This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SKYBIRD/JJutAD8a_xE6lQt1-j_ehdrtlmQ.mft
File:                     JJutAD8a_xE6lQt1-j_ehdrtlmQ.mft (raw, json)
Hash identifier:          JuuG7y8rAVi7YGBfpa9c7CKYT6Y3i/wz8TTOGkViMj0=
Subject key identifier:   17:8D:89:C6:D1:A6:EE:D0:4A:C0:17:6D:63:E5:18:B9:5E:FF:71:0E
Authority key identifier: 24:9B:AD:00:3F:1A:FF:11:3A:95:0B:75:FA:3F:DE:85:DA:ED:96:64
Certificate issuer:       /CN=249BAD003F1AFF113A950B75FA3FDE85DAED9664
Certificate serial:       0D59
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/JJutAD8a_xE6lQt1-j_ehdrtlmQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYBIRD/JJutAD8a_xE6lQt1-j_ehdrtlmQ.mft
Manifest number:          0D59
Signing time:             Mon 15 Dec 2025 22:08:28 +0000
Manifest this update:     Mon 15 Dec 2025 22:08:28 +0000
Manifest next update:     Wed 17 Dec 2025 22:08:28 +0000
Files and hashes:         1: JJutAD8a_xE6lQt1-j_ehdrtlmQ.crl (hash: XZuzqOvGpdIno7upRvW26YLGBvBcTVaz4ibHaqe6jZg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYBIRD/JJutAD8a_xE6lQt1-j_ehdrtlmQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYBIRD/JJutAD8a_xE6lQt1-j_ehdrtlmQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/JJutAD8a_xE6lQt1-j_ehdrtlmQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Dec 2025 07:08:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3417 (0xd59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249BAD003F1AFF113A950B75FA3FDE85DAED9664
        Validity
            Not Before: Dec 15 22:08:28 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=178D89C6D1A6EED04AC0176D63E518B95EFF710E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:07:bf:e8:14:bb:8e:b7:33:6e:38:81:6f:c9:
                    ed:5a:b9:f9:87:f4:87:1a:0c:14:ba:de:e6:78:c1:
                    76:51:42:92:2c:8e:2a:1a:5a:8f:67:84:2d:e4:17:
                    69:de:41:2e:6d:3c:82:d5:5d:e5:18:0b:eb:e5:4d:
                    72:1d:ac:73:ad:d1:e0:ea:31:7a:af:ce:24:a1:8b:
                    2d:cd:04:fa:ce:43:51:36:4a:d1:e2:df:04:9d:67:
                    42:47:4e:82:8f:1e:8e:ec:7b:07:ea:6f:db:44:08:
                    3f:49:4a:e2:bb:fb:9f:f3:55:9f:24:80:a9:1d:53:
                    cc:e4:00:a5:8e:c4:30:84:c6:45:21:f5:51:d7:1b:
                    ad:5c:c9:ef:6e:90:61:90:68:c5:45:86:47:63:1d:
                    54:c7:54:49:5d:24:d2:02:4f:53:59:9f:79:9b:99:
                    5f:56:47:7e:5b:d6:8e:ba:a7:93:45:22:10:ed:dc:
                    fa:35:13:75:cc:bf:43:55:31:2e:c0:ef:95:c3:e0:
                    db:82:90:fe:4a:18:1d:90:80:8b:b7:3c:b8:2d:94:
                    7a:0a:82:b9:2b:12:0a:68:6f:b1:ac:e7:16:59:61:
                    fe:d8:8e:a1:2f:6c:e3:3b:2b:44:ce:e6:70:09:70:
                    08:97:fe:a6:8b:e4:75:d0:4f:1a:1b:08:19:21:a5:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8D:89:C6:D1:A6:EE:D0:4A:C0:17:6D:63:E5:18:B9:5E:FF:71:0E
            X509v3 Authority Key Identifier:
                keyid:24:9B:AD:00:3F:1A:FF:11:3A:95:0B:75:FA:3F:DE:85:DA:ED:96:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYBIRD/JJutAD8a_xE6lQt1-j_ehdrtlmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JJutAD8a_xE6lQt1-j_ehdrtlmQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SKYBIRD/JJutAD8a_xE6lQt1-j_ehdrtlmQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:03:72:56:de:75:ad:fc:94:93:9b:7a:99:83:f3:f8:fc:73:
         f7:0c:a3:ff:e9:21:11:82:f9:8b:40:54:e9:32:b9:60:94:0e:
         8d:c5:c5:28:70:66:53:cc:b6:7b:93:e1:3b:65:ac:47:7e:59:
         1e:fd:40:8f:c6:f6:87:8b:9f:81:a6:46:02:ff:28:39:8d:8f:
         2f:33:91:03:78:c8:4e:93:81:4d:44:bb:8d:08:e1:27:2c:b7:
         b0:fb:95:89:1e:13:75:8b:fd:7a:c6:eb:9a:aa:2d:93:cd:45:
         34:cf:4c:6a:c4:65:c8:0d:23:4c:d8:a2:a7:9d:5f:62:53:4e:
         1f:7e:44:4a:0c:a8:38:9a:f2:1d:48:ba:ab:53:64:17:3a:24:
         ea:e0:53:a1:61:70:14:fb:52:11:f6:11:8b:dd:14:13:1b:ce:
         6e:64:7c:7a:d8:74:e3:1a:99:60:4d:33:ec:c4:61:9c:88:f9:
         c0:f6:c5:b8:84:61:da:91:4d:73:ad:d6:9a:eb:bc:7a:a5:7d:
         89:03:4d:3c:01:55:c2:f9:09:46:0e:47:18:42:a8:aa:ce:50:
         b4:8a:f5:29:aa:db:f4:d5:cd:83:28:7f:99:24:f2:20:0b:5c:
         60:ff:ff:fb:d8:e7:48:89:39:27:a4:ea:3f:57:89:35:4d:6b:
         fc:62:e3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 04:41:30 2025 by rpki-client