This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.mft
File:                     TEffdI7A_xaRIoPOwQ7BDtMtJE8.mft (raw, json)
Hash identifier:          Q5uNY6PdLivZZc9b+hglFYtsNNIbh6llCIbtqJHM9bo=
Subject key identifier:   D7:E8:B4:80:C4:C7:27:4D:FF:97:F4:BD:EB:57:C3:3F:84:91:C0:9C
Authority key identifier: 4C:47:DF:74:8E:C0:FF:16:91:22:83:CE:C1:0E:C1:0E:D3:2D:24:4F
Certificate issuer:       /CN=4C47DF748EC0FF16912283CEC10EC10ED32D244F
Certificate serial:       0DB8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.mft
Manifest number:          0DAD
Signing time:             Sat 06 Dec 2025 23:06:34 +0000
Manifest this update:     Sat 06 Dec 2025 23:06:34 +0000
Manifest next update:     Mon 08 Dec 2025 23:06:34 +0000
Files and hashes:         1: TEffdI7A_xaRIoPOwQ7BDtMtJE8.crl (hash: sbFprg/toxEkkiAcyV+MmFPSzrjEfxe2GQOqrVB/zmQ=)
                          2: snAHs0ITH_XYDtljaq1F5MNbFhg.roa (hash: Ftw6S66K0ExrjZcPVKbM0s5z5qkQPI1+3FZoM1zFe7U=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 06:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3512 (0xdb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C47DF748EC0FF16912283CEC10EC10ED32D244F
        Validity
            Not Before: Dec  6 23:06:34 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D7E8B480C4C7274DFF97F4BDEB57C33F8491C09C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:fd:0e:fe:75:76:0d:6a:27:8d:10:c0:ba:
                    72:e2:63:52:46:07:b4:a7:77:ff:17:c3:8a:fe:4a:
                    ee:dd:00:b3:78:cc:46:fb:ca:d8:37:66:71:3b:b2:
                    e7:b8:8d:a7:5c:c8:56:6a:90:a2:62:43:21:22:0f:
                    b9:56:83:12:e6:78:7a:e2:fd:87:17:49:4d:be:6f:
                    1e:e7:24:68:e5:6b:5a:c6:43:4a:e1:48:66:43:ed:
                    24:26:55:b6:34:61:d9:79:21:8e:74:55:d9:aa:77:
                    a7:0c:3d:b8:a5:8f:9a:d3:f7:2d:c4:db:eb:47:bd:
                    d0:6a:fa:85:b5:c1:0a:19:cf:54:8d:54:76:f4:63:
                    0d:7f:b8:2a:ad:12:e6:ae:de:e1:a2:ba:be:23:57:
                    e8:1d:3e:82:7c:96:d4:58:44:86:86:29:f2:ba:61:
                    45:83:ec:63:62:d1:4f:65:cf:b5:7f:1d:94:fc:4b:
                    ef:22:65:f0:c4:d0:4a:7a:00:16:2f:ed:df:48:83:
                    1e:17:ed:b4:68:aa:74:5c:8e:7a:4d:77:64:37:5a:
                    30:36:85:57:8a:65:dd:8e:01:30:07:89:04:db:66:
                    c0:45:b4:f4:51:21:e7:2e:ec:9d:38:37:a5:a0:20:
                    04:ca:b3:82:69:34:91:2e:b7:4c:98:c2:5f:e8:0d:
                    58:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E8:B4:80:C4:C7:27:4D:FF:97:F4:BD:EB:57:C3:3F:84:91:C0:9C
            X509v3 Authority Key Identifier:
                keyid:4C:47:DF:74:8E:C0:FF:16:91:22:83:CE:C1:0E:C1:0E:D3:2D:24:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TEffdI7A_xaRIoPOwQ7BDtMtJE8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSNET/TEffdI7A_xaRIoPOwQ7BDtMtJE8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5e:75:91:ed:42:54:1d:48:98:da:2a:05:6c:a4:c6:98:78:
         56:49:d4:c1:8d:80:e4:5f:60:d3:0b:57:f9:b5:94:f5:4c:b2:
         cc:07:eb:20:df:7c:23:6d:bd:cb:49:fe:0b:e4:1e:7c:05:29:
         21:6f:8e:a3:fa:ab:7e:fb:b6:f5:e2:bc:69:df:38:17:f7:ab:
         f5:a4:d7:1f:6a:44:ba:51:ff:ea:11:10:37:ee:b4:c7:ea:59:
         13:c9:61:f3:e0:d5:24:85:ee:8f:2b:2d:e0:cf:92:0f:59:8d:
         b0:ac:73:04:08:9d:69:3d:f8:ff:3d:ac:2a:de:ee:82:77:fc:
         ef:c4:8b:68:70:5d:35:26:27:3c:ed:03:e9:33:76:11:c2:3b:
         09:54:39:08:9b:76:0b:cc:fd:54:ed:9e:ab:02:3e:f9:c4:b9:
         f6:8d:d8:33:2e:f3:57:a9:c5:d4:84:cb:75:dc:76:06:ba:b6:
         5b:49:09:58:6b:5d:b7:1e:28:8b:2e:31:e4:ee:97:f9:52:86:
         ff:6d:ae:39:84:d5:ed:90:2f:81:48:16:37:ad:84:f5:a3:98:
         fd:71:65:69:9e:e4:e9:d4:e9:97:8a:d5:cc:74:ad:71:da:e0:
         bd:cf:91:9c:6f:2e:3d:d1:51:c1:02:46:d1:45:2e:a5:8b:1f:
         bd:ac:79:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:00:17 2025 by rpki-client