This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
File:                     8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft (raw, json)
Hash identifier:          LFRRQBXUvg74BJcvK1ldtFMngO5JnL4KFH1+5JjDMg8=
Subject key identifier:   7A:F7:DD:84:1A:67:03:83:BA:74:77:3B:AD:79:38:72:71:1D:1E:CD
Authority key identifier: F3:E6:A6:95:53:88:04:6E:01:3E:5E:D1:E0:CE:C6:C2:5E:85:30:94
Certificate issuer:       /CN=F3E6A6955388046E013E5ED1E0CEC6C25E853094
Certificate serial:       0D64
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
Manifest number:          0D64
Signing time:             Fri 05 Dec 2025 10:07:19 +0000
Manifest this update:     Fri 05 Dec 2025 10:07:19 +0000
Manifest next update:     Sun 07 Dec 2025 10:07:19 +0000
Files and hashes:         1: 8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl (hash: vbq16Sfq13uIWQI9E0mt9EVEYuQ09eRD/QunzW5yfiU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3428 (0xd64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E6A6955388046E013E5ED1E0CEC6C25E853094
        Validity
            Not Before: Dec  5 10:07:19 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=7AF7DD841A670383BA74773BAD793872711D1ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:70:83:9f:7f:46:07:9e:97:a3:c4:cc:14:a4:
                    ff:7c:6a:47:ec:c0:40:ba:78:44:a2:df:54:4e:16:
                    c5:36:a7:76:5b:f9:27:f9:d2:34:c8:09:e4:8a:12:
                    f3:c9:79:a0:b6:40:85:13:a6:c8:cb:37:cf:7a:4b:
                    3c:de:49:fe:f7:7c:85:df:4f:9e:8b:0c:c5:6b:45:
                    da:be:ed:f4:27:33:3a:5a:aa:e1:f8:ea:25:f0:38:
                    34:a7:cf:42:96:80:17:0f:e7:ef:bb:fd:07:ae:97:
                    59:db:7d:f5:41:6a:7e:b5:3f:66:83:e0:2a:dd:0b:
                    58:88:08:2c:d6:9e:ec:a9:13:bc:21:b8:cf:7f:81:
                    c0:c6:21:94:bd:f6:81:56:75:b9:93:87:7e:65:ec:
                    9a:e3:bf:66:e2:26:52:a7:ce:58:5f:d7:5a:c1:0d:
                    cc:e5:f3:07:c9:b0:05:1e:13:a0:82:a4:7d:a6:61:
                    50:d2:04:75:6f:55:b1:96:0f:3c:a5:a8:ff:3a:45:
                    b2:53:87:98:45:0e:16:72:e4:fb:cd:b3:ef:8a:4d:
                    d0:42:1e:d5:33:8b:d6:91:78:8e:6f:75:a4:37:6f:
                    33:6e:73:52:79:7b:3a:7d:71:2e:23:94:04:28:69:
                    43:a8:33:75:dd:4d:f9:cb:e5:cc:3d:43:47:dd:f4:
                    ac:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F7:DD:84:1A:67:03:83:BA:74:77:3B:AD:79:38:72:71:1D:1E:CD
            X509v3 Authority Key Identifier:
                keyid:F3:E6:A6:95:53:88:04:6E:01:3E:5E:D1:E0:CE:C6:C2:5E:85:30:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MYNET/8-amlVOIBG4BPl7R4M7Gwl6FMJQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:53:f1:df:d1:8d:d9:f9:72:15:7e:37:ae:8d:bb:c9:a6:3d:
         1a:a4:dc:04:8c:63:cf:7f:aa:e6:5e:01:c5:7c:fe:04:55:63:
         cd:1f:bd:c0:f4:5b:57:fa:16:cf:3d:3d:11:9f:0b:27:8e:53:
         d3:42:9c:ca:59:b8:aa:de:6a:59:71:79:db:ed:6c:9f:63:e2:
         57:42:78:85:57:e2:0e:a4:1a:fc:f3:a1:d2:f2:df:71:63:2a:
         0e:78:48:3e:74:04:a3:b0:03:55:09:53:62:ca:64:92:35:d2:
         ff:58:6c:34:bb:d9:d0:ba:38:1e:0b:cc:64:b2:aa:0a:9c:39:
         0a:b1:26:61:c7:37:7f:14:70:b6:37:f0:79:b9:a4:7a:33:d9:
         04:3d:9d:7a:f5:de:f6:65:0f:4e:a5:52:40:26:23:f4:3e:b1:
         2b:7f:e4:3b:58:31:b3:56:41:1d:da:33:1f:48:0f:9b:2d:95:
         03:00:30:36:b9:58:74:ba:bc:5e:16:00:27:74:32:e3:1a:e9:
         22:6c:03:ca:c6:11:79:34:3c:4d:6a:e6:fe:08:c1:d1:18:00:
         46:40:05:43:e7:74:b8:a6:6e:8f:82:ad:ab:d7:d9:ac:a0:e1:
         44:8f:cd:e8:0e:d5:2d:45:b8:18:81:e9:78:2b:ff:c7:8a:df:
         56:96:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:58:24 2025 by rpki-client