This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
File:                     4q-M_ZUnD89cLKZdh3d_b7er_TI.mft (raw, json)
Hash identifier:          Z4rpFL6c9rKKC/ilUxcYvaEuMTDrfRNoIePs6OA6UCA=
Subject key identifier:   5C:6A:C1:CE:6B:B5:0E:99:09:73:8E:73:61:A1:2C:AC:5C:60:03:7B
Authority key identifier: E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32
Certificate issuer:       /CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
Certificate serial:       04AF
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
Manifest number:          049D
Signing time:             Mon 15 Dec 2025 23:38:24 +0000
Manifest this update:     Mon 15 Dec 2025 23:38:24 +0000
Manifest next update:     Wed 17 Dec 2025 23:38:24 +0000
Files and hashes:         1: 4q-M_ZUnD89cLKZdh3d_b7er_TI.crl (hash: HVqK1ArZGpuCSc8X42dA68tkSIVQV7C0xR5Vt91FZ5U=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 06:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AF8CFD95270FCF5C2CA65D87777F6FB7ABFD32
        Validity
            Not Before: Dec 15 23:38:24 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=5C6AC1CE6BB50E9909738E7361A12CAC5C60037B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:6f:cd:62:e4:c0:c0:d6:cf:8a:15:46:04:
                    26:8b:1d:25:3c:5f:32:a7:13:2c:60:b9:c3:dd:55:
                    08:0d:0c:2e:73:fb:9c:e5:f8:eb:c0:11:6c:4d:e0:
                    aa:fc:51:88:83:7c:0f:e1:75:f4:05:5c:9a:bc:0b:
                    bc:53:a1:14:04:0f:be:68:6b:fc:d1:ba:f2:16:f3:
                    10:d1:0f:47:20:72:f8:e2:fb:5f:e9:66:dc:35:a3:
                    b7:94:c3:fa:b3:4c:1d:ee:fb:aa:a2:3d:84:af:cd:
                    ee:df:7b:c0:95:d4:26:e7:f2:a3:1f:3d:16:4e:17:
                    7c:01:b1:45:b7:b7:6a:e4:a3:08:97:77:a0:f8:46:
                    49:09:91:10:f3:3c:f7:f9:ab:57:f5:43:fa:41:ba:
                    00:22:e4:11:d9:ac:eb:e2:67:52:f1:ce:f7:9d:32:
                    3b:a9:73:b4:17:ad:23:04:96:92:09:b5:ff:b1:b9:
                    ed:16:29:e2:6f:d7:34:e2:f7:0d:b9:55:52:06:92:
                    dc:35:0f:68:9b:90:03:e4:10:bf:ec:14:6e:2a:a9:
                    97:dc:5e:f6:66:8a:a5:21:ff:6d:b8:b6:f4:ac:3a:
                    da:9d:d8:d8:82:3e:dc:96:8b:4b:22:94:5e:72:2d:
                    d7:8f:1f:f0:0d:20:e4:98:dd:bb:79:b0:69:12:51:
                    b0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6A:C1:CE:6B:B5:0E:99:09:73:8E:73:61:A1:2C:AC:5C:60:03:7B
            X509v3 Authority Key Identifier:
                keyid:E2:AF:8C:FD:95:27:0F:CF:5C:2C:A6:5D:87:77:7F:6F:B7:AB:FD:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4q-M_ZUnD89cLKZdh3d_b7er_TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RECTALE/4q-M_ZUnD89cLKZdh3d_b7er_TI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:aa:cc:60:10:94:51:06:45:81:8b:fc:20:b0:cb:4c:bc:2d:
         9d:01:4c:b3:30:ad:9b:e5:f5:ef:2a:e0:88:48:1d:17:ce:2b:
         5f:ae:90:e5:57:34:00:cf:5a:1d:ad:3c:7a:11:49:15:ba:b9:
         84:ea:d2:09:06:47:41:4a:79:97:3a:97:26:92:94:45:b3:b7:
         8e:13:3e:6f:d8:13:4a:c9:c6:20:8c:5f:74:f3:d8:bd:61:1f:
         2d:79:a5:87:c7:3b:ee:f9:c5:5b:4e:87:b2:f9:77:e9:41:77:
         98:6d:0e:09:85:ea:6b:74:22:c0:ef:02:94:d6:7c:0f:0d:36:
         ef:a3:6a:97:82:bd:e9:97:91:ad:44:0f:75:2a:00:4c:30:4f:
         51:3b:32:0f:ba:45:ef:05:55:4b:40:ca:96:e0:64:ef:27:91:
         65:f7:40:3e:7d:85:57:40:18:7d:88:a0:0d:5d:63:86:bf:2e:
         1b:ac:bc:52:67:63:2a:00:99:3b:da:10:e8:25:9f:99:84:22:
         e6:e0:bb:9d:26:f3:eb:14:d4:30:34:47:5a:b7:95:05:81:64:
         62:91:b3:5f:14:79:57:b7:d6:fa:9d:15:09:27:96:63:a8:6a:
         9f:fc:3c:e6:92:e9:62:6f:0b:44:b7:4e:6b:bf:ff:a0:ac:fb:
         3c:6c:5f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 04:20:12 2025 by rpki-client