This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft
File: Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft (raw, json)
Hash identifier: 7IX237BfblXvazzGpP87iJcUFmtNiY5PPzT3Pt3YShA=
Subject key identifier: 16:A0:2E:28:BF:4A:40:F0:FF:09:F6:A3:73:6B:7C:CB:0D:98:A0:53
Authority key identifier: 2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB
Certificate issuer: /CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
Certificate serial: 0A0B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft
Manifest number: 09E8
Signing time: Thu 12 Feb 2026 10:49:49 +0000
Manifest this update: Thu 12 Feb 2026 10:49:49 +0000
Manifest next update: Sat 14 Feb 2026 10:49:49 +0000
Files and hashes: 1: CrW6Cd6ZxDNO9TmgVs_LE9z9Yio.roa (hash: WcHBhdw1aDCQHZvC1UpSrLR7f7Vmp/ID9Izo49GB2Iw=)
2: Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl (hash: /UotVNHrOctkR4VL27S0ZjP+g+YyQW41xM93v687MZI=)
3: VpWpZ3-90SJSDTBHGaCtNhfGcyU.roa (hash: AAP7YYbWtvheXfp1/imtwvmEkzGGM22+c5goFq55I6k=)
4: Z7O67lsGx3aARIFY9eOxvhRCwak.roa (hash: Hs949LOGE5pbIo9H2UFLzIVQo4zVj2WEGxy/5hBDHjA=)
5: gXhzYd6AcN0SBoeS3fYi7wRa6wA.roa (hash: 0qFzULhUi8BdMnWn+w7z2ay/URGQ6gl3EpRtNkDMwSk=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Feb 2026 17:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2571 (0xa0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DEF2B3C3A9A1B53C16C1C70E5511AD5903284FB
Validity
Not Before: Feb 12 10:49:49 2026 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=16A02E28BF4A40F0FF09F6A3736B7CCB0D98A053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:39:97:85:9a:72:94:15:94:82:93:fb:e3:
8d:b1:87:83:b1:5c:39:90:19:88:f6:64:7d:f9:ba:
f8:e7:f6:05:54:95:74:3e:9a:00:9d:ed:e2:ad:c8:
64:50:75:da:71:61:b7:9d:c6:9d:13:f8:29:56:a3:
02:f9:d6:e4:09:c5:5e:92:29:0a:c4:8d:5f:8d:e0:
b2:d8:44:55:8e:86:63:d1:b9:04:2a:1a:f0:56:7a:
4d:d8:85:c9:c3:b2:43:2b:3d:82:03:9a:c4:d6:c4:
38:90:04:a9:ea:d7:0b:b0:a5:1d:1c:c5:83:e5:ce:
6b:29:d7:29:3d:9a:e0:c3:2f:b7:2f:01:a5:a2:b3:
a2:eb:ea:ea:a2:2b:75:f4:76:f1:1b:60:ff:07:70:
1b:48:01:80:93:28:41:41:22:b5:81:46:11:2a:0a:
2f:7e:25:a3:4f:a0:2e:71:48:71:91:eb:bc:a2:eb:
4d:9d:45:6e:49:a7:45:48:b2:80:50:60:9e:4c:5f:
8f:32:f2:d3:10:6d:bb:3e:42:19:f0:49:a9:54:b8:
0c:14:97:b7:96:93:83:fa:f9:a9:4f:16:9f:c3:ba:
a5:fd:4c:ea:ad:24:ed:e1:f7:3b:74:9c:4d:2b:74:
4b:f9:c6:66:8d:5f:d5:6a:dd:a1:7e:2c:17:65:8c:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A0:2E:28:BF:4A:40:F0:FF:09:F6:A3:73:6B:7C:CB:0D:98:A0:53
X509v3 Authority Key Identifier:
keyid:2D:EF:2B:3C:3A:9A:1B:53:C1:6C:1C:70:E5:51:1A:D5:90:32:84:FB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENFOR/Le8rPDqaG1PBbBxw5VEa1ZAyhPs.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:29:92:e4:2f:6e:cb:02:32:60:9e:bc:65:5c:9c:3c:a1:2e:
2d:64:c4:a8:08:84:85:93:c6:bb:01:f4:45:19:1a:0f:e2:4c:
16:e3:bc:f7:fe:21:92:36:53:0c:46:8d:f3:ab:c9:16:91:eb:
2f:1e:a3:9a:ec:5f:4a:d9:dc:7c:20:ba:6a:c6:c7:ae:53:d0:
3a:4c:e1:c5:85:ae:cd:72:ff:1b:8b:0f:78:20:42:9d:ff:e9:
11:5c:7d:43:f5:37:cb:70:a6:7e:b3:e9:33:50:be:50:bf:c9:
60:b1:53:ac:b7:95:05:62:53:4c:71:a5:7b:32:3e:1a:80:d8:
75:b8:ce:93:6c:e9:9f:a1:e1:72:59:d7:77:8f:40:d9:1d:53:
45:87:5e:25:71:e6:2c:29:3f:2d:a1:73:59:a1:ae:a4:ee:3c:
73:b5:23:25:2e:49:3c:c3:fa:7f:d9:cc:fa:ad:3e:cb:50:e3:
ed:dc:5e:0c:54:f0:d1:7f:e0:e9:45:84:a1:10:33:7c:bc:1d:
1b:be:39:25:ad:74:ba:b0:0a:42:93:7f:7d:ea:bf:e3:51:8f:
6c:10:7c:b6:67:e0:2a:6c:d7:2f:d1:b0:70:66:68:a3:94:5f:
ff:ae:09:76:e8:71:f0:05:70:28:5d:3e:e9:0b:42:4d:6d:4a:
33:23:53:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 14:26:27 2026 by rpki-client