This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft
File:                     Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft (raw, json)
Hash identifier:          2gOD3CpuLyjoEossVq7iSILdMliYmpCHZ+gQxqQu2GA=
Subject key identifier:   3E:91:C8:32:C1:A0:B7:FD:FA:E6:CC:51:A2:5A:5D:22:91:43:62:79
Authority key identifier: 46:3A:AF:9D:F9:F6:55:8C:60:E4:81:6D:A0:24:85:62:F6:90:05:07
Certificate issuer:       /CN=463AAF9DF9F6558C60E4816DA0248562F6900507
Certificate serial:       09
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft
Manifest number:          09
Signing time:             Wed 21 Jan 2026 08:44:53 +0000
Manifest this update:     Wed 21 Jan 2026 08:44:53 +0000
Manifest next update:     Wed 21 Jan 2026 14:44:53 +0000
Files and hashes:         1: Rjqvnfn2VYxg5IFtoCSFYvaQBQc.crl (hash: gMIxLyjDGHOyO/0j1KUr+A8CjiOqWKuV2h+GhaalrXc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0dL1XCbbKFIKeZb_cu0BBCAHmKI.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0dL1XCbbKFIKeZb_cu0BBCAHmKI.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 14:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463AAF9DF9F6558C60E4816DA0248562F6900507
        Validity
            Not Before: Jan 21 08:44:53 2026 GMT
            Not After : Jan 15 15:30:19 2027 GMT
        Subject: CN=3E91C832C1A0B7FDFAE6CC51A25A5D2291436279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c9:f1:ec:9f:17:01:a4:cd:e1:b8:ac:d8:66:
                    c5:09:3d:cb:c0:5e:b7:22:ae:46:46:92:3e:18:90:
                    64:6f:48:f7:42:51:7f:d2:21:55:8f:63:f3:13:b6:
                    f1:0b:bd:ae:ec:4e:77:68:a3:6b:44:33:20:83:fc:
                    43:d6:3e:fb:f9:f0:d0:57:92:c3:b3:e4:da:d1:cd:
                    0a:21:31:fb:11:e3:31:1d:96:a9:6f:2c:8f:62:8b:
                    7e:78:6e:0d:f9:df:93:b8:84:17:43:c7:02:81:a2:
                    05:83:48:fd:69:12:76:0f:de:12:bb:54:c9:a3:ea:
                    2e:d7:31:de:24:e9:da:0a:b0:78:eb:55:09:37:de:
                    a7:c3:d5:f0:53:f8:07:46:d2:57:3f:26:70:14:ac:
                    e6:86:f5:6c:a0:fc:74:50:8d:2e:5e:20:b6:43:f5:
                    68:71:7c:0e:06:aa:66:b3:10:2a:f4:13:f1:7c:8f:
                    d8:9f:a6:88:71:d8:37:a3:8c:8a:dd:0e:46:eb:df:
                    29:92:77:75:24:a7:56:5d:47:fb:bd:3d:38:2b:33:
                    b6:3d:e2:38:a1:fe:cb:a1:d0:ee:2d:63:bd:3b:f1:
                    9e:1d:f4:8f:df:08:8a:4a:30:fa:67:6d:b6:38:6d:
                    ef:70:b4:9c:4d:8d:dd:29:8a:27:1c:33:e9:43:8a:
                    59:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:91:C8:32:C1:A0:B7:FD:FA:E6:CC:51:A2:5A:5D:22:91:43:62:79
            X509v3 Authority Key Identifier:
                keyid:46:3A:AF:9D:F9:F6:55:8C:60:E4:81:6D:A0:24:85:62:F6:90:05:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KANRAYS/Rjqvnfn2VYxg5IFtoCSFYvaQBQc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d5:0c:55:70:ae:2f:48:6a:c4:8d:d8:1d:08:47:71:01:c9:
         23:d0:b2:ae:3a:fc:24:1c:3a:2c:9e:0f:f9:e0:4e:f8:bb:bd:
         af:95:52:e9:fd:a3:7c:df:46:88:cc:4a:d7:71:6f:74:a9:ae:
         f8:0b:d6:4c:8a:3d:f8:b9:60:56:c3:58:6e:44:94:32:05:e3:
         a1:68:40:aa:26:3f:38:87:8e:ee:12:6d:4b:7b:3e:e3:91:04:
         8e:cc:26:78:cc:57:04:2a:80:83:01:e9:91:57:e6:5c:af:e3:
         c5:32:92:2b:b2:f8:a1:69:39:d7:33:69:4c:ed:b3:d1:ff:9f:
         57:6b:c9:41:86:35:56:0e:a5:aa:2a:66:e3:74:91:46:75:a6:
         0c:37:7e:2a:e6:6d:25:2f:7f:c4:c8:81:1c:0f:06:31:e6:69:
         7b:4b:ce:dc:ef:5f:28:4d:08:81:7b:a2:7b:da:4f:f4:c3:72:
         4e:7e:b2:9f:7f:f9:c8:2c:10:a8:bb:50:8e:ec:5e:89:92:c3:
         c8:3b:97:f0:89:bd:98:92:c3:3b:0a:a1:df:2f:30:f5:2a:c3:
         1b:59:75:b1:3a:77:a7:a5:7b:06:7e:40:f6:17:0d:45:18:47:
         81:9b:7c:45:f6:59:e3:4f:42:3d:27:b8:cb:ae:0e:af:bd:08:
         b8:68:47:10
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0NjNB
QUY5REY5RjY1NThDNjBFNDgxNkRBMDI0ODU2MkY2OTAwNTA3MB4XDTI2MDEyMTA4
NDQ1M1oXDTI3MDExNTE1MzAxOVowMzExMC8GA1UEAxMoM0U5MUM4MzJDMUEwQjdG
REZBRTZDQzUxQTI1QTVEMjI5MTQzNjI3OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANPJ8eyfFwGkzeG4rNhmxQk9y8BetyKuRkaSPhiQZG9I90JRf9Ih
VY9j8xO28Qu9ruxOd2ija0QzIIP8Q9Y++/nw0FeSw7Pk2tHNCiEx+xHjMR2WqW8s
j2KLfnhuDfnfk7iEF0PHAoGiBYNI/WkSdg/eErtUyaPqLtcx3iTp2gqweOtVCTfe
p8PV8FP4B0bSVz8mcBSs5ob1bKD8dFCNLl4gtkP1aHF8DgaqZrMQKvQT8XyP2J+m
iHHYN6OMit0ORuvfKZJ3dSSnVl1H+709OCsztj3iOKH+y6HQ7i1jvTvxnh30j98I
ikow+mdttjht73C0nE2N3SmKJxwz6UOKWV0CAwEAAaOCAgkwggIFMB0GA1UdDgQW
BBQ+kcgywaC3/frmzFGiWl0ikUNieTAfBgNVHSMEGDAWgBRGOq+d+fZVjGDkgW2g
JIVi9pAFBzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9LQU5SQVlT
L1JqcXZuZm4yVll4ZzVJRnRvQ1NGWXZhUUJRYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvUmpxdm5mbjJWWXhnNUlGdG9DU0ZZdmFRQlFjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvS0FOUkFZUy9SanF2bmZuMlZZeGc1SUZ0
b0NTRll2YVFCUWMubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMu
dHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
ENUMVXCuL0hqxI3YHQhHcQHJI9Cyrjr8JBw6LJ4P+eBO+Lu9r5VS6f2jfN9GiMxK
13FvdKmu+AvWTIo9+LlgVsNYbkSUMgXjoWhAqiY/OIeO7hJtS3s+45EEjswmeMxX
BCqAgwHpkVfmXK/jxTKSK7L4oWk51zNpTO2z0f+fV2vJQYY1Vg6lqipm43SRRnWm
DDd+KuZtJS9/xMiBHA8GMeZpe0vO3O9fKE0IgXuie9pP9MNyTn6yn3/5yCwQqLtQ
juxeiZLDyDuX8Im9mJLDOwqh3y8w9SrDG1l1sTp3p6V7Bn5A9hcNRRhHgZt8RfZZ
409CPSe4y64Or70IuGhHEA==
-----END CERTIFICATE-----
Generated at Wed Jan 21 10:48:14 2026 by rpki-client