This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
File:                     DflKsHKMejjFDw1hVU1J1lHzOqI.mft (raw, json)
Hash identifier:          PKW8SefhYn3z1ER8N7hcO1NReMs9kNmEWDhG+Tf+XsE=
Subject key identifier:   81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0E18
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
Manifest number:          0DB5
Signing time:             Fri 05 Dec 2025 10:05:08 +0000
Manifest this update:     Fri 05 Dec 2025 10:05:08 +0000
Manifest next update:     Sun 07 Dec 2025 10:05:08 +0000
Files and hashes:         1: DflKsHKMejjFDw1hVU1J1lHzOqI.crl (hash: 3MmSwkvVWkB1L4e4pKBRfSTVJ66oAdhdWawVchhI/5A=)
                          2: GZELNOyiVAmLDRR2MW7N8EqLGzE.roa (hash: +EXDQYZC6+0QrGxIPFf4wAysxyAMaPNfctcq9J3KzE0=)
                          3: Iz5tKcDQZYWT7RYRtjtU31bpn1U.roa (hash: UdokJe6o3UAr2iwc7KOVDMq9BMQTJLTIBPmYAE3iizM=)
                          4: Jns9QRoKa1WsqmtDocwMDtdMlT0.roa (hash: uEWgzsrUcLvTRdErDyt4Wd2xyJyx9lowSbRb3k5cKSY=)
                          5: OGy6Nryhc67bLXM5hzr3IRIPEvo.roa (hash: NW//Y5fISaHzjJncfP+fD1Q3i+EyT55jEXflSG250R8=)
                          6: XQN6OxMUcoAGxpGLooiky-tL7gc.roa (hash: KYlnunaZYM8trExSsCQ39CrmyKf/rWIHR1sdiY7IVHE=)
                          7: ejBKtQZTLyrE8vnIU0j-t5mEfXs.roa (hash: M2tdeDZvesGE0AAyqOJ1wnm+0nXVcRNFnYM1zMZ0F6E=)
                          8: f9BkDcTc0Qu7WyPYLc2LkngjCFE.roa (hash: jB+5fmaJQKDYqoyiYqbwVRiRXZtlcUXQIP6LnXyYQY0=)
                          9: fLu6sD6p_HtqeTeRSjHY_HQ9dr4.roa (hash: 6zwT+S23JAwSbfsfFnx6e0nfZI+pAYVSDBgx4gzVQdk=)
                          10: sy-areQ-4siOMM_blCu0RxNQJzA.roa (hash: 0IhdcJ+VJpYWoXAKgo1BqUgbH8152ChHGcRjK7P2cdE=)
                          11: ywiNVIZ1QQ4bfkFXC-tAivsHjzI.roa (hash: Q9oQftJcQcvSuPxuHL/R+AP9rCVRyQWOrSl1DN5ds9g=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 20:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3608 (0xe18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Dec  5 10:05:08 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=81FA7E956AB63FA13DCA0C183E633FAB55C931EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:52:76:a2:e8:51:c1:e7:ab:b3:ef:f9:a1:
                    c4:97:2f:e0:e1:62:81:25:88:34:b3:8d:64:08:9d:
                    5d:b4:32:cd:06:05:74:a4:fa:a3:fa:8c:f9:f7:93:
                    7d:86:f8:b3:91:3a:1b:b6:b3:7a:bd:a5:bf:5f:02:
                    f7:76:7a:e5:cf:49:1c:9e:43:2b:a5:5d:bb:9d:9e:
                    1a:53:26:29:5b:f8:e5:64:3e:52:f1:44:74:29:a0:
                    81:fe:b9:16:6a:ff:94:fe:2e:52:57:d7:83:11:36:
                    03:3a:7a:67:a7:c7:58:3c:f7:42:31:14:0f:90:93:
                    60:91:ac:60:06:42:3c:7b:6d:88:df:b4:37:2c:df:
                    1d:90:16:44:ff:5a:6f:28:9e:a6:d1:93:48:b3:34:
                    42:b1:ff:22:86:9a:51:5f:cc:a1:13:e7:fc:78:c2:
                    c8:e7:75:bc:e7:6f:77:0c:07:0d:95:15:bd:90:39:
                    83:f9:e9:0a:3f:32:11:ed:80:d4:ee:d1:80:6d:c7:
                    96:3e:ae:cf:52:bd:b7:51:e9:a4:b2:9e:a0:b0:93:
                    1a:73:37:62:42:ce:67:45:39:53:df:65:eb:55:0d:
                    07:fb:ba:42:66:7d:1a:2d:a2:d7:92:1f:93:9c:85:
                    4c:72:ce:4c:28:5a:b3:7f:38:42:d9:18:39:88:bf:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d8:7b:e8:74:7d:4c:74:5e:d0:88:d9:ec:67:2e:b9:9f:a0:
         95:c4:79:55:04:57:80:9f:d6:9c:4d:bc:ab:64:e9:4f:17:e1:
         ab:ba:a8:7f:87:51:ab:29:76:d8:a8:b9:e7:32:b0:ad:fa:65:
         a8:91:f4:7f:96:16:1b:2b:b9:6e:2d:11:e1:09:98:d5:66:da:
         81:42:1e:b8:3e:9a:57:29:d7:7d:1c:1e:6c:fa:82:4d:4b:2d:
         79:0c:20:a6:a3:9d:1f:3b:dd:1e:57:d7:5c:72:0a:fe:df:b6:
         d5:5b:1a:66:31:b3:26:8a:c9:3a:19:3d:a8:31:9a:4c:f1:dd:
         2c:9a:94:30:5f:b3:4e:08:99:56:41:50:8d:1b:48:6e:e6:90:
         ad:1f:3b:0a:09:e0:34:7d:c3:40:e5:29:7e:87:2f:a5:37:f6:
         61:7d:c7:95:23:7e:86:73:f9:6d:66:c1:1e:82:24:1a:bc:89:
         25:b0:78:75:4e:a6:68:b4:9b:74:af:f7:31:53:81:27:3d:cc:
         92:22:1b:a9:62:8c:27:a5:21:00:69:e3:7a:e5:1b:bf:62:8d:
         8f:c9:d8:d6:b5:b5:90:90:9f:27:7f:a8:cf:9b:aa:a1:e2:8d:
         25:8a:01:dd:e1:90:b1:fe:8c:1c:28:43:40:eb:d0:54:fb:47:
         86:b8:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:11:16 2025 by rpki-client