMCZB7Yz48=)
                          8: 34392e3231332e3136372e302f32342d3234203d3e2034373830.roa (hash: yx/7YOsbjwjRhQe0U+uGLOP4bLyVd7fSkPkkLHMpe7E=)
                          9: 3131362e3131382e3132382e302f31382d3234203d3e203138303439.roa (hash: SA+MolmDElRy9IFzjhBqYoLw26M3TnFmXfdfuaY9ICs=)
                          10: 35382e39392e36342e302f31382d3234203d3e203138303439.roa (hash: y0aWcVRtgQos8yX3SOGsgmafs7OuToLrYIr2HfBsxIY=)
                          11: 36312e35382e3135362e302f32342d3234203d3e2034373830.roa (hash: ydt9hMckPX29HhaelI1yEn5OVWjFOsSp+qBDl1RekUg=)
                          12: 32372e3130302e36342e302f31382d3234203d3e2034373830.roa (hash: armp4XeQEN/JTnHYvQdjmbC2KfUtleHC2MK7hOj8xjA=)
                          13: 32372e3130302e36342e302f31382d3234203d3e203138303439.roa (hash: IgGiKlZi1ecHyeOA+vgVdG2q10raoZibLTHe2fRKeuA=)
                          14: 36312e36372e33322e302f32302d3234203d3e203138303439.roa (hash: 5TSD7IAJTUtca/JhpYT5ZfcIFmgz0hL1IcOGaYieaT0=)
                          15: 323430333a353230303a3a2f33322d3936203d3e203138303439.roa (hash: 8trP9YMAatCvb5LAMVBWj3aQbEPdTxGi0t42/LC4V24=)
                          16: 3131362e3131382e3132382e302f31382d3234203d3e2034373830.roa (hash: PtKE62y+yE6DwPW6zGAf3uxt0w6IMKlZmiTDemTMmr8=)
                          17: 36312e36302e3232342e302f32302d3234203d3e203138303439.roa (hash: wwOdvfXGe34C+6TqwsKKYLkV69iMFzDLMMxpSYitHJY=)
                          18: 36312e35382e3135372e302f32342d3332203d3e2034373830.roa (hash: 5S2TZQmsv+vbqDFIMu5yBQdmS0lbCBTA06cK/OCaVV4=)
                          19: 3131362e3131382e3137362e302f32302d3234203d3e203138303436.roa (hash: QO6frV8aS6PVAILYRtHoeeGycA5ehxDpVQIfYin59M4=)
                          20: 34392e3231332e3137352e302f32342d3234203d3e2034373830.roa (hash: qIllHeU3733/uSdeS8GOGvhOLLMPgB9owDGgjK1kGyQ=)
                          21: 36312e36372e33322e302f32302d3234203d3e203138303436.roa (hash: hX1OzJK2K8xIjInCZgAcMFYStO0HP129X+xSZgBjvYc=)
                          22: 35382e39392e302e302f31382d3234203d3e203138303439.roa (hash: 0Ln5X/ej8hAf9GsZklkD3K9ADOESrdVXvzquzP7hZhM=)
                          23: 36312e36372e31362e302f32302d3234203d3e203138303439.roa (hash: J+yPEl8By54tH+Jm4/avT7CSPEp9DA459UsBHRBFLME=)
                          24: 36312e35382e3132382e302f31392d3234203d3e203138303439.roa (hash: ZY+Hn7xWEDgVkrk72Ltk6Ert8bzYI3YcEDyiLk1KwmQ=)
                          25: 34392e3231332e3132382e302f31372d3234203d3e203138303439.roa (hash: O+fKDvr5iK/DFMkJaO0nbDsenRDyeSxPSsSdg8z509M=)
                          26: BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl (hash: 71uOvdfk597KChVFlAgy27/TogKrVmjKJJpxj5bhqMM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl
