This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft File: MSKpKSzJMBUq3lolhIwb3EBEyQI.mft (raw, json) Hash identifier: njy6WwrbD6rY1yH++PVKsFg7UfbATjJ1upWMfTo+9M8= Subject key identifier: BE:08:4B:DB:E6:B1:36:B3:03:EC:D5:26:8B:41:05:DF:9E:2A:D2:6A Authority key identifier: 31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 Certificate issuer: /CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Certificate serial: 0565 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft Manifest number: 0546 Signing time: Sun 11 Jan 2026 22:12:36 +0000 Manifest this update: Sun 11 Jan 2026 22:12:36 +0000 Manifest next update: Tue 13 Jan 2026 22:12:36 +0000 Files and hashes: 1: MSKpKSzJMBUq3lolhIwb3EBEyQI.crl (hash: 1Lx+Qf/76WlbTaNFxYa7u4SOo0qZ5x8/qm6w7nlFdyk=) 2: PQ68nzHGmyTC5Bhy25mhL0_ILks.roa (hash: 0NUSC2jDlUeUpRxr3JnbQK1RqGLKoSZxOqc1D/Or8bE=) 3: l49ml1pNcLXoLE0aU5eVkKPlDwg.roa (hash: SuONQBYYGT0ZGE1cV+6soLLpQbiQTqc4oEbjf2kP9e8=) 4: ldnRxhv1yTtmnvKq3-VYpoEOEEI.roa (hash: dGygZN/gcFJPruUdeMfM4AgxkJgEOHZxGG+uNkvJrYQ=) 5: nbl_j7EZZauFWRsZ3nU9uvCOpms.roa (hash: 4uowiLXGxuWX8sm5I/FnQ7T+5hqChjrtuttfTdYXDy0=) 6: p8RSINp3fRwBYdyK1RxpJyAL3Ss.roa (hash: XMRKYHwXJe1W6RwG3sTFdsZiPHKbtdCkaPJ8psi+9KU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Jan 2026 11:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1381 (0x565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3122A9292CC930152ADE5A25848C1BDC4044C902 Validity Not Before: Jan 11 22:12:36 2026 GMT Not After : Aug 22 08:14:28 2026 GMT Subject: CN=BE084BDBE6B136B303ECD5268B4105DF9E2AD26A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:77:a4:70:93:a7:42:98:02:23:a1:cf:87: c2:31:e5:7d:8c:f9:34:2d:9f:fd:17:0f:9c:0e:b2: d7:f9:5c:3d:4b:f6:b4:42:ad:51:84:11:14:ae:0f: e0:4c:65:9f:cc:b8:a1:e4:ba:ea:85:ca:dc:16:2a: f7:11:5b:b7:40:89:5b:de:82:cf:ea:db:01:18:50: 32:11:22:b5:0e:e1:2d:8e:83:4b:98:62:19:05:83: c9:e2:3a:fc:61:8e:97:77:c1:a1:ed:56:2d:51:ba: 5f:0f:41:08:2d:65:48:c9:d3:46:90:c6:9f:47:49: 15:5a:a2:19:b9:18:f2:f1:21:e9:85:27:c9:55:15: eb:0c:fd:46:6c:9e:08:18:9a:c0:33:46:c3:d5:d1: c1:bf:05:55:49:9a:d8:ed:5b:47:3c:d1:f1:c9:b6: 2b:7a:03:c8:2d:14:80:df:fe:c1:e9:bd:bc:f1:92: 63:6e:20:97:16:16:26:24:2f:99:be:67:c3:e4:6c: 1f:f4:80:40:0d:0d:56:a6:1e:53:b3:a7:12:58:c2: a2:83:06:eb:40:dd:78:96:c6:a2:1b:c4:35:68:e5: 13:36:ba:19:b0:84:a6:83:af:da:6a:e6:ea:c8:66: 0b:00:d9:eb:af:63:5f:9b:c4:c8:43:e8:cf:73:c8: b6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:08:4B:DB:E6:B1:36:B3:03:EC:D5:26:8B:41:05:DF:9E:2A:D2:6A X509v3 Authority Key Identifier: keyid:31:22:A9:29:2C:C9:30:15:2A:DE:5A:25:84:8C:1B:DC:40:44:C9:02 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MSKpKSzJMBUq3lolhIwb3EBEyQI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NIMBUSCOM/MSKpKSzJMBUq3lolhIwb3EBEyQI.