This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft File: i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft (raw, json) Hash identifier: RakcyrNujAfh/RxUYEVFjGUYvbsnjI/zcI+WgaZDUdI= Subject key identifier: 50:73:92:43:7A:86:C7:D5:8A:87:00:C8:18:D6:8D:F4:E6:ED:3C:68 Authority key identifier: 8B:D6:45:27:8F:C4:A2:A2:00:BC:D8:07:2F:3B:3D:C7:93:12:53:6C Certificate issuer: /CN=8BD645278FC4A2A200BCD8072F3B3DC79312536C Certificate serial: 0DB1 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft Manifest number: 0DA3 Signing time: Sun 25 Jan 2026 08:16:05 +0000 Manifest this update: Sun 25 Jan 2026 08:16:05 +0000 Manifest next update: Tue 27 Jan 2026 08:16:05 +0000 Files and hashes: 1: 6I-Ff9iRlo2G-Pg-odEtdwVV_0M.roa (hash: 2X8j4tdHGu8yZowcoPwww7IklQabTy1cLRjctghTwv8=) 2: V2fVwgLecyKu7SMicrJV4I0B42k.roa (hash: UyFSVPkkfoqOuEbmNVhceP+dKKpgZM5IQ7bPaFwveVg=) 3: hhdkJLO7067VsUs97A0bf5U8JQc.roa (hash: vlO1zpnezKgnyNMX42nXqsn9ph8GR+mcssr1Tn1eBOc=) 4: i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.crl (hash: keh8HwZ59PtMEaIgSgdoCtbMf0yARiAUyDilKfoOQbs=) 5: iOQRTOW94B-UFGZIs_PrZtuNmZ8.roa (hash: 8yE0wvs5bk5aETxomeYl31mO0eVT4gtLV1kMu1NkYic=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Jan 2026 14:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3505 (0xdb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BD645278FC4A2A200BCD8072F3B3DC79312536C Validity Not Before: Jan 25 08:16:05 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=507392437A86C7D58A8700C818D68DF4E6ED3C68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:d3:cc:71:5e:c5:26:f0:47:6c:e5:79:5a: fc:77:4a:ed:b9:cf:38:d0:c4:38:bc:cd:ec:e9:8b: c8:ef:40:8b:af:79:22:90:30:c8:b1:04:91:69:c1: e0:39:4b:54:2c:82:07:f5:ef:84:89:26:ff:f4:17: b7:34:a3:f2:a7:2f:57:4d:23:99:89:c3:5f:5c:f4: a0:ed:20:3e:04:9c:1c:d3:79:7b:7b:1e:88:ff:13: 92:d7:46:85:bc:b6:3c:f0:82:39:28:42:e3:ce:d2: 41:8c:54:5e:b9:45:af:af:ff:c5:49:6a:d6:0d:95: 0a:b6:ed:bc:2c:97:1f:cc:99:0c:7b:6b:b2:53:03: 97:b7:5c:c0:94:27:b6:d3:0a:ff:f4:76:b1:77:b1: 84:62:b2:c5:51:9f:91:0d:3a:24:ac:a4:60:d6:c7: 7f:ab:72:89:95:bc:df:b7:5d:01:2e:2d:2f:83:a5: da:67:e0:22:d6:a8:66:36:d8:86:d7:db:16:a0:09: b9:f6:f1:b8:1e:dc:2b:e2:90:bf:20:b7:df:b1:74: 67:e3:a1:1b:18:b2:5e:23:de:83:c1:99:2a:c5:1b: 66:c9:59:5e:7d:32:14:dc:c9:79:0a:bc:51:9a:b2: 03:f7:0e:13:69:e5:3d:4f:27:0d:ae:28:be:99:fd: c1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:73:92:43:7A:86:C7:D5:8A:87:00:C8:18:D6:8D:F4:E6:ED:3C:68 X509v3 Authority Key Identifier: keyid:8B:D6:45:27:8F:C4:A2:A2:00:BC:D8:07:2F:3B:3D:C7:93:12:53:6C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CARL-NET/i9ZFJ4_EoqIAvNgHLzs9x5MSU2w.