This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
File: KUthydo1hCdBgvogr4Ym4a6oHzI.mft (raw, json)
Hash identifier: HqcAte3Ekp9sr5hzYFsvKMEvs76DWNwXCZKqsPx+RWM=
Subject key identifier: F9:17:1C:46:A9:29:0B:99:6E:70:83:C2:12:3E:3B:A4:53:2C:4E:BF
Authority key identifier: 29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32
Certificate issuer: /CN=294B61C9DA3584274182FA20AF8626E1AEA81F32
Certificate serial: 0189
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
Manifest number: 0187
Signing time: Sun 21 Dec 2025 00:39:03 +0000
Manifest this update: Sun 21 Dec 2025 00:39:03 +0000
Manifest next update: Sun 21 Dec 2025 06:39:03 +0000
Files and hashes: 1: KUthydo1hCdBgvogr4Ym4a6oHzI.crl (hash: 5Adqu/DOv20D2xajOy0o7hxeT4wru6AZMxIClGhYU/g=)
2: vX2zurKcZq6uHugr79Vj7CluX8U.roa (hash: GdVPCwO2JcoPshr3Z+ad1hPe/GxgIs2qP3IuU8IWvC8=)
3: zyeCTH0u4dPBpS48vPaM1qbh0ZQ.roa (hash: 4WOxoLw0W96yUmxJv3ac7DDaLuuI/40+Ms3ofP7ccYE=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 06:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294B61C9DA3584274182FA20AF8626E1AEA81F32
Validity
Not Before: Dec 21 00:39:03 2025 GMT
Not After : Oct 7 15:30:20 2026 GMT
Subject: CN=F9171C46A9290B996E7083C2123E3BA4532C4EBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:57:1d:e2:25:7a:e7:4c:1b:a5:3d:69:90:
57:e6:08:f1:fe:0f:74:cd:35:79:17:aa:5e:f5:40:
cd:15:26:32:57:c1:20:f8:7f:67:2c:dd:3a:8d:62:
58:52:09:3d:2f:25:b6:68:52:b9:f2:94:86:6e:c8:
3f:14:d5:a8:da:78:ae:c9:30:59:e7:c7:11:30:c3:
1b:e1:26:1e:d2:9b:c3:95:d4:62:d4:06:17:1f:84:
b1:c1:29:a3:d6:9b:7e:2e:b0:bb:b7:39:90:c4:f2:
12:97:2b:24:46:3d:7c:8b:00:6b:dd:42:43:2a:e9:
e9:d4:f9:91:d8:9b:d2:77:19:2b:b7:e9:e9:f9:7c:
20:1a:15:51:da:5a:f7:d6:51:ea:c7:d2:c2:46:c4:
dd:76:42:75:b5:40:ed:04:e1:62:da:89:f5:25:46:
be:6d:50:2e:fd:52:5b:15:6e:a4:1d:03:85:12:cd:
cb:25:45:9a:9b:87:0e:35:c3:e5:49:b5:07:92:d5:
34:3b:ca:8d:36:25:2f:30:fb:b6:88:7b:3e:e2:36:
f2:9d:07:3f:19:31:f7:b5:3f:ac:47:85:a8:04:52:
11:f4:1d:d7:8d:09:54:ce:dd:d5:ea:87:79:8d:4d:
56:c5:fd:6f:29:1d:82:dc:c9:7e:a7:f4:7c:ae:47:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:17:1C:46:A9:29:0B:99:6E:70:83:C2:12:3E:3B:A4:53:2C:4E:BF
X509v3 Authority Key Identifier:
keyid:29:4B:61:C9:DA:35:84:27:41:82:FA:20:AF:86:26:E1:AE:A8:1F:32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KUthydo1hCdBgvogr4Ym4a6oHzI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKGAME/KUthydo1hCdBgvogr4Ym4a6oHzI.mft
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:60:2b:05:25:e9:7c:09:89:1c:a8:1f:46:8e:81:62:10:4c:
d5:4f:d8:b3:e4:2d:c8:dc:32:6f:4c:ff:64:ae:87:bd:d7:d0:
36:87:30:da:85:05:74:ef:70:8e:b3:fe:a8:81:f0:e0:49:c7:
37:a5:90:fd:67:33:4a:14:27:bd:dd:b2:e8:72:97:5a:bd:39:
c2:fd:0d:76:7a:b6:a4:dc:95:2c:3b:da:e3:86:bc:ea:bb:ea:
db:13:05:75:8c:e2:bb:65:b8:86:99:5f:d1:30:81:ed:e9:1f:
01:f3:fe:13:be:04:32:27:ee:60:30:67:ac:4b:78:29:b2:94:
3a:ed:66:73:40:ed:3d:87:64:85:d8:b8:82:ad:57:f5:fd:7c:
74:7d:15:dd:3a:4f:ed:e0:f4:5a:d7:78:b5:ae:5c:01:12:e1:
fe:41:7d:74:56:8b:b5:b1:58:bf:5e:6d:16:03:6b:13:07:1f:
af:a6:f7:93:0d:20:ae:5e:32:5a:ad:07:c7:95:6c:c4:aa:6e:
b5:3e:9d:3a:46:8f:9e:fb:80:c9:7c:30:34:6a:37:64:cf:7a:
47:5c:dc:fb:9f:c5:77:94:78:34:bb:a9:bf:d0:0f:25:88:c2:
20:40:2f:64:9f:46:cc:a8:02:35:18:01:0d:32:22:ce:93:27:
ef:32:07:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:12:42 2025 by rpki-client