This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.mft
File:                     u_jlNSJAlxeHgGo-U6iQSFmp8Oc.mft (raw, json)
Hash identifier:          hufT4IyE+L9+GCFfEILLdjfzUeUHXi+KhUQRqmCLcZ0=
Subject key identifier:   5F:2E:A8:F6:BC:2A:32:CE:18:19:AD:42:C2:E6:0E:2D:B6:ED:B0:08
Authority key identifier: BB:F8:E5:35:22:40:97:17:87:80:6A:3E:53:A8:90:48:59:A9:F0:E7
Certificate issuer:       /CN=BBF8E5352240971787806A3E53A8904859A9F0E7
Certificate serial:       01DA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.mft
Manifest number:          01D8
Signing time:             Sat 06 Dec 2025 22:06:59 +0000
Manifest this update:     Sat 06 Dec 2025 22:06:59 +0000
Manifest next update:     Mon 08 Dec 2025 22:06:59 +0000
Files and hashes:         1: u_jlNSJAlxeHgGo-U6iQSFmp8Oc.crl (hash: ZC50QVOfQYHSkzkKw4geC8l3dpymyVwFFJ50sPB4GJo=)
                          2: w_KewT6KWsZuHTgvBMYnYFPhchY.roa (hash: vA7vcHpZZT9NqWFZlSoCmScIUZDx16ZMpEGvj2tJDZ0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 06:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBF8E5352240971787806A3E53A8904859A9F0E7
        Validity
            Not Before: Dec  6 22:06:59 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5F2EA8F6BC2A32CE1819AD42C2E60E2DB6EDB008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:a3:25:d5:73:fe:23:56:af:9f:31:3d:98:
                    9c:39:b9:09:f9:35:63:31:52:3d:49:d4:d4:a8:e8:
                    4e:93:97:6f:59:a1:fc:73:d5:e2:fd:e7:17:f0:da:
                    95:a1:9c:24:cf:bb:13:2b:9e:52:3e:52:31:25:ea:
                    ce:28:a9:b3:20:9f:63:91:81:ae:e4:db:31:6a:ee:
                    83:db:1a:c0:08:c9:83:bd:78:f2:cc:9f:c1:98:57:
                    bc:64:9e:43:11:9b:4b:48:bf:f8:41:7e:af:15:b3:
                    18:c4:be:35:21:e7:68:9e:9d:ee:3c:6d:d5:3e:1d:
                    2e:ae:7a:48:9a:8d:b3:be:d6:05:9d:86:e2:83:48:
                    a6:e8:56:c6:04:6f:2f:25:9c:17:a1:f6:50:9a:29:
                    7c:35:13:d2:ad:b3:37:7d:e9:80:63:11:e4:fd:b0:
                    76:6a:3c:2e:9a:ba:d1:78:b0:7a:20:5f:83:37:64:
                    5b:51:de:28:73:e2:9d:2b:ae:56:9b:7f:89:a1:5a:
                    6d:05:ec:69:f7:01:eb:8d:b0:9a:37:ff:63:38:8e:
                    8b:e7:a8:8a:16:0f:84:c5:85:59:b6:a0:c6:94:c5:
                    41:5e:39:d6:26:28:ea:63:90:f9:4b:7b:f2:6b:f6:
                    81:9b:bf:f0:a7:c7:d2:3b:4e:6d:a6:9a:1c:11:93:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2E:A8:F6:BC:2A:32:CE:18:19:AD:42:C2:E6:0E:2D:B6:ED:B0:08
            X509v3 Authority Key Identifier:
                keyid:BB:F8:E5:35:22:40:97:17:87:80:6A:3E:53:A8:90:48:59:A9:F0:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKH/u_jlNSJAlxeHgGo-U6iQSFmp8Oc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:bc:91:21:1d:a8:8b:c7:78:64:c9:e1:21:73:08:95:8e:f0:
         90:d9:1c:f7:8e:38:38:17:40:8a:a9:ff:d8:2a:c3:2f:83:df:
         09:e2:98:7c:92:df:1d:04:b0:03:69:cb:d8:58:1c:6f:f8:57:
         68:fd:cd:a2:e6:2b:ed:f3:67:0b:31:38:24:dc:78:e3:dc:c5:
         d7:84:31:09:02:f8:99:71:ba:e6:7d:8f:81:cd:c0:f0:3d:ff:
         b3:2d:65:ca:20:7d:a9:b9:c4:b5:59:80:74:8e:65:50:55:2f:
         b1:ff:fc:7a:67:db:2c:94:64:fb:13:44:44:2e:d5:fb:4c:fb:
         f8:21:bb:39:06:9a:49:87:d3:0b:4d:01:65:13:c9:d1:6e:d0:
         69:60:b6:49:ec:f0:1c:4d:e5:63:aa:da:74:c0:d4:ae:ac:29:
         59:af:0b:c0:2c:24:c3:e4:a7:1f:ac:e4:ad:09:ab:93:c7:37:
         41:12:6c:94:05:11:84:e0:4c:5d:19:2b:52:86:aa:61:08:32:
         4c:ff:81:ef:79:08:33:bf:f1:a8:9a:40:12:5a:ab:ef:cd:2e:
         75:47:95:75:91:52:e4:28:6d:9b:a3:05:54:14:0a:0a:6e:dc:
         85:d1:96:31:b6:6e:2b:28:85:d7:4d:44:1a:de:56:66:e1:30:
         cd:bc:e6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:19:46 2025 by rpki-client