This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft File: OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft (raw, json) Hash identifier: TNFAXFxfEyWyaGxC97Mer5O+CO4C2tqjwTD8Md87vmg= Subject key identifier: 47:3B:B5:F3:F7:69:A0:EA:0C:96:E3:67:3D:14:3F:8C:37:D9:68:D0 Authority key identifier: 38:BF:B3:0C:72:CA:95:48:F7:96:CC:3D:4F:B6:00:6B:88:3E:27:01 Certificate issuer: /CN=38BFB30C72CA9548F796CC3D4FB6006B883E2701 Certificate serial: EB Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft Manifest number: E9 Signing time: Fri 19 Dec 2025 08:38:01 +0000 Manifest this update: Fri 19 Dec 2025 08:38:01 +0000 Manifest next update: Fri 19 Dec 2025 14:38:01 +0000 Files and hashes: 1: OL-zDHLKlUj3lsw9T7YAa4g-JwE.crl (hash: mV5bLc5d5lNj2e+wApx83NezaNCt3mBA9gF3jj50E0E=) 2: SLabTJZUnd9dxEvzHYFFrWea9UU.roa (hash: c8h/LrBIXQYnRPMFpRWKge88DSjxLRkfZbFW0lzmsog=) 3: y0It2rSVIUtpZCaFm-g0FOIFWKE.roa (hash: hT1m3KE7RGg7+zcFGlXdugL1MYYVOxzwx6SEZ/67da0=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 14:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38BFB30C72CA9548F796CC3D4FB6006B883E2701 Validity Not Before: Dec 19 08:38:01 2025 GMT Not After : Oct 30 15:30:19 2026 GMT Subject: CN=473BB5F3F769A0EA0C96E3673D143F8C37D968D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:14:a1:8c:fc:46:61:77:08:c2:73:d3:3f: 9e:39:53:fe:5a:dc:d5:ca:28:e9:9a:e1:46:63:da: 4d:43:d7:dc:6c:66:f1:7c:c5:4b:b5:e8:3c:a8:49: 66:3f:8e:13:9c:dd:99:dd:8e:ca:00:74:c4:03:91: ba:6a:66:19:6e:8b:42:93:77:b5:08:d6:0c:bc:73: a8:21:02:98:ed:1b:9a:db:3a:3f:66:cb:a5:2c:9d: 46:ce:a2:9d:0c:38:e3:a2:2c:80:91:e0:92:9a:5e: b6:39:08:08:aa:a9:b4:ca:bf:88:01:e8:65:42:95: df:cb:e3:94:02:23:d9:eb:0f:f8:96:b7:29:4a:58: 94:ba:18:86:77:30:4d:31:d6:90:49:d6:e3:d7:3b: bb:1f:68:84:3b:69:9c:fe:ea:36:59:0f:f0:02:6c: 33:1f:9c:97:f5:16:18:fb:90:12:e6:05:4d:31:6c: 41:1b:7f:35:4f:75:e5:b9:29:97:c5:ea:1f:65:12: 4b:31:39:a6:6d:b2:4e:9a:ed:34:7e:d2:06:2d:df: 79:a7:d8:ee:97:d2:46:3d:38:f8:a8:a9:bf:f1:b2: 5b:2a:71:48:b2:82:01:4b:69:0e:1b:49:b2:22:53: dd:7a:ec:83:63:26:1e:ea:c9:86:5c:6f:96:47:41: 24:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3B:B5:F3:F7:69:A0:EA:0C:96:E3:67:3D:14:3F:8C:37:D9:68:D0 X509v3 Authority Key Identifier: keyid:38:BF:B3:0C:72:CA:95:48:F7:96:CC:3D:4F:B6:00:6B:88:3E:27:01 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OL-zDHLKlUj3lsw9T7YAa4g-JwE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGXI/OL-zDHLKlUj3lsw9T7YAa4g-JwE.