This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft
File:                     paasOO5ow2TPeRiPBkJ-nHZtTBo.mft (raw, json)
Hash identifier:          dgFchURW5yYU+KvXVMsGV5u59o8Nl/wn/gpUGhCn0Bo=
Subject key identifier:   33:32:3B:FC:44:4C:8F:10:31:AF:8A:F5:A8:65:57:05:2A:54:31:3D
Authority key identifier: A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
Certificate issuer:       /CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Certificate serial:       037B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft
Manifest number:          0365
Signing time:             Sun 11 Jan 2026 20:13:36 +0000
Manifest this update:     Sun 11 Jan 2026 20:13:36 +0000
Manifest next update:     Tue 13 Jan 2026 20:13:36 +0000
Files and hashes:         1: Qt9atZ3GcC-y3iBsCuaMHsUopwI.roa (hash: LUMGOFfqaa3HagbagohUH6ixJDCnZTF4hbvYcOb/iu4=)
                          2: Z6ycjfuTcBGPJZzYsGzXqbfpoRo.roa (hash: KzPOBIDBX88MEw59F18toZ52VsgESFMtcMEmagXtMcA=)
                          3: bXWQ0rXcaoaHeNvxC-BHcAoiLxY.roa (hash: QRsF3kucUP+OXMuqwL3AiP/lc97FNfrCz9ZSRSQBvSw=)
                          4: jqtTJhcdV-81ChC3Gbo1Af4A6fs.roa (hash: zC3ANtNrrUq/EYkMZgwbMolrgVeo1/t8ESla62SW+so=)
                          5: paasOO5ow2TPeRiPBkJ-nHZtTBo.crl (hash: yTQzp5kl+BXGlcXyg1aOnN6UzJwj1L8NZWJGeOf7jMs=)
                          6: xxdB5TOoAzsa1oSkjoxT3mZ7aWs.roa (hash: UPiW5YYI1M/2XeF4T9kswVLihQKqmykSfxSuMCGaeFc=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Jan 2026 04:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891 (0x37b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
        Validity
            Not Before: Jan 11 20:13:36 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=33323BFC444C8F1031AF8AF5A86557052A54313D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:25:7e:e6:d6:f7:02:0e:63:5d:5c:72:3e:
                    23:11:dc:ee:cf:d2:be:cc:e4:52:09:90:ce:13:51:
                    50:df:b1:6d:d7:2c:8d:a5:6a:82:57:5b:f4:f3:99:
                    80:32:17:48:2f:13:55:cf:55:d3:fd:34:18:f2:21:
                    a5:cf:ff:c3:01:dc:46:db:71:d1:89:77:6d:b8:ba:
                    85:cc:a2:6d:d5:b9:29:e3:19:a8:78:72:16:2e:dd:
                    46:42:96:21:f2:05:14:5d:71:73:18:76:d9:eb:7d:
                    21:60:fd:86:c6:3f:51:8a:49:d2:46:86:9a:13:cd:
                    cd:10:43:98:d0:cb:bc:30:32:31:6b:99:a0:fd:1c:
                    c0:de:3b:a4:85:10:58:c5:76:a4:5a:cd:f2:11:e7:
                    15:69:92:68:a8:91:35:95:bf:af:5b:51:d7:2c:cf:
                    cb:9c:5f:2b:b0:06:98:b2:70:f9:ef:86:9d:70:2a:
                    dc:e5:ae:66:ac:0d:a1:e9:2b:7d:da:cf:2a:39:8f:
                    60:53:3c:75:8c:ce:b6:ca:52:11:af:1d:9b:70:54:
                    98:8e:72:4b:0b:8c:bc:bb:e5:c4:ca:e3:39:35:7e:
                    3b:d5:e0:39:b1:ea:40:40:0e:c8:fb:d4:0b:7a:b5:
                    fe:42:5e:b0:73:a8:af:8d:84:58:71:1b:65:79:3b:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:32:3B:FC:44:4C:8F:10:31:AF:8A:F5:A8:65:57:05:2A:54:31:3D
            X509v3 Authority Key Identifier:
                keyid:A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:c9:50:11:7d:a3:98:c0:01:39:6b:0c:a6:20:b5:0d:3f:
         52:99:d7:96:e8:29:81:49:e4:23:bf:35:a6:e8:5e:d5:86:b4:
         04:21:24:53:63:40:12:6f:22:35:ad:20:ec:74:ff:f2:ce:81:
         bb:2b:aa:57:c4:fd:de:39:c1:42:51:1b:f5:83:2a:3a:c1:1c:
         df:b7:19:8e:0f:47:b5:35:ac:d2:78:08:e9:2d:5c:ce:b2:8b:
         76:5e:de:57:6a:74:da:c8:68:40:ce:d7:76:c7:17:a6:af:32:
         18:1f:38:0c:20:e3:da:7a:13:63:a0:8c:80:5a:26:72:a4:f5:
         0a:90:a0:59:1f:e1:ba:e6:b2:ae:94:cc:ec:b2:c5:6b:31:be:
         69:49:12:8d:d8:d3:93:2c:53:de:5f:56:e3:ee:01:43:9a:38:
         ab:c6:83:c7:b6:df:e7:15:52:d0:d5:cb:16:03:5d:c9:18:7a:
         bf:52:2c:a1:db:96:13:67:24:57:8c:83:43:9f:71:1d:39:ac:
         32:c8:5c:60:d3:6c:31:e9:c4:32:3e:19:c8:1a:a1:82:dc:18:
         eb:d8:fd:21:25:a0:8b:81:0f:2f:b8:fe:14:f5:16:52:64:9d:
         27:9a:83:21:c7:88:f2:dc:f3:0e:26:df:fc:d2:4a:da:82:03:
         9b:07:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 13 03:56:50 2026 by rpki-client