This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
File:                     VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft (raw, json)
Hash identifier:          N85xKTAPHdVG8LSMYM+RJartIBNWO2GaTigG5PsVZzk=
Subject key identifier:   29:90:15:F4:8D:10:83:B8:55:C3:95:EA:13:C4:A5:4D:CA:5D:35:84
Authority key identifier: 54:7E:4B:64:F6:02:9E:DA:C7:C1:67:D4:52:2D:A3:D9:F0:7E:F4:37
Certificate issuer:       /CN=547E4B64F6029EDAC7C167D4522DA3D9F07EF437
Certificate serial:       0136
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
Manifest number:          0134
Signing time:             Tue 23 Dec 2025 12:38:53 +0000
Manifest this update:     Tue 23 Dec 2025 12:38:53 +0000
Manifest next update:     Tue 23 Dec 2025 18:38:53 +0000
Files and hashes:         1: 2vz-xMzPl8hiyTavYHJYKLC1WPY.roa (hash: W5GyxgtP1ONLKY2Y7pIwNIhLloHANzxzrB/mIxHajfQ=)
                          2: VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl (hash: rIiysX9TiLshK1CDrAp6Y/u/b6e/RRIOxCpjjSSVyBk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Dec 2025 17:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547E4B64F6029EDAC7C167D4522DA3D9F07EF437
        Validity
            Not Before: Dec 23 12:38:53 2025 GMT
            Not After : Oct 16 15:30:20 2026 GMT
        Subject: CN=299015F48D1083B855C395EA13C4A54DCA5D3584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:39:7f:a8:68:20:a5:fe:a8:ef:85:35:a5:
                    cc:92:73:f6:fe:ef:ef:7f:79:ef:71:b5:99:e1:b1:
                    7a:1f:ea:23:5c:62:b4:cc:1f:e2:f4:c4:f9:5b:2a:
                    f4:6a:9e:6f:ef:2a:fe:38:c3:ac:21:5b:51:54:d7:
                    59:52:5a:73:fa:a9:d3:cd:b7:c0:42:d4:c7:07:b1:
                    f3:c8:db:96:0f:07:7b:be:f0:8b:5f:7a:a0:f0:13:
                    22:36:3b:d7:0b:0d:05:4f:07:fc:67:93:4c:c1:28:
                    2e:ed:6a:d9:ac:22:ed:8c:ea:9d:f9:cd:c1:ad:9b:
                    e1:ce:58:56:af:9b:88:07:bd:66:86:e2:41:87:e8:
                    44:98:15:74:9e:05:55:21:37:bc:31:2e:b7:be:8c:
                    15:90:a9:12:8c:92:5c:61:be:69:94:e5:b8:29:03:
                    1c:6b:ab:19:44:ce:f6:69:4f:2a:da:9c:4d:b8:9f:
                    0b:f9:ad:ba:0e:8c:75:80:95:1f:34:4e:6b:d6:0e:
                    ed:89:3a:11:a3:8c:01:69:60:40:36:1d:ec:e2:8d:
                    74:bd:47:05:f5:3d:19:3a:cd:49:5e:2a:fd:f4:d2:
                    54:d5:a4:b2:89:f5:a5:37:a2:5f:17:ad:8b:f6:36:
                    4b:a2:c7:db:56:bb:9c:46:6a:97:57:b4:c3:d4:0c:
                    ec:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:90:15:F4:8D:10:83:B8:55:C3:95:EA:13:C4:A5:4D:CA:5D:35:84
            X509v3 Authority Key Identifier:
                keyid:54:7E:4B:64:F6:02:9E:DA:C7:C1:67:D4:52:2D:A3:D9:F0:7E:F4:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VH5LZPYCntrHwWfUUi2j2fB-9Dc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BEBITTECH/VH5LZPYCntrHwWfUUi2j2fB-9Dc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:eb:df:e4:7b:51:6b:72:5f:6c:06:21:33:09:c8:4c:a6:60:
         a4:f9:84:1b:62:83:2e:8d:fe:ca:cc:a7:a7:ae:89:f9:69:2a:
         dc:9f:ba:5b:90:d8:5e:2c:03:05:44:d2:52:89:0e:87:c6:f4:
         9e:2a:f5:10:ae:d9:16:18:a8:58:97:ef:b9:dc:78:76:3c:02:
         09:56:1b:75:91:da:21:7e:5f:1e:6f:f0:3b:73:38:38:68:e5:
         57:58:01:6b:4c:61:3c:61:13:ec:8f:7f:00:64:ca:6b:ed:8c:
         ef:fb:b2:af:58:57:89:9d:63:42:6c:7d:26:f7:0f:14:60:98:
         46:48:4c:f8:f7:ed:9d:08:07:30:f2:ae:28:22:68:cf:fb:31:
         50:97:c1:f1:73:67:7b:37:81:82:1e:6a:37:f6:7d:17:e4:2d:
         dc:c8:4b:54:ab:a0:15:ba:43:03:c2:d8:0d:38:1b:b9:db:53:
         63:5d:9e:85:89:6b:84:61:cd:7c:15:41:e2:66:11:c3:b7:8f:
         c7:e6:a1:22:9a:96:ae:8f:93:e3:7d:f7:2b:01:44:9b:5d:e0:
         1e:43:1f:49:07:fd:89:74:62:8e:9a:f0:03:f3:7d:e6:f2:21:
         4d:25:8a:4b:73:bd:48:aa:3a:9a:05:e7:76:5c:40:2e:2d:29:
         c9:b2:1b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 15:24:59 2025 by rpki-client