This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft
File:                     RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft (raw, json)
Hash identifier:          iVcdFkIh1X1qbqk95XVZ2EHQ57uX8PYma0Mb1ndJfHY=
Subject key identifier:   EB:A3:97:2C:CF:2A:C1:97:E5:86:C0:AD:8B:74:0D:C3:6C:79:B1:B3
Authority key identifier: 46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B
Certificate issuer:       /CN=4640D988EC8146BA430596012122D1A1CFC1C36B
Certificate serial:       0DF9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft
Manifest number:          0DD7
Signing time:             Thu 12 Feb 2026 10:50:23 +0000
Manifest this update:     Thu 12 Feb 2026 10:50:23 +0000
Manifest next update:     Sat 14 Feb 2026 10:50:23 +0000
Files and hashes:         1: FYcm3-BAzLarrqeCYV2whY0U-zo.roa (hash: BaTk+IlRTMk3VliwXqlPH52YkxVtp5DBAOqd4jq6OiU=)
                          2: RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl (hash: mjwOTlEUh603cb73FFs/fU103akveHRODhybmjGrDX0=)
                          3: TsN0H5pD6Qm0_O0vCqm-6LmqAwg.roa (hash: QK6bO3POqwYLqN6of1UT1LdwgPFXVK0OJbizi519XWY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3577 (0xdf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4640D988EC8146BA430596012122D1A1CFC1C36B
        Validity
            Not Before: Feb 12 10:50:23 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EBA3972CCF2AC197E586C0AD8B740DC36C79B1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1c:70:15:e8:47:0b:5c:cf:90:8c:df:cd:69:
                    20:52:4c:f0:94:21:ba:af:0c:c8:7d:b3:9b:43:3f:
                    a9:ba:1e:ea:bc:53:ef:72:c0:4f:fc:bb:b9:9a:63:
                    79:52:fb:a7:80:e8:c1:45:c6:9f:2b:43:84:a0:c5:
                    20:e4:5a:c2:1f:e2:2f:06:cf:d2:d6:16:05:26:af:
                    e6:d6:76:af:7b:84:98:e9:6d:b6:84:92:6e:0b:b1:
                    f7:2a:ab:94:42:e0:f3:c1:28:a4:7d:ce:c5:f8:f3:
                    9f:b6:1e:78:f0:7f:9b:f2:1d:4e:23:b0:22:0b:cf:
                    90:b5:e3:4f:ab:e9:1e:9b:c3:da:13:ce:3b:20:c2:
                    56:9c:d7:48:31:f2:1c:f3:95:6e:63:09:be:69:92:
                    fa:07:ca:5d:c5:72:72:26:72:b5:f9:f5:4b:ac:40:
                    b1:5a:53:c3:7b:be:8c:5e:cd:fb:81:9a:aa:3f:f3:
                    de:98:2d:3e:77:8f:d9:20:67:13:31:1f:47:ad:a1:
                    87:11:a7:34:8c:72:b1:03:28:9b:b8:7d:4b:28:ed:
                    0c:37:e8:ea:75:bb:56:19:d8:b9:76:70:39:cc:11:
                    35:de:13:3d:c1:36:5b:5b:5e:7f:8f:7e:b9:4e:b7:
                    a4:aa:a5:25:16:70:65:b2:40:fa:01:44:f0:f8:7c:
                    9d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A3:97:2C:CF:2A:C1:97:E5:86:C0:AD:8B:74:0D:C3:6C:79:B1:B3
            X509v3 Authority Key Identifier:
