This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
File:                     XNEK1bakd108UE1mEHH4ziQ-KAc.mft (raw, json)
Hash identifier:          u1rMslFQwFlNfpvlAppcEvhYl+s4YceiRnUv1AwDJhE=
Subject key identifier:   FA:35:26:77:91:33:AF:50:0C:EB:1B:BD:B9:75:CA:67:F8:93:02:1E
Authority key identifier: 5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07
Certificate issuer:       /CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
Certificate serial:       0DD8
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
Manifest number:          0DA9
Signing time:             Thu 12 Feb 2026 10:50:00 +0000
Manifest this update:     Thu 12 Feb 2026 10:50:00 +0000
Manifest next update:     Sat 14 Feb 2026 10:50:00 +0000
Files and hashes:         1: 02Wxy1cQACTIEvEhl_sREhu84hE.roa (hash: ZbPLJgAEmZnLFnXy75z/nNFeien/ggjBoHaZ8IAGjk8=)
                          2: IJnVve9QI-ZV0sH7RR21AOtOTYU.roa (hash: bsPZmXIt0JI4sKspJljenCNpj9afsKdJj76ykssSn70=)
                          3: NvaWkBaND9dB2pG9K5QIu9qOoJU.roa (hash: xJVD5PsgRWco6mgThjfXshxiuA7o5nfBmOgLlmcuLbw=)
                          4: Th9RXu10cRYb4b9CBSyXnExnBdo.roa (hash: pEIUuhHMYcMSopcdOj03TOPFSL7mF9qf6JVmbuHXnj8=)
                          5: W9CH2jNQPeE6F56GrqNNQaeMBnQ.roa (hash: alE6qOzjvv1bdVpFxgmVkYRyaKHiH2nHE9BqToGwaAQ=)
                          6: XNEK1bakd108UE1mEHH4ziQ-KAc.crl (hash: Y/gxljKrNNVR5m1hr8mAHA8xcCpNJ5kl5nxoECDrV2s=)
                          7: iMRWOy8Kjg-Z6FXYwwdtX_N03gg.roa (hash: atIrascs8KvK/jjF+90Oyg80o5WLySej7SSpjKZ343g=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3544 (0xdd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CD10AD5B6A4775D3C504D661071F8CE243E2807
        Validity
            Not Before: Feb 12 10:50:00 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=FA3526779133AF500CEB1BBDB975CA67F893021E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:f0:ba:38:10:67:07:45:db:31:3e:c3:54:
                    90:bf:83:9b:2e:a7:bb:01:15:ec:64:d5:ac:2b:28:
                    33:68:4f:e2:e5:f3:cf:83:ae:a2:0f:c3:c3:3f:64:
                    13:ee:3d:86:a6:c6:99:50:ee:85:f4:24:de:71:be:
                    55:cd:34:6f:62:19:5f:71:bf:08:5e:07:d5:b8:1c:
                    0d:cf:90:db:f3:c0:33:ac:8c:55:f7:b5:dd:8f:34:
                    80:1f:48:b9:e8:92:39:8e:39:57:fe:02:36:1a:9c:
                    56:25:58:c9:5e:4d:69:d2:3a:77:a3:c2:83:a3:62:
                    48:dd:ba:8c:79:0c:b7:63:23:39:c8:60:8f:6b:7c:
                    a4:f5:1c:c7:db:5b:11:76:10:b2:49:e5:0a:9b:01:
                    12:48:97:08:6c:1c:47:5f:1f:82:bb:0a:44:09:2b:
                    01:b1:cd:74:8a:9b:c5:01:b8:57:6f:32:cf:d3:de:
                    19:46:e8:0f:b2:ed:68:6e:f8:96:39:09:e3:74:10:
                    cf:71:19:88:f6:32:47:0f:db:2b:41:c4:9c:69:ca:
                    76:72:f6:02:44:96:a0:11:7d:48:b6:47:18:39:5d:
                    c6:eb:d2:c1:fe:a8:49:5f:c4:e6:4d:3c:d9:6f:71:
                    05:30:8d:35:2e:77:b7:9d:e8:bc:a8:b0:af:09:01:
                    e0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:35:26:77:91:33:AF:50:0C:EB:1B:BD:B9:75:CA:67:F8:93:02:1E
            X509v3 Authority Key Identifier:
                keyid:5C:D1:0A:D5:B6:A4:77:5D:3C:50:4D:66:10:71:F8:CE:24:3E:28:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XNEK1bakd108UE1mEHH4ziQ-KAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CKMATES/XNEK1bakd108UE1mEHH4ziQ-KAc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b3:c0:fb:dd:32:42:f9:04:63:c9:a6:2c:90:2b:d6:13:78:
         1d:af:2b:72:f3:58:cd:9f:5c:84:41:d9:dc:b8:e9:cf:31:c0:
         c1:11:b6:4f:62:9c:54:a6:8f:f5:7f:bf:0a:cd:ab:83:67:e3:
         6c:57:dd:0e:67:d7:3f:24:f3:59:aa:6d:40:e8:61:6d:01:57:
         3f:5a:75:e2:18:22:83:5a:54:7a:94:63:01:5b:59:cb:91:ef:
         d7:10:45:8c:8a:69:22:b6:1f:8f:4e:2c:cd:c4:55:4b:95:0b:
         f2:eb:be:fd:1c:6b:d6:59:60:3f:28:c2:e9:09:67:c7:ae:46:
         00:25:e9:92:1b:14:99:0b:8c:92:90:fd:d8:47:52:63:02:ea:
         82:1e:fd:aa:f5:9a:97:d0:2f:42:61:f7:1b:76:25:e2:39:45:
         72:c9:a0:ca:0a:52:5a:d2:18:a3:48:77:27:11:29:44:bd:11:
         d7:f9:f5:6e:74:3f:df:b9:d9:ba:02:4c:60:6b:3d:ec:8c:27:
         69:eb:c7:19:57:bd:6b:d8:eb:13:8c:02:6d:c1:b8:57:5a:0a:
         5d:5a:a2:20:a2:8f:f2:d1:e7:ae:79:aa:94:b1:57:cb:2f:25:
         7c:4b:5e:84:64:dc:46:e3:db:cf:e9:dd:f3:3b:06:b5:19:44:
         66:f5:46:4c
-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgICDdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUNE
MTBBRDVCNkE0Nzc1RDNDNTA0RDY2MTA3MUY4Q0UyNDNFMjgwNzAeFw0yNjAyMTIx
MDUwMDBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEZBMzUyNjc3OTEzM0FG
NTAwQ0VCMUJCREI5NzVDQTY3Rjg5MzAyMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBdfC6OBBnB0XbMT7DVJC/g5sup7sBFexk1awrKDNoT+Ll88+D
rqIPw8M/ZBPuPYamxplQ7oX0JN5xvlXNNG9iGV9xvwheB9W4HA3PkNvzwDOsjFX3
td2PNIAfSLnokjmOOVf+AjYanFYlWMleTWnSOnejwoOjYkjduox5DLdjIznIYI9r
fKT1HMfbWxF2ELJJ5QqbARJIlwhsHEdfH4K7CkQJKwGxzXSKm8UBuFdvMs/T3hlG
6A+y7Whu+JY5CeN0EM9xGYj2MkcP2ytBxJxpynZy9gJElqARfUi2Rxg5Xcbr0sH+
qElfxOZNPNlvcQUwjTUud7ed6LyosK8JAeBHAgMBAAGjggIJMIICBTAdBgNVHQ4E
FgQU+jUmd5Ezr1AM6xu9uXXKZ/iTAh4wHwYDVR0jBBgwFoAUXNEK1bakd108UE1m
EHH4ziQ+KAcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0tNQVRF
Uy9YTkVLMWJha2QxMDhVRTFtRUhINHppUS1LQWMuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1hORUsxYmFrZDEwOFVFMW1FSEg0emlRLUtBYy5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NLTUFURVMvWE5FSzFiYWtkMTA4VUUx
bUVISDR6aVEtS0FjLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG
AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB
AJOzwPvdMkL5BGPJpiyQK9YTeB2vK3LzWM2fXIRB2dy46c8xwMERtk9inFSmj/V/
vwrNq4Nn42xX3Q5n1z8k81mqbUDoYW0BVz9adeIYIoNaVHqUYwFbWcuR79cQRYyK
aSK2H49OLM3EVUuVC/Lrvv0ca9ZZYD8owukJZ8euRgAl6ZIbFJkLjJKQ/dhHUmMC
6oIe/ar1mpfQL0Jh9xt2JeI5RXLJoMoKUlrSGKNIdycRKUS9Edf59W50P9+52boC
TGBrPeyMJ2nrxxlXvWvY6xOMAm3BuFdaCl1aoiCij/LR5655qpSxV8svJXxLXoRk
3Ebj28/p3fM7BrUZRGb1Rkw=
-----END CERTIFICATE-----
Generated at Thu Feb 12 14:27:33 2026 by rpki-client