This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft
File:                     m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft (raw, json)
Hash identifier:          +U5Rp5LKkzK7lpF+OohuzkWLt0d+qwwkvXIMl2417qQ=
Subject key identifier:   79:5D:90:5E:77:95:2D:D1:FE:C2:8C:6A:56:DA:1F:DD:CF:1E:0C:6B
Authority key identifier: 9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3
Certificate issuer:       /CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3
Certificate serial:       0368
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft
Manifest number:          0350
Signing time:             Tue 09 Dec 2025 20:07:09 +0000
Manifest this update:     Tue 09 Dec 2025 20:07:09 +0000
Manifest next update:     Thu 11 Dec 2025 20:07:09 +0000
Files and hashes:         1: -1e2AdlZM_kthAXAVDWdyw5ddmQ.roa (hash: grduK08LNWkFZnV7k9CSs49kYkTtuDiPGH3AkPWQvy0=)
                          2: 1FZ9xVPUVQZd3NZxmi3VEnlQsEg.roa (hash: U+TPLK5JTqhFXUtthiNct6dA59hyvG0NSPtNFes7KL0=)
                          3: 4NjTqan12me_p3c4kJ5pASqS4jM.roa (hash: uibqPg6JVeqXPcRIxVkudxh5JGzOD9Rmz0K5VlzMxVQ=)
                          4: HXMq6aoknxTmytxY7RSrHsYpt_g.roa (hash: hJpvy00NLN4dlxIzwmKdDB1poqJMfeou7n0Fuw2imM4=)
                          5: hwPzsGds16UWb86szZaeZXXvQpE.roa (hash: iY4c0DjiGId0Aa15ap0LWbmvwGS4G2BS3tUGBUnNRRw=)
                          6: m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl (hash: TtcJzPeJfRPeGgdMAyeAwxI2p8ImpBUsomGcUfX19x8=)
                          7: q8MZgMWgdtePuCv9114g_FqV6KY.roa (hash: ZPULdz8ciqCZCwIwOw2ZvUgUjQs9WSuMXc4jxCbfUFw=)
                          8: w10Xzm3QnT0ajMLDmBOEIonN8Ro.roa (hash: QYwPy/H598La7J5MB1HqoJS0u7dDO+OJwY1gvU8qT5A=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Dec 2025 12:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872 (0x368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BFCFAA2106742B2C099E3F4C2A50428E5CD62D3
        Validity
            Not Before: Dec  9 20:07:09 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=795D905E77952DD1FEC28C6A56DA1FDDCF1E0C6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:bb:30:78:4f:5e:c4:e7:47:9e:70:1b:2a:
                    d2:fc:24:de:98:60:2f:fc:73:5a:7f:3a:94:74:4a:
                    a8:cf:a5:6c:26:b5:7e:90:27:e3:1f:f5:5e:c4:c3:
                    62:de:e1:c8:07:f8:9f:ed:b9:cc:5c:43:3b:fc:1d:
                    f5:74:12:ab:fe:a6:e9:ec:fb:95:fb:e2:e6:2d:18:
                    71:14:b8:75:36:f1:25:b0:fa:09:4b:89:28:97:fa:
                    34:c0:dc:fb:0f:74:e5:e9:82:e3:e3:3c:b9:44:31:
                    ab:d7:ec:25:43:d4:b4:87:5b:bd:66:de:30:b2:1b:
                    4c:cb:c3:6d:ae:99:12:bc:80:95:46:76:39:e0:59:
                    b1:fb:79:b5:4f:c9:c0:5d:05:a9:4b:e9:48:1c:9c:
                    47:f4:35:81:7c:72:d5:25:5b:9b:ce:c4:2b:1a:a4:
                    6f:d6:90:e1:95:bc:19:b1:3e:00:3e:b2:9e:63:b7:
                    b7:64:68:7c:f8:18:2f:6b:8d:fa:11:7c:82:df:8b:
                    72:7b:1f:9a:fb:7f:17:11:73:42:64:b0:28:70:91:
                    14:ef:48:da:e9:82:6b:93:03:81:48:fc:03:9f:8a:
                    36:2e:de:af:ff:2e:01:1e:e2:60:05:62:b5:c5:a4:
                    3f:8d:d9:fc:77:e5:1c:59:bb:be:67:03:e6:18:d5:
