This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft
File:                     UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft (raw, json)
Hash identifier:          ktsH+9enD9NXMlO6RXnH3GE0kgMNGFa7mWLsQlCsJA0=
Subject key identifier:   EF:E6:B7:BE:95:BF:C8:8D:48:DE:06:3C:6F:83:94:6B:4D:16:3A:22
Authority key identifier: 53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90
Certificate issuer:       /CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990
Certificate serial:       03A5
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft
Manifest number:          039B
Signing time:             Sat 20 Dec 2025 02:07:39 +0000
Manifest this update:     Sat 20 Dec 2025 02:07:39 +0000
Manifest next update:     Mon 22 Dec 2025 02:07:39 +0000
Files and hashes:         1: UyLmGujI3YlT4ea9yWrkgnr8-ZA.crl (hash: ifTczBKvR0Mb6sRImNwdRIB21Gto9MtI6+yzhgos19k=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 06:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990
        Validity
            Not Before: Dec 20 02:07:39 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=EFE6B7BE95BFC88D48DE063C6F83946B4D163A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:91:6b:48:27:a0:e7:c3:2c:f4:20:42:d2:80:
                    22:4d:f5:e2:27:60:d2:01:69:2e:88:69:9a:d9:4d:
                    15:64:fc:58:04:6e:69:c3:24:e9:24:d0:dc:e6:c2:
                    6e:97:1d:2a:69:a7:bd:ff:55:1a:d1:da:97:11:35:
                    d6:2f:7c:69:82:63:e3:54:be:c1:39:8a:40:cd:39:
                    ae:66:61:d5:6c:65:26:d9:e1:9c:00:ab:cd:a0:e0:
                    be:a9:2c:c5:13:31:83:a8:0b:30:4a:73:66:34:80:
                    68:7b:7d:f3:6f:8f:79:db:44:5a:38:6f:1c:a9:23:
                    75:f5:e2:19:2c:70:16:b1:22:c1:e9:56:a2:b8:ad:
                    ac:3c:94:a7:b0:15:32:13:f8:af:07:c1:ed:5e:0e:
                    d2:ee:ed:a6:e5:3a:6c:34:ef:b3:68:d0:ae:7a:ea:
                    81:f9:1a:ef:fe:93:29:b6:f6:1d:e3:94:da:8c:92:
                    9e:fd:cc:8b:da:dc:37:11:e1:8a:06:48:26:b2:f1:
                    5a:7b:12:bc:d2:37:bd:72:b8:26:ac:ac:7f:c3:26:
                    88:d5:15:f4:50:42:31:86:af:e8:6f:d2:33:85:23:
                    40:43:5d:d6:4d:a8:d3:80:bb:c3:45:6b:39:f1:c3:
                    5f:50:5a:9b:8a:67:63:cc:a6:58:db:0e:4d:43:d7:
                    7f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E6:B7:BE:95:BF:C8:8D:48:DE:06:3C:6F:83:94:6B:4D:16:3A:22
            X509v3 Authority Key Identifier:
                keyid:53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5e:3f:4b:dc:1a:b3:7e:47:33:d6:16:0b:4b:01:eb:cb:3a:
         b2:9c:e9:93:f1:de:6b:1b:90:90:5c:94:a0:fe:1a:5c:28:26:
         73:a9:23:5d:90:ff:a3:4d:30:47:02:2c:84:4f:43:af:4d:a2:
         83:38:28:c4:c4:35:d1:4c:55:ce:3a:b3:21:8f:03:93:09:77:
         d6:43:71:c6:d0:c6:fa:92:a9:a3:b2:a0:ca:fe:b1:99:4e:18:
         6e:50:49:a7:ef:88:0d:79:87:bc:98:70:a7:ac:a2:a0:da:bc:
         02:89:27:c7:56:30:fe:cc:1c:ec:1c:18:af:db:df:81:b0:4d:
         5a:dc:ae:47:07:b3:30:e3:60:cc:86:d2:db:e8:67:30:65:1f:
         f8:99:54:ee:ff:d7:d8:3e:6b:9a:2a:bd:3e:3d:e7:ea:c0:b4:
         35:9f:6e:c3:9d:45:91:ec:34:46:42:51:3c:93:b5:7d:8a:9e:
         aa:1e:36:a9:9a:6a:42:de:10:dd:56:a2:9f:6d:14:93:25:e4:
         cd:62:05:bf:16:40:a2:fb:d5:a0:dc:61:a3:17:a3:06:28:c5:
         a7:83:b1:2a:35:a9:40:10:75:c1:c1:87:fc:12:df:a4:4d:bf:
         93:cc:c9:e5:df:e9:10:54:af:70:1f:ec:94:48:34:ee:5d:84:
         cd:62:d5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:15:16 2025 by rpki-client