This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft
File:                     HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft (raw, json)
Hash identifier:          YyBe1VWCVjhmip4PCfjATXx3gmV3tKbAHxCCIkR/wbM=
Subject key identifier:   D2:8E:11:61:7B:4C:95:5F:B6:30:0F:D7:5A:8B:93:92:95:76:43:2B
Authority key identifier: 1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35
Certificate issuer:       /CN=1C7073A6066C765842FDF07169E43518A0BB0235
Certificate serial:       02A1
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft
Manifest number:          0294
Signing time:             Thu 12 Feb 2026 10:51:27 +0000
Manifest this update:     Thu 12 Feb 2026 10:51:27 +0000
Manifest next update:     Sat 14 Feb 2026 10:51:27 +0000
Files and hashes:         1: HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl (hash: 2dJYhZdEeozF25E3/AsJPR1c1P/VV/4TXBeDIOlaC3w=)
                          2: cuG7oZP8T6Ux1QOOxy7rReO03WE.roa (hash: 6O0kAE8tsAz31kqIlNu5Z5fWznHZiyhny8U2Ch3QHIU=)
                          3: sXMoc_WHbcaV0haB_7Aw1bJn7K0.roa (hash: +Am0J/CRMHQSKWsxPEos6r+asMM7hp5+QLfR4GTuIPE=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7073A6066C765842FDF07169E43518A0BB0235
        Validity
            Not Before: Feb 12 10:51:27 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=D28E11617B4C955FB6300FD75A8B93929576432B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:fc:78:d8:99:fc:9f:df:13:8d:d1:ac:64:
                    da:07:f2:f1:c4:21:f9:7a:f4:bd:f6:3b:25:6e:26:
                    e2:f8:e1:37:e7:0b:73:7c:51:45:6e:83:6b:94:69:
                    29:85:e8:12:e3:89:a1:3b:ff:12:31:1f:f4:e4:fb:
                    f8:4e:22:07:56:35:88:cc:fd:a1:1e:27:aa:93:3f:
                    31:79:13:e1:d4:dc:9e:16:68:e9:b3:39:34:54:2a:
                    21:d4:7c:d7:04:1c:c1:a1:99:4c:e2:07:1d:fd:c9:
                    dd:d7:87:63:3e:2f:a7:c2:e5:18:51:f2:83:dd:7c:
                    54:ae:59:e9:4a:bb:dd:48:eb:68:a3:1f:62:7f:3d:
                    34:68:86:29:19:08:e8:24:22:70:36:f6:76:52:a9:
                    48:51:72:21:8f:15:11:0e:ba:4a:09:3a:7d:ee:a3:
                    3e:35:29:df:83:3c:dc:25:9e:3b:e3:ef:eb:9a:ce:
                    26:45:04:4a:df:d5:6d:a3:44:67:c1:5d:4e:01:87:
                    5a:79:3f:9c:05:47:c8:99:23:69:cb:1e:af:81:ec:
                    a1:1d:72:8e:3e:b0:07:0e:39:d6:68:f5:97:ad:dc:
                    da:f4:c4:d9:02:59:46:59:ae:0a:c1:e1:0b:fb:44:
                    86:1f:19:33:d8:14:cc:45:f5:45:21:93:b9:01:54:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8E:11:61:7B:4C:95:5F:B6:30:0F:D7:5A:8B:93:92:95:76:43:2B
            X509v3 Authority Key Identifier:
                keyid:1C:70:73:A6:06:6C:76:58:42:FD:F0:71:69:E4:35:18:A0:BB:02:35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NUNLINE/HHBzpgZsdlhC_fBxaeQ1GKC7AjU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9a:cd:99:59:20:da:95:91:31:57:44:97:31:6b:45:d9:8f:
         35:1e:e5:0b:ca:35:f3:1e:86:e6:4d:b0:95:49:d6:ec:7d:7e:
         39:85:71:99:7a:8a:41:36:88:67:d8:cd:fd:43:08:2d:d8:3f:
         80:b9:a3:a2:07:26:c1:bc:de:c2:f2:b0:27:3e:0c:38:cc:d4:
         91:70:a4:68:14:38:1a:3d:6f:b7:eb:c6:51:ae:4c:88:b5:13:
         c6:94:81:3b:1e:80:ab:a2:bd:45:c5:99:7b:e6:e4:65:13:64:
         d0:86:54:58:c2:98:15:07:20:6b:29:0c:c7:d2:41:95:70:99:
         dc:c6:8f:4d:58:78:9e:a8:1c:c8:b4:c1:54:cd:6b:80:dd:04:
         e0:7f:ad:7f:53:1d:fd:5b:a8:c6:58:40:08:ce:07:03:e5:7d:
         34:0f:a6:66:32:86:c1:fc:5d:56:c1:b0:86:ee:92:f5:19:38:
         c9:52:ac:c0:b4:4f:41:2b:00:8e:94:41:80:82:33:c6:1d:fe:
         75:d1:2a:12:79:70:72:9d:bb:4a:6b:78:90:67:22:7b:cd:82:
         c3:d6:08:eb:05:b3:21:1e:94:93:81:e8:41:f2:f2:ff:18:7d:
         13:e4:10:58:09:f1:52:0f:94:00:9b:4f:a8:e9:49:3d:88:35:
         d1:40:e4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 14:26:27 2026 by rpki-client