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:60:dd:f1:c5:ce:a5:69:84:a8:de:80:e6:94:d4:17:c5:ad: 8f:4f:23:85:b4:f1:94:bc:4c:85:89:b4:6e:fe:87:66:50:0f: d8:e7:aa:28:8a:a8:a4:cf:1f:20:ec:47:4c:d2:2e:48:33:33: 08:31:8d:b0:de:2d:0a:be:0a:fe:b4:95:30:30:73:b4:31:cc: 7f:78:f5:51:11:98:71:43:3d:7d:b3:e8:6b:80:df:03:d6:5d: 35:79:6c:46:18:79:1c:03:1f:b3:2f:8e:4a:c2:6d:da:0d:c2: 47:c7:08:f4:32:8d:da:7e:90:08:5c:a0:f7:6d:30:03:af:7e: c2:81:f7:0d:33:1e:62:a2:35:ed:59:5e:63:fe:73:67:b6:7d: 15:c3:8f:b4:72:f1:6c:00:94:88:13:10:df:df:17:b2:f0:1a: f8:0b:4e:84:56:ab:c8:a1:7c:4c:14:6a:47:b1:a2:41:66:ae: 28:da:c4:4f:60:f4:cf:f5:09:08:73:5a:d7:30:13:e0:ad:19: 15:ba:59:32:e9:4e:34:62:e6:f4:29:5a:a5:63:57:1b:ca:f5: 14:53:96:76:c7:67:b6:1c:90:d1:44:15:20:90:2d:ad:21:59: 9b:e0:f9:57:94:bf:70:a3:d5:84:5f:be:0e:96:b0:56:1b:b0: 94:5c:2f:de -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMzEy MkE5MjkyQ0M5MzAxNTJBREU1QTI1ODQ4QzFCREM0MDQ0QzkwMjAeFw0yNjAxMTEy MjEyMzZaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKEJFMDg0QkRCRTZCMTM2 QjMwM0VDRDUyNjhCNDEwNURGOUUyQUQyNkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxe3ekcJOnQpgCI6HPh8Ix5X2M+TQtn/0XD5wOstf5XD1L9rRC rVGEERSuD+BMZZ/MuKHkuuqFytwWKvcRW7dAiVvegs/q2wEYUDIRIrUO4S2Og0uY YhkFg8niOvxhjpd3waHtVi1Rul8PQQgtZUjJ00aQxp9HSRVaohm5GPLxIemFJ8lV FesM/UZsnggYmsAzRsPV0cG/BVVJmtjtW0c80fHJtit6A8gtFIDf/sHpvbzxkmNu IJcWFiYkL5m+Z8PkbB/0gEANDVamHlOzpxJYwqKDButA3XiWxqIbxDVo5RM2uhmw hKaDr9pq5urIZgsA2euvY1+bxMhD6M9zyLa/AgMBAAGjggINMIICCTAdBgNVHQ4E FgQUvghL2+axNrMD7NUmi0EF354q0mowHwYDVR0jBBgwFoAUMSKpKSzJMBUq3lol hIwb3EBEyQIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVT Q09NL01TS3BLU3pKTUJVcTNsb2xoSXdiM0VCRXlRSS5jcmwwYAYIKwYBBQUHAQEE VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX TklDQ0EvTVNLcEtTekpNQlVxM2xvbGhJd2IzRUJFeVFJLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTklNQlVTQ09NL01TS3BLU3pKTUJV cTNsb2xoSXdiM0VCRXlRSS5tZnQwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50 d25pYy50dy9ycmRwL25vdGlmeS54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQApYN3xxc6laYSo3oDmlNQXxa2PTyOFtPGUvEyFibRu/odmUA/Y56ooiqik zx8g7EdM0i5IMzMIMY2w3i0Kvgr+tJUwMHO0Mcx/ePVREZhxQz19s+hrgN8D1l01 eWxGGHkcAx+zL45Kwm3aDcJHxwj0Mo3afpAIXKD3bTADr37CgfcNMx5iojXtWV5j /nNntn0Vw4+0cvFsAJSIExDf3xey8Br4C06EVqvIoXxMFGpHsaJBZq4o2sRPYPTP 9QkIc1rXMBPgrRkVulky6U40Yub0KVqlY1cbyvUUU5Z2x2e2HJDRRBUgkC2tIVmb 4PlXlL9wo9WEX74OlrBWG7CUXC/e -----END CERTIFICATE-----Generated at Mon Jan 12 07:34:21 2026 by rpki-client