This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
File: P4T67Wy0fhEvJMawJ3pIYicGcso.mft (raw, json)
Hash identifier: W5veeQe+pPweE3fMdQpzKZ5CeGRXBmpUwudUeGSRo6s=
Subject key identifier: C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0
Authority key identifier: 3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA
Certificate issuer: /CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
Certificate serial: 0275
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
Manifest number: 026A
Signing time: Thu 01 Jan 2026 10:12:34 +0000
Manifest this update: Thu 01 Jan 2026 10:12:34 +0000
Manifest next update: Sat 03 Jan 2026 10:12:34 +0000
Files and hashes: 1: IErOyzoZVkiS9Uhk0QF6wLDAljo.roa (hash: L6eHFiNuaWY66hK66Hq26PxHIFkjbaThfdmbM18C7cE=)
2: NbDi8Af5Gmmz6J7SUj6VheHbgkQ.roa (hash: QshxsuPUbcaWeX3b7o/6+1HYkGZdF5/K5o7k1P2M0uo=)
3: P4T67Wy0fhEvJMawJ3pIYicGcso.crl (hash: I7kRHlFG2meGDRiAEhS4Ivtuo6DxPe7yPi7AAgBonRk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 16:11:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 629 (0x275)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
Validity
Not Before: Jan 1 10:12:34 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=C62935BDEE28689F47A37A776EF691F2FD9522A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:6f:5a:29:d0:9d:14:37:3b:94:31:e9:b6:39:
92:35:1b:25:de:6b:91:ab:a9:75:3c:3a:c5:73:71:
d9:47:b9:21:fe:14:2a:4e:f9:c4:bf:d2:1f:4b:04:
f9:1e:c5:38:e5:81:2f:61:65:d8:35:f4:55:ba:17:
6f:1d:ab:ee:60:36:f9:ab:f3:b9:46:42:56:a0:65:
ce:68:17:4f:76:de:bb:2e:cc:6f:c9:00:dd:3a:ad:
41:1d:af:bf:5b:78:ef:29:5f:15:79:49:d7:53:ac:
56:6d:9c:b8:37:25:8f:f6:27:4e:54:d9:ca:ab:46:
36:ae:ea:ad:b4:d6:1b:b2:44:0e:61:84:a9:2d:fe:
29:47:38:ff:04:e3:8c:d1:e7:85:cf:8e:cc:d7:86:
0d:4b:5b:86:48:d6:fc:cd:21:96:e4:34:09:8c:a2:
66:b9:3a:6e:9a:9d:c9:a9:a8:66:e9:bf:94:e1:77:
d0:b8:ad:d3:08:b5:2b:73:71:01:06:49:f1:40:52:
a3:f3:c0:45:40:d4:4a:a0:a5:71:8a:19:d1:e1:a5:
7e:15:78:66:7a:06:fc:98:15:c8:a8:8d:af:d2:4c:
eb:83:e3:ae:3a:dc:81:f8:ac:ce:3a:8c:c6:74:11:
7d:99:c3:56:c8:8e:af:62:3a:af:a8:fd:14:09:4c:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:29:35:BD:EE:28:68:9F:47:A3:7A:77:6E:F6:91:F2:FD:95:22:A0
X509v3 Authority Key Identifier:
keyid:3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:81:de:b0:07:a8:3f:db:6f:f5:8a:9d:1d:61:f7:c9:be:d7:
5a:d3:d6:51:f7:37:b5:b4:fe:0e:b5:fa:dd:be:34:cb:83:db:
d0:d5:49:24:1b:cb:00:63:57:85:c6:63:86:c9:14:ca:d2:ec:
d5:72:1a:4e:4d:85:05:85:3e:d0:ed:a5:08:e8:7a:de:f7:0c:
38:75:53:21:2e:73:97:d8:62:29:bb:e1:b1:ef:4a:f7:01:65:
b3:02:64:45:ba:d7:2e:1f:af:78:de:a7:ff:de:ad:94:34:4e:
8f:96:88:a0:2c:fe:bc:bb:c0:85:d6:57:1f:80:c5:00:70:11:
b2:a7:c2:87:2e:4d:8a:bf:08:ef:31:db:3b:5b:1d:8a:93:75:
e4:5d:68:8f:d5:de:df:ce:22:d3:55:1a:dd:49:65:fe:7c:b4:
e1:00:6b:e4:51:35:2a:19:41:63:03:e7:75:95:94:a3:d3:cc:
f8:67:b9:40:32:30:0d:32:d8:a9:a9:b3:a1:fc:65:f6:d3:2b:
13:29:37:2a:bb:ce:d0:86:e8:ff:b6:39:77:61:ce:3a:99:4f:
9c:ff:8b:5f:2e:18:30:ca:eb:b8:00:eb:bb:d4:c7:ba:bb:b1:
f3:bf:ca:92:8b:53:87:97:b5:d3:53:c7:d7:a0:47:d9:a1:24:
a1:00:6b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 14:24:14 2026 by rpki-client