This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft
File:                     0qCc5CgJ9NqdexxEc93y9DalmcQ.mft (raw, json)
Hash identifier:          tXm3lGcFdXPZid7PPplWhiajkSMvvRBKpcVeQf5nuk4=
Subject key identifier:   35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07
Authority key identifier: D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4
Certificate issuer:       /CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
Certificate serial:       04E9
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft
Manifest number:          04C6
Signing time:             Thu 12 Feb 2026 10:48:50 +0000
Manifest this update:     Thu 12 Feb 2026 10:48:50 +0000
Manifest next update:     Sat 14 Feb 2026 10:48:50 +0000
Files and hashes:         1: 0qCc5CgJ9NqdexxEc93y9DalmcQ.crl (hash: UpPPjDOjAREKtnnF3q+qiSr0Zk0mrBx5d5jtOFMZTDM=)
                          2: H76Yqjd_qsLu02XHlrkdTb6cO4g.roa (hash: 8R3MORDwytvIMNic9SLQgH9B3ARyUty0xVBqwyW73ZU=)
                          3: QWvOVWT5zZy3lUWUnGvHWDKxgnc.roa (hash: 0lcn7A1+ZL5XJgqQCmzarNJs8CwPigObmEAryjQ0dO8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A09CE42809F4DA9D7B1C4473DDF2F436A599C4
        Validity
            Not Before: Feb 12 10:48:50 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=356D1D56D2B0912C2D9009BA80830157976AD707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:71:bf:79:31:ed:f4:6e:63:62:3a:5a:3d:
                    ce:42:9f:26:ff:48:e9:72:2d:c3:6b:6f:c2:14:7e:
                    f3:05:6d:d5:bc:75:b1:a7:f3:1f:f8:3c:3a:c6:f5:
                    8f:e9:f8:89:b5:fb:14:bc:09:98:4e:c0:ce:aa:93:
                    33:37:b7:79:7a:fd:cd:95:1a:cf:d3:01:3f:25:c3:
                    2f:d9:8a:02:05:81:b8:e9:d5:9a:02:2c:04:02:dc:
                    cd:a2:71:f7:c9:06:ad:73:dc:2f:0e:de:27:9f:84:
                    85:ff:0d:a8:b9:94:10:cb:69:e6:f7:48:e7:39:9e:
                    c6:c0:32:d5:65:98:d4:78:0c:7c:ff:5a:dd:8b:10:
                    a4:21:28:73:24:15:d6:74:5f:ab:c6:38:20:1a:cb:
                    bc:a5:21:dc:4e:91:11:d4:8b:9f:16:bf:a7:ad:36:
                    88:39:95:b2:86:bb:d1:91:80:82:2b:64:11:d2:00:
                    37:96:c8:3f:7b:dc:db:f4:0d:15:24:5e:21:76:14:
                    92:6a:c3:fd:94:a1:ce:a5:c4:5a:ee:35:f7:d0:08:
                    03:9c:b0:1f:14:69:e5:4e:c8:84:11:ac:64:44:32:
                    4d:32:fb:ae:eb:a8:6c:c2:25:1c:e8:d9:99:4b:59:
                    31:82:56:09:ce:1a:b1:d2:d4:8e:bd:65:29:7d:bd:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6D:1D:56:D2:B0:91:2C:2D:90:09:BA:80:83:01:57:97:6A:D7:07
            X509v3 Authority Key Identifier:
                keyid:D2:A0:9C:E4:28:09:F4:DA:9D:7B:1C:44:73:DD:F2:F4:36:A5:99:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/0qCc5CgJ9NqdexxEc93y9DalmcQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MERCYCAT/0qCc5CgJ9NqdexxEc93y9DalmcQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:2c:54:99:90:81:4c:1b:5a:6a:16:ca:ab:ee:a2:b6:8d:b0:
         17:8b:11:46:78:06:d5:ff:bc:af:6b:62:10:2f:8e:d4:55:9b:
         f9:f5:92:6e:7e:88:06:91:89:a4:0b:bf:1c:96:ad:b2:0f:e3:
         d2:a3:bf:f0:18:72:f0:a8:ab:df:09:98:3f:98:46:6c:c1:3c:
         75:92:3b:ad:0a:92:19:dc:21:6d:4c:c3:87:85:ae:f5:0f:d1:
         14:7f:0e:e7:f2:b5:0b:c9:f6:28:64:24:a9:e1:29:c1:35:98:
         74:86:c0:a5:ec:f7:f9:d8:f2:52:ed:3d:b3:d9:4e:72:97:1f:
         7a:d3:b6:1c:0b:88:7b:ca:2a:41:79:86:f0:39:f1:f9:2c:80:
         2b:92:8c:11:87:f7:5f:89:e4:5f:bb:c3:a7:97:cc:8a:43:43:
         2a:31:dc:1a:aa:e5:fd:b3:a4:c0:26:fd:28:e9:ad:fd:b6:4b:
         f0:61:d9:26:05:cf:34:05:44:a0:10:47:ac:7c:54:1c:fd:48:
         ab:bb:8e:a0:62:f6:8e:e9:29:60:d9:75:4b:7a:b7:73:59:4b:
         1f:15:98:25:5f:25:5f:c1:01:ef:04:16:03:6e:07:84:1a:af:
         ba:0e:a8:ae:5b:d8:7f:9b:9f:23:20:bd:3d:d0:f6:d0:dc:bd:
         cb:48:b5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 14:28:57 2026 by rpki-client