This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.mft
File:                     BYZiuNoF5AKfP6TValEh3UvWiYk.mft (raw, json)
Hash identifier:          U3ext/ChbQJ8QCKWS5P30IFWUXX6wUd6WhJI01W5FMw=
Subject key identifier:   F7:0C:5A:B1:C2:DD:BB:51:D8:42:6D:C3:BD:D3:8C:4E:4D:14:AF:D2
Authority key identifier: 05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89
Certificate issuer:       /CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
Certificate serial:       0DAF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.mft
Manifest number:          0D88
Signing time:             Fri 05 Dec 2025 10:06:34 +0000
Manifest this update:     Fri 05 Dec 2025 10:06:34 +0000
Manifest next update:     Sun 07 Dec 2025 10:06:34 +0000
Files and hashes:         1: BYZiuNoF5AKfP6TValEh3UvWiYk.crl (hash: 7dRKLQU01maKtgGGXKwRgf7oF12k0/Jk5SAmo+Kx+T8=)
                          2: Bp7DlH83PRR-yEjkZPpkgVFfIf0.roa (hash: uXP4HVljWOo3IwZtK92R0Iyr72D6ezbWedrPF+jz/WQ=)
                          3: JqEmmq0VmpkXKKXdOvnF1NYj20Y.roa (hash: jJpoHAk/MgdGdZZOsnSp0t/jZOlkQ4dfGrTOYPLQgKk=)
                          4: sQqRmA10GthuXGRkpTtX9n_ZBrI.roa (hash: 4obaoWU328k4rVD+yQS2KGDxmTQx10ZBoqdXf1RfRMI=)
                          5: sZA1fm-wZbNMumqy14nHa4o_nzk.roa (hash: LODsCOw5JbnVSKvTrhW9y71hWNHTJgXB6GmH0PRYIOw=)
                          6: viIqYla5qhIWLPHXwo121VMN1KU.roa (hash: YSQzEv6C/zNfCP0kp/B1q/pK49h48dyIoAUK2+xOAi0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3503 (0xdaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058662B8DA05E4029F3FA4D56A5121DD4BD68989
        Validity
            Not Before: Dec  5 10:06:34 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F70C5AB1C2DDBB51D8426DC3BDD38C4E4D14AFD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7c:6f:3f:f8:6e:da:7e:ab:18:e0:82:07:0a:
                    fd:2b:3e:49:11:3f:09:e5:59:48:18:0d:80:c7:9d:
                    7d:59:46:a3:64:ca:31:fd:9f:06:de:36:31:f0:7f:
                    e1:61:bd:1e:99:0b:db:68:d6:8d:d4:d7:20:26:bd:
                    b8:74:ab:6a:de:de:8a:93:ac:a4:ed:09:f1:7d:aa:
                    b8:47:7f:7f:a0:8c:7c:e7:f6:3a:df:d5:4b:19:34:
                    16:49:3e:52:c7:0f:5b:a6:c2:8e:c4:9b:ba:e8:04:
                    5f:3d:69:0e:4c:0a:6f:51:fa:d7:64:5d:dd:7d:6e:
                    e9:d2:b7:59:be:6f:6a:4f:60:21:35:fe:43:05:20:
                    c0:3d:dc:fa:aa:e4:02:96:bf:04:85:9d:8e:21:fd:
                    0a:91:12:bd:54:3b:96:39:e5:46:db:be:fa:75:53:
                    19:b2:90:89:3a:86:43:93:1c:e9:b7:67:c2:81:12:
                    e9:33:1c:3e:57:96:81:56:8d:88:a7:9a:08:b8:ff:
                    8f:52:1f:b6:e2:38:79:b6:c1:83:61:37:23:e2:b4:
                    cb:03:ef:0a:d4:be:8b:88:81:46:e9:5b:f0:69:79:
                    6c:d8:51:0d:68:56:da:c8:45:d9:fd:13:25:b1:8a:
                    5d:cb:a6:7e:03:37:a5:2b:e0:d3:f5:cf:d1:97:fe:
