This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFUCLOUD/eHAEuCyj0Lecb40m6oPUwvXklJI.mft
File:                     eHAEuCyj0Lecb40m6oPUwvXklJI.mft (raw, json)
Hash identifier:          VyfeBxkxoZSTRtj0XD4OAc1bb7iiPaV7cfjVsYTMtvU=
Subject key identifier:   6F:BC:00:24:5A:0A:32:AF:54:D5:3D:9A:FF:EA:AA:6F:3E:76:56:B0
Authority key identifier: 78:70:04:B8:2C:A3:D0:B7:9C:6F:8D:26:EA:83:D4:C2:F5:E4:94:92
Certificate issuer:       /CN=787004B82CA3D0B79C6F8D26EA83D4C2F5E49492
Certificate serial:       0D77
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eHAEuCyj0Lecb40m6oPUwvXklJI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFUCLOUD/eHAEuCyj0Lecb40m6oPUwvXklJI.mft
Manifest number:          0D77
Signing time:             Tue 23 Dec 2025 11:40:00 +0000
Manifest this update:     Tue 23 Dec 2025 11:40:00 +0000
Manifest next update:     Thu 25 Dec 2025 11:40:00 +0000
Files and hashes:         1: eHAEuCyj0Lecb40m6oPUwvXklJI.crl (hash: QpwMrnreW8IeNaEitNRL82On+S1EclAUqiuK65nxv40=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFUCLOUD/eHAEuCyj0Lecb40m6oPUwvXklJI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFUCLOUD/eHAEuCyj0Lecb40m6oPUwvXklJI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/eHAEuCyj0Lecb40m6oPUwvXklJI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Dec 2025 20:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3447 (0xd77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787004B82CA3D0B79C6F8D26EA83D4C2F5E49492
        Validity
            Not Before: Dec 23 11:40:00 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=6FBC00245A0A32AF54D53D9AFFEAAA6F3E7656B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:db:55:09:aa:95:b2:0e:f8:ed:1b:8e:71:0b:
                    4a:fe:94:78:23:8c:2f:36:1a:0c:6a:1e:7d:32:27:
                    9d:3e:30:bf:3d:34:53:d2:34:4f:7c:05:25:d0:1f:
                    8d:76:6c:23:8a:b8:fc:fd:bb:48:83:b3:9d:6f:58:
                    ce:10:29:1b:63:15:0f:15:aa:e8:13:fa:11:93:17:
                    d5:56:a7:0f:76:5b:6e:86:8b:83:61:03:3f:1a:cd:
                    9e:98:f7:7b:4d:36:1a:11:0d:d6:4e:a1:87:f8:da:
                    df:07:20:d8:cc:ac:c8:58:c9:2c:55:d2:2a:a7:52:
                    d6:ca:99:fb:a1:fb:9a:56:bb:70:b3:33:0e:20:ad:
                    83:5f:4d:9c:a7:ed:ac:28:67:a7:9c:a7:81:91:6c:
                    51:58:5c:ca:78:bb:2b:b9:5c:01:c8:09:7e:69:35:
                    ad:35:05:a1:ff:03:a6:51:72:6f:19:36:a1:63:ce:
                    71:d5:77:f2:f2:73:99:ad:55:c9:38:4a:85:91:36:
                    6f:b7:5f:b6:c8:92:4b:ea:a8:e9:3e:5d:ed:1f:23:
                    17:60:ed:49:8a:19:04:48:88:df:de:27:53:b4:c8:
                    8a:93:78:85:00:03:32:d6:b1:ad:79:1b:22:06:1a:
                    f8:51:59:cb:df:1b:6f:13:3e:20:7d:11:0c:d8:ee:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BC:00:24:5A:0A:32:AF:54:D5:3D:9A:FF:EA:AA:6F:3E:76:56:B0
            X509v3 Authority Key Identifier:
                keyid:78:70:04:B8:2C:A3:D0:B7:9C:6F:8D:26:EA:83:D4:C2:F5:E4:94:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFUCLOUD/eHAEuCyj0Lecb40m6oPUwvXklJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eHAEuCyj0Lecb40m6oPUwvXklJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFUCLOUD/eHAEuCyj0Lecb40m6oPUwvXklJI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:24:65:ff:c6:40:14:eb:0c:fa:f9:80:e8:8c:58:22:db:7e:
         2f:53:2c:95:18:1c:91:1f:bd:c6:6d:ba:1d:45:20:4b:4a:eb:
         e6:f6:ef:4a:59:65:d8:0a:7d:12:0f:65:90:01:a0:86:45:29:
         6e:9f:0e:ec:ba:ec:6d:fe:35:6e:0e:9d:d3:a3:1e:8d:1d:e4:
         0d:f8:b5:ba:b1:7f:41:dd:24:05:0e:68:96:09:c7:2c:3c:6e:
         4f:77:3e:aa:7b:cf:9c:63:df:21:c8:f8:a8:f9:92:9c:d2:e1:
         1c:34:5d:ba:e8:76:45:ec:4d:23:98:6b:dd:78:16:ff:b0:25:
         81:12:76:e2:38:4a:7e:87:df:90:82:e2:fa:ea:07:24:06:67:
         0f:3e:a2:81:ff:ba:64:6b:8e:f1:1d:32:97:78:54:5d:fd:c0:
         d0:92:1d:74:d1:56:dc:61:36:bb:22:f5:b6:11:93:85:b4:a7:
         0d:59:4e:c0:3f:62:b6:83:fb:5e:c9:f7:f9:e3:b2:bf:44:66:
         e6:f0:29:ad:38:09:02:67:a2:73:3d:27:31:3d:1c:83:a3:ef:
         7f:3d:06:5f:fb:43:95:fc:72:14:c1:7c:5a:23:30:bc:01:83:
         81:33:86:fd:84:d7:da:11:5a:89:73:24:1c:cb:8f:3c:bb:7a:
         1e:53:2f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:41:10 2025 by rpki-client