This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft
File:                     b96jRwcVIpDB0mBv-_xpuSfUCls.mft (raw, json)
Hash identifier:          +etHhJqn7eB02KUYCZBpNZn5+jjhf8Oe6opedjD17g0=
Subject key identifier:   08:86:CA:42:E8:F2:8E:D7:D3:94:51:E5:B7:F5:FA:19:95:33:E4:F8
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Certificate issuer:       /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial:       0E0E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft
Manifest number:          0DBA
Signing time:             Fri 05 Dec 2025 10:06:00 +0000
Manifest this update:     Fri 05 Dec 2025 10:06:00 +0000
Manifest next update:     Sun 07 Dec 2025 10:06:00 +0000
Files and hashes:         1: -_ai9VO1uBJMqmkBAoIBnPkW9Pw.roa (hash: XCfD957Pod38Fbrk5M7grbA95Js3I1uiTN74PdQPsLM=)
                          2: 4wdwylUJcRLEldrxUSwC8AaIgD8.roa (hash: YjWjFkDIMWZ8Z8dH5yOrTngNU3vPiZ9fOh+Ng7zumDw=)
                          3: 8YnEiZWRaS3RbOhN1mk-FjExacs.roa (hash: vN3F2E1FMCKOlmgG3yMLRtmIYezbitzdoQVyYEroJnE=)
                          4: ALgcElpbRlWHeixD2jzKDHQoT6c.roa (hash: s46o61zq2I8YO9yS7G3rHpQ3BOsJCkV+XSduQYXtVbw=)
                          5: Q_GwnK7Zna6biSUtliABZ8vbmSw.roa (hash: +LI1o2yns8iX/Sr7KgdAE/cNgf6w02dfpNwFgjfS944=)
                          6: ZlQZvPJY1wL2GuyX6_QYq4pgEWI.roa (hash: US9unaX9h0rVbbzTLtmU6epTD//yIIiHJF/pCXNn2iU=)
                          7: _Euj15aa6O997nGOhN8V_HFrRqI.roa (hash: W5LsuvDW5136J/dAwKTv+GnT9zqFfGxgTZSgFChTWnM=)
                          8: aaBDyrWFuMcWKEjLZwjNwIds9AQ.roa (hash: Gr838RugwzT9CbqsM6il5bTlMVgbjKP1rWfNuR5GthQ=)
                          9: b96jRwcVIpDB0mBv-_xpuSfUCls.crl (hash: ngi4zvVuFL/TeIyl4uXc/ioDuhWv+CahzIBf8v8ioE8=)
                          10: oNJvx4A7PXt5uyVsqxYqoAo1wb8.roa (hash: BYYp7e8Yz96ldV00G1d0k07qTSVFLhfDVMpiDDMvMto=)
                          11: yl7s30wuYnqSXzYxOvJVrJJQuzA.roa (hash: APju7khdPg0fQ+9/BQRTZlNYbWKrn8c04PIMwllLkqU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 20:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3598 (0xe0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
        Validity
            Not Before: Dec  5 10:06:00 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=0886CA42E8F28ED7D39451E5B7F5FA199533E4F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:65:dc:61:27:03:df:b4:89:58:59:97:7d:bd:
                    5e:4d:4b:92:9a:f5:44:72:8e:23:6d:31:72:b5:1e:
                    3c:5a:fd:f8:3e:c1:9e:93:30:ad:a7:c9:73:36:88:
                    e9:f9:df:25:1a:01:e8:53:e6:12:ce:82:b2:a8:72:
                    bc:c2:7a:85:f3:d3:90:23:dd:4f:78:d4:10:04:14:
                    e6:cc:49:9c:3b:ad:97:3b:3c:9e:9d:22:3a:94:3b:
                    6e:6b:6a:9a:33:4b:b7:a1:6a:33:91:63:7b:39:56:
                    b0:40:e9:77:82:4e:73:5c:a3:03:c7:a6:47:0b:36:
                    fb:56:83:b3:a7:9e:74:79:f7:da:b2:35:97:28:a0:
                    09:03:82:ff:f1:90:91:f6:9c:e4:0a:a8:b8:87:dd:
                    90:ad:4e:ba:34:cf:62:21:a2:d8:a8:9f:d5:18:73:
                    57:86:d4:11:2e:c4:64:0b:0e:4b:c0:8e:dd:fd:d8:
                    3f:30:d4:06:c9:2a:48:a4:cd:d2:6d:a0:8a:3c:7c:
                    1a:e1:50:54:98:67:09:07:d7:b6:f0:c8:68:8a:e2:
                    51:54:b0:77:ba:96:0b:79:8e:0e:a5:e4:64:d0:90:
                    68:e1:3a:6b:61:9c:d1:7c:fe:4e:f6:02:75:8e:fe:
                    c1:a3:26:3a:f1:1a:c2:9f:d2:41:1d:17:24:0e:56:
                    bc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:86:CA:42:E8:F2:8E:D7:D3:94:51:E5:B7:F5:FA:19:95:33:E4:F8
            X509v3 Authority Key Identifier:
                keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:27:bc:77:13:0f:86:6b:2f:1e:e5:98:98:99:cc:17:88:ec:
         ba:b8:74:ae:1b:25:31:97:6a:ae:b3:ff:15:3f:df:7d:0f:ef:
         e1:1e:cf:20:2d:51:04:82:69:28:82:a5:2f:b3:49:24:c2:9c:
         34:58:68:d6:3e:7a:6a:70:07:6e:09:53:23:25:3d:5c:a1:3a:
         1f:e4:20:98:39:45:36:5b:74:c9:28:90:28:10:63:1f:1d:6c:
         1f:ed:c7:1b:8a:28:80:23:a1:2d:9b:f9:b7:95:93:02:7a:cd:
         6f:7b:4e:af:dd:d8:94:1c:09:d1:06:cb:9c:a4:5f:17:ae:ea:
         a0:94:1a:7b:5f:26:e1:2b:b4:28:7c:49:c1:61:be:18:b7:0d:
         4a:b3:bf:85:af:aa:de:05:67:04:38:2a:4c:e0:53:47:6e:bd:
         49:58:19:0a:64:9f:8e:ee:98:19:97:57:5b:2f:0d:8b:9a:ea:
         5f:c8:bb:18:81:e6:04:53:65:53:2f:92:56:22:cb:dc:40:e6:
         62:ce:c9:af:f5:7b:33:6b:0f:cb:37:8e:bd:d5:0c:b0:90:f9:
         45:5c:c2:13:bd:f4:1b:cb:21:7e:49:93:f8:8a:70:f1:21:95:
         48:be:5a:84:93:58:31:7b:d6:80:b1:da:4d:ee:15:62:d4:56:
         68:a9:1f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:04 2025 by rpki-client