This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft
File:                     0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft (raw, json)
Hash identifier:          oe+XwtDgklI6Ka5AfQgA7M3DssDTDw75Q0x7ITFUQkU=
Subject key identifier:   77:07:07:B2:FD:D8:7D:CE:E7:49:7A:C6:82:96:42:43:F8:98:38:9A
Authority key identifier: D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7
Certificate issuer:       /CN=D330BC4E137B1512E2E4506806B870A4EAA860D7
Certificate serial:       02D6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft
Manifest number:          02CD
Signing time:             Thu 12 Feb 2026 09:50:28 +0000
Manifest this update:     Thu 12 Feb 2026 09:50:28 +0000
Manifest next update:     Sat 14 Feb 2026 09:50:28 +0000
Files and hashes:         1: 0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl (hash: S+L80OoII5ZFRzC4rbUiH3X3fzdqycB5aj95WCHyknc=)
                          2: P1ZKyfvag6UsPC4dNJOSlY3e4jI.roa (hash: 1vRlxS13uFPFd7r4WDxgL7pRnrmfLKWCBZB3Vu33Hnc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 726 (0x2d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D330BC4E137B1512E2E4506806B870A4EAA860D7
        Validity
            Not Before: Feb 12 09:50:28 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=770707B2FDD87DCEE7497AC682964243F898389A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:28:b9:82:cf:c5:d4:72:69:c6:f5:70:48:14:
                    0a:c1:74:e9:f2:9a:34:17:2b:3b:04:30:4a:0c:da:
                    27:91:c6:e5:6f:35:35:03:da:31:3c:e1:53:24:31:
                    c5:97:ee:50:f9:02:71:04:88:08:11:9c:6e:b8:e8:
                    d9:e6:8c:93:54:a2:d9:0a:3e:ed:37:ca:07:85:14:
                    3a:90:de:5b:6a:0f:21:d3:f8:a0:22:02:51:c5:58:
                    f2:35:7a:16:0f:b0:c3:4d:ed:2f:41:9b:ec:b0:30:
                    47:14:ad:f6:0f:ac:97:42:6f:f7:6c:c0:60:56:2b:
                    7a:0b:91:e0:a2:6f:82:6d:4d:59:02:59:88:01:50:
                    b2:28:e5:97:cd:a3:8c:09:68:0d:84:d7:b4:30:2b:
                    82:3b:68:5e:13:3d:c9:6f:6d:bd:c3:8c:0d:3e:6f:
                    bd:61:6c:7e:97:65:0a:5e:01:7d:66:47:26:37:af:
                    1a:44:61:0c:43:93:00:e2:38:1f:c5:d6:37:42:49:
                    a9:cd:bb:30:1e:a8:1c:b5:3a:f7:96:bb:e2:07:fc:
                    a9:0b:e0:01:de:9f:e3:51:dd:57:71:bd:15:81:71:
                    da:60:5b:a7:2e:0e:e5:2d:04:60:d7:c6:39:44:95:
                    84:a1:47:85:7c:dd:08:2c:5c:9d:93:45:78:7e:e1:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:07:07:B2:FD:D8:7D:CE:E7:49:7A:C6:82:96:42:43:F8:98:38:9A
            X509v3 Authority Key Identifier:
                keyid:D3:30:BC:4E:13:7B:15:12:E2:E4:50:68:06:B8:70:A4:EA:A8:60:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0zC8ThN7FRLi5FBoBrhwpOqoYNc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BESTBASIS/0zC8ThN7FRLi5FBoBrhwpOqoYNc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:46:36:26:e4:22:f7:87:ad:65:74:da:c1:b4:3e:f4:df:9a:
         a5:1c:b3:fc:c4:28:e6:e3:1c:3a:c0:f8:9c:01:94:aa:69:39:
         64:13:68:3b:58:b7:d4:07:f6:0f:fb:ec:36:96:2b:19:40:9b:
         17:32:0c:5b:b0:ea:0f:eb:c7:de:bb:18:5e:db:97:44:10:80:
         f6:04:14:a8:6b:74:6e:19:c7:48:ae:97:8e:12:86:bd:54:46:
         00:ca:06:eb:6d:c5:90:5f:10:46:1d:87:ba:52:4e:d8:33:56:
         72:f5:53:20:ae:f4:d5:07:71:ca:a8:6a:d0:14:61:d4:4d:ef:
         5d:1f:cb:f4:07:8b:7e:a8:a9:33:50:aa:e5:7c:97:f4:5e:42:
         22:ca:bc:ed:e6:39:fa:d6:b9:28:71:e8:b4:47:71:8f:2d:75:
         76:7d:7e:3f:65:98:ad:6e:82:d0:3e:0e:3f:93:0a:a3:57:1e:
         f8:70:bb:3d:35:a1:bc:d5:d6:af:b0:90:10:b0:01:60:07:76:
         b6:47:92:dc:bf:6e:b5:70:e0:2d:eb:e9:a0:f8:b8:67:39:20:
         5d:12:98:58:0a:13:72:a7:6b:9a:c6:7a:5e:43:39:35:66:11:
         e2:ba:8e:79:e2:20:3e:ff:50:6d:29:5b:51:33:6b:a2:b1:8c:
         50:1f:05:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 14:26:26 2026 by rpki-client