This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/QUEWU/nT9oxyb1myiGMa_zfqTtdrwqnsc.mft
File:                     nT9oxyb1myiGMa_zfqTtdrwqnsc.mft (raw, json)
Hash identifier:          FBLEuHnXNeZ6Qb39jDCTXs0Xjy9imGLKhOYFlmIF9bQ=
Subject key identifier:   05:19:12:B9:25:37:A6:8B:82:86:EE:29:6D:A3:FE:DF:0C:0D:C3:3D
Authority key identifier: 9D:3F:68:C7:26:F5:9B:28:86:31:AF:F3:7E:A4:ED:76:BC:2A:9E:C7
Certificate issuer:       /CN=9D3F68C726F59B288631AFF37EA4ED76BC2A9EC7
Certificate serial:       02A6
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/nT9oxyb1myiGMa_zfqTtdrwqnsc.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/QUEWU/nT9oxyb1myiGMa_zfqTtdrwqnsc.mft
Manifest number:          029A
Signing time:             Tue 09 Dec 2025 22:08:06 +0000
Manifest this update:     Tue 09 Dec 2025 22:08:06 +0000
Manifest next update:     Thu 11 Dec 2025 22:08:06 +0000
Files and hashes:         1: SWI-tqIGu7-4o6GBzcDLrHBBeaU.roa (hash: AB+CMkaSILmoBjprruBWo3DSElFu1bLYpEqsFmT0rfU=)
                          2: nT9oxyb1myiGMa_zfqTtdrwqnsc.crl (hash: DmGs4AyFdBIPNGpZHHCjmQLqIlF7+k+4r7gJyw4ERIo=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/QUEWU/nT9oxyb1myiGMa_zfqTtdrwqnsc.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/QUEWU/nT9oxyb1myiGMa_zfqTtdrwqnsc.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/nT9oxyb1myiGMa_zfqTtdrwqnsc.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 16:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 678 (0x2a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D3F68C726F59B288631AFF37EA4ED76BC2A9EC7
        Validity
            Not Before: Dec  9 22:08:06 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=051912B92537A68B8286EE296DA3FEDF0C0DC33D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b5:df:b5:1d:48:de:b5:16:78:c2:1d:9f:2e:
                    da:de:b7:10:f0:3a:f0:46:89:0f:68:f9:af:c3:77:
                    5c:99:e0:8a:19:b9:62:a3:fe:ea:0a:6b:3b:a1:7d:
                    e3:a3:fa:9e:55:4e:0c:71:6d:85:62:7e:e2:0d:54:
                    15:0e:a6:77:ec:8a:4b:22:18:f3:1b:58:44:1f:53:
                    b6:78:67:79:59:f8:be:b3:b6:4e:93:17:74:ab:0a:
                    c3:48:f9:aa:cd:ba:50:ea:d3:ea:9d:90:62:c2:4d:
                    a7:cb:83:1d:3b:10:b9:7f:a9:ea:90:57:3f:0b:07:
                    f2:0b:c8:3e:c1:ec:6b:88:bf:63:ff:5d:f6:d3:83:
                    0e:39:c9:06:d1:e9:6c:b6:60:1e:d1:2e:e5:c7:45:
                    ae:64:f0:32:75:a4:ac:cc:d7:e7:de:c8:f4:d4:c1:
                    36:29:41:48:fc:5d:90:a8:cc:56:53:fe:a8:6a:d7:
                    f1:a8:1e:98:cc:ee:1b:09:f6:1e:28:5b:be:1d:6d:
                    b4:b8:36:61:3d:cf:b3:29:c6:46:8e:5f:f7:4d:f0:
                    bd:8f:f2:51:27:37:4f:1b:a2:12:fc:7d:f3:cb:88:
                    5c:8e:23:14:be:ad:a7:6c:ef:96:43:64:22:db:6f:
                    ea:e7:de:9e:08:46:46:bb:7e:a0:d9:4e:f3:a1:37:
                    fb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:19:12:B9:25:37:A6:8B:82:86:EE:29:6D:A3:FE:DF:0C:0D:C3:3D