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:2d:7d:f4:79:cd:18:b5:6c:2b:c2:50:ea:69:23:d7:a6:15: dd:1d:96:50:a3:8d:5e:3e:f7:97:b2:ca:3a:0d:46:9a:3e:4e: a7:94:de:88:43:9f:d8:93:a3:cb:3f:89:17:13:33:8e:97:ba: af:21:6a:1d:9f:a9:86:c4:d5:ce:01:f3:60:68:2e:8f:c6:b5: 97:6e:c9:80:f5:8c:9e:70:60:79:1e:74:c4:01:68:85:81:3e: ef:d5:b9:30:f3:36:f6:8d:bf:95:9c:b2:cd:ed:22:23:7d:af: 71:2f:fe:e6:9c:03:ab:5c:69:c9:d2:2a:cc:18:ad:30:02:27: 94:39:74:90:a7:80:bc:05:c7:55:51:eb:02:34:42:bf:9d:73: 8e:8f:e5:64:39:40:b6:14:31:23:3a:fd:97:51:f8:79:c4:07: 2e:d5:e3:e5:78:e7:33:5f:6b:8b:69:12:8c:4d:41:7c:14:44: ef:78:bd:6b:65:a9:5e:44:16:bc:f6:64:65:41:1b:e3:69:9b: 18:f2:fd:97:44:f7:97:8a:5a:2e:b0:08:87:6d:d3:ad:02:33: 15:3a:ca:06:73:3b:6f:1e:fa:2a:d6:47:69:ab:91:cd:64:00: 74:5b:d2:4e:2c:3f:e8:ca:1d:3e:65:d7:99:f5:40:87:e1:2b: 0f:a4:3e:a1 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICDbEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEJE NjQ1Mjc4RkM0QTJBMjAwQkNEODA3MkYzQjNEQzc5MzEyNTM2QzAeFw0yNjAxMjUw ODE2MDVaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDUwNzM5MjQzN0E4NkM3 RDU4QTg3MDBDODE4RDY4REY0RTZFRDNDNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC9g9PMcV7FJvBHbOV5Wvx3Su25zzjQxDi8zezpi8jvQIuveSKQ MMixBJFpweA5S1Qsggf174SJJv/0F7c0o/KnL1dNI5mJw19c9KDtID4EnBzTeXt7 Hoj/E5LXRoW8tjzwgjkoQuPO0kGMVF65Ra+v/8VJatYNlQq27bwslx/MmQx7a7JT A5e3XMCUJ7bTCv/0drF3sYRissVRn5ENOiSspGDWx3+rcomVvN+3XQEuLS+Dpdpn 4CLWqGY22IbX2xagCbn28bge3CvikL8gt9+xdGfjoRsYsl4j3oPBmSrFG2bJWV59 MhTcyXkKvFGasgP3DhNp5T1PJw2uKL6Z/cEJAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUUHOSQ3qGx9WKhwDIGNaN9ObtPGgwHwYDVR0jBBgwFoAUi9ZFJ4/EoqIAvNgH Lzs9x5MSU2wwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0FSTC1O RVQvaTlaRko0X0VvcUlBdk5nSEx6czl4NU1TVTJ3LmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9pOVpGSjRfRW9xSUF2TmdITHpzOXg1TVNVMncuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DQVJMLU5FVC9pOVpGSjRfRW9xSUF2 TmdITHpzOXg1TVNVMncubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqS199HnNGLVsK8JQ6mkj16YV3R2WUKONXj73l7LKOg1Gmj5Op5TeiEOf2JOj yz+JFxMzjpe6ryFqHZ+phsTVzgHzYGguj8a1l27JgPWMnnBgeR50xAFohYE+79W5 MPM29o2/lZyyze0iI32vcS/+5pwDq1xpydIqzBitMAInlDl0kKeAvAXHVVHrAjRC v51zjo/lZDlAthQxIzr9l1H4ecQHLtXj5XjnM19ri2kSjE1BfBRE73i9a2WpXkQW vPZkZUEb42mbGPL9l0T3l4paLrAIh23TrQIzFTrKBnM7bx76KtZHaauRzWQAdFvS Tiw/6ModPmXXmfVAh+ErD6Q+oQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:10:45 2026 by rpki-client