This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
File:                     KUthydo1hCdBgvogr4Ym4a6oHzI.mft (raw, json)
Hash identifier:          dhflBSnIB4/EhGrnZ7B4D2YWUzFpPmU4DTB7gVEtnsc=
Subject key identifier:   F9:17:1C:46:A9:29:0B:99:6E:70:83:C2:12:3E:3B:A4:53:2C:4E:BF
Authority key identifier: 29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32
Certificate issuer:       /CN=294B61C9DA3584274182FA20AF8626E1AEA81F32
Certificate serial:       0240
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
Manifest number:          023E
Signing time:             Sun 25 Jan 2026 15:16:28 +0000
Manifest this update:     Sun 25 Jan 2026 15:16:28 +0000
Manifest next update:     Sun 25 Jan 2026 21:16:28 +0000
Files and hashes:         1: KUthydo1hCdBgvogr4Ym4a6oHzI.crl (hash: r8yXkGJn240/zlMaumlPSesYwUbQ6zcMiE5/GQGh2Ok=)
                          2: vX2zurKcZq6uHugr79Vj7CluX8U.roa (hash: GdVPCwO2JcoPshr3Z+ad1hPe/GxgIs2qP3IuU8IWvC8=)
                          3: zyeCTH0u4dPBpS48vPaM1qbh0ZQ.roa (hash: 4WOxoLw0W96yUmxJv3ac7DDaLuuI/40+Ms3ofP7ccYE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 576 (0x240)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294B61C9DA3584274182FA20AF8626E1AEA81F32
        Validity
            Not Before: Jan 25 15:16:28 2026 GMT
            Not After : Oct  7 15:30:20 2026 GMT
        Subject: CN=F9171C46A9290B996E7083C2123E3BA4532C4EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:57:1d:e2:25:7a:e7:4c:1b:a5:3d:69:90:
                    57:e6:08:f1:fe:0f:74:cd:35:79:17:aa:5e:f5:40:
                    cd:15:26:32:57:c1:20:f8:7f:67:2c:dd:3a:8d:62:
                    58:52:09:3d:2f:25:b6:68:52:b9:f2:94:86:6e:c8:
                    3f:14:d5:a8:da:78:ae:c9:30:59:e7:c7:11:30:c3:
                    1b:e1:26:1e:d2:9b:c3:95:d4:62:d4:06:17:1f:84:
                    b1:c1:29:a3:d6:9b:7e:2e:b0:bb:b7:39:90:c4:f2:
                    12:97:2b:24:46:3d:7c:8b:00:6b:dd:42:43:2a:e9:
                    e9:d4:f9:91:d8:9b:d2:77:19:2b:b7:e9:e9:f9:7c:
                    20:1a:15:51:da:5a:f7:d6:51:ea:c7:d2:c2:46:c4:
                    dd:76:42:75:b5:40:ed:04:e1:62:da:89:f5:25:46:
                    be:6d:50:2e:fd:52:5b:15:6e:a4:1d:03:85:12:cd:
                    cb:25:45:9a:9b:87:0e:35:c3:e5:49:b5:07:92:d5:
                    34:3b:ca:8d:36:25:2f:30:fb:b6:88:7b:3e:e2:36:
                    f2:9d:07:3f:19:31:f7:b5:3f:ac:47:85:a8:04:52:
                    11:f4:1d:d7:8d:09:54:ce:dd:d5:ea:87:79:8d:4d:
                    56:c5:fd:6f:29:1d:82:dc:c9:7e:a7:f4:7c:ae:47:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:17:1C:46:A9:29:0B:99:6E:70:83:C2:12:3E:3B:A4:53:2C:4E:BF
            X509v3 Authority Key Identifier:
                keyid:29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:cd:1e:97:06:24:e6:79:ca:e0:6c:0c:c9:86:b3:1d:4b:b0:
         69:0b:15:7a:3b:06:05:0b:fb:58:66:4f:c5:63:70:76:5a:3e:
         3f:d2:cb:a8:47:2e:1e:80:51:e0:7a:37:a4:eb:27:60:02:d3:
         50:b3:19:3c:de:17:75:0d:32:a7:06:d8:b3:7e:50:4e:8a:46:
         fd:3e:19:c7:60:41:08:89:fd:89:0b:9e:f2:e6:1c:9b:05:80:
         7d:61:1b:ab:c0:7c:ec:08:f6:11:59:ca:c4:1c:47:24:06:eb:
         73:a6:96:11:09:c6:b5:08:0a:ca:69:7e:ce:ce:f2:ad:39:7c:
         fa:68:a9:3f:39:55:7a:a6:80:89:2d:ff:9a:c5:2d:6b:46:44:
         72:a1:9d:95:c1:e9:a1:67:f6:f6:9a:80:ff:83:f7:fe:cf:88:
         12:56:3a:1c:e0:cf:a8:ac:fb:4c:fa:4c:d5:af:0d:97:98:0b:
         1d:af:b5:ce:c1:7a:76:8b:9a:1a:71:fc:2f:65:21:49:86:ff:
         75:5c:78:3f:6c:fa:fc:82:cc:29:71:7c:b5:7f:58:55:a5:f0:
         e8:da:14:6e:6a:12:81:f9:45:8e:ec:77:23:4b:0a:47:1d:53:
         ec:68:89:77:60:c7:a2:84:fc:cd:33:92:bf:3a:11:f8:c1:1f:
         ae:e2:c8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:52:59 2026 by rpki-client