This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
File:                     VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft (raw, json)
Hash identifier:          MOcoD4i4UxOPn86tq81M6dQTcP4QsmuauWWPXqJFB8s=
Subject key identifier:   29:90:15:F4:8D:10:83:B8:55:C3:95:EA:13:C4:A5:4D:CA:5D:35:84
Authority key identifier: 54:7E:4B:64:F6:02:9E:DA:C7:C1:67:D4:52:2D:A3:D9:F0:7E:F4:37
Certificate issuer:       /CN=547E4B64F6029EDAC7C167D4522DA3D9F07EF437
Certificate serial:       DD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
Manifest number:          DB
Signing time:             Sat 06 Dec 2025 15:35:19 +0000
Manifest this update:     Sat 06 Dec 2025 15:35:19 +0000
Manifest next update:     Sat 06 Dec 2025 21:35:19 +0000
Files and hashes:         1: 2vz-xMzPl8hiyTavYHJYKLC1WPY.roa (hash: W5GyxgtP1ONLKY2Y7pIwNIhLloHANzxzrB/mIxHajfQ=)
                          2: VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl (hash: rY2x3tWhMtmGcomEurfZ0x2CEAb5bQzgfGvJ+qBm618=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 20:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547E4B64F6029EDAC7C167D4522DA3D9F07EF437
        Validity
            Not Before: Dec  6 15:35:19 2025 GMT
            Not After : Oct 16 15:30:20 2026 GMT
        Subject: CN=299015F48D1083B855C395EA13C4A54DCA5D3584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:39:7f:a8:68:20:a5:fe:a8:ef:85:35:a5:
                    cc:92:73:f6:fe:ef:ef:7f:79:ef:71:b5:99:e1:b1:
                    7a:1f:ea:23:5c:62:b4:cc:1f:e2:f4:c4:f9:5b:2a:
                    f4:6a:9e:6f:ef:2a:fe:38:c3:ac:21:5b:51:54:d7:
                    59:52:5a:73:fa:a9:d3:cd:b7:c0:42:d4:c7:07:b1:
                    f3:c8:db:96:0f:07:7b:be:f0:8b:5f:7a:a0:f0:13:
                    22:36:3b:d7:0b:0d:05:4f:07:fc:67:93:4c:c1:28:
                    2e:ed:6a:d9:ac:22:ed:8c:ea:9d:f9:cd:c1:ad:9b:
                    e1:ce:58:56:af:9b:88:07:bd:66:86:e2:41:87:e8:
                    44:98:15:74:9e:05:55:21:37:bc:31:2e:b7:be:8c:
                    15:90:a9:12:8c:92:5c:61:be:69:94:e5:b8:29:03:
                    1c:6b:ab:19:44:ce:f6:69:4f:2a:da:9c:4d:b8:9f:
                    0b:f9:ad:ba:0e:8c:75:80:95:1f:34:4e:6b:d6:0e:
                    ed:89:3a:11:a3:8c:01:69:60:40:36:1d:ec:e2:8d:
                    74:bd:47:05:f5:3d:19:3a:cd:49:5e:2a:fd:f4:d2:
                    54:d5:a4:b2:89:f5:a5:37:a2:5f:17:ad:8b:f6:36:
                    4b:a2:c7:db:56:bb:9c:46:6a:97:57:b4:c3:d4:0c:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:90:15:F4:8D:10:83:B8:55:C3:95:EA:13:C4:A5:4D:CA:5D:35:84
            X509v3 Authority Key Identifier:
                keyid:54:7E:4B:64:F6:02:9E:DA:C7:C1:67:D4:52:2D:A3:D9:F0:7E:F4:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:2d:4e:9a:29:0f:7d:f8:97:b4:85:cb:28:43:49:90:07:8a:
         aa:56:d6:71:d2:09:b5:5d:8b:5c:86:50:5d:45:4f:a5:61:6e:
         2c:65:a7:d2:95:89:47:97:62:9b:08:a4:21:52:3b:00:f1:ca:
         d6:a1:ec:62:8a:08:1a:20:df:06:40:ed:5f:4b:e5:d6:44:5b:
         88:e8:ae:9b:9a:08:12:1b:e4:f8:15:52:7a:3a:ea:00:81:5a:
         45:9c:59:8a:23:a9:b5:59:5d:40:db:0b:04:0e:29:a7:59:c6:
         8b:ee:bc:00:51:86:8a:e4:01:cf:01:ec:80:a4:24:4e:99:35:
         ab:85:c5:6d:51:ac:dc:f0:92:3d:88:94:4a:65:fa:d9:3f:af:
         9f:90:22:73:39:87:21:8f:3e:a2:9f:94:96:6b:b9:3f:44:4d:
         48:4c:a8:6b:7d:88:9e:a2:14:ee:6c:49:b8:4d:ad:c5:42:ce:
         78:55:c6:cc:1a:25:59:33:c4:ee:6a:5e:b3:b5:f6:07:5b:b3:
         d0:ef:4b:4c:27:e2:6d:df:a9:77:53:6a:6b:5b:c9:e9:3f:2f:
         0d:03:b8:5b:aa:32:7a:da:14:47:e1:e1:23:bf:d8:ab:33:18:
         15:b5:c0:5e:cc:23:9c:37:bf:0f:d3:3b:a1:34:26:13:ad:f9:
         c3:19:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:51:40 2025 by rpki-client