This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/nsvxcPf30ikOau05yo0jj2YHK3o.mft
File:                     nsvxcPf30ikOau05yo0jj2YHK3o.mft (raw, json)
Hash identifier:          aYbR2RGgdsr2aQMjE/dWtnKvT6mrdvpuNCjlLvyPh40=
Subject key identifier:   2D:4F:53:0A:51:DA:50:AB:28:DC:06:DE:D7:7D:DB:5A:F6:6C:D9:90
Authority key identifier: 9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A
Certificate issuer:       /CN=9ECBF170F7F7D2290E6AED39CA8D238F66072B7A
Certificate serial:       0DC7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/nsvxcPf30ikOau05yo0jj2YHK3o.mft
Manifest number:          0DB5
Signing time:             Fri 05 Dec 2025 10:06:18 +0000
Manifest this update:     Fri 05 Dec 2025 10:06:18 +0000
Manifest next update:     Sun 07 Dec 2025 10:06:18 +0000
Files and hashes:         1: YHleF7_kz3sN9-MS2zVeEnMZDBg.roa (hash: ru+ssyvLkWfTwnR5xt0ukIc4VPKj+oh3xy8lz14ETvY=)
                          2: nsvxcPf30ikOau05yo0jj2YHK3o.crl (hash: J5ssoscB8P2CTTTe8pfRT9elyp/On14KmVEc1m9uig0=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/nsvxcPf30ikOau05yo0jj2YHK3o.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/nsvxcPf30ikOau05yo0jj2YHK3o.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Dec 2025 20:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3527 (0xdc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ECBF170F7F7D2290E6AED39CA8D238F66072B7A
        Validity
            Not Before: Dec  5 10:06:18 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=2D4F530A51DA50AB28DC06DED77DDB5AF66CD990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:cc:a3:8c:63:c9:d3:d4:cb:d0:7e:e9:48:
                    44:a6:56:b8:22:ed:21:5c:e1:db:1a:a7:71:07:a4:
                    bd:48:ed:ce:5a:98:c1:6d:d1:38:94:9d:0a:2c:40:
                    0a:e9:7a:aa:76:0b:3d:38:23:fb:49:36:b9:73:fe:
                    3d:96:11:e8:e2:0b:3f:59:ed:32:a7:5e:53:51:95:
                    8b:f8:06:ec:43:76:3b:92:69:eb:76:44:cc:5e:95:
                    d9:5e:e5:6f:16:78:c8:57:53:84:cb:f0:3c:4a:8d:
                    7f:f1:cf:29:64:b9:bb:9e:6b:c2:d9:3e:a0:6c:ce:
                    7d:2e:6b:3b:3f:73:3d:22:5c:20:08:43:d8:f4:56:
                    37:57:b5:7b:12:b1:19:71:2f:50:38:41:8e:01:65:
                    69:53:16:5d:2d:1d:ac:85:87:07:97:78:09:94:ed:
                    f2:f3:07:90:91:9b:ac:6f:9b:68:97:35:85:5a:e3:
                    a8:4d:6c:34:2a:4e:83:56:4c:24:24:10:3c:89:75:
                    73:92:b9:8f:72:f4:1a:84:11:7a:7b:aa:7e:25:a9:
                    f9:46:3d:7f:57:ff:76:32:2b:1b:8d:62:0a:30:86:
                    40:07:60:40:91:99:5d:d2:c7:cd:15:09:a0:4d:36:
                    07:02:d6:e2:e7:d1:9f:ac:87:62:1f:4d:f1:00:ab:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4F:53:0A:51:DA:50:AB:28:DC:06:DE:D7:7D:DB:5A:F6:6C:D9:90
            X509v3 Authority Key Identifier:
                keyid:9E:CB:F1:70:F7:F7:D2:29:0E:6A:ED:39:CA:8D:23:8F:66:07:2B:7A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/nsvxcPf30ikOau05yo0jj2YHK3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nsvxcPf30ikOau05yo0jj2YHK3o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LANDBANK/nsvxcPf30ikOau05yo0jj2YHK3o.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:10:9e:02:de:33:01:80:82:22:03:95:b7:f9:8f:9e:24:82:
         ce:41:da:4e:d6:24:71:53:02:b4:66:76:29:27:00:d3:15:e0:
         1a:7c:09:0c:0d:46:8b:ee:95:f5:64:06:80:28:fe:4b:a4:d1:
         75:2b:eb:2c:ff:f6:72:c0:86:34:06:b4:48:19:37:42:d3:82:
         59:1a:f9:97:2e:20:26:87:e0:27:77:c3:2a:b0:01:42:d8:e7:
         4e:a0:27:0d:c8:bf:99:76:91:fb:ca:01:71:20:8a:a7:d9:30:
         3a:b1:fb:e7:45:3e:2e:1a:32:d7:d6:5c:e2:40:d9:ae:a1:95:
         df:c6:9a:0b:f0:6a:73:5d:e9:c9:3e:ea:24:88:43:61:9e:3e:
         73:32:b0:ee:3c:67:60:ad:17:ee:38:b3:6d:7c:47:d4:47:ed:
         4a:7c:c3:3d:27:ff:7e:77:d3:20:26:dc:cb:68:e7:67:f6:6d:
         3a:97:21:1f:88:c2:68:da:06:d6:4b:c4:6e:56:01:fe:10:f7:
         bd:73:db:2d:0f:d1:20:55:fd:16:8a:5d:ca:3e:de:e8:e5:38:
         e8:06:51:8b:56:29:c5:de:96:42:52:67:0c:8e:4f:d2:80:eb:
         09:cc:78:66:0c:a7:98:ce:e9:9d:56:92:c2:6d:ee:5b:5b:9e:
         26:98:cf:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:56:42 2025 by rpki-client