This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.mft
File:                     gwLeGTWY7cNiItkp-tZng2fWLiE.mft (raw, json)
Hash identifier:          3NVTkuzc1KTMdds+pfszEfU7Tzz71Vvt5siWzXl7bfc=
Subject key identifier:   75:E9:DF:9E:69:A1:B2:5A:4A:5F:73:92:30:1A:D3:BB:22:51:C2:64
Authority key identifier: 83:02:DE:19:35:98:ED:C3:62:22:D9:29:FA:D6:67:83:67:D6:2E:21
Certificate issuer:       /CN=8302DE193598EDC36222D929FAD6678367D62E21
Certificate serial:       13DE
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/gwLeGTWY7cNiItkp-tZng2fWLiE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.mft
Manifest number:          13D5
Signing time:             Fri 05 Dec 2025 10:05:04 +0000
Manifest this update:     Fri 05 Dec 2025 10:05:04 +0000
Manifest next update:     Sun 07 Dec 2025 10:05:04 +0000
Files and hashes:         1: gwLeGTWY7cNiItkp-tZng2fWLiE.crl (hash: rizZ/3fhThcUykNreT18YE2QydcLA7LaQzszh6dvqo4=)
                          2: lucsKQ_k7erujKxt8qVBkhFkQUM.roa (hash: wgpw6zNUNOjZoXJPctyxIsDj2EpRRl95KQxfyXVX4go=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/gwLeGTWY7cNiItkp-tZng2fWLiE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 20:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5086 (0x13de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8302DE193598EDC36222D929FAD6678367D62E21
        Validity
            Not Before: Dec  5 10:05:04 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=75E9DF9E69A1B25A4A5F7392301AD3BB2251C264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:8b:a3:9a:0f:af:5b:d0:39:19:63:2d:b2:
                    cd:e0:37:a8:0a:d9:bb:97:01:79:1c:aa:bd:82:40:
                    68:4d:18:e7:ea:b1:03:48:1f:c9:fe:70:bd:ad:83:
                    e1:14:a9:c0:be:a3:70:c5:11:f1:72:38:a7:87:b3:
                    a3:79:20:16:70:34:fe:47:c5:32:35:cc:85:59:c8:
                    8a:9f:2e:7b:22:6b:8a:f3:fb:ac:3c:33:11:af:98:
                    23:08:f9:52:5a:e2:10:d3:df:63:f6:cd:9d:36:80:
                    b2:68:de:1a:8a:53:f7:35:08:6b:29:c3:64:ca:61:
                    f1:0b:73:88:8a:52:39:b2:f6:1c:82:74:5d:37:43:
                    a3:e5:32:bd:28:c9:ae:26:c8:96:4e:29:c0:6c:c4:
                    89:eb:48:11:2f:73:46:35:de:10:72:72:54:90:61:
                    41:d9:72:39:5c:0b:ff:be:ac:d0:13:e3:b2:c3:05:
                    36:c8:e4:a2:1e:e7:5a:3a:1d:5c:a2:4d:3e:89:58:
                    ab:fd:c4:a1:cc:ca:62:76:d7:22:eb:74:f9:d9:8c:
                    fb:c8:ad:22:81:6e:3d:e4:b8:da:bd:f0:eb:36:f3:
                    00:cb:2d:61:a9:b9:1e:f7:8c:d2:09:af:63:1b:e7:
                    c9:a7:3c:95:dc:df:3e:a8:58:0c:f9:3d:a6:b4:ce:
                    c4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E9:DF:9E:69:A1:B2:5A:4A:5F:73:92:30:1A:D3:BB:22:51:C2:64
            X509v3 Authority Key Identifier:
                keyid:83:02:DE:19:35:98:ED:C3:62:22:D9:29:FA:D6:67:83:67:D6:2E:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gwLeGTWY7cNiItkp-tZng2fWLiE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EHHKY/gwLeGTWY7cNiItkp-tZng2fWLiE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:a2:4c:d2:bf:9e:2b:0f:e8:c3:d8:e0:4d:8e:b4:74:e1:84:
         0e:09:7b:c4:4c:1d:49:48:0e:79:4d:6e:28:41:d1:b8:91:e5:
         7f:aa:ea:11:16:b0:fc:18:4a:b1:1b:09:86:26:bb:08:15:af:
         76:ff:26:ae:26:15:7f:41:39:bf:32:11:4e:b5:ef:75:88:75:
         64:d1:61:c0:51:d1:07:05:c9:b8:7e:cc:d6:b4:70:38:b9:c4:
         a1:54:c7:71:5d:fb:46:13:b2:9c:c7:9d:47:c8:81:9c:38:fe:
         8b:e4:6d:4d:4a:cd:c7:fa:76:7f:66:e4:1a:ef:8b:d1:9a:ae:
         33:f0:5c:81:a0:04:72:5c:68:39:09:ec:26:d3:7c:ea:1a:6d:
         1e:1c:13:af:da:83:cd:89:45:ab:14:50:1c:f8:75:f1:97:df:
         fb:42:01:31:06:4a:a3:fd:84:fc:1a:23:af:8d:8e:e9:af:6d:
         74:56:e2:ae:1a:b9:01:0c:64:71:0a:7f:09:0d:a1:cb:5f:29:
         3b:e5:d1:08:67:15:54:e7:67:1b:43:70:47:ca:43:6b:43:64:
         19:ec:6e:38:7e:4a:0f:df:cb:75:79:c8:6b:9c:5c:03:71:b2:
         7e:d9:e1:e7:05:b8:a7:43:8d:4c:ec:a9:9f:e5:c8:ab:6b:7f:
         dd:9b:20:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:10:33 2025 by rpki-client