This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
File:                     fpzvJ8je0TUGszmdmS7P9ia1eVE.mft (raw, json)
Hash identifier:          oRzgtJ+f9jDpkBk0nEoa3RgvTR9k/Lw460w+JJtlX1Q=
Subject key identifier:   9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC
Authority key identifier: 7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51
Certificate issuer:       /CN=7E9CEF27C8DED13506B3399D992ECFF626B57951
Certificate serial:       05B8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
Manifest number:          05AF
Signing time:             Fri 05 Dec 2025 10:04:30 +0000
Manifest this update:     Fri 05 Dec 2025 10:04:30 +0000
Manifest next update:     Sun 07 Dec 2025 10:04:30 +0000
Files and hashes:         1: 8iU3wEzok3gKvIqLkgbHhsw6-eg.roa (hash: xN2RK1h4tjD0XjogrtTLV9kUMGsJJ+fW2BNxkFyGmEs=)
                          2: BdnHgYWxhScNUkJzMJgTK9EZj9k.roa (hash: uOPSkQQ3RPLaNEZfmE2R1qOR8Uqz3QJGq0JkmDWo7/A=)
                          3: fpzvJ8je0TUGszmdmS7P9ia1eVE.crl (hash: a1EFx8MQX15t4xCpUs9KRJ039PeUvU6/T4bDepw2N9U=)
                          4: jFvLfPC02_ndHiHFt2mAldtwwZk.roa (hash: Kw7ZynrZ7I7k68tbzP6vE3jEm/LjvzArRoedzDlVi8g=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1464 (0x5b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E9CEF27C8DED13506B3399D992ECFF626B57951
        Validity
            Not Before: Dec  5 10:04:30 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=9AE0088498A7364132DCE16822B69F479574E3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:89:80:a4:27:ae:f9:cc:15:a9:09:e4:b4:
                    d7:ff:44:68:90:ed:c4:5c:83:a3:84:ea:39:47:f1:
                    d1:83:72:f8:96:62:ba:05:85:a1:37:5c:93:19:a2:
                    cd:50:1d:2b:08:10:0e:76:ef:53:97:21:9a:97:af:
                    f0:52:01:60:89:30:f5:92:e3:68:a8:d4:c6:6e:fa:
                    35:8e:c9:7c:0e:ae:67:be:2b:5e:24:c3:0f:0f:6c:
                    cb:a5:77:16:9f:5c:8e:24:f3:aa:14:d6:e6:a1:e3:
                    98:3c:6d:23:ed:14:a6:63:7b:e3:ba:b3:8a:fc:60:
                    d4:32:f9:e7:b3:53:72:76:85:05:30:6a:af:bd:0f:
                    4e:15:bc:3a:8d:6e:46:51:52:3f:1c:0b:54:78:dc:
                    23:85:d6:d1:10:63:b0:79:50:5c:1b:d7:cd:12:e1:
                    b2:b7:40:bd:12:74:41:eb:fd:26:f3:01:08:35:e4:
                    d1:20:f5:66:75:30:f1:f2:87:1a:7a:a3:09:7d:b9:
                    44:a5:43:a2:9c:f9:4b:3a:d5:6d:f8:f0:f7:3c:46:
                    2c:93:8b:c0:9a:87:b9:c1:27:60:ca:4e:06:55:47:
                    a8:f3:4b:e2:22:a3:ff:37:96:05:a8:d1:71:18:69:
                    78:c8:88:8b:bb:05:e7:a2:05:52:3d:af:6d:72:0a:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:08:84:98:A7:36:41:32:DC:E1:68:22:B6:9F:47:95:74:E3:FC
            X509v3 Authority Key Identifier:
                keyid:7E:9C:EF:27:C8:DE:D1:35:06:B3:39:9D:99:2E:CF:F6:26:B5:79:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fpzvJ8je0TUGszmdmS7P9ia1eVE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCETECH/fpzvJ8je0TUGszmdmS7P9ia1eVE.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:6a:e8:61:f3:91:b2:22:50:b9:17:17:d6:2b:92:05:d1:4c:
         78:d6:01:a7:6e:86:96:76:2b:b7:c5:32:1a:98:ef:8e:ed:f1:
         28:f0:8a:cb:ed:1f:50:4b:ee:16:eb:08:d1:c2:57:44:69:03:
         03:45:00:34:54:3e:f8:25:a6:f7:94:46:3c:61:9f:07:a5:4c:
         4a:74:dd:db:01:49:08:0f:76:1b:90:6d:93:ad:1b:67:13:d1:
         92:a3:47:b3:6d:e4:03:65:d9:e7:ce:80:0f:76:9e:f4:05:1e:
         3e:0a:50:27:b6:fa:02:3d:f8:56:6f:4e:f2:72:4a:33:bd:14:
         0c:ab:17:52:21:b1:1e:31:7b:04:97:d0:7e:37:5b:19:52:bd:
         f1:12:42:b4:2c:13:6a:ed:9c:04:9a:ff:50:d6:7c:46:78:b3:
         8f:7a:cb:77:68:65:ff:66:22:3f:e0:3a:44:cc:c0:e6:64:1b:
         66:59:24:07:f0:41:35:ce:3b:b7:6d:ad:89:10:b4:e7:70:16:
         ce:30:28:c1:a9:23:ec:ab:b1:52:bf:b9:25:46:0d:4e:a5:63:
         58:7b:4d:6a:83:64:36:40:05:98:f8:53:93:a8:48:dd:f2:91:
         c9:9e:75:7e:94:20:09:60:f0:e9:b6:f2:95:db:9a:1d:98:9f:
         77:64:eb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:29:39 2025 by rpki-client