                          rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 02:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d5:08:9d:de:ef:70:00:d9:58:f4:13:ef:41:e8:76:bf:e5:a5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F
        Validity
            Not Before: May 12 01:44:15 2026 GMT
            Not After : May 13 03:47:15 2026 GMT
        Subject: CN=4D2985D45D1D02592A80737D918277C9871D15EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f8:36:55:8f:23:25:89:4f:38:cb:a5:9a:3f:
                    90:5c:3a:21:2f:3a:45:aa:47:fe:bb:54:37:59:07:
                    ee:fc:3a:39:e1:d8:cd:79:a2:8a:3e:c7:8f:a6:34:
                    13:f9:a1:f6:7e:c3:4d:f0:92:b7:84:e8:a7:b3:d1:
                    84:a9:7e:2f:2d:48:69:47:00:d3:79:10:94:f2:99:
                    8f:e0:2c:db:b1:46:6a:64:3f:ac:1b:aa:e0:0f:00:
                    cd:f7:72:d3:4f:78:50:d8:93:bd:60:ee:86:ff:04:
                    88:6a:83:f1:b1:fe:92:19:0b:13:61:a8:f3:22:a6:
                    1c:41:70:1e:c7:69:83:22:73:6d:1e:3f:8f:2e:dd:
                    95:c4:9f:11:22:61:80:60:41:a3:f2:2c:1a:ee:0d:
                    b8:f9:5d:c4:d5:ec:11:6d:13:75:3b:e0:6a:e5:ee:
                    b3:77:ab:f6:6f:3b:2d:32:47:5e:05:f4:d3:96:f8:
                    06:72:62:c1:95:c0:e9:69:bd:49:2b:ad:09:49:e4:
                    42:f2:ee:93:ec:cf:30:f0:cc:93:33:a7:90:86:b5:
                    35:05:3c:a0:90:c4:cb:af:12:f6:cb:dd:e9:c4:1f:
                    75:cd:fe:b5:46:3b:20:cc:0e:36:4c:a3:3e:75:37:
                    e0:c7:0e:24:28:2e:df:e3:5a:8a:6d:88:26:4d:b4:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:29:85:D4:5D:1D:02:59:2A:80:73:7D:91:82:77:C9:87:1D:15:EF
            X509v3 Authority Key Identifier:
                keyid:BC:C2:F7:ED:0C:D5:67:7C:98:87:E0:F2:4B:A8:E7:3D:24:7A:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TINP/0/BCC2F7ED0CD5677C9887E0F24BA8E73D247A560F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:59:46:b4:d0:cd:87:1a:2a:fa:1c:56:43:34:9f:a6:8f:05:
         2c:ee:02:fd:e3:4f:4f:fb:13:ea:4a:a1:5e:31:05:a1:91:29:
         b8:d7:52:d5:ea:40:7f:e7:66:5c:ec:78:c3:ad:53:c8:2c:58:
         36:d5:2a:65:d3:06:47:54:4e:36:08:fd:9e:9e:c3:3e:9a:74:
         17:49:5c:f3:bb:af:3a:ae:1b:02:5e:a6:ae:ca:66:62:55:c7:
         09:25:c1:79:9f:85:4b:a2:a3:de:cc:3d:2d:ea:0e:b3:40:9e:
         46:43:6c:5e:49:47:11:36:83:48:e8:c3:e1:be:08:46:79:be:
         b6:15:dc:d3:57:c0:d9:a5:04:f1:06:5f:34:d2:04:c0:2a:de:
         65:8e:e7:dd:b4:98:ec:32:a1:77:de:b6:ed:65:5d:af:72:3d:
         1e:51:d1:31:8b:ad:e9:9e:b1:fc:53:5c:85:89:ed:ec:1c:c7:
         80:95:bb:62:a4:cb:41:47:3b:0f:26:82:3d:46:7a:13:25:01:
         65:2c:8f:7f:cd:7d:40:36:a4:be:08:b2:53:02:b4:15:2d:bc:
         70:f4:52:d1:25:2a:bf:61:c0:c1:31:d2:fe:93:68:9f:a3:82:
         15:2d:bb:90:fe:ff:bb:bf:ba:b8:44:f4:61:6b:b1:29:a0:bd:
         87:38:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:33 2026 by rpki-client