This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
File: 0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft (raw, json)
Hash identifier: y+IilMljd+1WQaON2S9HSMgCbszoEUxeUu6YjVhGSFE=
Subject key identifier: E0:56:A7:AF:F9:F7:27:32:A2:27:5C:B0:78:DD:07:2D:62:23:6F:7F
Authority key identifier: D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
Certificate issuer: /CN=A91BDB290000/serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Certificate serial: 1ED1
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
Manifest number: 1EC3
Signing time: Sun 07 Dec 2025 01:36:15 +0000
Manifest this update: Sun 07 Dec 2025 01:36:15 +0000
Manifest next update: Sun 07 Dec 2025 07:36:15 +0000
Files and hashes: 1: 0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl (hash: NirAP2wDk+yo8oYCYZvXvMSxgE/Df6iE3JlFd881prw=)
2: U0x2J0ozCwce_SDbBfbQQpKTdD4.cer (hash: 9k9xyP9CPxo9MsTikLvIKyHQ14M5uC6zcos87s15VUk=)
3: u4ipF4WngsjqPN3tPnwfCdp59kc.cer (hash: 7uK3NHDPC/X97uov7qJRf3jVbeyqtL+TCaGkcN0Sh/M=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 07:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7889 (0x1ed1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDB290000, serialNumber=D1D2F55C26DB28520A7996FF72ED0104200798A2
Validity
Not Before: Dec 7 01:36:15 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=E056A7AFF9F72732A2275CB078DD072D62236F7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:0b:34:55:73:ff:4a:78:ea:7a:f1:4d:13:
5c:91:ee:7c:ea:e3:23:ab:49:e0:46:6f:5e:0b:d5:
2c:73:ec:79:f3:fb:09:8c:43:b3:35:83:f5:55:e3:
13:25:82:f8:87:1f:c9:11:f2:d6:af:b6:fd:b2:d7:
4d:0d:e8:c6:c7:ad:73:cb:20:1c:b7:64:1e:e4:d6:
3e:ca:a3:ac:7e:c6:56:0b:2c:97:5c:be:00:39:af:
5a:0b:23:ba:a9:2e:5a:36:f6:d5:d4:69:34:96:47:
2d:c0:e9:03:7c:e5:0b:56:c1:a2:97:7a:43:67:48:
e3:ac:e7:70:27:7c:46:a2:09:f8:9d:8c:03:72:a0:
f0:03:1a:7c:38:6d:42:b1:f6:05:4d:ca:7e:ae:9d:
f8:86:44:2b:7a:1f:06:dd:9f:86:d6:e4:dd:9c:4e:
e3:b6:ce:cc:07:3a:a1:75:bb:b9:5f:2b:e5:7b:65:
0b:2a:6d:ab:07:f5:73:bd:71:6c:e8:58:77:2f:4b:
49:76:91:54:53:9a:e2:ab:8b:01:7b:32:e7:ae:b7:
e5:64:cf:b1:2f:eb:46:1e:2b:3a:9d:61:bc:0d:97:
1f:b5:7a:21:77:99:3e:fb:00:1c:e7:af:cb:98:d0:
78:80:68:a9:3e:0e:5a:5d:ea:1b:08:fd:78:71:48:
25:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:56:A7:AF:F9:F7:27:32:A2:27:5C:B0:78:DD:07:2D:62:23:6F:7F
X509v3 Authority Key Identifier:
keyid:D1:D2:F5:5C:26:DB:28:52:0A:79:96:FF:72:ED:01:04:20:07:98:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:4d:52:64:db:7f:37:b1:9c:87:59:43:b8:55:90:c0:2f:47:
15:5c:dc:9e:01:10:87:49:e4:2b:6d:5a:61:5d:a9:7b:44:e2:
b7:5e:fc:c0:66:a4:33:db:2e:eb:84:26:3d:66:4b:9e:87:b0:
c7:c7:de:cf:a1:1f:cf:1d:00:47:42:a1:13:b3:1c:bc:83:1f:
30:d5:d7:4a:44:84:d1:da:bb:34:11:d2:73:59:14:b8:84:13:
3f:e0:32:ab:e8:6f:24:c5:2e:ba:d7:36:8a:c2:b1:c5:6d:41:
39:1b:44:1c:19:46:f9:c4:44:59:f8:e5:5f:84:ee:68:5a:01:
92:d1:9c:58:84:da:a1:36:3d:a9:28:6e:49:83:bc:c3:3a:5e:
ad:0b:95:6f:99:46:2f:b6:35:fb:fa:9a:2f:41:86:9f:7d:e4:
7e:2c:be:eb:d4:45:8d:ba:c1:8e:ae:77:42:0e:d5:b8:f1:1b:
5a:42:57:0a:13:0b:04:e1:b3:cf:65:4a:46:6f:49:31:51:24:
96:e4:2d:1b:51:32:41:f7:b7:19:9b:ec:19:86:0f:61:5d:dd:
79:64:74:50:3d:ff:7a:77:d6:bd:35:51:c2:72:e5:e0:94:94:
f6:dd:ba:34:0b:98:cb:e0:02:be:e2:d9:25:ab:9d:fe:38:ca:
2b:45:71:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:37:18 2025 by rpki-client