This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft
File:                     dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft (raw, json)
Hash identifier:          kmwo7GRRnm367Gewu05LJmmIppFfIJ22z0rHYhqpF+s=
Subject key identifier:   3F:7E:EE:0F:94:F1:01:D3:B6:4B:50:C1:A1:B1:CE:BE:7F:D9:58:3A
Authority key identifier: 76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5
Certificate issuer:       /CN=76637EEBEFEF70C538CEADDCF9848FAA79C736A5
Certificate serial:       03D5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft
Manifest number:          03CC
Signing time:             Mon 22 Dec 2025 04:38:17 +0000
Manifest this update:     Mon 22 Dec 2025 04:38:17 +0000
Manifest next update:     Wed 24 Dec 2025 04:38:17 +0000
Files and hashes:         1: dmN-6-_vcMU4zq3c-YSPqnnHNqU.crl (hash: KFZXyxhMQ/jctvXTi9Arty8ze7TcGQ8NGqybn4dpqL4=)
                          2: j3FAGD9_eMxucAm1vJ2KSWAjLdQ.roa (hash: DCen51Nv0O68zjjkKVSJGneF7hpVVXhYdR9MKudIx80=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 15:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981 (0x3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76637EEBEFEF70C538CEADDCF9848FAA79C736A5
        Validity
            Not Before: Dec 22 04:38:17 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=3F7EEE0F94F101D3B64B50C1A1B1CEBE7FD9583A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:32:32:23:74:70:93:1a:1b:a1:82:8d:04:
                    42:05:87:00:3e:62:6c:3d:49:9e:dd:59:71:18:6e:
                    d8:61:56:ac:84:3c:f0:3a:19:ab:2b:ea:68:b4:67:
                    51:0c:87:23:7a:3f:da:33:2d:f0:0c:d7:6a:e2:24:
                    8a:1e:87:f1:de:1d:37:03:f7:2a:e2:20:af:50:88:
                    d6:56:07:29:0a:b7:44:10:e9:02:bd:32:7a:b1:d2:
                    6d:56:56:38:db:36:b4:ea:9d:c1:9c:86:90:ae:e5:
                    e4:d4:5b:d2:f8:f1:fc:c3:62:45:5e:ea:75:29:9e:
                    3e:e4:fc:73:9e:b0:c1:47:39:40:d6:70:e1:74:cd:
                    81:c8:87:2f:28:21:13:25:fa:3b:c6:a4:17:10:a0:
                    10:7b:cc:0b:2c:2b:ff:49:01:75:10:5b:26:3c:ec:
                    07:a0:f4:f7:fd:90:25:9f:ba:86:5b:5e:67:73:10:
                    d5:25:3d:48:d9:e4:56:f9:c1:62:c7:a3:36:22:fb:
                    a7:07:c8:6a:64:55:5a:6d:bb:34:93:e7:76:5d:03:
                    5f:b7:e8:5b:03:8a:31:60:c1:40:af:6c:ed:aa:dd:
                    7d:8c:3c:28:cc:e0:e6:c9:67:d7:3a:af:81:3b:64:
                    78:25:33:47:54:dc:f4:ce:48:d0:53:3b:e7:d5:51:
                    90:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7E:EE:0F:94:F1:01:D3:B6:4B:50:C1:A1:B1:CE:BE:7F:D9:58:3A
            X509v3 Authority Key Identifier:
