This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
File:                     q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft (raw, json)
Hash identifier:          3iWUKBdxmQnI1lkvD261YhlAHGPQwPhDilml1ebrzkI=
Subject key identifier:   F0:E1:7A:BF:CC:5C:FF:64:01:BB:C9:F4:9F:2C:63:98:CC:50:7D:9B
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Certificate issuer:       /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial:       0859
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
Manifest number:          07E3
Signing time:             Sat 06 Dec 2025 08:05:42 +0000
Manifest this update:     Sat 06 Dec 2025 08:05:42 +0000
Manifest next update:     Mon 08 Dec 2025 08:05:42 +0000
Files and hashes:         1: 0cm0Z7YgjV8iT202k0DwpMRhyfQ.roa (hash: NB7AtyJ/gv5jdRxwaS5k9Y+cLlR3AyiNu4aspWF9yiA=)
                          2: 3f63BadjGAUYs1x3v4BGWhdZApY.roa (hash: tkPlWwXkwcu1oG6vW9aQalv5LL5xGga44ht1lPbEm40=)
                          3: 3o0MyGsph19QMioV8dAY38XyrUc.roa (hash: umOyiAyCMz6ZOB8ugCBEa2klieiuAsNSjRS3bcRXhko=)
                          4: 4T7hYy9R_gAPqja_uuLgoJCAcrE.roa (hash: QtGMxl+HFh5aMEuZ0sYHbmxReOl1vspkRkUoCc8Uq1g=)
                          5: 5TzDpBfnLTAQxNvP09m5GNG4JCQ.roa (hash: vvplqjRtyDKlQoipChhhpH5hF9AumMJ25Z2F6CIx3Ww=)
                          6: 88dWmlI19qyWt2XW84Qm9g3a7lM.roa (hash: 55hAf7LVBaSU6FF/o58mzxfoknoy6+GPfHvjsN+IbDI=)
                          7: GIG8ZdyB5-c-1FoFLP4Ft_6LUJc.roa (hash: 4oBckO6paU72uWlQ+WBdkPSJ5BEE5JF4HeLlE/nNLLU=)
                          8: HkDv6JRmv3EUd0VuTcitV8iuAoc.roa (hash: ZLa5vFMilTLvMaHqpus8c0iR++yiqKOTufQvKaJhc7I=)
                          9: I6nkNa9rDeNSxvqeKt-e7ufBf3c.roa (hash: Gba91SUvxGLQxat7+zKgk0aaFNGCHgI8m38yJgXpn3g=)
                          10: LrDQUDQhMEFoCs9fICylNFhe7C8.roa (hash: Fqh0M1J163IHLpVJ5y3GP71aMdX4Ro56qfgBCjSs69w=)
                          11: NqPoQSZZ4x4VcAJRTM0_ZIBWIc0.roa (hash: x4fWI7aJqKfK4EReYWkxiMYa3/Zm5/TNfNV3Qs48hSY=)
                          12: QmspA3o7EFmJUCDnLzODvmUWYB4.roa (hash: UrSR6CmDgr//cqTlkRevhIXCWr0eQetrrcLdair8v28=)
                          13: TQeU6wh8rfeYXSvna9sswcCjVuU.roa (hash: LT+qWXLS643Fc8KRgOY6t2pG3S7loOypQI0vSIGdPnY=)
                          14: XnF1O1tH17U8vavVryrpuRod5Bw.roa (hash: y3Qkt+7T0dpoSq61aviYDCfynRnDkEIu6UX/3q4znlE=)
                          15: cAAoRYjs4Fhulg_NrFpgTKFSug8.roa (hash: GU3lGnuoC/0EIa5DEUSqxYffOaPxsUIoWI+JqYFi0K4=)
                          16: dJpQtzndugIaMgKpkejUNi8lrZ0.roa (hash: nZlSzvE0stUK/grdixuxy9Ws4R/l340poF1OTnaXyZg=)
                          17: ffQedrZ__zOr9Kh_lmDecV09cVY.roa (hash: lDAZ686aBzLfXPTD0B8tadH4tII2dljEkHzs84KD01U=)
                          18: lEuDNkwq4gnXhdcbA0Q2VC12ndA.roa (hash: 9RP4YrOGY9ORX0seTrO07h9sco8W8UTLEiI+xKZsSTw=)
                          19: luycyQCVnCSeD4L7Alh2HW7K8WE.roa (hash: NKeSwfVC6MnpCu1V8tuFvgPHdMm3NDSYpXHpT7g9wMc=)
                          20: o626lk6kU65aHOXqgfxmubwtLOk.roa (hash: JoYElnku35E7GuOzrfNMYseTGS1epI/0LyHXeQUW4UU=)
