This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
File:                     7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft (raw, json)
Hash identifier:          RBv+LcjvTl+Onvkaq3Zj9o7v01Ha5MXBsRZOZ2erPOs=
Subject key identifier:   99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46
Authority key identifier: EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1
Certificate issuer:       /CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1
Certificate serial:       0D8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
Manifest number:          0D8E
Signing time:             Fri 05 Dec 2025 10:05:56 +0000
Manifest this update:     Fri 05 Dec 2025 10:05:56 +0000
Manifest next update:     Sun 07 Dec 2025 10:05:56 +0000
Files and hashes:         1: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl (hash: IDQV/MhcJsH9tLCp9l+GdkhwoLCHluJdhgb9rZZ6njw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3470 (0xd8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1
        Validity
            Not Before: Dec  5 10:05:56 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=99D31B221C7F6DD440390CFE6A41DC1E11986946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:ea:f1:d9:4d:9c:85:e3:3b:53:83:36:84:
                    34:d7:62:da:04:b6:c1:18:13:b0:ce:e1:ff:05:5a:
                    f4:bc:a0:59:fc:0d:e1:51:e9:09:c5:e2:c4:19:0f:
                    6c:31:10:0b:57:8c:a0:60:e2:a0:26:63:04:af:38:
                    22:c1:0d:2f:da:42:9b:69:e2:93:d3:d2:d1:c6:34:
                    ea:bb:70:9c:3d:2c:63:08:5a:1c:44:b2:83:4b:bc:
                    b4:46:76:f3:a8:11:48:15:62:ad:82:fd:c1:a7:03:
                    d4:6a:12:b1:31:29:9f:83:1b:a3:de:36:7c:f9:f3:
                    42:bd:4a:31:db:42:c3:c5:5a:55:eb:e1:2f:5a:98:
                    be:16:5d:01:4b:55:d8:e8:d7:00:e3:46:a2:e0:c8:
                    63:75:9e:9f:fc:4f:4b:6a:52:54:3b:6d:ef:a7:77:
                    86:a3:45:80:bc:9f:cc:30:1f:30:d6:7b:63:38:37:
                    d6:34:27:70:c8:ae:3b:03:4f:24:23:25:b7:6e:95:
                    67:57:92:5b:5d:9e:c1:62:c5:75:e3:55:b9:87:d0:
                    71:d5:8f:49:68:9e:d4:a3:12:6d:56:86:5d:19:fb:
                    7e:d0:53:17:04:0d:cc:6e:e2:65:66:42:38:c2:16:
                    5e:14:35:13:2f:7b:13:71:11:ea:fa:4f:46:09:4b:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46
            X509v3 Authority Key Identifier:
                keyid:EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:54:05:00:7d:85:aa:08:eb:0e:d7:e5:44:a3:a7:28:27:62:
         35:c2:99:a5:75:58:11:f6:45:08:32:62:ef:40:af:c3:72:2d:
         35:44:07:a8:a2:3e:82:56:69:84:63:0f:5e:45:0b:75:33:30:
         2d:f3:54:96:32:91:fd:74:53:db:63:50:ba:9b:29:ea:9d:00:
         4d:22:2c:e4:23:0f:e9:ba:d2:f1:d2:0e:39:ba:f9:c9:ea:93:
         d3:59:53:23:da:c5:23:7f:20:a9:fd:b2:1d:1d:85:e2:23:2d:
         a7:8a:3b:aa:c4:4f:43:07:cb:cf:82:0e:5c:44:a5:51:fb:4c:
         83:8a:ca:b4:f4:cf:b0:2e:22:1a:ba:5c:c2:05:ba:2b:50:43:
         55:cf:ac:17:47:ea:bf:83:49:18:94:c2:59:46:37:dc:1d:fb:
         0c:1f:11:3d:e9:61:1d:85:94:ad:41:bd:97:a4:ed:b3:80:3b:
         73:e4:0c:f9:96:9b:1c:9a:4e:a8:d5:9f:c2:ac:b8:5c:c6:4c:
         11:05:08:36:84:15:2d:10:a5:cd:ff:55:11:f4:de:20:7b:1b:
         cd:2a:04:c0:b3:fa:a7:cc:3f:be:e1:56:8d:04:77:88:b4:eb:
         ac:c0:5e:9f:45:96:99:47:ee:26:cf:bd:5d:b6:64:ef:f9:15:
         30:e4:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:08:39 2025 by rpki-client