This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft
File:                     9aRLXgeIZbrvk1E2nZYda6JVbUc.mft (raw, json)
Hash identifier:          AzU7+5+I7tq1HgNoMH/eh6+1MnUNBCuX8sRbc7GIW9c=
Subject key identifier:   78:C6:26:45:6B:AE:94:BA:36:46:6B:D1:ED:B2:D7:98:BF:FF:01:7C
Authority key identifier: F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47
Certificate issuer:       /CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
Certificate serial:       0333
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft
Manifest number:          0322
Signing time:             Thu 12 Feb 2026 10:51:00 +0000
Manifest this update:     Thu 12 Feb 2026 10:51:00 +0000
Manifest next update:     Sat 14 Feb 2026 10:51:00 +0000
Files and hashes:         1: 9aRLXgeIZbrvk1E2nZYda6JVbUc.crl (hash: CA1sMi17+bMjEdfzLFDyvjzVpLxMxYCGdcI+KlseodQ=)
                          2: Fn_SwMpljpxFXXkEr0N3Tnom6l0.roa (hash: J8NqRwUakfp20kauS9hO5Z6ALEpdTtWVeeb6uoJlqi4=)
                          3: H07fZhQO_Q3aLfPPmvyYIFeRwGw.roa (hash: gJFfn7EGGkpzbinWsWT20Cv8c18u4ouHFdJoO33imR0=)
                          4: dZZ1tLqfRCfsc9yQ3sZh0Ekjhbw.roa (hash: ozHd0L+pcha4PL1xuqajnr/AbCxPZE/RVw2HVfQ6ddk=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A44B5E078865BAEF9351369D961D6BA2556D47
        Validity
            Not Before: Feb 12 10:51:00 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=78C626456BAE94BA36466BD1EDB2D798BFFF017C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d2:a1:96:40:32:ef:af:64:da:c6:70:cd:e5:
                    42:ce:86:f9:47:4a:20:bb:49:3a:e0:39:71:3a:e3:
                    82:0d:d6:09:bf:c6:fa:b6:6e:89:79:fc:ee:b7:0f:
                    73:6b:5b:e8:3e:1e:c6:f9:03:f5:e5:59:ba:8b:2b:
                    b0:13:41:63:52:26:bf:34:d4:ed:13:62:42:8e:9c:
                    0a:ab:de:43:8b:df:92:61:a3:6a:7a:10:02:56:8f:
                    87:27:ca:b9:16:e7:5a:77:c1:89:3b:6f:fa:3c:ab:
                    25:47:5c:ed:7a:86:a0:f0:d4:23:e4:e9:ce:b9:b3:
                    1f:82:98:57:6d:05:51:1a:d9:48:17:79:e7:82:f2:
                    8e:b1:37:76:d4:ad:dd:40:19:0d:fc:8e:ed:2a:a6:
                    37:bb:2b:a8:72:f5:e4:0a:b4:0a:7e:07:12:2b:5c:
                    cb:d7:90:6b:21:4f:73:12:64:dd:ec:40:84:c8:5f:
                    ca:a0:a7:49:09:36:02:ba:d5:d8:67:f8:48:e2:00:
                    54:dc:b8:c1:34:db:01:17:58:a8:8d:03:d2:78:78:
                    06:f8:0f:1a:2b:07:4c:18:23:43:c8:05:89:43:d2:
                    a9:fb:06:3d:35:71:ec:8b:8a:e6:37:7b:bd:52:81:
                    83:3c:e4:39:8f:2f:97:b3:8a:d1:3b:f1:b8:82:76:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C6:26:45:6B:AE:94:BA:36:46:6B:D1:ED:B2:D7:98:BF:FF:01:7C
            X509v3 Authority Key Identifier:
                keyid:F5:A4:4B:5E:07:88:65:BA:EF:93:51:36:9D:96:1D:6B:A2:55:6D:47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/9aRLXgeIZbrvk1E2nZYda6JVbUc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ONEDEGREE/9aRLXgeIZbrvk1E2nZYda6JVbUc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:fa:7e:7f:3e:73:72:bc:7c:3b:8e:6d:e7:e9:6d:d2:eb:49:
         36:aa:a0:96:93:05:3e:2e:50:26:8b:23:9c:e0:a9:3a:51:90:
         cf:7a:f1:ba:cd:08:5e:b1:c6:58:e0:0f:b1:76:00:be:b4:dd:
         6a:b9:d8:b8:f8:a0:20:50:b6:76:fc:61:16:2e:22:b4:65:e3:
         48:07:3f:62:91:fe:46:fa:ac:55:a6:6d:74:15:51:43:ba:31:
         69:a7:97:86:43:89:27:e7:eb:04:f6:dc:de:d0:e2:5d:06:90:
         38:21:d0:cb:6a:43:d3:e3:f0:f0:7a:16:37:98:b1:06:ad:28:
         5d:d4:65:e4:3f:d2:c6:5f:ec:bf:94:15:c8:2d:23:ca:cc:27:
         1c:f1:f4:2b:82:78:b0:66:58:5d:d9:80:05:5a:2f:46:3e:91:
         66:62:22:cb:fe:38:84:bf:b6:7a:71:f8:30:00:09:fa:74:7a:
         75:fc:c8:bc:d4:b3:0a:c9:b8:a0:5a:7f:ce:25:d4:e7:48:b1:
         41:88:ae:ee:87:96:e3:89:dc:ed:97:c9:44:e7:fa:3c:af:37:
         ef:59:30:66:c9:07:a2:72:a2:ac:b3:91:df:db:4b:b4:d1:f3:
         54:b0:e8:b6:27:84:5f:11:45:34:9d:29:e1:6e:cf:1d:68:f0:
         69:35:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 14:28:15 2026 by rpki-client