This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
File:                     P4T67Wy0fhEvJMawJ3pIYicGcso.mft (raw, json)
Hash identifier:          6kDH5um4UPriY2lTPBERS53QObL8ZZlU4RYUMmdC4iU=
Subject key identifier:   C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0
Authority key identifier: 3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA
Certificate issuer:       /CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
Certificate serial:       0263
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
Manifest number:          0258
Signing time:             Fri 05 Dec 2025 10:06:51 +0000
Manifest this update:     Fri 05 Dec 2025 10:06:51 +0000
Manifest next update:     Sun 07 Dec 2025 10:06:51 +0000
Files and hashes:         1: IErOyzoZVkiS9Uhk0QF6wLDAljo.roa (hash: L6eHFiNuaWY66hK66Hq26PxHIFkjbaThfdmbM18C7cE=)
                          2: NbDi8Af5Gmmz6J7SUj6VheHbgkQ.roa (hash: QshxsuPUbcaWeX3b7o/6+1HYkGZdF5/K5o7k1P2M0uo=)
                          3: P4T67Wy0fhEvJMawJ3pIYicGcso.crl (hash: Suge/HPrc2pYm44G0QnTU0JKKIQ7+UCS/ngLj2qUxD4=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 20:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
        Validity
            Not Before: Dec  5 10:06:51 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C62935BDEE28689F47A37A776EF691F2FD9522A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:6f:5a:29:d0:9d:14:37:3b:94:31:e9:b6:39:
                    92:35:1b:25:de:6b:91:ab:a9:75:3c:3a:c5:73:71:
                    d9:47:b9:21:fe:14:2a:4e:f9:c4:bf:d2:1f:4b:04:
                    f9:1e:c5:38:e5:81:2f:61:65:d8:35:f4:55:ba:17:
                    6f:1d:ab:ee:60:36:f9:ab:f3:b9:46:42:56:a0:65:
                    ce:68:17:4f:76:de:bb:2e:cc:6f:c9:00:dd:3a:ad:
                    41:1d:af:bf:5b:78:ef:29:5f:15:79:49:d7:53:ac:
                    56:6d:9c:b8:37:25:8f:f6:27:4e:54:d9:ca:ab:46:
                    36:ae:ea:ad:b4:d6:1b:b2:44:0e:61:84:a9:2d:fe:
                    29:47:38:ff:04:e3:8c:d1:e7:85:cf:8e:cc:d7:86:
                    0d:4b:5b:86:48:d6:fc:cd:21:96:e4:34:09:8c:a2:
                    66:b9:3a:6e:9a:9d:c9:a9:a8:66:e9:bf:94:e1:77:
                    d0:b8:ad:d3:08:b5:2b:73:71:01:06:49:f1:40:52:
                    a3:f3:c0:45:40:d4:4a:a0:a5:71:8a:19:d1:e1:a5:
                    7e:15:78:66:7a:06:fc:98:15:c8:a8:8d:af:d2:4c:
                    eb:83:e3:ae:3a:dc:81:f8:ac:ce:3a:8c:c6:74:11:
                    7d:99:c3:56:c8:8e:af:62:3a:af:a8:fd:14:09:4c:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0
            X509v3 Authority Key Identifier:
                keyid:3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:50:98:8f:93:56:68:68:8d:67:91:39:bb:52:6a:a9:47:f0:
         21:6a:44:3a:13:d4:84:85:66:50:66:23:7f:dd:68:b7:e5:16:
         87:a0:96:63:b5:3d:49:b2:5a:a3:5e:1f:d3:23:8d:94:b2:0c:
         fd:07:74:d9:67:81:20:1a:84:52:f6:10:36:8b:b0:74:a9:9f:
         c1:38:a7:6d:37:24:8d:1c:59:cc:f3:60:6f:0d:9f:cc:d2:71:
         cc:8a:e4:cd:98:01:eb:76:b3:f0:60:14:7c:5f:f3:f1:9d:61:
         6a:0b:f7:1e:51:e0:69:68:b3:e7:21:a3:f3:47:17:13:a0:69:
         1d:a3:97:42:b3:d2:df:d5:e6:06:91:01:04:e1:da:d7:80:cd:
         cb:c8:5d:c6:80:52:4c:58:55:d3:56:7c:95:90:e2:c6:10:4d:
         da:3c:ca:7d:88:b6:f0:6b:fb:3c:a0:12:8e:81:38:51:53:31:
         e7:dc:fc:94:2a:a1:c0:37:4c:4b:1f:7b:c5:2b:08:02:6d:9a:
         d9:7b:6b:90:25:13:5c:2f:64:b3:d4:7e:e1:91:bf:9b:b8:8c:
         e6:1e:36:41:3c:53:14:e6:92:03:73:ee:f6:15:7e:e5:12:c9:
         84:1a:ea:b7:d0:ca:57:a1:c1:7b:d9:85:9e:d0:8d:9b:4c:55:
         49:17:a4:e2
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0Y4
NEZBRUQ2Q0I0N0UxMTJGMjRDNkIwMjc3QTQ4NjIyNzA2NzJDQTAeFw0yNTEyMDUx
MDA2NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEM2MjkzNUJERUUyODY4
OUY0N0EzN0E3NzZFRjY5MUYyRkQ5NTIyQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5b1op0J0UNzuUMem2OZI1GyXea5GrqXU8OsVzcdlHuSH+FCpO
+cS/0h9LBPkexTjlgS9hZdg19FW6F28dq+5gNvmr87lGQlagZc5oF0923rsuzG/J
AN06rUEdr79beO8pXxV5SddTrFZtnLg3JY/2J05U2cqrRjau6q201huyRA5hhKkt
/ilHOP8E44zR54XPjszXhg1LW4ZI1vzNIZbkNAmMoma5Om6ancmpqGbpv5Thd9C4
rdMItStzcQEGSfFAUqPzwEVA1EqgpXGKGdHhpX4VeGZ6BvyYFcioja/STOuD4646
3IH4rM46jMZ0EX2Zw1bIjq9iOq+o/RQJTLsTAgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUxik1ve4oaJ9Ho3p3bvaR8v2VIqAwHwYDVR0jBBgwFoAUP4T67Wy0fhEvJMaw
J3pIYicGcsowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvS1JPTk9T
VEVDSC9QNFQ2N1d5MGZoRXZKTWF3SjNwSVlpY0djc28uY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL1A0VDY3V3kwZmhFdkpNYXdKM3BJWWljR2Nzby5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0tST05PU1RFQ0gvUDRUNjdXeTBm
aEV2Sk1hd0ozcElZaWNHY3NvLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADtQmI+TVmhojWeRObtSaqlH8CFqRDoT1ISFZlBmI3/daLflFoeglmO1
PUmyWqNeH9MjjZSyDP0HdNlngSAahFL2EDaLsHSpn8E4p203JI0cWczzYG8Nn8zS
ccyK5M2YAet2s/BgFHxf8/GdYWoL9x5R4Glos+cho/NHFxOgaR2jl0Kz0t/V5gaR
AQTh2teAzcvIXcaAUkxYVdNWfJWQ4sYQTdo8yn2ItvBr+zygEo6BOFFTMefc/JQq
ocA3TEsfe8UrCAJtmtl7a5AlE1wvZLPUfuGRv5u4jOYeNkE8UxTmkgNz7vYVfuUS
yYQa6rfQylehwXvZhZ7QjZtMVUkXpOI=
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:11:34 2025 by rpki-client