This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft
File:                     mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft (raw, json)
Hash identifier:          RuQRsbZjBPez7bQLNeZFuTnJvcMG6MhiypN0CFjxdeE=
Subject key identifier:   B1:4F:CA:ED:DE:09:C7:ED:F4:B2:AD:6D:75:B2:10:5C:13:E5:10:DA
Authority key identifier: 99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5
Certificate issuer:       /CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
Certificate serial:       0DD0
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft
Manifest number:          0D98
Signing time:             Mon 15 Dec 2025 22:07:51 +0000
Manifest this update:     Mon 15 Dec 2025 22:07:51 +0000
Manifest next update:     Wed 17 Dec 2025 22:07:51 +0000
Files and hashes:         1: mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl (hash: LlzkeIeQ81ZAlBEQzSMEGW8r3tlW70yUvZf6aEm+3RU=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Dec 2025 06:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3536 (0xdd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993F7280F1F9B65439DD65ADFB68CA0D6C99BEC5
        Validity
            Not Before: Dec 15 22:07:51 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=B14FCAEDDE09C7EDF4B2AD6D75B2105C13E510DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1f:7d:d7:f2:fb:38:76:98:a8:cf:87:5e:96:
                    a4:87:e0:8f:41:48:98:04:bc:be:35:bc:f7:92:9d:
                    e4:0a:e6:f8:a4:64:5a:d6:b3:ca:59:71:9e:cc:36:
                    00:6d:63:4e:48:f9:b4:ea:93:18:84:d1:6b:9d:74:
                    15:c8:71:5a:a6:72:c0:17:fc:21:4d:41:d3:59:25:
                    ce:3a:38:05:ec:ce:1f:16:f6:31:3a:a9:9c:df:d9:
                    95:ae:e7:05:48:77:df:cf:54:7b:d8:14:6e:d6:9a:
                    e7:8e:dc:ce:8b:2e:36:aa:ee:c3:1a:76:25:b1:0b:
                    59:a3:e9:64:77:65:f4:2e:97:22:54:1b:1e:51:99:
                    72:f2:92:59:e0:49:03:48:9f:8b:93:ec:32:f1:1b:
                    b3:c4:92:25:4c:00:e8:8e:87:4f:71:27:15:28:e4:
                    60:cd:f8:cd:ef:a2:30:8e:6b:f5:09:0d:e8:f1:10:
                    55:cf:ca:f3:16:c9:2d:d6:07:cb:d3:b3:e3:f4:38:
                    b3:70:c7:3c:c3:d3:c3:01:9f:72:14:5c:00:7c:a7:
                    27:20:f5:1e:ab:7d:3e:83:78:4b:75:f3:bd:86:90:
                    24:15:90:31:7d:b6:69:2a:ee:c0:ad:cf:5d:17:4d:
                    0b:74:36:1b:c2:4a:c8:1d:c5:91:d7:66:7c:fd:6f:
                    45:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4F:CA:ED:DE:09:C7:ED:F4:B2:AD:6D:75:B2:10:5C:13:E5:10:DA
            X509v3 Authority Key Identifier:
                keyid:99:3F:72:80:F1:F9:B6:54:39:DD:65:AD:FB:68:CA:0D:6C:99:BE:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mT9ygPH5tlQ53WWt-2jKDWyZvsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAKURAHOST/mT9ygPH5tlQ53WWt-2jKDWyZvsU.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:90:bc:53:08:00:71:75:48:38:39:74:32:c3:b0:3e:4f:6a:
         0b:4b:f9:8a:f1:d0:6c:e7:5b:0e:70:11:47:d3:7e:bc:9c:b5:
         42:15:01:5c:f8:03:44:13:87:f2:67:0c:6b:da:61:fd:47:a1:
         81:33:35:fe:36:42:6a:89:c2:b8:20:0a:b1:ad:84:e4:94:4f:
         35:a5:c4:83:a4:24:47:9c:1d:48:49:6d:fd:40:b0:eb:7d:5a:
         7a:24:dc:7b:46:12:32:94:cf:c6:ef:13:87:3f:0e:25:c2:aa:
         68:f6:1d:63:6c:a7:41:db:23:4c:7e:0d:eb:66:59:71:d0:c7:
         d9:8e:87:59:4c:da:c6:99:ab:47:c4:de:75:a0:77:fc:3d:52:
         14:9f:68:74:76:e4:ea:9e:ee:81:16:ee:d2:b4:0c:8b:90:19:
         62:de:bd:63:bc:5e:2f:88:f9:ee:c8:e3:fd:02:66:f3:7f:70:
         8e:bf:0c:22:d7:dd:e5:b9:d5:ba:b8:75:6b:1f:a9:ea:53:5a:
         90:cc:6d:2d:27:97:c3:8e:a3:d8:94:98:0b:f8:b3:ca:de:1a:
         8c:b8:93:ec:d0:f1:83:c7:6e:08:ff:20:f3:58:e1:46:17:93:
         2a:67:8a:46:fc:20:27:c2:6f:4a:1e:4c:35:37:e5:4d:79:33:
         c3:a2:e1:eb
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICDdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTkz
RjcyODBGMUY5QjY1NDM5REQ2NUFERkI2OENBMEQ2Qzk5QkVDNTAeFw0yNTEyMTUy
MjA3NTFaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEIxNEZDQUVEREUwOUM3
RURGNEIyQUQ2RDc1QjIxMDVDMTNFNTEwREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9H33X8vs4dpioz4delqSH4I9BSJgEvL41vPeSneQK5vikZFrW
s8pZcZ7MNgBtY05I+bTqkxiE0WuddBXIcVqmcsAX/CFNQdNZJc46OAXszh8W9jE6
qZzf2ZWu5wVId9/PVHvYFG7WmueO3M6LLjaq7sMadiWxC1mj6WR3ZfQulyJUGx5R
mXLyklngSQNIn4uT7DLxG7PEkiVMAOiOh09xJxUo5GDN+M3vojCOa/UJDejxEFXP
yvMWyS3WB8vTs+P0OLNwxzzD08MBn3IUXAB8pycg9R6rfT6DeEt1872GkCQVkDF9
tmkq7sCtz10XTQt0NhvCSsgdxZHXZnz9b0X9AgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUsU/K7d4Jx+30sq1tdbIQXBPlENowHwYDVR0jBBgwFoAUmT9ygPH5tlQ53WWt
+2jKDWyZvsUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0FLVVJB
SE9TVC9tVDl5Z1BINXRsUTUzV1d0LTJqS0RXeVp2c1UuY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL21UOXlnUEg1dGxRNTNXV3QtMmpLRFd5WnZzVS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1NBS1VSQUhPU1QvbVQ5eWdQSDV0
bFE1M1dXdC0yaktEV3ladnNVLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBANKQvFMIAHF1SDg5dDLDsD5PagtL+Yrx0GznWw5wEUfTfryctUIVAVz4
A0QTh/JnDGvaYf1HoYEzNf42QmqJwrggCrGthOSUTzWlxIOkJEecHUhJbf1AsOt9
Wnok3HtGEjKUz8bvE4c/DiXCqmj2HWNsp0HbI0x+DetmWXHQx9mOh1lM2saZq0fE
3nWgd/w9UhSfaHR25Oqe7oEW7tK0DIuQGWLevWO8Xi+I+e7I4/0CZvN/cI6/DCLX
3eW51bq4dWsfqepTWpDMbS0nl8OOo9iUmAv4s8reGoy4k+zQ8YPHbgj/IPNY4UYX
kypnikb8ICfCb0oeTDU35U15M8Oi4es=
-----END CERTIFICATE-----
Generated at Wed Dec 17 04:19:18 2025 by rpki-client