This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
File: KUthydo1hCdBgvogr4Ym4a6oHzI.mft (raw, json)
Hash identifier: fUWD+IAlE99RXDvGivFOt5M2SHOA91JBGz2mnLtAIwk=
Subject key identifier: F9:17:1C:46:A9:29:0B:99:6E:70:83:C2:12:3E:3B:A4:53:2C:4E:BF
Authority key identifier: 29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32
Certificate issuer: /CN=294B61C9DA3584274182FA20AF8626E1AEA81F32
Certificate serial: 0140
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
Manifest number: 013E
Signing time: Sun 07 Dec 2025 00:06:03 +0000
Manifest this update: Sun 07 Dec 2025 00:06:03 +0000
Manifest next update: Sun 07 Dec 2025 06:06:03 +0000
Files and hashes: 1: KUthydo1hCdBgvogr4Ym4a6oHzI.crl (hash: aQSnkrIW1qvlx6zgT2OdzC/teZ4kc3d8EGSG/7b+lkc=)
2: vX2zurKcZq6uHugr79Vj7CluX8U.roa (hash: GdVPCwO2JcoPshr3Z+ad1hPe/GxgIs2qP3IuU8IWvC8=)
3: zyeCTH0u4dPBpS48vPaM1qbh0ZQ.roa (hash: 4WOxoLw0W96yUmxJv3ac7DDaLuuI/40+Ms3ofP7ccYE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 06:06:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 320 (0x140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294B61C9DA3584274182FA20AF8626E1AEA81F32
Validity
Not Before: Dec 7 00:06:03 2025 GMT
Not After : Oct 7 15:30:20 2026 GMT
Subject: CN=F9171C46A9290B996E7083C2123E3BA4532C4EBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:57:1d:e2:25:7a:e7:4c:1b:a5:3d:69:90:
57:e6:08:f1:fe:0f:74:cd:35:79:17:aa:5e:f5:40:
cd:15:26:32:57:c1:20:f8:7f:67:2c:dd:3a:8d:62:
58:52:09:3d:2f:25:b6:68:52:b9:f2:94:86:6e:c8:
3f:14:d5:a8:da:78:ae:c9:30:59:e7:c7:11:30:c3:
1b:e1:26:1e:d2:9b:c3:95:d4:62:d4:06:17:1f:84:
b1:c1:29:a3:d6:9b:7e:2e:b0:bb:b7:39:90:c4:f2:
12:97:2b:24:46:3d:7c:8b:00:6b:dd:42:43:2a:e9:
e9:d4:f9:91:d8:9b:d2:77:19:2b:b7:e9:e9:f9:7c:
20:1a:15:51:da:5a:f7:d6:51:ea:c7:d2:c2:46:c4:
dd:76:42:75:b5:40:ed:04:e1:62:da:89:f5:25:46:
be:6d:50:2e:fd:52:5b:15:6e:a4:1d:03:85:12:cd:
cb:25:45:9a:9b:87:0e:35:c3:e5:49:b5:07:92:d5:
34:3b:ca:8d:36:25:2f:30:fb:b6:88:7b:3e:e2:36:
f2:9d:07:3f:19:31:f7:b5:3f:ac:47:85:a8:04:52:
11:f4:1d:d7:8d:09:54:ce:dd:d5:ea:87:79:8d:4d:
56:c5:fd:6f:29:1d:82:dc:c9:7e:a7:f4:7c:ae:47:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:1C:46:A9:29:0B:99:6E:70:83:C2:12:3E:3B:A4:53:2C:4E:BF
X509v3 Authority Key Identifier:
keyid:29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:c0:bc:58:3e:ab:5a:6f:00:02:95:d7:43:ba:5a:15:4f:3b:
86:90:6f:86:cf:28:50:bf:99:48:e0:f9:4d:88:12:ae:f0:32:
02:da:d1:35:c1:d8:64:ba:84:91:a5:e8:60:7d:c2:5b:76:f7:
50:49:fe:d4:8c:b9:63:74:04:2e:a7:f7:e5:3d:26:54:1d:fc:
01:ba:e9:93:c1:1d:5b:af:cb:ce:3e:f7:50:0c:33:5a:ab:f0:
67:99:1d:37:8d:2c:e1:d1:8a:97:36:04:64:b8:52:b3:d7:62:
42:29:d3:78:b3:67:ea:41:00:f9:e0:6b:e1:61:66:17:c2:84:
92:3b:aa:da:69:c7:38:54:e4:d7:ed:f9:13:2d:f2:79:7f:6e:
e7:da:64:95:44:5d:d5:98:47:ba:d6:5b:0c:61:de:a7:04:50:
1d:fe:77:e7:5b:fe:68:e9:46:aa:85:c6:60:5a:f6:4c:39:0f:
6e:9e:6c:10:b4:2c:de:df:b3:ec:8b:cc:27:80:4a:44:09:01:
19:ae:18:ef:1f:79:35:d2:76:62:d1:3f:40:30:6e:9b:4d:0b:
ee:2c:49:23:25:09:95:81:03:48:56:2f:02:bf:12:1d:8e:ae:
be:c4:dd:0c:4a:d0:82:5a:8c:91:c9:7b:fe:6f:61:35:65:7f:
49:11:28:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:11 2025 by rpki-client