This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
File:                     rf5uVtr4SS7H3oizqQazE5tVuGQ.mft (raw, json)
Hash identifier:          hGVbwzXwIXyQ22mk3BYWZ/Dw+PwWeIOkWndC2ThmMx8=
Subject key identifier:   88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9
Authority key identifier: AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64
Certificate issuer:       /CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
Certificate serial:       08AA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
Manifest number:          0845
Signing time:             Sat 20 Dec 2025 09:37:50 +0000
Manifest this update:     Sat 20 Dec 2025 09:37:50 +0000
Manifest next update:     Mon 22 Dec 2025 09:37:50 +0000
Files and hashes:         1: 1Jsf49U5f7I4OC2K8Qa36ZXRpIg.roa (hash: OVG6w+cJK2G2Buzrgjp8CFKBGAPrxLkYLf6pXNopTyo=)
                          2: 6IwRDQzie96iExY73oiuEzF4j04.roa (hash: P5nTvPt1qEHdZuQuEfViRE/3XnWprLpspar1lwmKiSQ=)
                          3: N0C3fSWd2C5fGP17YVAOZiuDm8w.roa (hash: 6Js7ux85K9FQfMd/VtHrXw8YY1/vtZUaSQQykn2D3dA=)
                          4: OwV3St-SxcsIzgpvPupGZF1MPb4.roa (hash: RP6R6k5ayPw/CKqUEyD3J0aaVXhf06X61azaX6QlA04=)
                          5: QlGaKgkMqYIfMM6zxAuzYDXHYjI.roa (hash: e2THAPExERdJeWKQN6zMaTMoX3zQT/hm9mmBElF0si8=)
                          6: RIV6PgWMJkJlUBTyjCvNjrEjQrQ.roa (hash: /c6CnGCYp3uDqy903NYKQ8azcI+NYy29gMAjI7Y7e5I=)
                          7: SODljBvIsuVG8-dB_kPkAdal4mw.roa (hash: Lws+6zI70GEyAa30X88eKudJPtlyPDJRxhQAi75bh8o=)
                          8: W6RJXfP1E9Ch09w7g0-NxD5wYMM.roa (hash: grOi09L0ObBUSuyDskSQvV+0LfLAnGL65Sx8UXUAqew=)
                          9: njXiHQM2YoNEf_GnjLKJCq--2lg.roa (hash: 4d3J5uAMcboHXzfCzXkyM2AWOOU2igqi0vMbvE4RvjY=)
                          10: rf5uVtr4SS7H3oizqQazE5tVuGQ.crl (hash: tmSJfqzibdcNge3+E7TWP+unYAjIk4tvrpzq+9qA7DA=)
                          11: s2omCCvZxbfNVxc23FBznFWKQec.roa (hash: AFawhO2vhOzkylH/qGiObuVfHB1AJ/ESSw/EFGgnxRQ=)
                          12: ue8ObbvhrPR9k0_3_F1w0o356Fk.roa (hash: FcDDAfkU5IpDDCnf7d+sMXWWLEzheC1DKOywSCLIFBg=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Dec 2025 21:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2218 (0x8aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFE6E56DAF8492EC7DE88B3A906B3139B55B864
        Validity
            Not Before: Dec 20 09:37:50 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=8854C401A81FA535EF84FCFF6D06C5F99F64EEF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:1a:e9:4e:9f:e7:ed:30:87:19:fe:94:0e:
                    71:c2:dd:a0:b0:a2:52:3e:71:b9:2b:4a:0d:fc:88:
                    6e:aa:92:1b:5e:d7:5e:10:57:37:85:9d:f5:0c:ef:
                    14:d1:25:42:70:8e:ee:6a:87:f8:20:85:4f:58:31:
                    31:e4:87:18:67:09:2b:ae:8e:f0:69:d3:7d:0a:5b:
                    bd:92:89:e2:40:f2:68:bf:c7:b7:bb:4b:18:7e:24:
                    7a:24:19:4f:80:95:56:c3:be:d3:e9:96:40:6f:46:
                    7b:61:09:87:c0:1d:5a:03:32:b7:a5:76:4a:6f:b4:
                    f7:b8:52:01:63:6f:2c:e3:67:a8:7c:13:1f:37:66:
                    de:c5:9d:9d:89:d8:02:04:a0:fd:e2:19:cf:c9:dd:
                    d5:5b:84:b0:c9:4f:b2:59:25:e1:36:4b:0b:f8:16:
                    2f:55:9d:6e:c2:74:a8:6b:f5:95:98:f2:d1:11:0d:
