This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
File:                     tDIP1437ak0ckjIveUlmuFJd_dI.mft (raw, json)
Hash identifier:          PSrh1xFlaZ+P8V9yV3K+ERsu/dbhVPpo2UGEZrmDonk=
Subject key identifier:   1F:A6:EC:AF:83:C3:9B:5F:FD:E3:AC:1D:AF:FC:A2:78:0F:9A:71:E9
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Certificate issuer:       /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial:       5ACC
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
Manifest number:          5A87
Signing time:             Sun 14 Dec 2025 10:07:07 +0000
Manifest this update:     Sun 14 Dec 2025 10:07:07 +0000
Manifest next update:     Tue 16 Dec 2025 10:07:07 +0000
Files and hashes:         1: A-Mpo5lGCGkiCmz2I75EzH7H4Pg.roa (hash: Xat3W8LVqfZIhGVNVDHM1dDtTgwgqAiYNdM45DXgQB8=)
                          2: DR2DukQY8qyY5rWH2leFHpGYhCE.roa (hash: lmDldo1DiQ9RvynogVmjoFQu2/tJB6dTCeqcCQCjMEg=)
                          3: Zp_zK3yrpptl8yExI7ivKZWT6yM.roa (hash: Zd3y1rYmCImc+X1REx1omkY972AZTE3lvPFRqs70r2w=)
                          4: cE-KGBoHDTDeIuel3Xtkm7uaLVk.roa (hash: ClROMiwNwkqKR8uZXhFrlJraar+33eQ4u1saXlpDUnQ=)
                          5: dl7xpka3J9MfVrzjVNhbhRkuO4s.roa (hash: CRltAB2hxU5SgHTDYMJE7teti6QORSUNLMkXG1AL/EM=)
                          6: qPtRE2RicqHDIIbRUceeq1G248Q.roa (hash: yIg2xc4B5GY4bxs3VGyvaguCdyC26v0DOu6EzgrdFM8=)
                          7: ru6lQnJqGBo31IH4LvVZaH4Fwcs.roa (hash: O5zSbWgxSDvr/PYw+u1eZVycS8QVwm6W/x93U3VHz/8=)
                          8: tDIP1437ak0ckjIveUlmuFJd_dI.crl (hash: QXAjHKTm1owLGCvt5mY9EbPn4wqwSyhsJyr9hlBewzc=)
                          9: xE4mgJV7Dl0DKrKZQnlm-Lm5TpQ.roa (hash: bp0fEUFJXcyG52ugspAPP08M7fvGLZZfr6eVOmgym6M=)
                          10: zezNjefkzhHpsDqT36XUHnURy6A.roa (hash: I4t6BAkQAP5xEbjKi3E04Npy81/CKcNmTeF/polgEx8=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Dec 2025 16:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23244 (0x5acc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
        Validity
            Not Before: Dec 14 10:07:07 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=1FA6ECAF83C39B5FFDE3AC1DAFFCA2780F9A71E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a2:13:73:54:80:9b:39:15:8d:ff:0d:64:6a:
                    90:d9:41:d9:ad:16:31:95:96:25:c1:98:68:d7:a8:
                    b5:50:a9:f6:8a:81:4f:87:18:dc:40:89:24:8c:09:
                    cb:ab:94:b2:e0:a6:73:1c:3a:e4:e9:bc:45:69:95:
                    8d:61:db:a0:64:cc:68:b2:f5:d6:29:cd:96:51:fa:
                    8d:f9:64:84:f8:ce:06:d5:42:79:4e:f1:50:f4:91:
                    9d:69:6e:68:9b:46:08:4b:fd:46:73:c8:79:31:2b:
                    41:7a:fd:d7:c4:b5:e3:93:b2:6a:75:0f:16:76:ef:
                    7e:26:51:96:60:6d:48:c3:49:5c:17:68:a6:1a:b9:
                    f0:e3:7e:ac:c3:fd:7b:64:4d:ff:0d:f0:52:cb:fe:
                    bc:b7:9d:73:40:ac:32:ff:4b:64:b5:db:f7:f9:21:
                    25:30:6e:3b:61:23:0c:1c:5b:f1:f5:f2:86:ff:84:
                    59:30:21:6a:11:ac:17:fb:f7:d5:1b:6c:76:94:81:
                    d9:72:1d:b4:8a:a6:48:75:95:72:66:f1:25:41:c0:
                    75:82:45:8d:b6:ef:f7:07:a7:fd:e3:a6:e1:63:19:
                    29:d1:30:69:57:49:e3:36:07:c8:5e:ac:b0:12:3a:
                    64:35:fc:33:02:9f:c1:29:d7:c5:20:4e:eb:82:a2:
                    66:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A6:EC:AF:83:C3:9B:5F:FD:E3:AC:1D:AF:FC:A2:78:0F:9A:71:E9
            X509v3 Authority Key Identifier:
                keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:dc:f9:ec:32:02:66:40:14:7d:62:18:e1:65:3f:40:17:a2:
         80:b4:f8:dd:79:f8:4f:96:ea:b2:39:85:f2:82:d6:4c:36:e7:
         f9:33:7c:39:50:f1:80:75:17:cc:17:1f:fd:6b:d1:b6:a6:97:
         d0:7e:a9:da:74:1c:e1:b5:c2:ae:6a:86:fc:43:7a:12:e3:c1:
         e2:8b:2f:c3:d1:fa:2e:5f:4b:5f:1b:16:e5:35:aa:1c:f9:4b:
         88:d2:52:dc:63:3e:d6:d5:ab:11:03:97:ee:38:2b:b0:55:bd:
         18:c2:2d:b6:d0:e4:c3:00:ee:dc:51:c3:ee:06:3a:7d:82:db:
         86:e0:2b:b8:06:13:78:c7:36:ff:a1:5d:e6:09:24:85:71:13:
         ce:b4:f0:8a:84:d4:9c:07:78:15:c8:82:09:42:93:cd:be:35:
         68:4e:9a:77:9f:80:4c:32:82:68:34:25:39:a7:0c:1a:0d:47:
         4a:7b:db:be:e8:1c:0a:8a:33:59:21:88:32:be:ca:5d:99:eb:
         79:21:4b:d0:eb:6e:1a:3b:c0:b9:a3:8a:d1:a8:ec:9d:6d:75:
         93:e2:82:cc:84:b9:71:6a:dd:94:a8:6a:77:bf:19:98:22:d2:
         27:45:5d:e0:7b:a9:e7:1e:47:f0:b3:a1:74:06:0e:8e:f2:4f:
         20:7c:50:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:09:09 2025 by rpki-client