This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BWIZ/j7Fo7f1zY3PNzDeZraCrPXeebaI.mft
File:                     j7Fo7f1zY3PNzDeZraCrPXeebaI.mft (raw, json)
Hash identifier:          KR4liI8ef8Phh22t1PeswcH4A2jrMyNux8jfB9ihsI0=
Subject key identifier:   53:15:DB:F9:5E:E4:02:9A:80:B1:6D:2C:CE:81:CB:B6:56:F1:74:B4
Authority key identifier: 8F:B1:68:ED:FD:73:63:73:CD:CC:37:99:AD:A0:AB:3D:77:9E:6D:A2
Certificate issuer:       /CN=8FB168EDFD736373CDCC3799ADA0AB3D779E6DA2
Certificate serial:       0DC2
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/j7Fo7f1zY3PNzDeZraCrPXeebaI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BWIZ/j7Fo7f1zY3PNzDeZraCrPXeebaI.mft
Manifest number:          0DC0
Signing time:             Thu 12 Feb 2026 09:50:34 +0000
Manifest this update:     Thu 12 Feb 2026 09:50:33 +0000
Manifest next update:     Sat 14 Feb 2026 09:50:33 +0000
Files and hashes:         1: hqRZcWjWN8WrmwT0V6s3nN5Xz4E.roa (hash: R0BnmauMWKKzP9G7scILSymxCo0aSQMrZ2DKl6lBHAs=)
                          2: j7Fo7f1zY3PNzDeZraCrPXeebaI.crl (hash: DOaLvLiGJtgyiXktUvxURoAc+Nl5vXRgUDHPGGY6h3M=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BWIZ/j7Fo7f1zY3PNzDeZraCrPXeebaI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BWIZ/j7Fo7f1zY3PNzDeZraCrPXeebaI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/j7Fo7f1zY3PNzDeZraCrPXeebaI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3522 (0xdc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB168EDFD736373CDCC3799ADA0AB3D779E6DA2
        Validity
            Not Before: Feb 12 09:50:33 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5315DBF95EE4029A80B16D2CCE81CBB656F174B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:15:6c:30:4b:40:6b:ce:62:a6:f9:99:64:
                    1c:d8:f5:77:3a:50:fb:67:0f:ca:84:8e:8c:38:e0:
                    22:b6:61:b6:7f:9e:90:14:88:a5:b1:02:34:0b:eb:
                    0d:30:d1:d5:3b:e7:23:47:d3:72:d3:d8:92:f6:dd:
                    4a:a6:97:6f:f1:59:6b:42:de:bf:ab:26:35:d1:02:
                    09:7b:b8:65:0a:ac:97:9b:36:4e:d2:97:7a:b4:9a:
                    3c:59:8e:e5:11:73:e2:ed:e4:cd:17:63:6b:61:86:
                    76:c5:01:3f:c2:18:1e:51:47:3f:81:b1:db:91:b5:
                    cb:03:75:e3:37:c9:1b:55:f1:f9:25:a7:45:06:11:
                    70:e1:8b:46:0f:3e:a4:e3:65:c9:9d:c6:db:13:a2:
                    c4:c9:de:b5:a2:e8:c9:71:91:74:75:3b:9d:9b:bc:
                    f1:c8:12:e3:84:c6:98:7e:de:8a:1b:29:55:50:e6:
                    78:f1:90:40:ff:95:07:cf:66:c9:59:7d:d6:17:3f:
                    25:f9:0f:d7:6c:8a:eb:61:59:ac:3d:c2:79:6e:f9:
                    33:65:2f:a0:92:08:79:bc:dd:12:3c:a0:1b:49:6b:
                    6e:82:f2:97:63:56:bd:7a:bf:26:24:35:df:e5:29:
                    d7:81:c9:67:27:37:cc:4c:e1:65:fa:08:dc:b5:25:
                    7b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:15:DB:F9:5E:E4:02:9A:80:B1:6D:2C:CE:81:CB:B6:56:F1:74:B4
            X509v3 Authority Key Identifier:
                keyid:8F:B1:68:ED:FD:73:63:73:CD:CC:37:99:AD:A0:AB:3D:77:9E:6D:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BWIZ/j7Fo7f1zY3PNzDeZraCrPXeebaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/j7Fo7f1zY3PNzDeZraCrPXeebaI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BWIZ/j7Fo7f1zY3PNzDeZraCrPXeebaI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4d:2e:10:e7:b8:39:31:38:21:0b:28:b8:e8:16:29:c5:a5:
         19:b6:bc:6d:a4:00:a2:76:4b:51:b2:f7:70:fd:cf:f6:57:d4:
         23:63:1b:4b:3e:a7:61:0b:36:f9:44:dd:d6:30:0a:b7:c5:7e:
         f3:ab:39:06:74:11:c8:07:37:5e:22:42:1b:f5:02:1a:6b:f2:
         11:87:95:c2:50:5a:7d:4d:f0:36:9d:09:22:a6:3b:66:07:b7:
         dc:96:6d:e3:4c:1b:4b:b8:6d:68:61:9a:45:a7:04:c5:b6:69:
         ce:ab:79:39:b3:a6:a9:80:95:73:96:01:4d:e7:19:84:08:6c:
         21:83:46:f5:29:49:b6:3a:62:63:50:ff:d9:59:77:6b:93:e9:
         a1:c1:aa:b9:f6:1c:17:da:c0:1f:ba:f9:ec:43:d1:66:1e:1e:
         d8:d6:d3:77:00:4a:30:6f:fe:f5:2d:be:c8:57:f3:7d:39:93:
         52:41:5e:58:ad:ef:6f:84:fd:7c:e6:8b:b5:91:d9:8c:6c:42:
         7b:81:5b:02:96:4b:e2:e3:ca:5c:b5:b2:48:de:23:cd:23:ef:
         48:69:db:06:52:3d:56:5f:c6:76:32:d0:84:51:dc:a6:7a:89:
         dd:fc:22:24:43:cf:2d:31:1b:38:34:6b:95:98:ef:24:47:44:
         93:94:77:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 14:27:30 2026 by rpki-client