This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft File: bjmMUswqB52pAUghCshTKMEbvpY.mft (raw, json) Hash identifier: +ErFi1M6mY/G7VKABLr2KbxcyhNo6A94F9n0idaKD6I= Subject key identifier: B1:D9:FB:C3:BC:75:9A:FC:35:59:C3:2E:30:5E:B5:37:DD:FF:15:F5 Authority key identifier: 6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96 Certificate issuer: /CN=6E398C52CC2A079DA90148210AC85328C11BBE96 Certificate serial: 0B4F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft Manifest number: 0B29 Signing time: Sun 14 Dec 2025 10:08:13 +0000 Manifest this update: Sun 14 Dec 2025 10:08:13 +0000 Manifest next update: Tue 16 Dec 2025 10:08:13 +0000 Files and hashes: 1: PjuFv-cHJl1U1NRos7-i5XtJWFI.roa (hash: GKa+NZY1X6D7Aa52E2mtdOgtTWnennJrcxeIgMF3IfY=) 2: WT6gTX3hIzq98DT6oT-twkl40XM.roa (hash: QCAJ/XbvXdIWcwBf6YklJkLxCRD1OR5vhKzhA0rDzGA=) 3: bjmMUswqB52pAUghCshTKMEbvpY.crl (hash: dAYQx9tVmN4A6WNY/GovZ4IFaxu9hngyZNnWQm0fRts=) 4: gNxDmGuc2PEXi9OG_BfHv2_q2sM.roa (hash: 5seE7nbY8E8X+eQ6IkxdxFGQ4ameURjyy29bJ/nfaV0=) 5: vIrTjaJghNUba_yq6tjczw9WShk.roa (hash: /J5D/MO5UJxHznkt5OGnZ5kO6B77uiD/IojhmNsIaMs=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 16:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2895 (0xb4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E398C52CC2A079DA90148210AC85328C11BBE96 Validity Not Before: Dec 14 10:08:13 2025 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=B1D9FBC3BC759AFC3559C32E305EB537DDFF15F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:e9:19:43:8f:21:7f:b1:a0:84:3e:3b:4e: 2d:8d:1b:15:13:2b:34:b2:6c:c7:a0:a4:3d:52:8e: 47:fe:cc:51:4c:57:96:af:64:ee:d7:89:6d:75:d3: ab:79:f2:49:86:b0:7b:17:8c:7f:dc:e0:02:06:65: 58:10:0f:85:51:65:c0:b6:ab:94:2c:41:78:a6:ac: 8b:81:cd:44:92:5e:e6:76:ab:59:a4:49:9e:dd:26: ed:50:2b:04:3a:1f:af:52:74:59:0e:7c:0d:78:ad: 05:57:68:11:e6:df:0b:97:c2:1e:70:21:cb:b9:ca: 35:5b:0c:29:53:5d:c8:5c:c4:83:3f:73:3a:64:bd: 04:50:5e:3e:be:61:43:89:3c:d7:01:e1:1f:b7:c4: cd:75:5f:45:a9:35:2d:88:48:45:41:bb:f6:0e:69: 69:ae:8a:37:00:9c:1e:8b:9a:81:df:d7:c0:c6:d7: 56:59:6b:26:38:4b:a4:d4:8b:01:2b:43:ad:34:bb: 91:d9:59:d2:74:2e:a6:ea:82:a8:cd:7e:0f:5e:ee: 50:3e:1a:22:a1:51:24:a6:71:78:a8:dc:cc:66:d4: 8a:9a:e3:ac:d2:49:06:18:19:63:8d:bf:19:3a:4a: f3:d9:79:c4:a5:4d:b8:85:53:74:79:33:ca:c8:8e: 34:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D9:FB:C3:BC:75:9A:FC:35:59:C3:2E:30:5E:B5:37:DD:FF:15:F5 X509v3 Authority Key Identifier: keyid:6E:39:8C:52:CC:2A:07:9D:A9:01:48:21:0A:C8:53:28:C1:1B:BE:96 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/bjmMUswqB52pAUghCshTKMEbvpY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OPENRICH/bjmMUswqB52pAUghCshTKMEbvpY.