This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DREAMCITY/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.mft
File:                     _E-Ji6SA2A0EpIpsfjmnIcqrS0c.mft (raw, json)
Hash identifier:          oLFEq0fuOixN+NbGLBAY4WfpBIFR3glXCg64D4rJ3A8=
Subject key identifier:   43:4D:FC:4B:07:1D:51:02:6F:2A:B1:E4:9F:FB:DA:8C:E4:DE:03:A1
Authority key identifier: FC:4F:89:8B:A4:80:D8:0D:04:A4:8A:6C:7E:39:A7:21:CA:AB:4B:47
Certificate issuer:       /CN=FC4F898BA480D80D04A48A6C7E39A721CAAB4B47
Certificate serial:       0B0C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DREAMCITY/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.mft
Manifest number:          0B0C
Signing time:             Sat 06 Dec 2025 23:06:26 +0000
Manifest this update:     Sat 06 Dec 2025 23:06:26 +0000
Manifest next update:     Mon 08 Dec 2025 23:06:26 +0000
Files and hashes:         1: _E-Ji6SA2A0EpIpsfjmnIcqrS0c.crl (hash: kMHNuVTsULeyhgQZtdavFwMeR4D3y43je3UhELmibiM=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/DREAMCITY/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DREAMCITY/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 06:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2828 (0xb0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC4F898BA480D80D04A48A6C7E39A721CAAB4B47
        Validity
            Not Before: Dec  6 23:06:26 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=434DFC4B071D51026F2AB1E49FFBDA8CE4DE03A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:1b:70:17:cd:31:d5:7e:04:bd:7e:bf:cb:
                    c9:dc:92:b0:12:9c:dd:d1:25:7f:8b:55:a4:da:82:
                    65:fe:81:d6:7d:92:4f:ae:9c:99:69:99:32:bf:a6:
                    85:15:6a:43:a9:94:79:99:d6:fc:f3:c2:5b:f7:5c:
                    6e:b8:71:4d:fa:b2:2d:65:ab:00:66:2f:6e:77:d1:
                    75:64:88:c0:f5:70:57:d2:fc:fe:87:d8:2b:93:e1:
                    26:e7:ad:96:65:f7:46:cb:9c:f9:4b:21:e5:6f:f3:
                    9b:3f:b8:aa:fb:ec:f7:55:ec:b2:b3:54:de:a4:fe:
                    12:e0:ae:c1:2d:a9:06:e5:ae:c9:74:a5:94:2e:1e:
                    2c:a7:6e:4f:95:53:89:83:52:7d:2a:f3:9a:1b:f9:
                    45:f8:9b:f9:49:c9:b8:d9:d7:20:8c:c9:7d:21:8a:
                    65:ab:3a:05:54:7b:ab:4a:db:a6:33:f9:b5:35:da:
                    86:aa:e0:60:79:67:d8:3b:d2:fd:29:b4:11:e8:18:
                    25:d4:01:f7:31:59:ff:30:cc:73:73:97:79:a9:5b:
                    9c:73:46:f7:2a:5e:8a:b6:84:27:19:5f:f9:f3:3d:
                    5c:69:35:90:da:be:cf:9a:34:20:8e:67:2f:d4:92:
                    86:e4:93:9f:f6:b1:bf:74:d6:94:8a:5c:d9:32:a0:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4D:FC:4B:07:1D:51:02:6F:2A:B1:E4:9F:FB:DA:8C:E4:DE:03:A1
            X509v3 Authority Key Identifier:
                keyid:FC:4F:89:8B:A4:80:D8:0D:04:A4:8A:6C:7E:39:A7:21:CA:AB:4B:47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DREAMCITY/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DREAMCITY/_E-Ji6SA2A0EpIpsfjmnIcqrS0c.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:8a:cb:f5:ca:c6:11:43:48:ab:fd:6d:10:14:8e:5c:f1:
         91:f5:4e:a6:6c:46:18:e5:f5:60:6d:32:7e:a3:26:c3:99:b1:
         68:41:4e:db:ce:a4:5c:5e:9f:52:4a:29:d3:4a:34:6c:41:c7:
         07:85:33:65:27:61:e1:60:21:c2:52:74:54:06:d9:ef:4e:71:
         93:ad:5d:c8:74:0b:a5:6c:7a:b7:f9:d3:63:32:f8:71:c0:45:
         52:11:4f:4f:c0:37:0b:de:27:38:a7:d9:18:06:21:99:36:7b:
         96:ad:f5:d7:07:80:75:10:a1:c6:20:52:ef:1d:b1:dc:d8:cc:
         fa:d3:4e:72:dd:25:a0:4a:c4:51:3a:cb:a4:c9:46:00:03:c3:
         50:e7:61:d9:49:ac:7f:3a:5f:24:bd:d9:fc:61:f3:39:7c:0b:
         b1:45:b3:0b:e7:84:72:c6:55:f8:de:e7:4d:3f:f7:7c:db:0c:
         44:f3:a6:f8:c4:bc:fc:76:83:ae:59:bf:f3:db:c4:39:fd:36:
         ff:a4:ec:ce:bc:0f:7a:fa:d2:11:57:6a:4c:dd:de:d2:ea:21:
         34:e5:d2:c8:ba:56:a7:49:f5:50:fc:e0:41:0b:b6:c2:6c:7c:
         6c:04:d6:19:ba:4c:e6:c0:6b:af:21:56:e6:40:71:67:aa:cf:
         ed:e7:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:57:09 2025 by rpki-client