                    95:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5D:90:5E:77:95:2D:D1:FE:C2:8C:6A:56:DA:1F:DD:CF:1E:0C:6B
            X509v3 Authority Key Identifier:
                keyid:9B:FC:FA:A2:10:67:42:B2:C0:99:E3:F4:C2:A5:04:28:E5:CD:62:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/m_z6ohBnQrLAmeP0wqUEKOXNYtM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TECHDRIVEN/m_z6ohBnQrLAmeP0wqUEKOXNYtM.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:19:e7:13:4f:f7:61:dc:22:48:b1:d7:64:0c:56:e8:52:80:
         48:15:55:d5:26:de:aa:b8:ea:42:c8:94:27:66:14:be:e5:b2:
         7a:2e:9f:73:a8:1a:14:b7:f0:53:d0:4c:86:9d:07:82:75:5a:
         f9:9c:aa:2a:cd:4e:8b:17:ff:7d:b4:0d:e3:ae:12:67:7e:b8:
         ec:58:c7:97:ac:5d:f6:39:9c:69:85:96:42:e7:b0:c0:84:a4:
         32:ad:92:68:d0:b7:6a:19:8c:93:ed:dd:75:dc:16:07:33:95:
         46:c0:67:7a:24:b9:1b:7a:07:95:5b:41:8d:bb:68:f8:dc:f8:
         23:12:d9:c5:b6:0e:c5:c7:55:9d:b0:a8:ee:10:19:69:77:5d:
         e4:5d:c3:3e:15:6b:09:6c:c8:04:54:cf:9a:69:db:2f:1b:bd:
         dc:c0:a7:5c:51:30:8d:a0:51:b9:1d:60:69:a1:bb:f1:84:59:
         02:99:05:26:c5:24:22:d2:9c:a6:0b:89:35:d1:b7:9b:b6:62:
         c5:0d:0a:bf:7a:09:03:94:10:51:fa:6e:07:40:56:e8:98:7e:
         a2:b5:13:a1:5c:fe:62:c8:f4:dc:3d:d1:8f:b4:50:80:a4:bb:
         c6:8c:12:f8:b6:30:e7:3c:3d:91:04:3d:02:86:10:45:d6:6e:
         78:48:36:d5
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgICA2gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUJG
Q0ZBQTIxMDY3NDJCMkMwOTlFM0Y0QzJBNTA0MjhFNUNENjJEMzAeFw0yNTEyMDky
MDA3MDlaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDc5NUQ5MDVFNzc5NTJE
RDFGRUMyOEM2QTU2REExRkREQ0YxRTBDNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeObsweE9exOdHnnAbKtL8JN6YYC/8c1p/OpR0SqjPpWwmtX6Q
J+Mf9V7Ew2Le4cgH+J/tucxcQzv8HfV0Eqv+puns+5X74uYtGHEUuHU28SWw+glL
iSiX+jTA3PsPdOXpguPjPLlEMavX7CVD1LSHW71m3jCyG0zLw22umRK8gJVGdjng
WbH7ebVPycBdBalL6UgcnEf0NYF8ctUlW5vOxCsapG/WkOGVvBmxPgA+sp5jt7dk
aHz4GC9rjfoRfILfi3J7H5r7fxcRc0JksChwkRTvSNrpgmuTA4FI/AOfijYu3q//
LgEe4mAFYrXFpD+N2fx35RxZu75nA+YY1ZXPAgMBAAGjggIPMIICCzAdBgNVHQ4E
FgQUeV2QXneVLdH+woxqVtof3c8eDGswHwYDVR0jBBgwFoAUm/z6ohBnQrLAmeP0
wqUEKOXNYtMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg
U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEVDSERS
SVZFTi9tX3o2b2hCblFyTEFtZVAwd3FVRUtPWE5ZdE0uY3JsMGAGCCsGAQUFBwEB
BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U
V05JQ0NBL21fejZvaEJuUXJMQW1lUDB3cVVFS09YTll0TS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y
cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL1RFQ0hEUklWRU4vbV96Nm9oQm5R
ckxBbWVQMHdxVUVLT1hOWXRNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw
LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKEZ5xNP92HcIkix12QMVuhSgEgVVdUm3qq46kLIlCdmFL7lsnoun3Oo
GhS38FPQTIadB4J1WvmcqirNTosX/320DeOuEmd+uOxYx5esXfY5nGmFlkLnsMCE
pDKtkmjQt2oZjJPt3XXcFgczlUbAZ3okuRt6B5VbQY27aPjc+CMS2cW2DsXHVZ2w
qO4QGWl3XeRdwz4VawlsyARUz5pp2y8bvdzAp1xRMI2gUbkdYGmhu/GEWQKZBSbF
JCLSnKYLiTXRt5u2YsUNCr96CQOUEFH6bgdAVuiYfqK1E6Fc/mLI9Nw90Y+0UICk
u8aMEvi2MOc8PZEEPQKGEEXWbnhINtU=
-----END CERTIFICATE-----
Generated at Wed Dec 10 08:57:43 2025 by rpki-client