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a5:37:e4:03:8e:1d:5e:bf:10:33:94:5c:68:bc:9a:89:01: 28:7f:a6:3c:b3:52:e2:5a:ee:9c:1a:4d:3c:ce:c1:99:69:6d: a5:5b:18:d5:e8:24:27:79:e9:7d:f9:43:c5:27:1c:f3:8e:af: fb:f3:5e:ee:61:de:dc:2a:34:12:c4:18:f2:b4:8d:03:a9:63: ec:e1:3f:17:c8:b9:da:93:70:dc:dc:fb:e3:cb:13:82:66:ec: 9c:4c:59:2c:ac:44:ac:56:25:ad:4c:2a:9f:b1:7f:7b:c5:9b: 5e:0f:60:f8:49:74:7a:ad:02:61:2e:ac:37:08:20:e6:d5:69: 43:53:ad:4b:ec:d7:eb:45:d8:a1:2c:be:06:7e:c7:ad:f2:50: fc:4a:da:ca:23:7d:2f:ae:9f:dd:44:f1:e6:6c:14:bc:c0:24: bd:3a:f0:77:f5:2c:f0:df:f2:6a:cf:c0:21:83:b5:31:32:c4: 9e:42:c6:91:29:13:f6:18:f5:46:1c:09:f7:16:98:e2:9b:fd: 56:56:56:1c:90:9b:6d:2e:c8:a8:85:8d:74:80:ac:4c:89:fc: 00:be:c5:96:cd:4c:e2:27:92:1c:56:e5:2a:80:e2:28:85:6d: 26:b4:b2:7a:4b:17:0e:d3:70:02:ce:95:0d:69:bf:21:f0:c7: b1:b1:02:6e -----BEGIN CERTIFICATE----- MIIE7zCCA9egAwIBAgICC08wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkUz OThDNTJDQzJBMDc5REE5MDE0ODIxMEFDODUzMjhDMTFCQkU5NjAeFw0yNTEyMTQx MDA4MTNaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIxRDlGQkMzQkM3NTlB RkMzNTU5QzMyRTMwNUVCNTM3RERGRjE1RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxmOkZQ48hf7GghD47Ti2NGxUTKzSybMegpD1Sjkf+zFFMV5av ZO7XiW1106t58kmGsHsXjH/c4AIGZVgQD4VRZcC2q5QsQXimrIuBzUSSXuZ2q1mk SZ7dJu1QKwQ6H69SdFkOfA14rQVXaBHm3wuXwh5wIcu5yjVbDClTXchcxIM/czpk vQRQXj6+YUOJPNcB4R+3xM11X0WpNS2ISEVBu/YOaWmuijcAnB6LmoHf18DG11ZZ ayY4S6TUiwErQ600u5HZWdJ0LqbqgqjNfg9e7lA+GiKhUSSmcXio3Mxm1Iqa46zS SQYYGWONvxk6SvPZecSlTbiFU3R5M8rIjjQRAgMBAAGjggILMIICBzAdBgNVHQ4E FgQUsdn7w7x1mvw1WcMuMF61N93/FfUwHwYDVR0jBBgwFoAUbjmMUswqB52pAUgh CshTKMEbvpYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvT1BFTlJJ Q0gvYmptTVVzd3FCNTJwQVVnaENzaFRLTUVidnBZLmNybDBgBggrBgEFBQcBAQRU MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO SUNDQS9iam1NVXN3cUI1MnBBVWdoQ3NoVEtNRWJ2cFkuY2VyMA4GA1UdDwEB/wQE AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9PUEVOUklDSC9iam1NVXN3cUI1MnBB VWdoQ3NoVEtNRWJ2cFkubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu aWMudHcvcnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHaU35AOOHV6/EDOUXGi8mokBKH+mPLNS4lrunBpNPM7BmWltpVsY1egkJ3np fflDxScc846v+/Ne7mHe3Co0EsQY8rSNA6lj7OE/F8i52pNw3Nz748sTgmbsnExZ LKxErFYlrUwqn7F/e8WbXg9g+El0eq0CYS6sNwgg5tVpQ1OtS+zX60XYoSy+Bn7H rfJQ/ErayiN9L66f3UTx5mwUvMAkvTrwd/Us8N/yas/AIYO1MTLEnkLGkSkT9hj1 RhwJ9xaY4pv9VlZWHJCbbS7IqIWNdICsTIn8AL7Fls1M4ieSHFblKoDiKIVtJrSy eksXDtNwAs6VDWm/IfDHsbECbg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:09:09 2025 by rpki-client