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:a1:83:d5:a4:d6:0b:95:7a:d7:aa:24:72:fc:d6:2f:e2:90: 08:da:bb:d4:11:b4:2c:fd:25:f0:bd:c6:ba:6a:bf:17:1e:60: 62:f6:8c:1b:db:34:d7:36:3d:ac:7f:00:f6:8a:ae:d7:df:39: d4:22:37:fa:61:ec:6e:3c:d4:90:7d:76:c8:94:26:34:71:d5: f8:0b:48:08:67:b4:ce:a1:44:ff:3a:38:d4:31:35:d6:0a:d4: d9:e2:fa:58:e4:ee:c0:cb:52:73:c1:a7:b9:a0:c6:9c:b9:2c: a5:0f:77:78:6b:7e:71:72:f0:98:0f:ab:3a:ff:19:c2:67:72: 00:0d:27:fa:6c:6f:c0:0a:d0:a8:2b:c0:e9:f2:a3:64:55:3b: d6:bb:12:cb:59:ff:b1:32:38:1a:78:e2:7f:69:61:95:86:37: 2e:b2:b3:fb:59:57:7b:65:80:4a:60:2f:33:28:9a:70:ba:60: b7:1d:d1:3c:e9:b6:12:17:87:12:6c:64:17:b8:26:b4:3c:a5: dc:05:b9:1d:49:f5:bb:df:e7:3f:11:8a:da:e5:de:b8:3a:7e: 1d:1f:17:d3:3e:54:71:f3:73:c3:bb:00:a4:79:1e:80:df:07: 2f:27:95:2b:f9:86:c7:c7:3d:29:a9:cb:46:9d:3d:04:cb:a5: a3:61:24:36 -----BEGIN CERTIFICATE----- MIIE6zCCA9OgAwIBAgICAOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzhC RkIzMEM3MkNBOTU0OEY3OTZDQzNENEZCNjAwNkI4ODNFMjcwMTAeFw0yNTEyMTkw ODM4MDFaFw0yNjEwMzAxNTMwMTlaMDMxMTAvBgNVBAMTKDQ3M0JCNUYzRjc2OUEw RUEwQzk2RTM2NzNEMTQzRjhDMzdEOTY4RDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDVgBShjPxGYXcIwnPTP545U/5a3NXKKOma4UZj2k1D19xsZvF8 xUu16DyoSWY/jhOc3ZndjsoAdMQDkbpqZhlui0KTd7UI1gy8c6ghApjtG5rbOj9m y6UsnUbOop0MOOOiLICR4JKaXrY5CAiqqbTKv4gB6GVCld/L45QCI9nrD/iWtylK WJS6GIZ3ME0x1pBJ1uPXO7sfaIQ7aZz+6jZZD/ACbDMfnJf1Fhj7kBLmBU0xbEEb fzVPdeW5KZfF6h9lEksxOaZtsk6a7TR+0gYt33mn2O6X0kY9OPioqb/xslsqcUiy ggFLaQ4bSbIiU9167INjJh7qyYZcb5ZHQSQ7AgMBAAGjggIHMIICAzAdBgNVHQ4E FgQURzu18/dpoOoMluNnPRQ/jDfZaNAwHwYDVR0jBBgwFoAUOL+zDHLKlUj3lsw9 T7YAa4g+JwEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1hJ L09MLXpESExLbFVqM2xzdzlUN1lBYTRnLUp3RS5jcmwwYAYIKwYBBQUHAQEEVDBS MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD Q0EvT0wtekRITEtsVWozbHN3OVQ3WUFhNGctSndFLmNlcjAOBgNVHQ8BAf8EBAMC B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj YS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1hJL09MLXpESExLbFVqM2xzdzlU N1lBYTRnLUp3RS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50 dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCS oYPVpNYLlXrXqiRy/NYv4pAI2rvUEbQs/SXwvca6ar8XHmBi9owb2zTXNj2sfwD2 iq7X3znUIjf6YexuPNSQfXbIlCY0cdX4C0gIZ7TOoUT/OjjUMTXWCtTZ4vpY5O7A y1Jzwae5oMacuSylD3d4a35xcvCYD6s6/xnCZ3IADSf6bG/ACtCoK8Dp8qNkVTvW uxLLWf+xMjgaeOJ/aWGVhjcusrP7WVd7ZYBKYC8zKJpwumC3HdE86bYSF4cSbGQX uCa0PKXcBbkdSfW73+c/EYra5d64On4dHxfTPlRx83PDuwCkeR6A3wcvJ5Ur+YbH xz0pqctGnT0Ey6WjYSQ2 -----END CERTIFICATE-----Generated at Fri Dec 19 12:46:46 2025 by rpki-client