This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
File:                     AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft (raw, json)
Hash identifier:          2h+wB8b8N8yR3hR0rXysSXW4xaFgkY9VrEBilhSEHZc=
Subject key identifier:   37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0E95
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
Manifest number:          0DF9
Signing time:             Fri 05 Dec 2025 10:35:40 +0000
Manifest this update:     Fri 05 Dec 2025 10:35:40 +0000
Manifest next update:     Sun 07 Dec 2025 10:35:40 +0000
Files and hashes:         1: AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl (hash: wZ5D0PRr4Lhh7M6iuDLD2jQqVO+FqxUO0a90e7QkGLs=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3733 (0xe95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Dec  5 10:35:40 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=372D66D089BD7DDFC0D3FACB220981EDE0C5968D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:a5:83:b4:12:b1:26:3f:09:69:85:93:4f:
                    e3:76:ec:36:6c:ae:7c:2c:a9:40:28:2a:07:a7:c4:
                    8b:01:38:42:c8:0d:ea:c9:84:83:a7:a8:4a:6d:46:
                    c5:19:31:8e:b9:ec:19:d7:af:89:81:99:81:b0:14:
                    2b:9e:14:e4:78:97:c7:40:fc:84:95:21:28:83:6f:
                    bb:bc:b5:ad:37:75:5c:a2:84:c1:b2:00:a2:58:2f:
                    66:1e:18:3e:13:6d:c3:c6:81:30:5c:bf:0c:bf:a0:
                    fd:05:1d:34:f7:cc:c2:ad:6e:34:64:00:98:40:37:
                    01:4f:f1:a5:55:4b:85:5e:44:5a:e5:bd:a8:7c:ec:
                    03:97:f6:68:46:d1:a5:6b:25:a7:26:29:07:69:df:
                    7f:59:4f:d0:0a:a6:16:09:e0:4b:f6:a6:59:51:79:
                    ba:0c:fc:cb:20:b5:55:40:43:b6:12:2c:62:c6:3e:
                    2c:9a:11:6d:b7:da:7f:3d:7f:fb:2c:08:43:4e:37:
                    f9:c8:55:c0:2d:5a:09:8a:08:e4:a6:44:e6:cb:73:
                    6b:f9:95:01:88:4b:7b:92:72:8b:22:7b:3a:b9:b4:
                    67:ff:8c:56:f0:4e:21:07:2c:76:02:7b:2e:d1:0b:
                    ed:8a:d4:36:9f:3f:95:21:5c:bd:36:ba:34:fe:36:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:99:a0:a4:dc:19:b7:4e:38:78:2c:59:b6:5a:c5:c9:98:0c:
         af:14:c2:c3:b7:3d:1e:d8:3f:22:bb:0a:0f:4e:a8:4f:3f:17:
         28:ab:5a:b0:c1:55:4b:f9:7d:e4:c1:49:b2:e8:81:ae:a8:fb:
         5d:50:ed:1e:47:38:27:0a:6b:36:f6:7a:70:ca:91:8e:ad:77:
         43:ed:a2:d3:ac:39:ad:eb:90:e9:fd:0a:e1:e1:34:d9:eb:91:
         5b:35:45:45:de:16:1d:0d:ab:30:a6:68:cc:f8:f1:27:ee:13:
         48:f8:a9:b5:72:f9:94:0d:f7:f9:90:0b:6f:78:94:8f:0a:66:
         30:e2:f5:39:f4:3c:a3:0d:1c:d6:b1:cb:95:45:58:fd:d6:08:
         ca:f4:83:ab:cf:5d:bc:6a:09:f5:22:7e:0d:6d:a1:79:4e:dc:
         ff:39:6a:dc:d5:39:43:6a:bc:b7:48:30:85:ac:1e:b9:59:b5:
         a2:a2:32:89:a2:b3:49:1f:94:38:97:3c:ce:4a:aa:a8:c2:43:
         2d:0d:4c:bf:36:c0:93:a9:6d:12:86:03:8d:da:51:94:c7:75:
         da:94:59:74:89:d3:26:b9:0c:fa:ce:d2:8d:cc:29:ef:c6:34:
         e3:16:e0:a4:29:72:da:8e:36:e7:fb:d9:c6:6c:f5:2a:51:27:
         e2:64:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:24:51 2025 by rpki-client