This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.mft
File: KzuJrTLzuVt68WX0yKTNCOdU1as.mft (raw, json)
Hash identifier: decI1UZcmQIMmzAyhsfY2P5HDt4tcyrmvp8Xesly+Ck=
Subject key identifier: DD:86:40:9E:42:6F:99:16:CB:B6:87:4B:07:52:98:43:D3:0A:48:F1
Authority key identifier: 2B:3B:89:AD:32:F3:B9:5B:7A:F1:65:F4:C8:A4:CD:08:E7:54:D5:AB
Certificate issuer: /CN=2B3B89AD32F3B95B7AF165F4C8A4CD08E754D5AB
Certificate serial: 0493
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KzuJrTLzuVt68WX0yKTNCOdU1as.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.mft
Manifest number: 0487
Signing time: Thu 12 Feb 2026 12:49:14 +0000
Manifest this update: Thu 12 Feb 2026 12:49:14 +0000
Manifest next update: Sat 14 Feb 2026 12:49:14 +0000
Files and hashes: 1: Agj8rVwTiiTb80wmHrbGEyLB5NU.roa (hash: e3rWMC/Ublr7SxYZSTIDAsdXqPgUqh53/wujZLS/c2M=)
2: KzuJrTLzuVt68WX0yKTNCOdU1as.crl (hash: LvLeNl/gwAOXSyLNAwktU2nbXQaG5qGxowio1zZ2WNU=)
3: ZSxhd8aHi1LMGqcLudRx__hQNQU.roa (hash: 6c0losMgzYfoBgXeGjGJmVkJ0DSJmbIwFvnsJet7r0c=)
4: mSApZwnuhTHRnFXHnX6RvzTKGYE.roa (hash: ZoNhTA/dFtecSixl6TwZgm+2FPUyeLITukQ2ucLNwGs=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/KzuJrTLzuVt68WX0yKTNCOdU1as.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 17:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1171 (0x493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B3B89AD32F3B95B7AF165F4C8A4CD08E754D5AB
Validity
Not Before: Feb 12 12:49:14 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=DD86409E426F9916CBB6874B07529843D30A48F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:db:89:0b:c5:2c:92:c4:78:96:00:84:64:de:
f8:f0:1c:8b:c3:c8:de:56:c3:da:d5:95:d5:f7:c0:
53:aa:d0:a7:3a:75:06:5b:87:0d:f8:b8:55:00:71:
b0:30:1c:28:0b:04:b3:7f:53:1b:50:40:0c:14:47:
59:2d:28:9a:c5:ad:cd:af:15:29:eb:49:01:7a:4a:
65:f5:bd:d3:be:12:c8:f7:76:8e:f6:f3:ef:31:98:
26:94:48:0f:7b:30:61:8c:71:08:8e:fb:54:7a:38:
fa:16:d6:69:0f:73:4e:0e:7a:a7:88:32:21:95:fc:
1c:7b:64:ff:9c:31:e1:c9:fc:1b:93:7c:ff:bf:52:
47:38:4c:2c:85:96:31:47:c1:27:0d:3c:70:77:da:
14:05:55:d1:e1:93:e1:69:e3:85:ed:17:59:d5:63:
58:8b:a9:a2:34:59:17:ef:96:b7:90:ed:eb:6a:a0:
43:28:c2:bc:73:52:71:95:67:5e:2e:6b:6f:f1:39:
93:2e:d8:fb:2a:6d:b8:60:7f:3b:fb:5f:7b:65:5e:
22:65:45:06:be:5b:6f:0d:0a:e5:b1:68:80:69:c8:
44:a0:7a:43:1c:eb:b7:f6:5c:89:70:bc:f6:5d:b9:
81:0b:f2:a7:9a:cd:04:93:99:24:f6:e6:96:c0:a3:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:86:40:9E:42:6F:99:16:CB:B6:87:4B:07:52:98:43:D3:0A:48:F1
X509v3 Authority Key Identifier:
keyid:2B:3B:89:AD:32:F3:B9:5B:7A:F1:65:F4:C8:A4:CD:08:E7:54:D5:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KzuJrTLzuVt68WX0yKTNCOdU1as.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MAGICCUBE/KzuJrTLzuVt68WX0yKTNCOdU1as.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:55:21:d3:39:05:02:76:2d:b2:1d:21:e5:1e:ed:36:57:46:
e3:65:56:1c:19:de:ca:df:6b:d8:cc:05:c4:83:68:eb:00:54:
46:30:d9:c1:7c:0c:a7:11:74:d2:f8:ee:a3:d3:01:c6:e5:69:
5c:f2:61:27:7a:dd:00:06:08:45:41:f2:e4:13:e1:db:4a:0f:
a3:de:08:83:b2:bf:9f:67:47:07:53:0a:24:3e:22:60:c4:76:
3d:0e:3e:cf:04:25:81:25:48:55:8d:08:fa:17:a8:b8:32:f7:
28:32:29:3a:b7:49:fa:a5:76:3c:c4:f4:0e:8c:b3:b4:85:0c:
0b:e8:7b:b8:47:4f:d6:fd:6d:8c:cd:18:e3:92:2a:81:5b:7c:
72:ed:9b:0f:84:1d:72:a4:14:20:64:80:5f:8f:a6:ac:88:74:
3b:8d:d3:a8:7d:57:7b:7c:e8:10:71:34:cb:3d:ae:9e:c8:25:
de:77:3c:4e:a7:8c:11:fa:5c:b0:47:8d:5a:f2:e7:41:73:71:
4b:3b:59:a1:c6:e9:fc:27:08:68:cc:94:f7:e5:e3:3b:3f:62:
c5:38:b8:7b:0d:f3:14:b5:55:4f:93:67:c1:c9:24:58:83:fd:
11:83:ba:dd:60:26:ff:da:e1:db:2d:f2:c9:84:d7:db:cb:1d:
8f:c3:8c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 14:28:56 2026 by rpki-client