This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KINGNET/NZe5GdSmUub2ef4Tipc0BP8AT2U.mft
File:                     NZe5GdSmUub2ef4Tipc0BP8AT2U.mft (raw, json)
Hash identifier:          0sQ4hANwO/dXspm+/hTLM5MpT+097G7KqWAqItQg/yw=
Subject key identifier:   8B:8E:C6:45:00:93:D9:CE:01:EB:B1:E5:06:24:3A:84:58:41:09:52
Authority key identifier: 35:97:B9:19:D4:A6:52:E6:F6:79:FE:13:8A:97:34:04:FF:00:4F:65
Certificate issuer:       /CN=3597B919D4A652E6F679FE138A973404FF004F65
Certificate serial:       0D56
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NZe5GdSmUub2ef4Tipc0BP8AT2U.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KINGNET/NZe5GdSmUub2ef4Tipc0BP8AT2U.mft
Manifest number:          0D56
Signing time:             Mon 15 Dec 2025 22:09:46 +0000
Manifest this update:     Mon 15 Dec 2025 22:09:46 +0000
Manifest next update:     Wed 17 Dec 2025 22:09:46 +0000
Files and hashes:         1: NZe5GdSmUub2ef4Tipc0BP8AT2U.crl (hash: kqwXt836sFXWvSI0Yx4g2OgLN+gzvdKWfxSnwnI/SkI=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KINGNET/NZe5GdSmUub2ef4Tipc0BP8AT2U.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KINGNET/NZe5GdSmUub2ef4Tipc0BP8AT2U.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NZe5GdSmUub2ef4Tipc0BP8AT2U.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 07:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3414 (0xd56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3597B919D4A652E6F679FE138A973404FF004F65
        Validity
            Not Before: Dec 15 22:09:46 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8B8EC6450093D9CE01EBB1E506243A8458410952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:b8:83:ed:54:a0:21:ea:d7:5f:49:8d:54:
                    f8:29:5b:cf:19:4d:91:7a:c4:a1:ab:53:99:89:a0:
                    22:89:be:2e:00:13:93:15:80:0d:eb:26:0d:96:f0:
                    84:d8:a3:02:90:c6:a7:72:e1:f1:a8:63:d2:7f:e0:
                    f9:bd:cc:b3:e4:0a:f3:55:12:4c:77:df:22:62:03:
                    51:38:03:39:24:23:f7:bc:b3:4d:75:89:93:d6:94:
                    76:24:39:da:cd:4a:76:c3:9b:f6:c1:50:ac:05:c6:
                    94:28:80:0f:ae:29:21:ce:f4:54:33:6d:68:92:2c:
                    c4:4a:37:f5:5a:51:89:28:f0:7e:ab:3a:60:d5:f3:
                    e8:55:05:9f:85:9b:9f:ea:81:c2:ee:18:1d:9c:07:
                    de:4c:57:1f:97:01:30:cf:79:6d:07:71:53:41:15:
                    40:2f:5d:ac:2d:09:bb:29:c5:c6:2e:e0:a6:8d:31:
                    10:16:8c:d2:c3:96:34:17:5d:81:a7:66:0c:5b:97:
                    ac:62:35:41:88:cd:eb:60:b3:3d:b8:70:36:89:d9:
                    2a:68:9e:47:8f:11:4c:88:ff:f1:d9:3b:15:2b:16:
                    66:26:ef:c5:06:33:ba:40:27:5d:44:f9:0a:15:03:
                    d1:4e:2a:b3:f1:91:6c:6b:9b:39:24:21:24:da:e8:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8E:C6:45:00:93:D9:CE:01:EB:B1:E5:06:24:3A:84:58:41:09:52
            X509v3 Authority Key Identifier:
                keyid:35:97:B9:19:D4:A6:52:E6:F6:79:FE:13:8A:97:34:04:FF:00:4F:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KINGNET/NZe5GdSmUub2ef4Tipc0BP8AT2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NZe5GdSmUub2ef4Tipc0BP8AT2U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KINGNET/NZe5GdSmUub2ef4Tipc0BP8AT2U.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c9:8e:68:ad:48:0f:29:09:fb:98:0e:2f:a0:00:b8:e2:00:
         f1:1b:a9:4b:26:d6:4b:a8:67:aa:e9:56:f5:95:8e:b9:f9:0d:
         67:6e:7b:a1:fe:10:9a:bd:d6:db:eb:ba:da:81:79:d3:ad:78:
         c2:1d:47:27:b8:5f:51:af:55:f1:4b:42:ed:f4:71:85:d4:6e:
         6d:3b:0d:fe:f8:5e:4f:cd:0b:e4:98:73:c8:c2:d9:91:41:7e:
         0b:0f:d0:28:a9:98:6a:b1:9f:25:90:bf:7d:a4:a4:44:45:6b:
         8b:57:0d:f6:87:fe:b6:48:95:ca:e1:70:4a:33:8c:df:34:d7:
         6f:cd:f8:2b:34:cc:ba:68:24:0f:41:09:af:c4:f2:ad:13:ce:
         10:fc:bb:a8:89:2a:eb:a1:76:06:d8:23:8c:fc:81:b1:38:59:
         30:a3:c1:a4:4e:8f:07:64:e7:de:ae:a8:d9:e0:2b:32:4b:da:
         25:62:5b:d3:26:05:c8:d2:6a:0e:ad:4a:a3:7a:40:ff:07:44:
         cd:d6:6d:70:63:c4:0c:df:3a:c0:61:52:d2:fd:e1:21:e1:8f:
         08:b5:7f:d2:f5:fb:95:c5:d1:ec:24:8a:fa:1e:26:27:cf:6a:
         64:da:49:57:e5:af:89:4d:b3:eb:36:30:a7:72:c7:7c:3e:4b:
         19:02:81:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:46:46 2025 by rpki-client