This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCL/D3-0MC8h8wGrDq_FuAGEvu0_sZg.mft
File:                     D3-0MC8h8wGrDq_FuAGEvu0_sZg.mft (raw, json)
Hash identifier:          qAL4HxMXj8KjmL7U1DxURBikrw0l0RlfpyJjCi8/Klw=
Subject key identifier:   C8:8F:C5:70:90:7D:EC:1F:5B:E8:6B:88:1E:6A:D5:19:A1:FB:2F:5F
Authority key identifier: 0F:7F:B4:30:2F:21:F3:01:AB:0E:AF:C5:B8:01:84:BE:ED:3F:B1:98
Certificate issuer:       /CN=0F7FB4302F21F301AB0EAFC5B80184BEED3FB198
Certificate serial:       0F31
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/D3-0MC8h8wGrDq_FuAGEvu0_sZg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCL/D3-0MC8h8wGrDq_FuAGEvu0_sZg.mft
Manifest number:          0F27
Signing time:             Thu 12 Feb 2026 10:49:34 +0000
Manifest this update:     Thu 12 Feb 2026 10:49:34 +0000
Manifest next update:     Sat 14 Feb 2026 10:49:34 +0000
Files and hashes:         1: D3-0MC8h8wGrDq_FuAGEvu0_sZg.crl (hash: S8aH4O6+piOvQNFQvkMR/AYjKbHWzEIko9A4qz1bajU=)
                          2: ky4sut692-O_-YJp6L76tR2r2TY.roa (hash: iaNsBxG57ix79G0EGOD5rHu5efh0DQkgE+K9V6t8Crg=)
                          3: vNP_I5PsMAFrbuL-fCVc_DAcuas.roa (hash: APgUUdWq9/Tb8VzeXKS6YF+F0jEJbFs8Sj9SdJqqO7s=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCL/D3-0MC8h8wGrDq_FuAGEvu0_sZg.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCL/D3-0MC8h8wGrDq_FuAGEvu0_sZg.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/D3-0MC8h8wGrDq_FuAGEvu0_sZg.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3889 (0xf31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7FB4302F21F301AB0EAFC5B80184BEED3FB198
        Validity
            Not Before: Feb 12 10:49:34 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=C88FC570907DEC1F5BE86B881E6AD519A1FB2F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:e4:bb:14:01:65:91:ff:33:8b:56:65:74:
                    e6:20:32:88:12:20:83:5c:af:24:95:d8:60:86:53:
                    db:7b:8e:82:1f:4b:cf:0f:2b:cd:48:6c:fc:74:ff:
                    ad:a0:ed:75:bb:e5:0c:e7:92:96:a6:42:6d:fe:3a:
                    1c:78:bd:12:a4:46:86:51:cf:d8:17:49:90:c9:60:
                    88:16:5b:9a:77:d3:00:91:b5:e2:c7:3b:13:ad:0d:
                    e6:e9:36:09:84:13:c9:13:44:8d:51:91:13:b1:b4:
                    a2:c6:10:ab:37:87:38:46:e5:53:86:4b:76:6b:5f:
                    82:1a:a1:8d:a3:fb:1c:91:bf:9d:89:0e:cf:2f:44:
                    d2:5c:98:d3:f2:35:19:74:60:c8:99:07:a4:69:45:
                    ba:69:9e:27:e1:5c:f6:f5:81:39:0d:0a:8a:64:59:
                    fb:e9:70:9c:d3:f7:cc:16:1a:60:3a:fc:bd:38:29:
                    25:e6:00:8d:ef:09:7b:4f:53:e8:e5:77:87:5f:85:
                    b0:c4:10:5b:d1:25:38:b6:2d:4b:4c:80:3b:41:3d:
                    88:fe:70:8e:4f:68:05:68:45:3e:61:c8:72:b8:a9:
                    7f:ac:12:86:3e:c6:8b:e7:50:a3:da:59:95:92:dc:
                    73:81:98:12:5b:4e:f8:74:df:e5:dc:f8:b0:e8:c8:
                    50:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8F:C5:70:90:7D:EC:1F:5B:E8:6B:88:1E:6A:D5:19:A1:FB:2F:5F
            X509v3 Authority Key Identifier:
                keyid:0F:7F:B4:30:2F:21:F3:01:AB:0E:AF:C5:B8:01:84:BE:ED:3F:B1:98

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCL/D3-0MC8h8wGrDq_FuAGEvu0_sZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/D3-0MC8h8wGrDq_FuAGEvu0_sZg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCL/D3-0MC8h8wGrDq_FuAGEvu0_sZg.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:18:b4:3e:e0:45:3d:a1:7e:11:f4:aa:dd:1b:03:a2:49:84:
         0f:e0:07:00:2e:6f:01:62:d3:4a:ad:bb:9e:0d:96:a3:c5:90:
         d0:c2:92:32:56:e0:6b:b7:90:65:e8:a1:17:ba:4a:b0:0a:e3:
         91:4b:e4:98:36:53:ef:4c:87:f0:2a:19:96:90:bc:4b:06:09:
         cb:3a:1f:7c:a2:dd:5a:f2:03:14:c3:27:f4:52:07:52:da:04:
         5e:34:e7:3c:1c:96:39:03:89:6c:fa:86:f3:ed:fb:14:ec:04:
         7d:bf:40:b4:cc:ef:c9:f9:f8:98:e0:23:e0:a6:43:4b:2c:1f:
         73:11:e7:a5:dc:96:17:f4:c1:a4:7b:71:08:03:38:41:96:51:
         d1:11:83:57:33:ef:1e:ba:66:3a:e9:0a:06:51:8d:42:2e:09:
         58:d8:99:c7:b8:16:60:16:e1:06:77:fe:e2:73:c0:b1:75:d9:
         8a:e7:c5:28:1f:17:de:8e:f0:79:b4:40:3c:44:c4:30:b0:13:
         71:b2:01:8d:d0:14:e3:56:13:ac:1d:52:fc:9b:5b:53:eb:2c:
         3b:6b:02:c2:6b:b2:e3:89:0f:ad:8e:e8:eb:a7:48:cb:bd:83:
         68:53:1e:6a:26:1d:b6:f6:62:7d:d8:f2:5f:3c:7f:52:db:5b:
         5b:d3:47:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 14:26:26 2026 by rpki-client