This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft
File: MSKpKSzJMBUq3lolhIwb3EBEyQI.mft (raw, json)
Hash identifier: jkixUWlFJoq1WVEnlGxlP4xThzCgu5ZadfF9MxN6B5Q=
Subject key identifier: BE:08:4B:DB:E6:B1:36:B3:03:EC:D5:26:8B:41:05:DF:9E:2A:D2:6A
Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Certificate serial: 0581
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft
Manifest number: 055F
Signing time: Wed 11 Feb 2026 17:48:42 +0000
Manifest this update: Wed 11 Feb 2026 17:48:42 +0000
Manifest next update: Fri 13 Feb 2026 17:48:42 +0000
Files and hashes: 1: JmUhNYAFvqi4npFYOj0knkMjtyE.roa (hash: Yjx3MZvdPl3EbNTG40fkFmf/EKk03l2AASY1lH79bwQ=)
2: MSKpKSzJMBUq3lolhIwb3EBEyQI.crl (hash: g+XlkJv91hAfLMwX5ZwP7GDJgQfuy6/Cn9hDoE430Iw=)
3: PQ68nzHGmyTC5Bhy25mhL0_ILks.roa (hash: 0NUSC2jDlUeUpRxr3JnbQK1RqGLKoSZxOqc1D/Or8bE=)
4: SzPtTUKApGxfIUWICcjp_6aEufI.roa (hash: J+pro18vOxRpHP6KCnmNz91O+wAyDV9FPH2X2JslvoM=)
5: l49ml1pNcLXoLE0aU5eVkKPlDwg.roa (hash: SuONQBYYGT0ZGE1cV+6soLLpQbiQTqc4oEbjf2kP9e8=)
6: ldnRxhv1yTtmnvKq3-VYpoEOEEI.roa (hash: dGygZN/gcFJPruUdeMfM4AgxkJgEOHZxGG+uNkvJrYQ=)
7: nbl_j7EZZauFWRsZ3nU9uvCOpms.roa (hash: 4uowiLXGxuWX8sm5I/FnQ7T+5hqChjrtuttfTdYXDy0=)
8: p8RSINp3fRwBYdyK1RxpJyAL3Ss.roa (hash: XMRKYHwXJe1W6RwG3sTFdsZiPHKbtdCkaPJ8psi+9KU=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 17:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1409 (0x581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902
Validity
Not Before: Feb 11 17:48:42 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=BE084BDBE6B136B303ECD5268B4105DF9E2AD26A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:77:a4:70:93:a7:42:98:02:23:a1:cf:87:
c2:31:e5:7d:8c:f9:34:2d:9f:fd:17:0f:9c:0e:b2:
d7:f9:5c:3d:4b:f6:b4:42:ad:51:84:11:14:ae:0f:
e0:4c:65:9f:cc:b8:a1:e4:ba:ea:85:ca:dc:16:2a:
f7:11:5b:b7:40:89:5b:de:82:cf:ea:db:01:18:50:
32:11:22:b5:0e:e1:2d:8e:83:4b:98:62:19:05:83:
c9:e2:3a:fc:61:8e:97:77:c1:a1:ed:56:2d:51:ba:
5f:0f:41:08:2d:65:48:c9:d3:46:90:c6:9f:47:49:
15:5a:a2:19:b9:18:f2:f1:21:e9:85:27:c9:55:15:
eb:0c:fd:46:6c:9e:08:18:9a:c0:33:46:c3:d5:d1:
c1:bf:05:55:49:9a:d8:ed:5b:47:3c:d1:f1:c9:b6:
2b:7a:03:c8:2d:14:80:df:fe:c1:e9:bd:bc:f1:92:
63:6e:20:97:16:16:26:24:2f:99:be:67:c3:e4:6c:
1f:f4:80:40:0d:0d:56:a6:1e:53:b3:a7:12:58:c2:
a2:83:06:eb:40:dd:78:96:c6:a2:1b:c4:35:68:e5:
13:36:ba:19:b0:84:a6:83:af:da:6a:e6:ea:c8:66:
0b:00:d9:eb:af:63:5f:9b:c4:c8:43:e8:cf:73:c8:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:08:4B:DB:E6:B1:36:B3:03:EC:D5:26:8B:41:05:DF:9E:2A:D2:6A
X509v3 Authority Key Identifier:
keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:b4:68:a1:66:20:8e:09:bb:7a:80:ab:be:f5:8d:42:68:e4:
eb:ec:b3:80:f7:e0:66:c4:aa:76:b7:5e:e6:86:e0:bc:af:8b:
d5:0b:94:69:ea:26:87:4e:d7:b2:51:09:e1:99:25:34:a8:fc:
e3:3b:8a:84:49:54:ae:52:8b:f6:86:8e:bc:e0:8c:80:29:c1:
6d:ae:bd:a8:88:89:08:e9:51:49:3d:3d:c0:6a:45:cc:f2:0d:
32:8d:ea:04:e0:c5:af:f2:f2:1c:b1:74:95:74:b5:c6:01:78:
05:45:4a:50:1c:d4:8d:de:7d:85:0b:b8:d0:2f:5f:ee:14:ec:
4e:a8:8c:e2:b5:91:21:c0:f6:73:36:f8:18:c8:b3:9a:a3:b8:
8b:df:0f:19:07:d7:de:06:21:81:49:89:15:63:05:8b:a7:35:
8e:bd:ca:9b:d3:f4:23:9b:cc:51:71:4a:2e:23:f0:71:4c:2b:
1c:0b:34:2d:53:e0:f0:36:85:76:59:d9:7a:93:00:43:65:2a:
6c:61:91:43:bb:3e:4f:d5:43:1c:23:e7:8c:cf:15:fd:0f:7f:
ba:f8:de:35:fa:67:25:ce:13:04:0d:bd:b0:71:6c:e2:d9:cc:
a8:07:53:07:89:0a:d2:37:37:d8:dd:7a:51:89:26:61:ed:c5:
10:21:66:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 14:27:48 2026 by rpki-client