This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
File:                     DflKsHKMejjFDw1hVU1J1lHzOqI.mft (raw, json)
Hash identifier:          Tzayfzf4+SuqDPs3J8G3HMB5YqQ2o4hjWQiKOrZGMWU=
Subject key identifier:   81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF
Authority key identifier: 0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2
Certificate issuer:       /CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
Certificate serial:       0E31
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
Manifest number:          0DCE
Signing time:             Sun 11 Jan 2026 22:13:15 +0000
Manifest this update:     Sun 11 Jan 2026 22:13:15 +0000
Manifest next update:     Tue 13 Jan 2026 22:13:15 +0000
Files and hashes:         1: DflKsHKMejjFDw1hVU1J1lHzOqI.crl (hash: SHchaxTwWYQ3mOsFcgz7wcj6JsCpylfE0ojl6F8BZCo=)
                          2: GZELNOyiVAmLDRR2MW7N8EqLGzE.roa (hash: +EXDQYZC6+0QrGxIPFf4wAysxyAMaPNfctcq9J3KzE0=)
                          3: Iz5tKcDQZYWT7RYRtjtU31bpn1U.roa (hash: UdokJe6o3UAr2iwc7KOVDMq9BMQTJLTIBPmYAE3iizM=)
                          4: Jns9QRoKa1WsqmtDocwMDtdMlT0.roa (hash: uEWgzsrUcLvTRdErDyt4Wd2xyJyx9lowSbRb3k5cKSY=)
                          5: OGy6Nryhc67bLXM5hzr3IRIPEvo.roa (hash: NW//Y5fISaHzjJncfP+fD1Q3i+EyT55jEXflSG250R8=)
                          6: XQN6OxMUcoAGxpGLooiky-tL7gc.roa (hash: KYlnunaZYM8trExSsCQ39CrmyKf/rWIHR1sdiY7IVHE=)
                          7: ejBKtQZTLyrE8vnIU0j-t5mEfXs.roa (hash: M2tdeDZvesGE0AAyqOJ1wnm+0nXVcRNFnYM1zMZ0F6E=)
                          8: f9BkDcTc0Qu7WyPYLc2LkngjCFE.roa (hash: jB+5fmaJQKDYqoyiYqbwVRiRXZtlcUXQIP6LnXyYQY0=)
                          9: fLu6sD6p_HtqeTeRSjHY_HQ9dr4.roa (hash: 6zwT+S23JAwSbfsfFnx6e0nfZI+pAYVSDBgx4gzVQdk=)
                          10: sy-areQ-4siOMM_blCu0RxNQJzA.roa (hash: 0IhdcJ+VJpYWoXAKgo1BqUgbH8152ChHGcRjK7P2cdE=)
                          11: ywiNVIZ1QQ4bfkFXC-tAivsHjzI.roa (hash: Q9oQftJcQcvSuPxuHL/R+AP9rCVRyQWOrSl1DN5ds9g=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Jan 2026 23:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3633 (0xe31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF94AB0728C7A38C50F0D61554D49D651F33AA2
        Validity
            Not Before: Jan 11 22:13:15 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=81FA7E956AB63FA13DCA0C183E633FAB55C931EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:52:76:a2:e8:51:c1:e7:ab:b3:ef:f9:a1:
                    c4:97:2f:e0:e1:62:81:25:88:34:b3:8d:64:08:9d:
                    5d:b4:32:cd:06:05:74:a4:fa:a3:fa:8c:f9:f7:93:
                    7d:86:f8:b3:91:3a:1b:b6:b3:7a:bd:a5:bf:5f:02:
                    f7:76:7a:e5:cf:49:1c:9e:43:2b:a5:5d:bb:9d:9e:
                    1a:53:26:29:5b:f8:e5:64:3e:52:f1:44:74:29:a0:
                    81:fe:b9:16:6a:ff:94:fe:2e:52:57:d7:83:11:36:
                    03:3a:7a:67:a7:c7:58:3c:f7:42:31:14:0f:90:93:
                    60:91:ac:60:06:42:3c:7b:6d:88:df:b4:37:2c:df:
                    1d:90:16:44:ff:5a:6f:28:9e:a6:d1:93:48:b3:34:
                    42:b1:ff:22:86:9a:51:5f:cc:a1:13:e7:fc:78:c2:
                    c8:e7:75:bc:e7:6f:77:0c:07:0d:95:15:bd:90:39:
                    83:f9:e9:0a:3f:32:11:ed:80:d4:ee:d1:80:6d:c7:
                    96:3e:ae:cf:52:bd:b7:51:e9:a4:b2:9e:a0:b0:93:
                    1a:73:37:62:42:ce:67:45:39:53:df:65:eb:55:0d:
                    07:fb:ba:42:66:7d:1a:2d:a2:d7:92:1f:93:9c:85:
                    4c:72:ce:4c:28:5a:b3:7f:38:42:d9:18:39:88:bf:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FA:7E:95:6A:B6:3F:A1:3D:CA:0C:18:3E:63:3F:AB:55:C9:31:EF
            X509v3 Authority Key Identifier:
                keyid:0D:F9:4A:B0:72:8C:7A:38:C5:0F:0D:61:55:4D:49:D6:51:F3:3A:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DflKsHKMejjFDw1hVU1J1lHzOqI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PEGATRON/DflKsHKMejjFDw1hVU1J1lHzOqI.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:2f:16:84:87:0d:ff:c6:62:2f:5d:25:45:40:69:cc:3b:72:
         cd:d3:8a:d4:30:55:b4:c1:aa:78:e1:18:e8:fb:ad:d9:26:c8:
         21:59:1f:b8:50:e6:b5:34:d0:23:e3:c7:31:7b:1b:02:29:8c:
         df:2a:e8:3c:db:6b:2e:bc:f7:76:18:06:d8:0f:2f:ad:e4:d1:
         b2:79:d1:25:82:bd:27:44:22:a4:d2:b2:a0:87:14:e5:07:d2:
         8f:15:b8:23:f8:27:8f:9b:4e:b1:f7:43:ea:ca:3a:5c:2a:15:
         85:00:5f:6c:e9:b4:4f:45:77:54:e1:66:bd:a6:ad:f5:87:1a:
         eb:3a:f3:ca:31:9c:d8:a1:d2:83:0a:b3:fc:df:47:27:74:18:
         a1:4a:35:30:f8:75:ea:6d:ef:26:f8:14:d3:d2:d8:3a:f3:d8:
         78:15:96:82:df:40:bd:3a:43:2b:14:cc:be:61:8c:87:08:3f:
         e1:76:21:88:f4:08:a7:4c:20:f5:45:aa:1a:8e:bd:77:10:46:
         f8:b9:8b:d1:00:b5:a5:13:92:2b:c1:a7:d4:f3:5e:cd:b8:ca:
         c9:56:e3:3f:80:a7:78:69:86:c2:2d:b6:35:0e:81:10:3f:90:
         22:5c:10:ab:dc:44:31:90:18:ca:5c:dc:03:10:c5:d7:23:3f:
         07:79:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 22:11:59 2026 by rpki-client