                keyid:76:63:7E:EB:EF:EF:70:C5:38:CE:AD:DC:F9:84:8F:AA:79:C7:36:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dmN-6-_vcMU4zq3c-YSPqnnHNqU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAIFENGTW/dmN-6-_vcMU4zq3c-YSPqnnHNqU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bc:b0:ea:bc:9f:fa:dc:9c:f5:14:76:ef:91:55:b7:82:b0:
         fc:11:dd:9f:52:54:7d:16:45:aa:b4:8d:cb:a7:f3:e0:a6:44:
         a5:c7:e9:d8:94:27:fb:7e:e9:a4:11:b5:e4:8e:55:25:a8:b2:
         26:60:c3:c1:63:9d:6c:d4:a9:97:25:bf:75:7e:12:6a:7b:06:
         e4:5a:cf:94:5e:a8:19:ec:71:6b:17:c5:e6:55:1d:de:5f:b4:
         28:1f:5c:91:44:e3:90:a5:9a:28:dc:ed:75:fe:7b:a0:c8:d4:
         c0:2b:79:b1:8f:5d:1d:cf:58:d9:7d:07:84:49:cd:fc:01:63:
         cd:95:59:ba:80:29:1b:b4:92:2d:c9:e8:30:a2:05:a7:ec:b3:
         73:cf:78:b8:da:aa:87:02:6a:22:4e:1d:60:28:14:cf:09:93:
         2b:60:d9:25:4f:d7:25:be:1d:77:21:4c:b0:14:04:5d:dd:70:
         28:da:5c:3b:4e:62:cd:e5:a9:16:f0:35:d3:ee:a4:9d:f6:2f:
         5d:5a:09:c4:50:d5:10:f8:25:b6:9a:08:dc:59:83:c6:a9:4e:
         c7:30:ce:a5:ec:77:66:e2:16:9b:57:b7:be:c9:f7:d8:73:97:
         8f:00:65:5a:e1:49:b3:2e:0e:1e:01:85:62:e3:7b:51:22:cd:
         5f:dd:65:7c
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICA9UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzY2
MzdFRUJFRkVGNzBDNTM4Q0VBRERDRjk4NDhGQUE3OUM3MzZBNTAeFw0yNTEyMjIw
NDM4MTdaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDNGN0VFRTBGOTRGMTAx
RDNCNjRCNTBDMUExQjFDRUJFN0ZEOTU4M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhlDIyI3RwkxoboYKNBEIFhwA+Ymw9SZ7dWXEYbthhVqyEPPA6
Gasr6mi0Z1EMhyN6P9ozLfAM12riJIoeh/HeHTcD9yriIK9QiNZWBykKt0QQ6QK9
Mnqx0m1WVjjbNrTqncGchpCu5eTUW9L48fzDYkVe6nUpnj7k/HOesMFHOUDWcOF0
zYHIhy8oIRMl+jvGpBcQoBB7zAssK/9JAXUQWyY87Aeg9Pf9kCWfuoZbXmdzENUl
PUjZ5Fb5wWLHozYi+6cHyGpkVVptuzST53ZdA1+36FsDijFgwUCvbO2q3X2MPCjM
4ObJZ9c6r4E7ZHglM0dU3PTOSNBTO+fVUZBtAgMBAAGjggINMIICCTAdBgNVHQ4E
FgQUP37uD5TxAdO2S1DBobHOvn/ZWDowHwYDVR0jBBgwFoAUdmN+6+/vcMU4zq3c
+YSPqnnHNqUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUFJRkVO
R1RXL2RtTi02LV92Y01VNHpxM2MtWVNQcW5uSE5xVS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvZG1OLTYtX3ZjTVU0enEzYy1ZU1Bxbm5ITnFVLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUFJRkVOR1RXL2RtTi02LV92Y01V
NHpxM2MtWVNQcW5uSE5xVS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQBFvLDqvJ/63Jz1FHbvkVW3grD8Ed2fUlR9FkWqtI3Lp/PgpkSlx+nYlCf7
fumkEbXkjlUlqLImYMPBY51s1KmXJb91fhJqewbkWs+UXqgZ7HFrF8XmVR3eX7Qo
H1yRROOQpZoo3O11/nugyNTAK3mxj10dz1jZfQeESc38AWPNlVm6gCkbtJItyegw
ogWn7LNzz3i42qqHAmoiTh1gKBTPCZMrYNklT9clvh13IUywFARd3XAo2lw7TmLN
5akW8DXT7qSd9i9dWgnEUNUQ+CW2mgjcWYPGqU7HMM6l7Hdm4habV7e+yffYc5eP
AGVa4UmzLg4eAYVi43tRIs1f3WV8
-----END CERTIFICATE-----
Generated at Mon Dec 22 13:06:17 2025 by rpki-client