This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
File:                     KUthydo1hCdBgvogr4Ym4a6oHzI.mft (raw, json)
Hash identifier:          YbKIrOspnndT6gHfZGs/Bd3ORbvIfFibgxAsLnvjrus=
Subject key identifier:   F9:17:1C:46:A9:29:0B:99:6E:70:83:C2:12:3E:3B:A4:53:2C:4E:BF
Authority key identifier: 29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32
Certificate issuer:       /CN=294B61C9DA3584274182FA20AF8626E1AEA81F32
Certificate serial:       022B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
Manifest number:          0229
Signing time:             Wed 21 Jan 2026 14:15:43 +0000
Manifest this update:     Wed 21 Jan 2026 14:15:43 +0000
Manifest next update:     Wed 21 Jan 2026 20:15:43 +0000
Files and hashes:         1: KUthydo1hCdBgvogr4Ym4a6oHzI.crl (hash: TZfB8JzLBZ/bc+7LdCsx3MZcrAqbtj8wAMMUApWctKY=)
                          2: vX2zurKcZq6uHugr79Vj7CluX8U.roa (hash: GdVPCwO2JcoPshr3Z+ad1hPe/GxgIs2qP3IuU8IWvC8=)
                          3: zyeCTH0u4dPBpS48vPaM1qbh0ZQ.roa (hash: 4WOxoLw0W96yUmxJv3ac7DDaLuuI/40+Ms3ofP7ccYE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 Jan 2026 20:15:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=294B61C9DA3584274182FA20AF8626E1AEA81F32
        Validity
            Not Before: Jan 21 14:15:43 2026 GMT
            Not After : Oct  7 15:30:20 2026 GMT
        Subject: CN=F9171C46A9290B996E7083C2123E3BA4532C4EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:57:1d:e2:25:7a:e7:4c:1b:a5:3d:69:90:
                    57:e6:08:f1:fe:0f:74:cd:35:79:17:aa:5e:f5:40:
                    cd:15:26:32:57:c1:20:f8:7f:67:2c:dd:3a:8d:62:
                    58:52:09:3d:2f:25:b6:68:52:b9:f2:94:86:6e:c8:
                    3f:14:d5:a8:da:78:ae:c9:30:59:e7:c7:11:30:c3:
                    1b:e1:26:1e:d2:9b:c3:95:d4:62:d4:06:17:1f:84:
                    b1:c1:29:a3:d6:9b:7e:2e:b0:bb:b7:39:90:c4:f2:
                    12:97:2b:24:46:3d:7c:8b:00:6b:dd:42:43:2a:e9:
                    e9:d4:f9:91:d8:9b:d2:77:19:2b:b7:e9:e9:f9:7c:
                    20:1a:15:51:da:5a:f7:d6:51:ea:c7:d2:c2:46:c4:
                    dd:76:42:75:b5:40:ed:04:e1:62:da:89:f5:25:46:
                    be:6d:50:2e:fd:52:5b:15:6e:a4:1d:03:85:12:cd:
                    cb:25:45:9a:9b:87:0e:35:c3:e5:49:b5:07:92:d5:
                    34:3b:ca:8d:36:25:2f:30:fb:b6:88:7b:3e:e2:36:
                    f2:9d:07:3f:19:31:f7:b5:3f:ac:47:85:a8:04:52:
                    11:f4:1d:d7:8d:09:54:ce:dd:d5:ea:87:79:8d:4d:
                    56:c5:fd:6f:29:1d:82:dc:c9:7e:a7:f4:7c:ae:47:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:17:1C:46:A9:29:0B:99:6E:70:83:C2:12:3E:3B:A4:53:2C:4E:BF
            X509v3 Authority Key Identifier:
                keyid:29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:4c:31:fd:56:6c:46:2b:bb:4c:d1:78:b9:40:c1:3c:17:bc:
         b4:f2:52:73:6d:1c:be:07:36:de:48:63:35:56:2d:52:3a:0a:
         2d:75:c0:22:50:bd:3e:e5:7f:84:38:ca:4d:dd:98:1e:78:6b:
         ef:33:cc:df:7e:a9:30:8d:2e:c3:6d:c4:cf:9d:f0:8f:3c:8e:
         ef:ad:c2:0d:38:81:8b:73:cb:d0:5e:54:3d:38:58:0f:a6:de:
         0d:8f:97:7d:d6:e0:b4:cc:58:da:46:17:40:42:3b:5e:c7:f0:
         1f:d7:79:35:1b:00:54:5a:5d:a8:49:eb:4c:38:c0:56:7c:26:
         ea:d5:21:6e:e2:39:ec:5e:a7:9e:f9:e6:bf:90:b8:25:90:e1:
         64:f0:c3:78:b1:d7:42:b8:86:1a:f2:bf:17:bc:e7:32:f1:15:
         c4:00:9f:2c:a8:fd:e2:39:d3:14:d0:64:d7:79:ed:67:c2:ef:
         b0:80:af:57:70:9c:c3:a6:9c:eb:49:56:86:c1:d2:d8:19:6d:
         7c:c0:dd:9f:e8:f2:9b:f2:74:e5:fe:1b:7b:0a:b3:fa:5c:60:
         c8:63:29:90:4d:4d:4c:d8:65:7e:ce:b3:36:21:47:98:a2:90:
         96:8e:95:b7:e6:1b:ee:45:11:8f:17:7b:a2:84:0c:c3:5d:a0:
         53:23:40:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 19:35:38 2026 by rpki-client