                    d5:9a:0a:42:fd:fa:3c:b2:fd:7f:a9:28:86:6a:4d:
                    35:29:c2:c1:b0:cf:70:b8:e3:53:02:c7:72:23:02:
                    0c:16:3a:9f:a1:cd:ea:4b:22:d8:b3:44:5b:1d:21:
                    a6:55:ab:52:bf:97:5e:02:f3:75:8d:76:d2:bb:1b:
                    7f:67:0c:8e:e2:04:37:7a:06:98:80:4e:15:7d:4c:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:54:C4:01:A8:1F:A5:35:EF:84:FC:FF:6D:06:C5:F9:9F:64:EE:F9
            X509v3 Authority Key Identifier:
                keyid:AD:FE:6E:56:DA:F8:49:2E:C7:DE:88:B3:A9:06:B3:13:9B:55:B8:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/rf5uVtr4SS7H3oizqQazE5tVuGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGYITEA/rf5uVtr4SS7H3oizqQazE5tVuGQ.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7b:e6:6c:17:f9:f4:ab:fd:1d:f7:7e:bc:5a:5b:83:41:a0:
         e2:91:00:e2:00:cb:d7:6f:11:98:72:f7:ca:97:eb:70:4a:b2:
         2b:fa:d5:2f:df:ac:28:ac:c4:01:6b:5f:17:19:95:63:8a:45:
         d7:67:7e:a0:fc:2f:06:df:a9:99:f1:a1:a2:5a:0f:63:b4:a9:
         e8:ec:85:8c:4a:fc:67:27:7e:db:52:0a:bc:56:32:ed:19:81:
         a7:08:41:03:87:b4:fd:5f:0f:be:b4:79:8a:11:2b:54:7d:28:
         60:b9:89:a5:12:e3:2e:7b:f8:24:ca:a4:59:88:a9:c7:ec:54:
         ea:bf:99:99:fe:0b:42:81:fb:c6:26:0d:87:30:6f:1d:2d:28:
         5a:1c:d1:2b:12:9f:d9:6e:00:74:ff:82:71:12:9d:3b:b3:d1:
         ed:d1:5b:bd:44:75:66:01:87:46:83:89:71:2f:08:70:cb:2c:
         aa:8e:d1:e4:5f:d1:9a:2e:70:ed:c1:85:03:f5:d6:7f:76:f7:
         c8:2c:cc:6f:de:d8:87:86:12:85:4c:cc:6b:59:c0:d5:4e:16:
         a0:f1:d3:11:31:05:b3:7f:8a:0a:45:2a:41:4e:3a:f0:f4:bf:
         94:d3:5b:56:c4:4c:60:64:65:20:f2:e5:b7:f0:09:e1:5a:c3:
         98:d2:18:fd
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgICCKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQURG
RTZFNTZEQUY4NDkyRUM3REU4OEIzQTkwNkIzMTM5QjU1Qjg2NDAeFw0yNTEyMjAw
OTM3NTBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDg4NTRDNDAxQTgxRkE1
MzVFRjg0RkNGRjZEMDZDNUY5OUY2NEVFRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr3xrpTp/n7TCHGf6UDnHC3aCwolI+cbkrSg38iG6qkhte114Q
VzeFnfUM7xTRJUJwju5qh/gghU9YMTHkhxhnCSuujvBp030KW72SieJA8mi/x7e7
Sxh+JHokGU+AlVbDvtPplkBvRnthCYfAHVoDMreldkpvtPe4UgFjbyzjZ6h8Ex83
Zt7FnZ2J2AIEoP3iGc/J3dVbhLDJT7JZJeE2Swv4Fi9VnW7CdKhr9ZWY8tERDdWa
CkL9+jyy/X+pKIZqTTUpwsGwz3C441MCx3IjAgwWOp+hzepLItizRFsdIaZVq1K/
l14C83WNdtK7G39nDI7iBDd6BpiAThV9TGHPAgMBAAGjggINMIICCTAdBgNVHQ4E
FgQUiFTEAagfpTXvhPz/bQbF+Z9k7vkwHwYDVR0jBBgwFoAUrf5uVtr4SS7H3oiz
qQazE5tVuGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJ
VEVBL3JmNXVWdHI0U1M3SDNvaXpxUWF6RTV0VnVHUS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvcmY1dVZ0cjRTUzdIM29penFRYXpFNXRWdUdRLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR1lJVEVBL3JmNXVWdHI0U1M3
SDNvaXpxUWF6RTV0VnVHUS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQAae+ZsF/n0q/0d9368WluDQaDikQDiAMvXbxGYcvfKl+twSrIr+tUv36wo
rMQBa18XGZVjikXXZ36g/C8G36mZ8aGiWg9jtKno7IWMSvxnJ37bUgq8VjLtGYGn
CEEDh7T9Xw++tHmKEStUfShguYmlEuMue/gkyqRZiKnH7FTqv5mZ/gtCgfvGJg2H
MG8dLShaHNErEp/ZbgB0/4JxEp07s9Ht0Vu9RHVmAYdGg4lxLwhwyyyqjtHkX9Ga
LnDtwYUD9dZ/dvfILMxv3tiHhhKFTMxrWcDVThag8dMRMQWzf4oKRSpBTjrw9L+U
01tWxExgZGUg8uW38AnhWsOY0hj9
-----END CERTIFICATE-----
Generated at Sat Dec 20 20:58:08 2025 by rpki-client