This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
File:                     rf5uVtr4SS7H3oizqQazE5tVuGQ.mft (raw, json)
Hash identifier:          qhpbzPpC93UPGvraYo89eT8VflmAb2bHswyO7OOycxc=
Subject key identifier:   88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       08AB
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
Manifest number:          0846
Signing time:             Sun 21 Dec 2025 21:38:08 +0000
Manifest this update:     Sun 21 Dec 2025 21:38:08 +0000
Manifest next update:     Tue 23 Dec 2025 21:38:08 +0000
Files and hashes:         1: 1Jsf49U5f7I4OC2K8Qa36ZXRpIg.roa (hash: OVG6w+cJK2G2Buzrgjp8CFKBGAPrxLkYLf6pXNopTyo=)
                          2: 6IwRDQzie96iExY73oiuEzF4j04.roa (hash: P5nTvPt1qEHdZuQuEfViRE/3XnWprLpspar1lwmKiSQ=)
                          3: N0C3fSWd2C5fGP17YVAOZiuDm8w.roa (hash: 6Js7ux85K9FQfMd/VtHrXw8YY1/vtZUaSQQykn2D3dA=)
                          4: OwV3St-SxcsIzgpvPupGZF1MPb4.roa (hash: RP6R6k5ayPw/CKqUEyD3J0aaVXhf06X61azaX6QlA04=)
                          5: QlGaKgkMqYIfMM6zxAuzYDXHYjI.roa (hash: e2THAPExERdJeWKQN6zMaTMoX3zQT/hm9mmBElF0si8=)
                          6: RIV6PgWMJkJlUBTyjCvNjrEjQrQ.roa (hash: /c6CnGCYp3uDqy903NYKQ8azcI+NYy29gMAjI7Y7e5I=)
                          7: SODljBvIsuVG8-dB_kPkAdal4mw.roa (hash: Lws+6zI70GEyAa30X88eKudJPtlyPDJRxhQAi75bh8o=)
                          8: W6RJXfP1E9Ch09w7g0-NxD5wYMM.roa (hash: grOi09L0ObBUSuyDskSQvV+0LfLAnGL65Sx8UXUAqew=)
                          9: njXiHQM2YoNEf_GnjLKJCq--2lg.roa (hash: 4d3J5uAMcboHXzfCzXkyM2AWOOU2igqi0vMbvE4RvjY=)
                          10: rf5uVtr4SS7H3oizqQazE5tVuGQ.crl (hash: p1gXNNYjDn/awZqZ0K1ApxskAWqOyWCGQLRF7PZOmOo=)
                          11: s2omCCvZxbfNVxc23FBznFWKQec.roa (hash: AFawhO2vhOzkylH/qGiObuVfHB1AJ/ESSw/EFGgnxRQ=)
                          12: ue8ObbvhrPR9k0_3_F1w0o356Fk.roa (hash: FcDDAfkU5IpDDCnf7d+sMXWWLEzheC1DKOywSCLIFBg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 05:09:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2219 (0x8ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Dec 21 21:38:08 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8854C401A81FA535EF84FCFF6D06C5F99F64EEF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:1a:e9:4e:9f:e7:ed:30:87:19:fe:94:0e:
                    71:c2:dd:a0:b0:a2:52:3e:71:b9:2b:4a:0d:fc:88:
                    6e:aa:92:1b:5e:d7:5e:10:57:37:85:9d:f5:0c:ef:
                    14:d1:25:42:70:8e:ee:6a:87:f8:20:85:4f:58:31:
                    31:e4:87:18:67:09:2b:ae:8e:f0:69:d3:7d:0a:5b:
                    bd:92:89:e2:40:f2:68:bf:c7:b7:bb:4b:18:7e:24:
                    7a:24:19:4f:80:95:56:c3:be:d3:e9:96:40:6f:46:
                    7b:61:09:87:c0:1d:5a:03:32:b7:a5:76:4a:6f:b4:
                    f7:b8:52:01:63:6f:2c:e3:67:a8:7c:13:1f:37:66:
                    de:c5:9d:9d:89:d8:02:04:a0:fd:e2:19:cf:c9:dd:
                    d5:5b:84:b0:c9:4f:b2:59:25:e1:36:4b:0b:f8:16:
                    2f:55:9d:6e:c2:74:a8:6b:f5:95:98:f2:d1:11:0d:
                    d5:9a:0a:42:fd:fa:3c:b2:fd:7f:a9:28:86:6a:4d:
                    35:29:c2:c1:b0:cf:70:b8:e3:53:02:c7:72:23:02:
                    0c:16:3a:9f:a1:cd:ea:4b:22:d8:b3:44:5b:1d:21:
                    a6:55:ab:52:bf:97:5e:02:f3:75:8d:76:d2:bb:1b:
                    7f:67:0c:8e:e2:04:37:7a:06:98:80:4e:15:7d:4c:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:e1:65:44:9a:8e:36:ae:c5:3d:b5:8e:50:bc:21:23:ec:ff:
         7a:f0:81:c5:32:d7:55:fc:19:e1:c1:bd:c0:42:13:fb:23:7d:
         0b:ae:8a:e3:5a:fe:37:2f:4c:e5:83:97:1c:d9:2d:05:1d:74:
         02:b6:ce:26:13:13:80:84:da:34:2c:95:c2:3f:5b:3d:a7:0e:
         48:c1:16:f8:e2:cc:6b:28:99:d5:ea:b3:24:ca:45:e6:ca:54:
         8a:8e:ab:e3:64:c0:7e:25:2b:1a:c3:f0:4b:18:c7:05:ab:5b:
         e3:5e:84:63:13:26:aa:f3:6e:4c:16:f7:13:4d:fd:7a:ef:5b:
         71:57:af:e3:3b:d4:fc:39:e8:67:6c:94:bf:14:c6:ac:0d:bf:
         a1:a5:0a:02:7f:dc:9d:bd:54:da:4e:32:f3:60:ed:1d:47:4a:
         31:83:a7:c3:2e:dc:b7:31:a3:aa:b8:58:50:e9:0a:8d:e0:83:
         30:5b:a7:51:e6:03:3e:99:22:a2:df:e7:80:2c:a9:a5:11:7d:
         8a:5c:3f:ef:fe:2d:22:15:8a:db:0c:8d:da:7f:f6:b8:9a:09:
         cb:85:79:da:78:40:07:ef:c7:9c:4e:42:b3:91:ca:03:cd:54:
         ab:51:9f:8e:d6:90:b0:23:ed:80:2d:89:62:39:b8:e9:c0:cb:
         02:f1:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:26:00 2025 by rpki-client