This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft File: 0qCc5CgJ9NqdexxEc93y9DalmcQ.mft (raw, json) Hash identifier: QMSRUU4Z6R5UkyQWjiJmrL26qRKzecoCugK/CqkX5po= Subject key identifier: 35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07 Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4 Certificate issuer: /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4 Certificate serial: 04BB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft Manifest number: 0498 Signing time: Fri 05 Dec 2025 10:04:49 +0000 Manifest this update: Fri 05 Dec 2025 10:04:49 +0000 Manifest next update: Sun 07 Dec 2025 10:04:49 +0000 Files and hashes: 1: 0qCc5CgJ9NqdexxEc93y9DalmcQ.crl (hash: eXm2IOWvpv7tuf/FUK9Melc5HwvK0AwsoLWhHe8LUdk=) 2: H76Yqjd_qsLu02XHlrkdTb6cO4g.roa (hash: 8R3MORDwytvIMNic9SLQgH9B3ARyUty0xVBqwyW73ZU=) 3: QWvOVWT5zZy3lUWUnGvHWDKxgnc.roa (hash: 0lcn7A1+ZL5XJgqQCmzarNJs8CwPigObmEAryjQ0dO8=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 01:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1211 (0x4bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4 Validity Not Before: Dec 5 10:04:49 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=356D1D56D2B0912C2D9009BA80830157976AD707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:71:bf:79:31:ed:f4:6e:63:62:3a:5a:3d: ce:42:9f:26:ff:48:e9:72:2d:c3:6b:6f:c2:14:7e: f3:05:6d:d5:bc:75:b1:a7:f3:1f:f8:3c:3a:c6:f5: 8f:e9:f8:89:b5:fb:14:bc:09:98:4e:c0:ce:aa:93: 33:37:b7:79:7a:fd:cd:95:1a:cf:d3:01:3f:25:c3: 2f:d9:8a:02:05:81:b8:e9:d5:9a:02:2c:04:02:dc: cd:a2:71:f7:c9:06:ad:73:dc:2f:0e:de:27:9f:84: 85:ff:0d:a8:b9:94:10:cb:69:e6:f7:48:e7:39:9e: c6:c0:32:d5:65:98:d4:78:0c:7c:ff:5a:dd:8b:10: a4:21:28:73:24:15:d6:74:5f:ab:c6:38:20:1a:cb: bc:a5:21:dc:4e:91:11:d4:8b:9f:16:bf:a7:ad:36: 88:39:95:b2:86:bb:d1:91:80:82:2b:64:11:d2:00: 37:96:c8:3f:7b:dc:db:f4:0d:15:24:5e:21:76:14: 92:6a:c3:fd:94:a1:ce:a5:c4:5a:ee:35:f7:d0:08: 03:9c:b0:1f:14:69:e5:4e:c8:84:11:ac:64:44:32: 4d:32:fb:ae:eb:a8:6c:c2:25:1c:e8:d9:99:4b:59: 31:82:56:09:ce:1a:b1:d2:d4:8e:bd:65:29:7d:bd: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07 X509v3 Authority Key Identifier: keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:c7:be:02:96:f1:81:37:e3:31:4f:96:84:55:d6:31:50:34: a7:e6:1a:7e:73:cd:29:30:7f:2b:80:b3:bc:0e:8f:b7:70:63: 8b:80:45:30:2e:b4:5c:de:0d:35:7d:9b:64:0e:3a:aa:ef:a2: 44:ff:53:5f:71:f1:72:35:af:4a:55:38:fa:49:40:8f:41:a8: ac:b9:01:14:94:2b:1b:2f:27:f8:14:dc:49:be:dc:0f:18:70: e0:73:60:e4:d8:c6:fe:ad:a6:b9:3b:66:55:72:14:82:63:82: c5:5f:3e:07:ae:5f:02:ee:f1:e7:56:d1:9b:53:bc:53:32:2f: 95:a1:68:77:8b:db:71:76:b9:a9:ce:3a:45:b3:7f:2c:0c:b9: 21:e0:ac:04:8c:8f:39:2b:23:0c:63:a7:5b:6a:ce:b9:84:6d: e9:00:9f:a9:95:09:59:39:0c:65:51:dd:27:9f:f2:a7:3b:87: 40:79:41:5a:8c:40:31:6b:e6:0c:38:91:c7:b9:4e:7a:86:6e: e5:9f:09:aa:31:fa:02:a5:82:09:0c:79:ed:23:de:ff:2e:0e: be:66:5a:6d:dd:98:50:12:3a:60:38:ec:57:5d:79:6d:aa:68: 4e:bc:0e:d4:fe:1c:9a:6f:0f:9c:cc:a0:ad:0f:28:9d:35:e2: 92:a6:62:c7 -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICBLswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDJB MDlDRTQyODA5RjREQTlEN0IxQzQ0NzNEREYyRjQzNkE1OTlDNDAeFw0yNTEyMDUx MDA0NDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDM1NkQxRDU2RDJCMDkx MkMyRDkwMDlCQTgwODMwMTU3OTc2QUQ3MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDDanG/eTHt9G5jYjpaPc5Cnyb/SOlyLcNrb8IUfvMFbdW8dbGn 8x/4PDrG9Y/p+Im1+xS8CZhOwM6qkzM3t3l6/c2VGs/TAT8lwy/ZigIFgbjp1ZoC LAQC3M2icffJBq1z3C8O3iefhIX/Dai5lBDLaeb3SOc5nsbAMtVlmNR4DHz/Wt2L EKQhKHMkFdZ0X6vGOCAay7ylIdxOkRHUi58Wv6etNog5lbKGu9GRgIIrZBHSADeW yD973Nv0DRUkXiF2FJJqw/2Uoc6lxFruNffQCAOcsB8UaeVOyIQRrGREMk0y+67r qGzCJRzo2ZlLWTGCVgnOGrHS1I69ZSl9vcgjAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUNW0dVtKwkSwtkAm6gIMBV5dq1wcwHwYDVR0jBBgwFoAU0qCc5CgJ9NqdexxE c93y9DalmcQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUVSQ1lD QVQvMHFDYzVDZ0o5TnFkZXh4RWM5M3k5RGFsbWNRLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS8wcUNjNUNnSjlOcWRleHhFYzkzeTlEYWxtY1EuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9NRVJDWUNBVC8wcUNjNUNnSjlOcWRl eHhFYzkzeTlEYWxtY1EubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArMe+ApbxgTfjMU+WhFXWMVA0p+YafnPNKTB/K4CzvA6Pt3Bji4BFMC60XN4N NX2bZA46qu+iRP9TX3HxcjWvSlU4+klAj0GorLkBFJQrGy8n+BTcSb7cDxhw4HNg 5NjG/q2muTtmVXIUgmOCxV8+B65fAu7x51bRm1O8UzIvlaFod4vbcXa5qc46RbN/ LAy5IeCsBIyPOSsjDGOnW2rOuYRt6QCfqZUJWTkMZVHdJ5/ypzuHQHlBWoxAMWvm DDiRx7lOeoZu5Z8JqjH6AqWCCQx57SPe/y4OvmZabd2YUBI6YDjsV115bapoTrwO 1P4cmm8PnMygrQ8onTXikqZixw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:07:54 2025 by rpki-client