This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
File: Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft (raw, json)
Hash identifier: 3DDRh0Rt6LJsSRcdvH8LnfbT7iy/ZilH+K8+IMJi+gg=
Subject key identifier: B7:1D:B0:70:54:D3:D6:3E:B1:D7:3C:F6:DA:82:C0:1F:7D:FD:F1:37
Authority key identifier: 43:51:4F:48:5E:C0:1C:9D:0F:31:1B:EA:61:D9:3B:D6:2C:23:69:92
Certificate issuer: /CN=43514F485EC01C9D0F311BEA61D93BD62C236992
Certificate serial: 03AA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
Manifest number: 03A4
Signing time: Fri 05 Dec 2025 08:29:52 +0000
Manifest this update: Fri 05 Dec 2025 08:29:52 +0000
Manifest next update: Sun 07 Dec 2025 08:29:52 +0000
Files and hashes: 1: Q1FPSF7AHJ0PMRvqYdk71iwjaZI.crl (hash: ZPq01tFVL4hrBLHPzfe58XqpNTKwncGiWP/ErBb4Fm0=)
2: UfKOZ2h5hVDq-J996AWvgJuf74k.roa (hash: ReuDPJcG6dTbXoELLRs6cHJyN6jJYQ3PmHw4NoD0Z9M=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 01:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 938 (0x3aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43514F485EC01C9D0F311BEA61D93BD62C236992
Validity
Not Before: Dec 5 08:29:52 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=B71DB07054D3D63EB1D73CF6DA82C01F7DFDF137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:98:9c:ce:be:e2:9d:bb:4c:70:4a:fc:73:
3c:29:ba:79:69:9d:91:ad:b3:33:59:41:c7:be:15:
69:bd:87:da:03:8d:27:e5:d9:7c:0a:ce:de:12:f2:
4f:fb:e5:87:85:5c:7d:6f:42:6d:32:e9:ee:c4:3a:
d2:0b:05:ed:91:22:5e:53:ae:16:ba:3d:98:ff:37:
29:c0:c1:40:f8:4e:ad:47:da:34:e2:aa:0b:16:16:
0f:b7:d5:0b:70:2c:44:59:56:fd:55:56:12:bc:aa:
a7:c0:09:2a:c8:9f:ac:f7:4c:be:63:86:b8:ce:3a:
7c:59:ef:40:81:0a:99:1b:a7:e1:a0:98:9a:c7:47:
5b:e2:f6:00:22:8e:f0:5b:54:51:17:5c:78:bc:5b:
f3:d7:1b:ca:34:64:2c:40:2e:c4:01:8a:32:81:05:
e5:f5:b9:84:33:5b:00:57:4e:fb:2d:dd:8a:93:1d:
66:88:ec:75:62:b5:47:f9:ea:1c:b0:2f:91:85:03:
a4:af:f0:b8:7c:1f:b4:3b:b2:d4:e9:1d:36:08:85:
cc:a9:23:39:91:d7:1b:5c:ac:ea:05:0e:cd:00:fc:
6f:80:88:92:f4:55:28:37:fe:dc:f5:e2:36:3c:2e:
bf:68:76:c1:60:34:ef:99:b1:98:82:92:d4:02:e1:
64:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:B0:70:54:D3:D6:3E:B1:D7:3C:F6:DA:82:C0:1F:7D:FD:F1:37
X509v3 Authority Key Identifier:
keyid:43:51:4F:48:5E:C0:1C:9D:0F:31:1B:EA:61:D9:3B:D6:2C:23:69:92
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CATHDD/Q1FPSF7AHJ0PMRvqYdk71iwjaZI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:28:13:b4:db:d7:86:42:ae:45:61:3c:61:bb:7c:94:cb:73:
66:ae:8f:53:78:0b:bb:bf:e9:db:aa:d2:4b:99:e0:66:83:7f:
2d:c5:32:70:fe:9e:25:50:d8:51:31:16:6a:6a:eb:90:17:ce:
8c:ed:c1:44:e9:b8:ed:91:2c:ea:6b:40:21:4f:ec:20:1f:4b:
f5:c8:9e:18:e3:80:c5:0a:d0:7f:69:1b:c6:53:12:2d:00:57:
eb:91:08:a3:31:7f:04:90:70:49:33:75:99:45:f8:77:8c:c2:
f8:6f:fc:be:1c:f1:00:ba:06:40:9a:b2:51:9d:08:88:17:0f:
11:f9:21:99:9f:88:ef:ad:f2:86:73:5d:cc:eb:5e:48:0e:42:
2b:8e:fb:77:f9:57:38:73:84:4e:02:6e:d1:c3:c0:6e:08:12:
5c:7f:24:d5:5b:aa:f3:27:bd:ec:f1:03:2f:62:5a:d0:7a:20:
e0:6f:e5:7a:b1:05:14:de:02:7a:ec:06:6d:2b:f7:5d:1c:b9:
fb:1f:58:93:38:5b:d8:d3:ab:7f:ce:42:42:18:e8:f4:b7:98:
00:81:0c:15:d9:f8:06:a7:2f:ff:d8:4f:e2:f7:d7:c6:d8:c9:
2d:b7:1e:f5:39:c1:82:55:8f:ac:2b:b4:bf:82:98:c4:1a:8f:
d1:90:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:46:01 2025 by rpki-client