This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ERAY/zNs-bv2p7MZ505hqJ58rlE73Tl8.mft
File:                     zNs-bv2p7MZ505hqJ58rlE73Tl8.mft (raw, json)
Hash identifier:          qR3H1noDmT7mk6HwnAuXawz1eGodTtK9PMl+RWriHp0=
Subject key identifier:   5E:23:DA:A9:D3:6A:DB:18:18:67:C5:56:BC:B7:11:4A:4E:DB:B0:09
Authority key identifier: CC:DB:3E:6E:FD:A9:EC:C6:79:D3:98:6A:27:9F:2B:94:4E:F7:4E:5F
Certificate issuer:       /CN=CCDB3E6EFDA9ECC679D3986A279F2B944EF74E5F
Certificate serial:       02D9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zNs-bv2p7MZ505hqJ58rlE73Tl8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAY/zNs-bv2p7MZ505hqJ58rlE73Tl8.mft
Manifest number:          02D0
Signing time:             Thu 12 Feb 2026 10:51:41 +0000
Manifest this update:     Thu 12 Feb 2026 10:51:41 +0000
Manifest next update:     Sat 14 Feb 2026 10:51:41 +0000
Files and hashes:         1: aBsZhIbKC9bZKg6iqgF-PdqEpLs.roa (hash: hQdIQ/7V/D5gLczeIYdA2fMC+A9Wo68TTf5SDdZ28BU=)
                          2: zNs-bv2p7MZ505hqJ58rlE73Tl8.crl (hash: ccelv5eVdizeqOu3atzM4tEdqMQZKawmn16+9G1GcZg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAY/zNs-bv2p7MZ505hqJ58rlE73Tl8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAY/zNs-bv2p7MZ505hqJ58rlE73Tl8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/zNs-bv2p7MZ505hqJ58rlE73Tl8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 729 (0x2d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCDB3E6EFDA9ECC679D3986A279F2B944EF74E5F
        Validity
            Not Before: Feb 12 10:51:41 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5E23DAA9D36ADB181867C556BCB7114A4EDBB009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:81:37:13:9c:72:6e:c7:2b:00:71:98:f1:9d:
                    32:96:93:11:28:92:ab:9c:8d:f5:ee:59:9c:80:5b:
                    e4:b1:46:f5:70:ed:33:34:69:60:b3:1f:22:81:d0:
                    ed:92:4c:37:ad:e4:bd:ee:30:4d:83:33:1e:d8:65:
                    e7:cc:88:1f:bd:2f:1c:ac:cb:3a:94:b9:d7:58:64:
                    32:88:36:af:e7:ab:80:b5:af:4f:e1:77:45:76:37:
                    9d:fe:dd:36:9c:2e:f4:eb:d0:1b:23:ad:5e:ee:98:
                    90:9b:7e:ac:0a:8d:d4:85:0b:61:99:c2:96:44:ca:
                    2d:6c:e7:87:0e:ce:00:a9:a1:b8:00:b8:a8:bb:1d:
                    75:c9:7b:80:10:70:0b:1c:47:61:e6:9e:99:8e:f2:
                    80:6d:04:68:0e:fd:41:d8:3a:ce:3a:9c:18:30:16:
                    c4:16:9d:cd:90:78:bc:34:3b:f2:07:fc:c5:d8:48:
                    ae:04:07:2b:c8:59:f2:a3:f4:49:4e:ce:e3:f1:ac:
                    b9:9c:42:43:ca:d3:ca:da:e5:5a:00:d0:58:ff:33:
                    10:aa:a3:fc:fa:ea:2c:39:d1:b4:12:ce:f6:4d:eb:
                    31:7e:b9:00:8d:03:5c:d0:17:5c:6f:34:c2:99:b4:
                    44:dc:2c:99:c6:2f:7a:a5:cc:5d:5d:5e:7f:b3:6d:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:23:DA:A9:D3:6A:DB:18:18:67:C5:56:BC:B7:11:4A:4E:DB:B0:09
            X509v3 Authority Key Identifier:
                keyid:CC:DB:3E:6E:FD:A9:EC:C6:79:D3:98:6A:27:9F:2B:94:4E:F7:4E:5F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAY/zNs-bv2p7MZ505hqJ58rlE73Tl8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zNs-bv2p7MZ505hqJ58rlE73Tl8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ERAY/zNs-bv2p7MZ505hqJ58rlE73Tl8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:11:5c:15:2e:89:e4:15:62:16:ac:9b:99:77:a6:f7:49:80:
         58:9f:90:bf:5a:f9:f2:d6:02:9c:d4:d6:3a:98:62:aa:1c:8e:
         c5:d4:9a:63:03:21:3d:79:fd:d9:47:ea:fc:28:d1:e6:f6:93:
         ee:8f:0f:80:7c:10:1f:93:87:60:ab:a6:36:66:90:6d:8b:07:
         ac:ab:1c:b8:28:b9:01:25:15:b2:19:5d:06:da:be:fd:13:f8:
         48:75:db:d5:d5:1d:7e:2d:08:67:cb:0d:27:54:61:1c:d9:29:
         28:5d:c5:29:6f:e0:ec:af:e8:2c:be:58:39:e3:3f:c7:fc:0c:
         74:24:e2:25:f5:c0:91:19:d6:9e:38:af:71:cc:bd:13:cc:23:
         89:68:e7:fb:d7:f0:3d:2c:65:e6:97:18:86:2f:0b:86:df:7c:
         9d:c2:b7:e3:fd:4f:d0:e9:ae:91:29:d8:a9:aa:08:00:cb:d4:
         a5:4f:ed:80:61:49:fb:6a:0f:18:75:6b:5e:b7:8d:45:64:4c:
         28:6f:ca:27:ae:59:34:c3:a9:ae:a5:c7:93:02:9d:93:87:a5:
         31:53:ad:92:4c:cb:1d:c6:0c:1a:0c:fc:d6:f1:c8:70:04:15:
         14:d2:71:f9:c2:e0:fc:8c:80:3b:b7:f0:33:25:9e:d7:32:6d:
         47:2b:cd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 14:29:25 2026 by rpki-client