This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.mft
File:                     o3xu4rDtCvgyEQLjThS2qXb3mJ0.mft (raw, json)
Hash identifier:          OTC4HcALXuDa/jjxNT9/YgT8BFsr2kAuqcDgaPLIwhk=
Subject key identifier:   C6:47:62:16:5F:C5:DB:2F:F3:75:AB:7D:B8:5F:AA:4C:C6:FA:CA:A4
Authority key identifier: A3:7C:6E:E2:B0:ED:0A:F8:32:11:02:E3:4E:14:B6:A9:76:F7:98:9D
Certificate issuer:       /CN=A37C6EE2B0ED0AF8321102E34E14B6A976F7989D
Certificate serial:       0D56
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/o3xu4rDtCvgyEQLjThS2qXb3mJ0.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.mft
Manifest number:          0D56
Signing time:             Sun 14 Dec 2025 10:07:17 +0000
Manifest this update:     Sun 14 Dec 2025 10:07:17 +0000
Manifest next update:     Tue 16 Dec 2025 10:07:17 +0000
Files and hashes:         1: o3xu4rDtCvgyEQLjThS2qXb3mJ0.crl (hash: tmupm+gefsjgNFkdx9NSDpsz8lpFUAjVWP7bIhUnAOk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/o3xu4rDtCvgyEQLjThS2qXb3mJ0.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 16:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3414 (0xd56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A37C6EE2B0ED0AF8321102E34E14B6A976F7989D
        Validity
            Not Before: Dec 14 10:07:17 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C64762165FC5DB2FF375AB7DB85FAA4CC6FACAA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e3:a5:d7:31:58:2c:8a:00:dd:62:3e:01:76:
                    96:df:6b:ad:d8:e6:ef:af:02:c0:9c:7e:ed:04:96:
                    de:0d:6f:57:85:e2:17:42:93:f6:d7:fc:24:3e:a6:
                    79:62:7e:db:57:d1:d3:c2:8f:1e:ee:93:94:df:43:
                    cb:4c:16:33:01:2f:d4:e9:06:7e:ff:e1:2f:70:53:
                    78:95:19:bc:98:ba:21:f8:bf:c1:fe:5c:90:3b:6b:
                    31:f6:0f:2b:07:e3:8a:79:1b:13:8f:9a:29:8e:b7:
                    ab:66:d2:72:0c:3a:d0:87:b4:b0:31:72:ad:5c:ce:
                    bc:a2:75:fc:5f:61:03:b9:4e:bf:6d:a6:54:e5:ac:
                    05:ab:2b:a2:ef:7d:27:0c:29:b8:f7:5d:bc:6e:bc:
                    87:54:f3:61:ad:c8:99:07:25:ee:24:e8:2a:69:77:
                    4d:4f:49:b2:c7:15:2b:cb:00:85:2a:1f:f9:19:08:
                    70:15:f2:5e:dc:fd:54:09:d7:c6:29:d5:d2:78:aa:
                    fd:6c:e7:8b:70:13:98:d3:0a:3e:4b:19:e8:88:78:
                    eb:4a:91:11:02:f9:aa:86:60:c4:87:ea:b2:5c:56:
                    e0:f5:3f:07:83:23:86:e9:17:78:6e:5c:4e:3a:2c:
                    2e:bf:37:ac:9e:ba:13:a6:3f:c1:08:8a:be:22:f1:
                    c0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:47:62:16:5F:C5:DB:2F:F3:75:AB:7D:B8:5F:AA:4C:C6:FA:CA:A4
            X509v3 Authority Key Identifier:
                keyid:A3:7C:6E:E2:B0:ED:0A:F8:32:11:02:E3:4E:14:B6:A9:76:F7:98:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/o3xu4rDtCvgyEQLjThS2qXb3mJ0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IBM/o3xu4rDtCvgyEQLjThS2qXb3mJ0.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:97:6e:1f:5c:d7:50:28:1c:19:1f:42:c0:ee:21:f7:85:1a:
         fe:e8:38:19:6f:ea:ba:d6:f0:44:32:5c:0a:57:0d:25:fd:98:
         76:e1:d1:39:b6:12:39:9a:f1:84:89:51:e4:8c:8e:3e:73:e6:
         23:0c:f4:15:62:b5:c9:0a:a0:d7:b1:71:5e:dc:45:c4:0b:31:
         10:ef:3f:c0:c4:f8:52:d6:58:b6:a3:37:62:68:ba:71:d4:5c:
         26:06:7b:5a:0a:85:30:04:a5:79:a8:d2:09:80:f1:69:fc:16:
         cf:1d:c3:d3:2f:9b:e6:9c:89:e6:d8:ec:05:d0:5a:39:2a:01:
         65:ab:d2:ed:0b:1f:e8:f5:06:f2:41:5f:dd:ae:0c:b3:81:e1:
         f4:4a:af:ff:ed:f7:b5:3f:de:f4:fd:f4:86:e0:e5:f8:c7:6e:
         e5:33:cb:fb:5e:52:98:a7:2b:36:6e:f6:b4:80:3e:b0:7f:52:
         a4:5b:92:48:c8:78:46:ca:97:74:ec:b8:a9:36:82:ba:a8:89:
         f8:a6:b2:d6:28:51:0f:a7:86:46:0d:5c:e6:0b:7a:ce:f2:fa:
         7c:8e:d6:49:b0:5d:0c:80:d8:6c:1f:2c:e9:18:52:49:76:09:
         0b:b0:6f:c8:42:2f:58:9a:4f:28:e8:09:d5:0d:26:48:11:0b:
         37:dd:34:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:05:26 2025 by rpki-client