This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft
File:                     HpTC6b92VEpaAMOici0QgCJOwA4.mft (raw, json)
Hash identifier:          DlQwkds5lHuCzppMd7FlgNu/yBSCqIXF9GOqj24N/HY=
Subject key identifier:   BE:ED:3C:84:1F:9D:89:94:44:22:39:C2:37:DE:55:EA:DB:5F:DB:EC
Authority key identifier: 1E:94:C2:E9:BF:76:54:4A:5A:00:C3:A2:72:2D:10:80:22:4E:C0:0E
Certificate issuer:       /CN=1E94C2E9BF76544A5A00C3A2722D1080224EC00E
Certificate serial:       027C
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HpTC6b92VEpaAMOici0QgCJOwA4.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft
Manifest number:          027C
Signing time:             Mon 15 Dec 2025 10:36:52 +0000
Manifest this update:     Mon 15 Dec 2025 10:36:52 +0000
Manifest next update:     Mon 15 Dec 2025 16:36:52 +0000
Files and hashes:         1: HpTC6b92VEpaAMOici0QgCJOwA4.crl (hash: mXwaEodUANcni/6eulTSbvmTnLckqRswRJAGnBtYwfo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HpTC6b92VEpaAMOici0QgCJOwA4.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 16:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E94C2E9BF76544A5A00C3A2722D1080224EC00E
        Validity
            Not Before: Dec 15 10:36:52 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=BEED3C841F9D8994442239C237DE55EADB5FDBEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:18:37:f4:2f:66:58:8d:30:6b:37:13:7c:
                    b6:4e:01:75:a9:ac:b7:94:02:c5:bf:81:56:33:28:
                    b8:89:5b:a7:e6:e4:78:71:3d:57:43:ec:db:8a:44:
                    76:05:67:41:4d:ec:00:7b:8e:29:28:ce:bf:2a:9c:
                    ba:62:50:ab:c2:13:00:8e:bd:0c:b0:d8:64:1e:eb:
                    bb:a5:54:59:8a:56:62:e3:4b:43:44:af:1d:3b:da:
                    8c:8e:76:07:99:ff:9f:5b:49:50:b7:d4:88:a6:3f:
                    86:cc:13:ec:da:ec:09:f0:ae:e1:59:1c:e8:b0:d1:
                    57:bc:dd:26:03:03:ef:f8:ec:a4:53:34:4d:05:54:
                    32:fa:61:57:b3:6a:7f:2f:72:fc:fc:aa:dc:d2:9f:
                    c0:45:53:8c:c4:45:6c:8e:52:67:a2:20:12:46:18:
                    80:8a:1a:79:22:b6:5d:11:b2:80:5a:e9:9a:ab:79:
                    01:c2:a9:51:8b:38:3a:d6:00:2b:3c:5e:d6:7a:6e:
                    c8:0a:64:d8:ee:8a:87:a3:06:d5:2e:77:44:a6:e3:
                    26:36:b3:2c:60:26:75:76:c4:e1:7d:a2:20:cd:1f:
                    a2:f2:da:ce:aa:2c:77:84:61:2f:d1:18:f6:d2:b9:
                    be:99:da:0a:ab:6c:ff:cc:b0:5e:5d:34:63:e1:f3:
                    3e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:ED:3C:84:1F:9D:89:94:44:22:39:C2:37:DE:55:EA:DB:5F:DB:EC
            X509v3 Authority Key Identifier:
                keyid:1E:94:C2:E9:BF:76:54:4A:5A:00:C3:A2:72:2D:10:80:22:4E:C0:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HpTC6b92VEpaAMOici0QgCJOwA4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DBSBANKTW/HpTC6b92VEpaAMOici0QgCJOwA4.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f5:6f:7e:ff:e3:8b:a4:9e:06:ab:83:e8:1c:98:f3:6b:88:
         aa:6d:83:7e:11:74:9b:14:18:08:b6:f6:14:fd:9b:28:2c:c9:
         86:91:99:75:cc:1b:3a:e1:d2:c7:ea:d2:4a:c9:68:70:3f:39:
         e7:94:8a:ac:ec:18:54:2f:47:d9:6a:a5:f9:76:e1:16:82:c2:
         58:35:b3:4f:50:07:4c:ba:61:2d:e2:a8:fb:0a:ea:85:43:b9:
         8d:89:da:6f:61:da:b2:37:86:69:7e:1c:f2:3d:01:0a:9b:b6:
         45:6f:4c:87:ab:7e:be:6d:66:bd:72:cf:6d:f2:89:ff:30:89:
         b4:57:2e:8c:84:e0:9c:ed:42:55:39:3e:4f:5c:29:9b:dd:4e:
         36:3d:39:a9:af:cd:56:6e:ec:4d:8f:b3:55:da:5b:1a:89:dd:
         09:a5:68:ac:44:99:16:71:3c:a5:09:ce:26:e6:60:a8:d1:95:
         e2:83:45:2e:9d:fe:03:7a:fb:b5:15:49:0b:70:66:e3:d0:9f:
         bb:67:d5:30:9a:de:69:c3:39:3c:91:4e:8f:18:bf:b2:67:26:
         31:f9:3b:ed:b9:b1:83:e8:38:62:bb:ea:4e:a8:a7:d6:af:2e:
         67:24:99:ab:0b:77:e0:88:70:28:07:3b:05:86:16:75:e2:20:
         70:f5:0d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:07:18 2025 by rpki-client