                keyid:46:40:D9:88:EC:81:46:BA:43:05:96:01:21:22:D1:A1:CF:C1:C3:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RkDZiOyBRrpDBZYBISLRoc_Bw2s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APPIER/RkDZiOyBRrpDBZYBISLRoc_Bw2s.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:37:13:ff:81:b9:82:c5:fa:6d:85:d5:4b:23:d0:01:9c:13:
         fe:71:25:74:85:66:91:b3:f8:ed:1b:7c:32:e6:ca:7b:90:73:
         a3:c5:49:25:b2:ed:eb:2a:64:c0:11:ef:cc:4f:3c:19:dd:f9:
         f2:61:8c:d1:85:02:b3:5d:52:4a:ae:56:c0:dc:c9:fc:bc:ac:
         53:bf:54:7e:1a:dd:2c:93:f7:18:64:e7:85:15:2b:bb:4e:42:
         c0:66:39:1f:b1:5e:20:cd:77:7d:97:c0:22:11:16:d1:bf:ae:
         c0:43:ca:2b:7e:36:5a:68:2b:6d:ee:14:c5:68:c6:23:7a:bd:
         96:a7:18:68:41:2b:8d:81:d1:6b:db:9b:fb:48:6f:82:fd:5d:
         bf:58:4d:60:5f:b8:67:5b:76:1d:8e:a2:27:25:f4:98:8c:bf:
         f5:9e:bc:90:02:eb:dc:eb:1c:87:2a:00:25:b7:3d:7a:c4:22:
         21:ab:2c:56:c9:06:48:df:2b:72:9a:dd:44:e4:15:b5:a3:d8:
         d9:c0:c7:68:3a:dd:be:d0:5c:98:ee:fd:e5:c7:8b:f0:cf:ce:
         70:e1:9b:5a:11:ee:4c:8c:39:ae:c2:2f:5e:7f:94:5d:c4:bf:
         42:f5:c8:6d:b2:6e:14:01:8c:87:f4:62:69:5a:61:42:23:68:
         ca:d6:e5:d7
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgICDfkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDY0
MEQ5ODhFQzgxNDZCQTQzMDU5NjAxMjEyMkQxQTFDRkMxQzM2QjAeFw0yNjAyMTIx
MDUwMjNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEVCQTM5NzJDQ0YyQUMx
OTdFNTg2QzBBRDhCNzQwREMzNkM3OUIxQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqHHAV6EcLXM+QjN/NaSBSTPCUIbqvDMh9s5tDP6m6Huq8U+9y
wE/8u7maY3lS+6eA6MFFxp8rQ4SgxSDkWsIf4i8Gz9LWFgUmr+bWdq97hJjpbbaE
km4Lsfcqq5RC4PPBKKR9zsX485+2Hnjwf5vyHU4jsCILz5C140+r6R6bw9oTzjsg
wlac10gx8hzzlW5jCb5pkvoHyl3FcnImcrX59UusQLFaU8N7voxezfuBmqo/896Y
LT53j9kgZxMxH0etoYcRpzSMcrEDKJu4fUso7Qw36Op1u1YZ2Ll2cDnMETXeEz3B
NltbXn+PfrlOt6SqpSUWcGWyQPoBRPD4fJ0nAgMBAAGjggIHMIICAzAdBgNVHQ4E
FgQU66OXLM8qwZflhsCti3QNw2x5sbMwHwYDVR0jBBgwFoAURkDZiOyBRrpDBZYB
ISLRoc/Bw2swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBQSUVS
L1JrRFppT3lCUnJwREJaWUJJU0xSb2NfQncycy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvUmtEWmlPeUJScnBEQlpZQklTTFJvY19CdzJzLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBQSUVSL1JrRFppT3lCUnJwREJaWUJJ
U0xSb2NfQncycy5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCu
NxP/gbmCxfpthdVLI9ABnBP+cSV0hWaRs/jtG3wy5sp7kHOjxUklsu3rKmTAEe/M
TzwZ3fnyYYzRhQKzXVJKrlbA3Mn8vKxTv1R+Gt0sk/cYZOeFFSu7TkLAZjkfsV4g
zXd9l8AiERbRv67AQ8orfjZaaCtt7hTFaMYjer2WpxhoQSuNgdFr25v7SG+C/V2/
WE1gX7hnW3YdjqInJfSYjL/1nryQAuvc6xyHKgAltz16xCIhqyxWyQZI3ytymt1E
5BW1o9jZwMdoOt2+0FyY7v3lx4vwz85w4ZtaEe5MjDmuwi9ef5RdxL9C9chtsm4U
AYyH9GJpWmFCI2jK1uXX
-----END CERTIFICATE-----
Generated at Thu Feb 12 14:27:48 2026 by rpki-client