                    e1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0C:5A:B1:C2:DD:BB:51:D8:42:6D:C3:BD:D3:8C:4E:4D:14:AF:D2
            X509v3 Authority Key Identifier:
                keyid:05:86:62:B8:DA:05:E4:02:9F:3F:A4:D5:6A:51:21:DD:4B:D6:89:89

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BYZiuNoF5AKfP6TValEh3UvWiYk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ASSMAU/BYZiuNoF5AKfP6TValEh3UvWiYk.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5d:3c:3c:50:3c:f0:f2:19:8d:52:ba:8b:90:9b:71:df:5a:
         2c:bb:bd:f0:5e:3a:d8:bb:bb:58:9e:59:07:b3:2c:be:37:15:
         76:05:30:ac:c9:bd:6c:85:e3:a2:e9:d7:85:ca:0e:6a:eb:d8:
         25:92:5c:f0:38:9b:2c:df:66:c3:f7:16:7f:cc:8c:4b:0d:e9:
         a1:82:87:c3:e1:a5:f3:34:27:e9:ba:c7:f4:4d:0d:74:63:51:
         63:cc:15:de:fd:07:7c:44:2c:80:9c:4b:1f:83:19:0c:b6:3d:
         0e:3c:89:06:ec:5a:83:b1:29:df:2d:19:0f:fb:2d:88:81:45:
         62:64:b3:9c:4c:c5:56:3a:95:2c:11:18:cd:6c:92:ed:05:39:
         50:bb:f5:86:ed:72:21:02:4b:a6:ec:df:45:d2:3b:db:2a:b2:
         e6:95:ee:39:25:81:60:ab:73:f1:f8:e7:ba:86:cd:97:99:58:
         a1:ef:99:8c:56:4a:c0:74:4b:38:73:37:94:ed:73:a7:3c:74:
         ba:94:c2:89:23:ff:6f:3d:86:35:c3:fb:5b:a8:ea:de:27:aa:
         3c:dc:33:43:e1:e4:32:76:a0:8d:39:97:77:3f:3e:81:f0:ae:
         56:98:6a:d5:a1:ac:e2:c1:d1:64:37:35:1e:e9:6b:1e:23:b8:
         17:4d:5e:30
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICDa8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDU4
NjYyQjhEQTA1RTQwMjlGM0ZBNEQ1NkE1MTIxREQ0QkQ2ODk4OTAeFw0yNTEyMDUx
MDA2MzRaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEY3MEM1QUIxQzJEREJC
NTFEODQyNkRDM0JERDM4QzRFNEQxNEFGRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvfG8/+G7afqsY4IIHCv0rPkkRPwnlWUgYDYDHnX1ZRqNkyjH9
nwbeNjHwf+FhvR6ZC9to1o3U1yAmvbh0q2re3oqTrKTtCfF9qrhHf3+gjHzn9jrf
1UsZNBZJPlLHD1umwo7Em7roBF89aQ5MCm9R+tdkXd19bunSt1m+b2pPYCE1/kMF
IMA93Pqq5AKWvwSFnY4h/QqREr1UO5Y55Ubbvvp1UxmykIk6hkOTHOm3Z8KBEukz
HD5XloFWjYinmgi4/49SH7biOHm2wYNhNyPitMsD7wrUvouIgUbpW/BpeWzYUQ1o
VtrIRdn9EyWxil3Lpn4DN6Ur4NP1z9GX/uG9AgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQU9wxascLdu1HYQm3DvdOMTk0Ur9IwHwYDVR0jBBgwFoAUBYZiuNoF5AKfP6TV
alEh3UvWiYkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNTTUFV
L0JZWml1Tm9GNUFLZlA2VFZhbEVoM1V2V2lZay5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQllaaXVOb0Y1QUtmUDZUVmFsRWgzVXZXaVlrLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVNTTUFVL0JZWml1Tm9GNUFLZlA2VFZh
bEVoM1V2V2lZay5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ
XTw8UDzw8hmNUrqLkJtx31osu73wXjrYu7tYnlkHsyy+NxV2BTCsyb1sheOi6deF
yg5q69glklzwOJss32bD9xZ/zIxLDemhgofD4aXzNCfpusf0TQ10Y1FjzBXe/Qd8
RCyAnEsfgxkMtj0OPIkG7FqDsSnfLRkP+y2IgUViZLOcTMVWOpUsERjNbJLtBTlQ
u/WG7XIhAkum7N9F0jvbKrLmle45JYFgq3Px+Oe6hs2XmVih75mMVkrAdEs4czeU
7XOnPHS6lMKJI/9vPYY1w/tbqOreJ6o83DND4eQydqCNOZd3Pz6B8K5WmGrVoazi
wdFkNzUe6WseI7gXTV4w
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:06:45 2025 by rpki-client