This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft
File:                     3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft (raw, json)
Hash identifier:          n+6yMnvOBE++1RV/Xd9S0dOslCg9HtdeRGnTSTjHKLo=
Subject key identifier:   14:0D:94:13:D8:96:A1:2C:05:A4:53:2F:32:C6:6F:65:F1:0D:B6:A9
Authority key identifier: DC:D4:56:A0:9D:54:14:0D:BC:42:D3:2B:09:D6:E7:77:8B:58:AA:EF
Certificate issuer:       /CN=DCD456A09D54140DBC42D32B09D6E7778B58AAEF
Certificate serial:       0399
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft
Manifest number:          0397
Signing time:             Sun 21 Dec 2025 00:38:26 +0000
Manifest this update:     Sun 21 Dec 2025 00:38:26 +0000
Manifest next update:     Sun 21 Dec 2025 06:38:26 +0000
Files and hashes:         1: 3NRWoJ1UFA28QtMrCdbnd4tYqu8.crl (hash: oXXAGMny4HfttOXQzMZjEtUs6BbYE6PEzwPbCYC0obE=)
                          2: EOtjY12nXNnenB16AIWc3Jh3NF4.roa (hash: Dd6iulKgytlJlVAbqdWg8yiBukB823mXx4bredXWnlI=)
                          3: h3gM3umksJIYEAeAEiPCdJFIFto.roa (hash: P0RBcokTOeWzNU9SKVJvXJAAZk3Gv4yQBEr42Kf75Ew=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 06:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCD456A09D54140DBC42D32B09D6E7778B58AAEF
        Validity
            Not Before: Dec 21 00:38:26 2025 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=140D9413D896A12C05A4532F32C66F65F10DB6A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ff:73:ee:5a:a6:e3:54:27:2b:18:34:ac:07:
                    9a:f9:21:e7:2e:7f:37:1f:4a:b7:05:b9:a0:ef:f3:
                    85:f7:6d:92:2e:9a:e9:57:b8:9a:f1:86:ea:5d:82:
                    6d:48:90:71:57:0b:2c:2a:06:4a:8c:aa:df:bd:ae:
                    9e:9b:78:1b:f1:d0:4f:c1:3a:24:50:d6:19:ed:5b:
                    8d:0b:0c:18:fe:f2:1e:9e:49:a5:c8:ce:fe:b1:4e:
                    7e:98:f6:a9:3f:6b:f2:4d:ee:9e:16:85:48:28:c3:
                    f8:6d:12:a4:7e:17:7d:33:2e:3f:0d:01:6f:4e:52:
                    f7:67:8c:17:1c:46:29:e3:91:6b:14:86:88:64:42:
                    75:7b:a0:47:b7:c6:1e:1c:96:c2:d4:b4:41:f2:73:
                    5a:7f:45:cb:8b:18:1b:ac:c2:51:7f:56:85:d8:3d:
                    b5:a6:dd:d6:94:47:6d:a3:36:c0:62:66:e8:67:27:
                    b8:18:f6:c7:89:51:62:7f:53:af:70:5b:b9:97:ca:
                    41:e0:4b:c1:d6:2a:b2:f2:66:ed:0a:2a:de:de:32:
                    01:d9:b1:e0:a8:7a:27:5a:82:82:ac:1d:dd:99:d8:
                    68:09:58:61:ed:cb:cf:17:de:a6:fc:31:36:be:bf:
                    cf:6f:2b:61:15:a7:cd:78:80:d6:76:26:c3:df:02:
                    e3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0D:94:13:D8:96:A1:2C:05:A4:53:2F:32:C6:6F:65:F1:0D:B6:A9
            X509v3 Authority Key Identifier:
                keyid:DC:D4:56:A0:9D:54:14:0D:BC:42:D3:2B:09:D6:E7:77:8B:58:AA:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3NRWoJ1UFA28QtMrCdbnd4tYqu8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RUIKE/3NRWoJ1UFA28QtMrCdbnd4tYqu8.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:52:88:57:ef:ba:29:d2:e8:d1:cf:4b:42:a6:0a:72:82:40:
         77:01:b9:e3:fe:13:53:6d:23:46:c6:e9:e5:50:c1:cd:14:96:
         53:d3:f8:8a:9a:bc:70:e5:4a:97:66:8b:35:83:64:63:42:86:
         c5:ce:94:3f:b4:a1:f9:5f:a4:e7:2d:59:8e:aa:80:7e:e1:3b:
         2a:e8:34:8e:c9:69:de:8b:1c:0a:44:ba:0e:79:31:03:28:ba:
         c2:e7:af:88:43:15:17:ec:3c:4f:4e:c9:15:4d:29:9c:7d:d3:
         20:3c:66:a8:e6:ad:e9:ff:07:12:c3:9c:7a:3a:74:ed:a5:f5:
         52:e6:4a:01:9b:8f:15:3a:44:fd:05:df:f1:8e:82:53:ac:5f:
         ee:60:ee:85:c9:51:57:29:aa:0f:83:78:46:a5:41:3c:bb:2f:
         02:fd:66:55:fb:d8:a7:43:b2:95:ad:58:ac:6c:60:bf:5a:c7:
         e8:ab:3a:70:8c:00:13:97:19:98:c4:bd:7e:56:b0:e7:ec:45:
         49:05:9e:e9:3d:ec:43:fc:ee:b9:bb:31:54:46:b5:e9:0f:b7:
         55:52:94:87:a4:50:9d:f8:f7:a6:67:dc:ba:5a:8e:4a:c1:4c:
         d6:17:f4:b8:9e:49:f3:86:ae:bc:a0:0e:36:cc:4f:ff:04:e0:
         a2:e1:e7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:13:06 2025 by rpki-client