This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft
File: fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft (raw, json)
Hash identifier: 9iOxdUZz8jvQVzi58bFH/12NnBXevUbdO1z68Xeidnk=
Subject key identifier: 17:D5:1F:95:C1:39:70:EF:EF:2C:73:09:91:E3:6A:0C:D2:11:22:21
Authority key identifier: 7E:08:8F:89:A6:16:32:E1:7D:91:9F:94:3E:97:A0:9A:BD:03:C9:3B
Certificate issuer: /CN=7E088F89A61632E17D919F943E97A09ABD03C93B
Certificate serial: 0D89
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fgiPiaYWMuF9kZ-UPpegmr0DyTs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft
Manifest number: 0D89
Signing time: Sat 06 Dec 2025 22:08:00 +0000
Manifest this update: Sat 06 Dec 2025 22:08:00 +0000
Manifest next update: Mon 08 Dec 2025 22:08:00 +0000
Files and hashes: 1: fgiPiaYWMuF9kZ-UPpegmr0DyTs.crl (hash: suubRXBtrutQFQ2f3ieaUSdQsF1LSLe/aXacJW22EdA=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/fgiPiaYWMuF9kZ-UPpegmr0DyTs.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 06:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3465 (0xd89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E088F89A61632E17D919F943E97A09ABD03C93B
Validity
Not Before: Dec 6 22:08:00 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=17D51F95C13970EFEF2C730991E36A0CD2112221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:c1:83:27:26:00:8d:2d:23:18:9b:b8:ff:
82:76:95:14:a0:a3:01:1a:94:de:38:f9:b7:ef:97:
3e:e0:76:13:c5:d3:0f:71:0c:e9:b6:b9:f1:98:c3:
92:11:d2:3a:19:ff:f7:89:ce:11:a2:3e:d7:22:57:
37:74:ea:e8:b2:44:71:8d:c2:69:b6:d8:bc:7c:5f:
d7:3c:51:23:7b:a2:c6:f1:fb:22:6d:1a:85:ad:81:
ae:d5:bd:f3:0c:3b:2b:e1:88:ca:57:5f:63:27:7f:
1d:f6:75:fc:dc:84:a0:64:34:83:5b:7b:c0:a7:e4:
25:d8:88:bb:a1:2e:ec:2c:ed:fc:7c:9e:61:b8:a9:
d1:9b:b7:c7:d6:42:57:6b:b3:39:da:45:57:97:60:
5d:59:f1:e3:68:01:44:3f:73:8d:7b:33:88:5f:9d:
fe:8a:a8:3c:b7:d4:b8:b4:5d:cb:6c:7f:52:d4:03:
63:35:b3:89:bc:2a:77:50:b5:e2:87:c1:16:00:51:
3d:fb:35:04:68:63:40:70:3e:07:b1:52:fa:98:f3:
0e:e6:d9:80:a3:1d:e5:b0:14:89:00:58:9f:0e:68:
3c:60:b2:12:5c:85:2f:09:10:2d:b3:78:57:7a:eb:
39:43:55:db:fd:ba:c5:46:8f:d2:2c:66:fa:63:89:
2d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D5:1F:95:C1:39:70:EF:EF:2C:73:09:91:E3:6A:0C:D2:11:22:21
X509v3 Authority Key Identifier:
keyid:7E:08:8F:89:A6:16:32:E1:7D:91:9F:94:3E:97:A0:9A:BD:03:C9:3B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fgiPiaYWMuF9kZ-UPpegmr0DyTs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TDTGROUP/fgiPiaYWMuF9kZ-UPpegmr0DyTs.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:09:7b:43:72:45:c4:41:77:27:43:20:b6:ca:2e:c7:86:2f:
93:39:7d:47:15:f5:62:c7:34:25:51:67:a5:f1:95:fa:68:98:
c1:ce:58:fb:db:09:cd:a0:86:20:fc:83:82:48:cf:d2:25:e3:
d9:3c:47:0a:d2:ab:28:a8:a0:b1:c3:89:c5:7c:eb:35:f1:cd:
a9:19:a2:08:e9:73:f4:05:1c:7c:6a:e2:28:40:8a:ff:f0:17:
2f:a9:f7:bc:4a:d9:4f:c0:0e:82:5e:7b:38:e5:e4:37:6b:d6:
80:da:1c:a6:39:d4:9b:41:a3:88:95:81:43:99:b2:00:19:25:
9e:1a:66:84:f0:f6:29:9f:dc:bc:c8:98:43:9c:b4:f4:c8:e9:
e9:f1:1b:0a:35:98:b2:8b:37:69:ae:50:1e:44:75:d7:e0:48:
87:47:d0:33:1d:0d:24:da:85:f9:79:0e:d5:a6:6b:66:d0:d2:
17:35:d4:37:c8:78:62:71:ef:b5:10:ff:0c:e2:67:8e:97:29:
ba:37:2d:03:c6:ac:dd:53:a3:11:15:a5:3e:9e:d3:98:9e:16:
7c:ac:08:4c:d6:76:7f:94:cf:02:49:c1:ec:3a:fa:9c:d6:a0:
c6:9c:a4:0b:fa:12:94:71:3a:9d:4f:39:09:1c:e9:11:03:18:
62:db:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:55:12 2025 by rpki-client