            X509v3 Authority Key Identifier:
                keyid:9D:3F:68:C7:26:F5:9B:28:86:31:AF:F3:7E:A4:ED:76:BC:2A:9E:C7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QUEWU/nT9oxyb1myiGMa_zfqTtdrwqnsc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nT9oxyb1myiGMa_zfqTtdrwqnsc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/QUEWU/nT9oxyb1myiGMa_zfqTtdrwqnsc.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bf:dc:35:ec:fa:c5:bf:b4:43:90:02:ce:6c:18:b3:f3:7e:
         67:3e:2d:1b:d8:7c:5c:45:98:e2:d3:82:6f:63:15:82:c8:07:
         9e:09:21:55:b5:12:62:6d:26:2f:45:cb:b5:9f:98:6d:de:1c:
         36:e5:31:03:3c:53:bd:2c:38:66:1d:06:43:32:3e:cd:bf:4a:
         bb:02:e7:0c:36:a1:93:6c:7e:f8:1d:32:96:e6:be:39:8f:72:
         f7:60:8c:54:c3:01:22:29:8d:3f:d8:c7:2e:af:ce:08:39:35:
         f4:76:5f:0e:4e:cf:c7:4e:cc:6e:38:9f:6d:be:53:e1:d5:15:
         d4:49:69:07:61:2c:3a:d6:19:e2:5f:85:d9:a2:15:0a:08:e5:
         8d:4e:bb:92:89:f7:c8:ef:7d:ab:bc:6e:9a:d7:b9:65:ce:bc:
         b6:40:25:e5:a1:79:47:33:8f:cd:4a:01:b5:a0:81:fb:36:e9:
         ad:56:82:b3:b0:99:a6:c1:e2:13:42:67:36:77:18:96:db:f7:
         a8:49:a1:37:38:bc:8c:30:4c:63:64:35:43:fc:ef:3a:e7:ec:
         97:dd:9c:9a:76:59:6c:0b:eb:bc:51:e0:ba:e0:c0:1a:77:38:
         bf:61:50:b6:9c:ae:cf:be:fe:ca:57:33:f5:cb:b7:75:14:ed:
         86:fe:6d:ae
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICAqYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUQz
RjY4QzcyNkY1OUIyODg2MzFBRkYzN0VBNEVENzZCQzJBOUVDNzAeFw0yNTEyMDky
MjA4MDZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA1MTkxMkI5MjUzN0E2
OEI4Mjg2RUUyOTZEQTNGRURGMEMwREMzM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDktd+1HUjetRZ4wh2fLtretxDwOvBGiQ9o+a/Dd1yZ4IoZuWKj
/uoKazuhfeOj+p5VTgxxbYVifuINVBUOpnfsiksiGPMbWEQfU7Z4Z3lZ+L6ztk6T
F3SrCsNI+arNulDq0+qdkGLCTafLgx07ELl/qeqQVz8LB/ILyD7B7GuIv2P/XfbT
gw45yQbR6Wy2YB7RLuXHRa5k8DJ1pKzM1+feyPTUwTYpQUj8XZCozFZT/qhq1/Go
HpjM7hsJ9h4oW74dbbS4NmE9z7MpxkaOX/dN8L2P8lEnN08bohL8ffPLiFyOIxS+
rads75ZDZCLbb+rn3p4IRka7fqDZTvOhN/tBAgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUBRkSuSU3pouChu4pbaP+3wwNwz0wHwYDVR0jBBgwFoAUnT9oxyb1myiGMa/z
fqTtdrwqnscwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUVVFV1Uv
blQ5b3h5YjFteWlHTWFfemZxVHRkcndxbnNjLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9uVDlveHliMW15aUdNYV96ZnFUdGRyd3Fuc2MuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9RVUVXVS9uVDlveHliMW15aUdNYV96ZnFU
dGRyd3Fuc2MubWZ0MDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUH
AQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7/c
Nez6xb+0Q5ACzmwYs/N+Zz4tG9h8XEWY4tOCb2MVgsgHngkhVbUSYm0mL0XLtZ+Y
bd4cNuUxAzxTvSw4Zh0GQzI+zb9KuwLnDDahk2x++B0ylua+OY9y92CMVMMBIimN
P9jHLq/OCDk19HZfDk7Px07Mbjifbb5T4dUV1ElpB2EsOtYZ4l+F2aIVCgjljU67
kon3yO99q7xumte5Zc68tkAl5aF5RzOPzUoBtaCB+zbprVaCs7CZpsHiE0JnNncY
ltv3qEmhNzi8jDBMY2Q1Q/zvOufsl92cmnZZbAvrvFHguuDAGnc4v2FQtpyuz77+
ylcz9cu3dRTthv5trg==
-----END CERTIFICATE-----
Generated at Wed Dec 10 12:53:42 2025 by rpki-client