This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LETSWIN2012/ZeY8_v7dg9_qD1S96DsUO9or7gI.mft
File:                     ZeY8_v7dg9_qD1S96DsUO9or7gI.mft (raw, json)
Hash identifier:          BUeSEi8g7M26U682Pd27u+s/uGo23LYSQjqodSxJNKU=
Subject key identifier:   23:82:91:19:DF:4C:C0:61:C1:64:3D:E1:B4:84:48:2C:59:50:E0:22
Authority key identifier: 65:E6:3C:FE:FE:DD:83:DF:EA:0F:54:BD:E8:3B:14:3B:DA:2B:EE:02
Certificate issuer:       /CN=65E63CFEFEDD83DFEA0F54BDE83B143BDA2BEE02
Certificate serial:       0D4F
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/ZeY8_v7dg9_qD1S96DsUO9or7gI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN2012/ZeY8_v7dg9_qD1S96DsUO9or7gI.mft
Manifest number:          0D4F
Signing time:             Sat 06 Dec 2025 22:07:57 +0000
Manifest this update:     Sat 06 Dec 2025 22:07:57 +0000
Manifest next update:     Mon 08 Dec 2025 22:07:57 +0000
Files and hashes:         1: ZeY8_v7dg9_qD1S96DsUO9or7gI.crl (hash: qkqC4zcXzbrb53fsAp5Drpt0pinGdR7AXcVTzYFh5X0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN2012/ZeY8_v7dg9_qD1S96DsUO9or7gI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN2012/ZeY8_v7dg9_qD1S96DsUO9or7gI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ZeY8_v7dg9_qD1S96DsUO9or7gI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3407 (0xd4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65E63CFEFEDD83DFEA0F54BDE83B143BDA2BEE02
        Validity
            Not Before: Dec  6 22:07:57 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=23829119DF4CC061C1643DE1B484482C5950E022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:32:47:69:66:9c:64:2f:d7:78:39:08:da:
                    bd:0f:e4:eb:07:84:eb:2a:8b:8a:3a:56:61:ea:94:
                    b3:ea:07:3c:13:db:21:de:f5:c9:f4:c3:8d:cb:24:
                    ea:9f:d5:7c:f2:e8:19:8c:de:98:f5:63:ae:3c:a6:
                    1d:3b:d5:e4:e7:d7:0e:3b:81:ad:67:ca:d6:2e:76:
                    60:41:34:26:c8:60:60:94:ac:16:d4:ef:8e:b9:f5:
                    cf:95:c7:ba:79:05:f1:b2:0e:72:b8:6e:80:58:05:
                    4d:61:4d:ba:52:65:2d:18:50:9d:aa:02:b2:e3:54:
                    99:2c:53:bc:f4:57:51:8c:03:db:ba:da:8a:b7:d7:
                    6f:d3:d6:e3:be:46:af:b4:82:78:45:c0:e1:c6:96:
                    8b:f3:f2:8c:6c:80:f4:a0:88:d8:0b:94:25:ba:bf:
                    77:3b:9b:9b:78:c3:24:c5:20:9b:c6:f9:76:fe:b6:
                    b4:d0:88:66:48:c0:6d:fc:ae:00:51:d8:4f:5b:59:
                    4f:89:fe:35:3e:7f:ea:d5:de:b6:92:05:8d:f2:f1:
                    fc:48:22:d8:11:4b:8b:0c:37:62:b3:1b:e7:12:ed:
                    a7:07:a8:fe:6e:fb:f5:56:f3:1d:6a:76:d7:31:0d:
                    02:f6:c3:a6:75:b8:33:5d:cc:c3:16:d1:8b:33:61:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:82:91:19:DF:4C:C0:61:C1:64:3D:E1:B4:84:48:2C:59:50:E0:22
            X509v3 Authority Key Identifier:
                keyid:65:E6:3C:FE:FE:DD:83:DF:EA:0F:54:BD:E8:3B:14:3B:DA:2B:EE:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN2012/ZeY8_v7dg9_qD1S96DsUO9or7gI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZeY8_v7dg9_qD1S96DsUO9or7gI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LETSWIN2012/ZeY8_v7dg9_qD1S96DsUO9or7gI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:28:59:31:a3:43:f4:d7:0e:7f:db:c7:88:9e:12:3a:c7:f3:
         42:23:e6:65:13:fa:ae:0b:01:9e:fd:17:b8:f0:37:a6:1e:b1:
         2b:1b:bb:9c:2b:b5:aa:8b:90:b4:f9:4e:08:f2:c5:e7:55:d0:
         d7:e7:9b:53:cc:3d:1c:4b:27:75:11:47:71:36:25:de:82:36:
         01:b5:53:7a:25:8d:f8:36:c2:60:e4:14:2f:83:10:7a:72:be:
         e2:c1:d3:4a:6f:9e:49:82:2e:48:07:c7:cb:36:75:e4:0a:f1:
         b2:21:0f:75:eb:20:e0:ef:2f:f7:9d:09:a2:7f:ef:ea:a2:62:
         15:ec:c0:b8:0b:9a:dc:2e:14:22:b6:8e:6c:78:e3:c0:67:85:
         d4:eb:c2:a6:da:ee:7a:28:3d:b9:6d:b2:da:85:33:22:61:35:
         50:9f:82:71:e4:e0:f2:70:eb:6d:80:2c:8f:37:5d:95:16:47:
         03:aa:a6:90:3f:85:33:b4:d1:32:40:f6:7b:5c:51:93:b9:2f:
         75:a2:4b:e3:52:66:1c:ca:46:a8:6d:01:50:82:b3:c6:ee:38:
         0c:ce:bb:8d:5f:12:90:59:53:6a:1f:34:b7:50:94:f5:6c:93:
         a5:c0:e4:88:6c:c1:35:22:6b:eb:be:8d:b3:e6:d6:0b:dd:2c:
         94:cc:ed:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:46 2025 by rpki-client