This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
File:                     cJhPAIyij2R120JjU7_RxDPYvBo.mft (raw, json)
Hash identifier:          dx9WjI3BSVwlTnxJCN2HF1rk33WkXt3Ze4uWJO9UGv0=
Subject key identifier:   E9:C6:02:C2:C3:AB:88:79:C8:2F:5A:CD:6A:4B:0E:AC:A0:20:AA:66
Authority key identifier: 70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A
Certificate issuer:       /CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
Certificate serial:       0E1D
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
Manifest number:          0DDF
Signing time:             Sun 25 Jan 2026 10:47:16 +0000
Manifest this update:     Sun 25 Jan 2026 10:47:16 +0000
Manifest next update:     Tue 27 Jan 2026 10:47:16 +0000
Files and hashes:         1: 0OPgjIQxyYaAlziY8aBRSapHceA.roa (hash: m1++edt1JXnMWpOMnABjJ0QBv2fTrt4qLr2hnc9qIIM=)
                          2: 3i9iKBeZv8ngHVcHxCYns2T8TMs.roa (hash: O/Cnu+z4Iybw2FTRPIx0OBJoOUBN2JkbXTyJM9r/J7g=)
                          3: 413N6uhzZCahA0siz5yQ-lFMQaI.roa (hash: W4rMqGma4dGUP809W+VjFoukSTcghTiqNG/pwkjsqiw=)
                          4: ASdLkizlDzFMaIeqeFgUMGL5pA4.roa (hash: PrABBi3He4t0rtANEcMbtGvbtrGQYrsKauzwVYValiY=)
                          5: GRDhvttAK_nsVjb0wuOu792ljFM.roa (hash: yfrSa/AGfxcAyohh3uwnQcUrSWrXFyv3IhKlKO3WdwA=)
                          6: I-3wj0xS0sz4_kUuqGYbyUZPGuA.roa (hash: dbmAAFrpg6OQk55wqHeW93p1GMEP6F5tP1+OSiBqt6w=)
                          7: cJhPAIyij2R120JjU7_RxDPYvBo.crl (hash: uOtdQ4ul/BdXGYHHPfGA3/uVnk/ssNzGE3QGMR/1jCs=)
                          8: db9yaVJSl1lOYeTn0PZiAYCGsWY.roa (hash: 5CWWsS3UmcTyC4bIwmHjQ8YVzavwuAT5O5zIdHnbrxw=)
                          9: f0LS-dXXQKjkcRZLMVuP9g3OkH4.roa (hash: TDDsd1oMj9nc0RE/KQmB03zOUIPZDBv4q9CB0VBHIOI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Jan 2026 08:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3613 (0xe1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70984F008CA28F6475DB426353BFD1C433D8BC1A
        Validity
            Not Before: Jan 25 10:47:16 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=E9C602C2C3AB8879C82F5ACD6A4B0EACA020AA66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:4a:e6:25:b3:c9:a8:72:89:ad:c7:e8:56:
                    3c:86:b4:8d:a9:ce:31:78:73:63:8c:c0:5a:40:91:
                    71:02:e9:57:06:67:78:de:2b:fe:e2:fb:d5:0e:8e:
                    b2:a0:ec:68:64:cf:ac:dc:7e:4c:d7:de:9a:e5:e9:
                    f2:cb:23:50:2e:01:3b:53:2e:83:33:ef:99:70:f9:
                    b6:64:e8:67:bc:04:c8:e3:c2:19:57:1a:f0:c6:44:
                    1f:e7:18:6f:e3:cc:e9:57:c0:8a:a6:d4:ca:46:ef:
                    89:49:09:3e:0c:77:de:08:05:16:58:6a:7d:df:cf:
                    47:b1:df:75:97:7c:2f:16:a2:e2:bc:9b:dc:07:8a:
                    40:f6:83:a0:47:ce:ac:6b:d8:26:8a:b2:77:19:6c:
                    9d:3e:4e:af:14:ae:9f:73:ec:d3:66:9c:e2:7c:29:
                    d5:18:b0:f8:d5:c0:25:11:0d:37:ef:44:0f:3e:c1:
                    e1:77:56:47:fa:79:3c:bd:82:c7:a8:72:e4:46:e1:
                    16:02:f0:03:98:ea:d5:46:a3:2b:85:d0:36:21:e6:
                    ab:c0:58:c3:35:b6:4f:76:ee:76:bf:89:34:b0:f8:
                    6a:ac:73:98:89:85:1c:a8:e2:bd:42:29:fa:a5:ac:
                    98:95:fa:aa:ae:22:25:1b:31:cd:b9:75:f1:b0:a0:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C6:02:C2:C3:AB:88:79:C8:2F:5A:CD:6A:4B:0E:AC:A0:20:AA:66
            X509v3 Authority Key Identifier:
                keyid:70:98:4F:00:8C:A2:8F:64:75:DB:42:63:53:BF:D1:C4:33:D8:BC:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/cJhPAIyij2R120JjU7_RxDPYvBo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASNET/cJhPAIyij2R120JjU7_RxDPYvBo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:55:a3:6b:03:b0:4b:f0:83:5c:0e:0b:b0:c9:a0:1a:26:78:
         d8:36:4a:3c:f2:e1:a2:47:d5:84:94:02:64:09:94:fd:cc:90:
         09:7e:0a:c3:49:ca:7c:5f:da:59:75:ea:c3:b2:55:c8:a1:9c:
         fe:10:90:fa:1a:67:7d:dc:c0:b1:ff:fb:5e:da:8e:89:1f:4d:
         35:10:40:37:f5:09:63:33:fc:0b:22:41:04:d1:05:40:ca:52:
         b5:4c:e7:01:1a:db:57:f5:42:c5:b1:53:32:09:d9:47:08:28:
         a1:43:9d:73:4f:ad:7d:8f:7f:d0:b7:94:55:79:f4:1c:c8:6d:
         d9:14:0f:6d:62:64:d5:44:1f:de:9b:f9:3b:a4:3d:06:e0:98:
         49:ba:92:d0:59:f6:3a:f6:30:a5:a0:28:e8:cc:e8:07:67:23:
         3c:db:ae:d7:50:e8:64:b1:59:ef:c7:a8:c1:87:1c:6c:ce:59:
         e1:b0:8e:39:f2:32:cf:78:0a:a8:45:56:ed:2b:7d:f0:21:3c:
         3d:7f:29:f5:ba:1d:16:44:bf:6c:06:8e:ae:b0:3a:4f:5f:f4:
         2d:45:34:a3:51:5b:cc:71:34:4a:2f:dd:21:f6:69:86:b6:64:
         53:54:6c:f1:86:a4:30:99:72:1f:52:73:ce:0e:f7:b3:7a:1e:
         b3:7c:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:59:04 2026 by rpki-client