This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft
File:                     NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft (raw, json)
Hash identifier:          okKsny2A1zTKFbNv/0Bixs7SAGlkb2WTa42pVz6CgvE=
Subject key identifier:   45:86:DF:10:0F:31:5E:43:98:B7:E4:CA:F7:57:ED:17:11:00:06:C9
Authority key identifier: 37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94
Certificate issuer:       /CN=3730D9A195AB710286722CE5CCA467CFBA5BD494
Certificate serial:       0292
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft
Manifest number:          0287
Signing time:             Wed 11 Feb 2026 17:48:42 +0000
Manifest this update:     Wed 11 Feb 2026 17:48:42 +0000
Manifest next update:     Fri 13 Feb 2026 17:48:42 +0000
Files and hashes:         1: NzDZoZWrcQKGcizlzKRnz7pb1JQ.crl (hash: JtKJQMEuRBgXHzYd5c89nu95U/AL7O0BBAUNfkNzjRI=)
                          2: dAu6xDFFtlWLJFDtkyBK_Z2gqGA.roa (hash: WQHtXkfdQl/7FLdk32F3wHpSkTJtqsjLQY+6Oo7A0L4=)
                          3: kk2dYYX4FnMvsEWhwFq6PFQ9N3s.roa (hash: kFVum/hvz0ZARTVw1IidqmW1l3nTadKsafL8lKfNrls=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Feb 2026 00:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3730D9A195AB710286722CE5CCA467CFBA5BD494
        Validity
            Not Before: Feb 11 17:48:42 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=4586DF100F315E4398B7E4CAF757ED17110006C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:4e:ee:c4:93:3f:d5:58:94:41:5b:f1:c0:
                    46:81:42:12:ea:48:a5:92:92:72:9a:b0:cf:67:c5:
                    7d:24:7d:d8:32:9a:33:38:18:a3:ee:04:26:ab:59:
                    7c:18:65:2f:89:a1:41:77:ac:7d:24:73:e4:11:09:
                    99:c9:25:41:c8:5a:c6:29:b9:64:03:8c:a8:a1:49:
                    4b:05:7f:a0:03:07:b5:d0:e6:87:6d:ea:49:75:32:
                    19:73:a7:26:b9:8c:98:8d:bc:34:43:bf:34:19:88:
                    19:4c:10:53:1c:e6:9a:09:16:4c:69:e2:22:19:81:
                    8a:12:ee:26:c9:5c:2b:cc:2e:c0:f4:c4:bc:df:26:
                    8a:4c:f2:7c:33:73:38:b0:06:37:31:79:0e:81:f6:
                    4a:59:2a:58:48:57:5b:5e:f5:b4:22:9e:db:cb:0a:
                    c0:87:fa:d8:13:a6:b5:05:31:02:27:20:d0:04:6e:
                    bf:ad:3e:55:fa:ca:c2:58:2b:80:eb:9b:26:f8:15:
                    e4:79:ed:54:bd:ac:45:3c:df:d5:54:09:30:ac:24:
                    a6:d6:bd:f0:ed:df:a7:ed:fd:94:70:97:b3:83:05:
                    d0:8f:7f:1d:3a:94:2c:3d:6c:00:2c:75:9e:fe:51:
                    f1:3d:93:06:25:14:6e:73:37:11:c5:48:f1:98:b4:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:86:DF:10:0F:31:5E:43:98:B7:E4:CA:F7:57:ED:17:11:00:06:C9
            X509v3 Authority Key Identifier:
