This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.mft
File:                     dqLtUg-AVK9-DJnb905Pde1FfDo.mft (raw, json)
Hash identifier:          FCJ3s45hUMWvbqQpmKdtlOXj28IiPkVUJF/ka/NC4vc=
Subject key identifier:   EE:02:71:F9:4B:25:F9:60:2E:FE:F9:69:B5:E2:DD:4F:04:45:EE:E7
Authority key identifier: 76:A2:ED:52:0F:80:54:AF:7E:0C:99:DB:F7:4E:4F:75:ED:45:7C:3A
Certificate issuer:       /CN=76A2ED520F8054AF7E0C99DBF74E4F75ED457C3A
Certificate serial:       0D5C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/dqLtUg-AVK9-DJnb905Pde1FfDo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.mft
Manifest number:          0D5C
Signing time:             Fri 05 Dec 2025 10:07:16 +0000
Manifest this update:     Fri 05 Dec 2025 10:07:16 +0000
Manifest next update:     Sun 07 Dec 2025 10:07:16 +0000
Files and hashes:         1: dqLtUg-AVK9-DJnb905Pde1FfDo.crl (hash: fy/0YA+DotoF3eJYNxrYBIrJcUtkFxhwKzvJQDU/tNA=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/dqLtUg-AVK9-DJnb905Pde1FfDo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3420 (0xd5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76A2ED520F8054AF7E0C99DBF74E4F75ED457C3A
        Validity
            Not Before: Dec  5 10:07:16 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EE0271F94B25F9602EFEF969B5E2DD4F0445EEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:45:d4:ca:28:7e:c8:d1:1e:8a:a9:a0:ed:
                    57:a1:95:97:d1:b5:f9:96:7d:03:60:43:af:d3:0c:
                    74:11:be:87:dd:2f:1e:3e:9f:9d:7d:34:dc:b0:25:
                    0c:24:ab:d9:59:40:63:5a:28:54:66:7b:f5:70:2c:
                    41:23:2e:b9:3b:b7:29:b0:d8:6b:ae:de:70:2b:de:
                    bc:5c:eb:90:0e:b3:ad:59:0a:09:f4:2a:83:81:c3:
                    25:80:6f:67:4d:fc:19:29:d7:21:7e:a9:67:9d:e9:
                    37:e4:98:ee:8b:26:2e:f6:17:e4:61:13:53:bc:0e:
                    5e:c5:29:b5:a3:42:a8:84:9e:1a:7a:9d:d4:f0:cd:
                    9f:fb:37:18:a9:e3:8e:d8:24:9e:db:d1:2c:b4:e6:
                    f4:ab:00:9c:f6:b5:84:a9:4d:b4:e1:f1:be:63:a7:
                    89:64:8d:e0:57:62:1d:db:ae:d6:2b:1b:ff:66:87:
                    2a:28:01:07:a5:8d:14:54:a5:ea:da:df:0d:ec:52:
                    8c:7f:83:8c:1b:22:78:3e:3c:e6:c6:93:a7:2d:99:
                    08:14:49:b3:b8:08:d4:03:2e:97:a1:99:51:06:db:
                    6b:16:ba:d7:2c:6f:78:2b:d9:3f:e5:35:58:52:da:
                    69:86:67:77:2b:06:5a:59:dd:0b:85:fd:a4:ec:92:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:02:71:F9:4B:25:F9:60:2E:FE:F9:69:B5:E2:DD:4F:04:45:EE:E7
            X509v3 Authority Key Identifier:
                keyid:76:A2:ED:52:0F:80:54:AF:7E:0C:99:DB:F7:4E:4F:75:ED:45:7C:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/dqLtUg-AVK9-DJnb905Pde1FfDo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEARLABYSS/dqLtUg-AVK9-DJnb905Pde1FfDo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:9d:4d:c9:f7:a1:d5:3a:19:72:00:ef:ce:25:3a:d3:fd:
         11:d4:68:2a:cf:08:51:97:32:bf:74:dc:78:6d:2a:50:83:0e:
         c0:fd:12:2d:64:88:0a:59:35:7d:75:7d:3c:bc:38:d3:a7:4c:
         8f:1a:90:68:4f:4c:0a:01:48:f8:1a:0d:2d:d8:74:11:82:68:
         c1:af:ed:f9:8f:1f:e8:fb:c3:47:ac:73:ed:8b:12:a0:47:65:
         e8:9e:e0:18:62:d0:ad:45:c5:6c:0a:3f:1d:bf:aa:57:b5:8b:
         bd:ab:a6:fd:61:65:06:29:63:88:b5:93:3b:35:cd:3d:59:60:
         56:73:ed:5b:ea:2f:d6:21:cb:b7:53:7c:d8:a7:5d:69:71:6c:
         a6:d8:0b:89:ff:3c:b0:f4:e8:5e:f7:db:a8:96:fb:3c:4a:cf:
         05:9d:52:65:3f:93:d7:5e:03:2c:59:0c:e9:d7:a7:ce:22:8a:
         ce:79:00:63:93:6c:43:89:32:7f:36:e7:e8:1f:72:64:9b:f8:
         5c:e3:82:14:83:ee:6c:8a:e3:5b:5e:22:05:4e:85:8f:bc:8c:
         6d:9b:14:ae:3c:2c:a7:c6:82:24:d7:f7:6b:17:53:9b:52:eb:
         1d:f1:53:30:9d:7a:b5:ef:37:ea:6e:04:e8:04:fd:8b:8d:bb:
         a4:af:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:25:19 2025 by rpki-client