This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.mft
File:                     eLoo5i-P9kj1tXa0uDo0sBt_Ntg.mft (raw, json)
Hash identifier:          nx/bhU+qsq4j212RGx5oN6KmDYfCHgULx3gdExXhcvE=
Subject key identifier:   CF:71:0E:3B:E8:A1:7B:F5:D9:1E:4A:71:47:DD:12:A4:67:15:77:5B
Authority key identifier: 78:BA:28:E6:2F:8F:F6:48:F5:B5:76:B4:B8:3A:34:B0:1B:7F:36:D8
Certificate issuer:       /CN=78BA28E62F8FF648F5B576B4B83A34B01B7F36D8
Certificate serial:       10
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.mft
Manifest number:          10
Signing time:             Sun 21 Dec 2025 00:39:00 +0000
Manifest this update:     Sun 21 Dec 2025 00:39:00 +0000
Manifest next update:     Sun 21 Dec 2025 06:39:00 +0000
Files and hashes:         1: eLoo5i-P9kj1tXa0uDo0sBt_Ntg.crl (hash: vpa3NkN1ZW+IQHFFaTiQ2dOpCKxv5/PtQ1UXYUCCe/A=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 06:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78BA28E62F8FF648F5B576B4B83A34B01B7F36D8
        Validity
            Not Before: Dec 21 00:39:00 2025 GMT
            Not After : Dec  4 15:30:18 2026 GMT
        Subject: CN=CF710E3BE8A17BF5D91E4A7147DD12A46715775B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:62:eb:67:f6:75:6c:85:05:ca:c5:4a:9d:
                    8f:88:a8:87:78:ee:f9:fe:93:61:b5:7c:45:5e:de:
                    4e:7d:ab:71:a8:d4:bd:bf:61:82:44:4c:47:11:82:
                    f4:28:6b:7e:97:84:d3:5e:10:ea:90:58:23:ef:d7:
                    9f:8d:9e:20:3c:7f:99:88:e4:3a:27:5c:14:2e:47:
                    50:ee:f2:dc:1a:d1:9a:95:81:71:80:59:7d:24:15:
                    ff:03:6f:df:ef:ae:3a:32:c7:63:3c:3c:75:ce:76:
                    50:52:ea:1b:8d:3e:02:3c:e6:14:da:db:6f:18:7a:
                    dc:88:ab:2e:f1:3b:fa:56:2b:70:3c:53:89:9d:91:
                    44:6e:a3:18:45:18:3e:76:b1:61:b1:ac:df:f7:08:
                    ab:3f:6f:58:71:dd:29:c1:13:d6:b5:45:56:34:c9:
                    2d:3a:44:80:67:2b:f3:c8:fc:f5:f6:17:dc:6c:49:
                    f8:7c:36:e2:4a:77:ce:5f:55:a3:fe:5a:8f:73:1d:
                    e3:7d:03:e1:f3:d9:6e:1f:dd:f4:79:23:06:a6:1d:
                    91:ef:c1:0b:bf:11:95:0e:d3:65:ef:91:71:97:80:
                    1d:c3:a5:2e:cf:c4:96:e8:43:8e:df:2f:f1:fd:55:
                    40:f1:b1:e7:73:91:9e:07:99:bd:27:83:8e:dc:7a:
                    a8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:71:0E:3B:E8:A1:7B:F5:D9:1E:4A:71:47:DD:12:A4:67:15:77:5B
            X509v3 Authority Key Identifier:
                keyid:78:BA:28:E6:2F:8F:F6:48:F5:B5:76:B4:B8:3A:34:B0:1B:7F:36:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HCCG_HCEB/eLoo5i-P9kj1tXa0uDo0sBt_Ntg.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:15:fa:e2:bb:d0:ee:26:de:ff:ad:5c:75:70:20:00:6b:
         f1:ca:49:46:b0:53:af:88:24:27:37:98:89:1c:46:ca:2d:0b:
         a6:d4:89:b8:a6:d6:99:78:95:80:d5:80:f3:00:7d:dd:7f:85:
         ee:29:77:bc:d6:5a:47:a5:23:8c:68:45:a7:0b:e5:7d:33:91:
         69:2c:d5:35:45:75:6a:15:18:7d:82:ee:39:7c:5f:97:dc:60:
         77:68:8b:9d:70:f3:60:ba:72:15:35:b7:c6:bd:76:31:b5:0f:
         ba:ec:49:97:fe:dc:3b:62:38:08:56:92:8a:e0:5b:13:8a:b1:
         7b:ee:ee:bf:3c:d2:e5:54:d3:fe:d0:b5:67:16:a3:21:7b:93:
         8f:02:eb:d5:d7:ac:91:3c:7b:9d:99:15:80:d3:65:52:b1:ca:
         74:f2:43:80:cd:5c:41:3a:b9:3b:bf:ea:eb:b7:a9:b3:ae:0a:
         b4:8f:15:5b:a9:a0:e8:6a:f0:2b:dc:d3:c8:22:e6:8d:38:b5:
         df:82:8a:c6:ce:83:38:ca:ed:4d:4f:b0:54:b3:97:4d:6c:7e:
         e0:3e:9e:0e:b9:f4:12:42:99:84:ae:e8:c8:96:09:83:7c:92:
         48:69:bb:e4:f4:6c:05:65:7d:0a:f7:3c:f4:ae:05:f0:83:1b:
         74:43:3d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:03:21 2025 by rpki-client