                keyid:37:30:D9:A1:95:AB:71:02:86:72:2C:E5:CC:A4:67:CF:BA:5B:D4:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NzDZoZWrcQKGcizlzKRnz7pb1JQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/NzDZoZWrcQKGcizlzKRnz7pb1JQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:38:3e:27:e8:19:9e:12:ba:41:76:f3:e1:97:99:d2:66:a8:
         ad:b5:ce:93:8f:ae:68:bb:c8:82:45:49:8d:0f:f8:e4:ea:9a:
         c9:85:54:91:29:d2:24:cd:2a:2d:68:fe:4d:22:9a:43:ac:03:
         fb:8e:51:56:1c:76:8a:c3:86:15:3e:40:9f:30:eb:2e:ef:2e:
         d3:ca:19:e5:6b:97:ed:f7:e8:62:7b:f6:42:c4:51:7e:81:e2:
         07:6a:02:db:ca:1e:84:2a:f8:81:d5:45:62:72:4b:cb:03:24:
         77:d5:48:30:ad:17:a1:03:c1:51:31:5d:8b:28:15:e6:67:55:
         10:34:bc:10:5f:b3:b6:4e:9a:b3:63:91:51:ae:d1:43:aa:76:
         a6:ca:39:90:5d:7a:6d:56:91:44:95:0e:a9:9a:4a:57:e6:dd:
         4d:2b:88:11:b6:66:e0:0d:59:7a:53:87:fb:06:51:df:b7:90:
         15:dd:9a:a8:79:c5:89:ae:7b:90:6e:4d:75:13:59:6b:af:f3:
         f5:a3:11:4d:36:98:72:ac:d5:b6:69:2b:d8:3b:43:fa:11:0e:
         66:f1:b5:77:80:70:75:c5:69:fd:32:ba:b4:1b:45:a4:8b:e9:
         8d:87:60:09:84:ad:d7:fe:d4:7b:2b:4d:04:4d:93:95:7c:08:
         8e:32:c3:0b
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICApIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzcz
MEQ5QTE5NUFCNzEwMjg2NzIyQ0U1Q0NBNDY3Q0ZCQTVCRDQ5NDAeFw0yNjAyMTEx
NzQ4NDJaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDQ1ODZERjEwMEYzMTVF
NDM5OEI3RTRDQUY3NTdFRDE3MTEwMDA2QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDg07uxJM/1ViUQVvxwEaBQhLqSKWSknKasM9nxX0kfdgymjM4
GKPuBCarWXwYZS+JoUF3rH0kc+QRCZnJJUHIWsYpuWQDjKihSUsFf6ADB7XQ5odt
6kl1Mhlzpya5jJiNvDRDvzQZiBlMEFMc5poJFkxp4iIZgYoS7ibJXCvMLsD0xLzf
JopM8nwzcziwBjcxeQ6B9kpZKlhIV1te9bQintvLCsCH+tgTprUFMQInINAEbr+t
PlX6ysJYK4Drmyb4FeR57VS9rEU839VUCTCsJKbWvfDt36ft/ZRwl7ODBdCPfx06
lCw9bAAsdZ7+UfE9kwYlFG5zNxHFSPGYtN+jAgMBAAGjggINMIICCTAdBgNVHQ4E
FgQURYbfEA8xXkOYt+TK91ftFxEABskwHwYDVR0jBBgwFoAUNzDZoZWrcQKGcizl
zKRnz7pb1JQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVT
Q09NL056RFpvWldyY1FLR2Npemx6S1JuejdwYjFKUS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvTnpEWm9aV3JjUUtHY2l6bHpLUm56N3BiMUpRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVTQ09NL056RFpvWldyY1FL
R2Npemx6S1JuejdwYjFKUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQDAOD4n6BmeErpBdvPhl5nSZqittc6Tj65ou8iCRUmND/jk6prJhVSRKdIk
zSotaP5NIppDrAP7jlFWHHaKw4YVPkCfMOsu7y7Tyhnla5ft9+hie/ZCxFF+geIH
agLbyh6EKviB1UVickvLAyR31UgwrRehA8FRMV2LKBXmZ1UQNLwQX7O2TpqzY5FR
rtFDqnamyjmQXXptVpFElQ6pmkpX5t1NK4gRtmbgDVl6U4f7BlHft5AV3ZqoecWJ
rnuQbk11E1lrr/P1oxFNNphyrNW2aSvYO0P6EQ5m8bV3gHB1xWn9Mrq0G0Wki+mN
h2AJhK3X/tR7K00ETZOVfAiOMsML
-----END CERTIFICATE-----
Generated at Thu Feb 12 20:15:00 2026 by rpki-client