                          21: ogod4tREKKVUZJhHB4WjUpzplkE.roa (hash: R9MnN7pJfp5ko72gvks4bfv/8xa8aDgc/apRlRi2pbI=)
                          22: q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl (hash: IHkQyQH+LZc4aA3XTmmcdTXr9rbo+HU80mYwhTtQx7U=)
                          23: qph_IFR3oKkcveb27M5eZ1xyRxk.roa (hash: VFGcAzUTJfdPA9guAnWBUwVPumt1YYSt1Q3PGwIWXpg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2137 (0x859)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
        Validity
            Not Before: Dec  6 08:05:42 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F0E17ABFCC5CFF6401BBC9F49F2C6398CC507D9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:31:ee:85:bf:d6:ad:e7:34:1c:85:d0:c0:
                    79:d7:0b:33:9c:bc:10:5d:53:1a:da:6a:4b:93:5c:
                    79:25:02:49:e6:06:ad:25:43:85:00:df:14:85:b4:
                    a4:2c:67:ff:34:04:a6:f6:e3:10:23:1d:03:47:5e:
                    fd:0f:f5:8c:69:67:91:92:16:28:ed:14:a3:8b:23:
                    db:76:2f:53:2f:8a:54:78:81:f6:1e:2d:62:c2:cb:
                    15:9f:80:e9:c2:7e:ae:63:10:7b:25:72:16:85:1d:
                    ee:72:66:0a:d6:63:3c:76:38:3c:70:2f:ea:06:e1:
                    26:cc:73:4c:8b:5a:c8:19:98:68:b3:fb:1e:a3:f1:
                    11:4d:b3:06:7d:30:87:4e:d2:98:fa:f2:54:0b:23:
                    36:e4:c8:31:df:fa:18:f9:be:4c:60:66:d5:59:9d:
                    77:f4:09:4e:ce:c2:81:cb:35:f7:42:54:87:c2:f4:
                    99:93:67:80:7b:37:60:d6:c4:94:a8:77:e8:0e:65:
                    e0:22:3b:71:83:5e:4c:0e:7c:0d:95:83:7a:c5:d1:
                    3c:3e:f0:c1:d9:f1:9e:e4:15:4b:60:e7:a7:c2:2d:
                    38:1d:f5:80:46:cd:ae:e0:48:d7:4a:1b:e4:c4:9a:
                    65:48:93:8c:f6:7f:f2:27:59:4c:cd:a6:34:98:e8:
                    b3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E1:7A:BF:CC:5C:FF:64:01:BB:C9:F4:9F:2C:63:98:CC:50:7D:9B
            X509v3 Authority Key Identifier:
                keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:40:b9:e6:f2:89:dd:65:87:85:fa:88:c3:b8:ea:3a:50:3c:
         53:5e:40:ba:3e:75:31:a6:53:e3:fd:97:4e:fb:12:74:47:07:
         11:93:70:83:69:7d:29:0f:c9:23:b1:58:fe:4c:70:56:85:85:
         f2:76:b3:0b:7f:0b:25:e8:02:ff:1a:d4:fc:85:76:54:20:6f:
         1f:d1:93:97:71:53:d1:15:07:a0:31:c4:54:28:b1:d5:59:0b:
         bd:4b:e6:42:88:e4:3a:24:6c:8a:79:27:47:04:27:4c:61:44:
         6e:28:4e:b2:51:55:a8:7d:e9:c9:ab:b1:ae:a0:20:7d:d8:ef:
         3e:ea:9f:4e:4b:39:88:d0:57:a8:31:29:28:d5:a4:07:a5:20:
         38:56:94:53:76:86:0d:98:f8:bf:70:d0:cb:10:b6:84:dc:92:
         45:a8:9a:bd:ad:11:e6:7f:c4:ae:3d:e9:15:f3:93:6b:2a:ed:
         2b:f6:47:51:f7:34:69:87:5c:05:c2:f8:50:b4:34:76:62:3a:
         22:20:99:fd:3f:e5:56:a6:39:85:e4:01:ee:4e:69:1d:6a:07:
         63:27:b9:21:65:64:bb:13:3f:f4:25:28:f4:dc:83:17:0a:96:
         3f:12:ae:d8:5d:4b:88:a0:4c:30:77:18:e5:8b:b9:64:1c:7d:
         5c:51:3c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:09:23 2025 by rpki-client