This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
File:                     7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft (raw, json)
Hash identifier:          iy/V9MWUxv/SHUbTwYlp4GsFxS6AsmWRvJCTc6xiLPU=
Subject key identifier:   99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46
Authority key identifier: EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1
Certificate issuer:       /CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1
Certificate serial:       0D94
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
Manifest number:          0D94
Signing time:             Sun 14 Dec 2025 10:07:52 +0000
Manifest this update:     Sun 14 Dec 2025 10:07:52 +0000
Manifest next update:     Tue 16 Dec 2025 10:07:52 +0000
Files and hashes:         1: 7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl (hash: dQAGsT+I0UMwgN3TJyffUmH5dn4FxQ9B/Q7dE1wf7tw=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 16:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3476 (0xd94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC4B985671CBED9B0C936E59A046E017C0CACBD1
        Validity
            Not Before: Dec 14 10:07:52 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=99D31B221C7F6DD440390CFE6A41DC1E11986946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:14:ea:f1:d9:4d:9c:85:e3:3b:53:83:36:84:
                    34:d7:62:da:04:b6:c1:18:13:b0:ce:e1:ff:05:5a:
                    f4:bc:a0:59:fc:0d:e1:51:e9:09:c5:e2:c4:19:0f:
                    6c:31:10:0b:57:8c:a0:60:e2:a0:26:63:04:af:38:
                    22:c1:0d:2f:da:42:9b:69:e2:93:d3:d2:d1:c6:34:
                    ea:bb:70:9c:3d:2c:63:08:5a:1c:44:b2:83:4b:bc:
                    b4:46:76:f3:a8:11:48:15:62:ad:82:fd:c1:a7:03:
                    d4:6a:12:b1:31:29:9f:83:1b:a3:de:36:7c:f9:f3:
                    42:bd:4a:31:db:42:c3:c5:5a:55:eb:e1:2f:5a:98:
                    be:16:5d:01:4b:55:d8:e8:d7:00:e3:46:a2:e0:c8:
                    63:75:9e:9f:fc:4f:4b:6a:52:54:3b:6d:ef:a7:77:
                    86:a3:45:80:bc:9f:cc:30:1f:30:d6:7b:63:38:37:
                    d6:34:27:70:c8:ae:3b:03:4f:24:23:25:b7:6e:95:
                    67:57:92:5b:5d:9e:c1:62:c5:75:e3:55:b9:87:d0:
                    71:d5:8f:49:68:9e:d4:a3:12:6d:56:86:5d:19:fb:
                    7e:d0:53:17:04:0d:cc:6e:e2:65:66:42:38:c2:16:
                    5e:14:35:13:2f:7b:13:71:11:ea:fa:4f:46:09:4b:
                    eb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D3:1B:22:1C:7F:6D:D4:40:39:0C:FE:6A:41:DC:1E:11:98:69:46
            X509v3 Authority Key Identifier:
                keyid:EC:4B:98:56:71:CB:ED:9B:0C:93:6E:59:A0:46:E0:17:C0:CA:CB:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IQRATOR/7EuYVnHL7ZsMk25ZoEbgF8DKy9E.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:06:ff:11:8d:c8:4f:03:fe:86:01:9f:b5:1c:ae:83:e4:f9:
         66:6a:27:73:49:8c:1c:81:b8:1b:17:65:23:2f:73:0a:c1:a2:
         40:a0:05:3f:00:41:91:1c:df:99:e8:a0:9f:89:3b:0b:23:b6:
         b6:78:41:e8:22:bc:b8:51:25:76:2c:14:d5:48:0e:15:72:5a:
         6c:70:1e:87:fd:10:86:c5:02:e4:bb:c5:5d:2c:eb:12:a0:1d:
         87:68:6e:4a:62:a6:65:63:87:ec:fd:8e:05:34:5a:02:de:45:
         40:b3:f9:96:f4:b1:51:27:d2:03:75:df:e1:fb:91:65:e7:78:
         84:d1:d8:49:ab:db:f6:35:74:7c:0d:f9:7e:74:cd:0b:9e:98:
         4d:8f:c0:de:70:55:71:72:b7:22:77:cf:30:6c:65:3b:c3:8c:
         bc:82:4a:24:c5:f1:c8:dc:a6:7c:47:ca:f0:24:5e:31:ad:f7:
         d8:46:f6:61:81:9d:9b:2e:a2:64:2b:ac:8d:13:91:5f:5a:4d:
         3c:c6:d3:a0:a2:b4:1b:61:9d:85:fd:39:0f:d1:c3:91:dc:fc:
         20:16:05:59:24:0b:e5:f1:f8:a3:df:d0:c4:b5:ba:fe:1f:64:
         01:3b:c2:cd:60:fc:31:d2:c2:3b:b0:72:ef:68:ff:5e:40:a4:
         81:ae:44:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:05:10 2025 by rpki-client