This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
File:                     AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft (raw, json)
Hash identifier:          Sw5Ox85A3f3LeLeTx2J1umGSucAPi9MyMPBQeRJB37o=
Subject key identifier:   37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Certificate issuer:       /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial:       0EAD
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
Manifest number:          0E11
Signing time:             Sat 10 Jan 2026 11:12:47 +0000
Manifest this update:     Sat 10 Jan 2026 11:12:47 +0000
Manifest next update:     Mon 12 Jan 2026 11:12:47 +0000
Files and hashes:         1: AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl (hash: nv7V2qHipSf7jlE4Yj+hSGGoXvWOctpfOitHaUd3esY=)
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Jan 2026 22:43:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3757 (0xead)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
        Validity
            Not Before: Jan 10 11:12:47 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=372D66D089BD7DDFC0D3FACB220981EDE0C5968D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:a5:83:b4:12:b1:26:3f:09:69:85:93:4f:
                    e3:76:ec:36:6c:ae:7c:2c:a9:40:28:2a:07:a7:c4:
                    8b:01:38:42:c8:0d:ea:c9:84:83:a7:a8:4a:6d:46:
                    c5:19:31:8e:b9:ec:19:d7:af:89:81:99:81:b0:14:
                    2b:9e:14:e4:78:97:c7:40:fc:84:95:21:28:83:6f:
                    bb:bc:b5:ad:37:75:5c:a2:84:c1:b2:00:a2:58:2f:
                    66:1e:18:3e:13:6d:c3:c6:81:30:5c:bf:0c:bf:a0:
                    fd:05:1d:34:f7:cc:c2:ad:6e:34:64:00:98:40:37:
                    01:4f:f1:a5:55:4b:85:5e:44:5a:e5:bd:a8:7c:ec:
                    03:97:f6:68:46:d1:a5:6b:25:a7:26:29:07:69:df:
                    7f:59:4f:d0:0a:a6:16:09:e0:4b:f6:a6:59:51:79:
                    ba:0c:fc:cb:20:b5:55:40:43:b6:12:2c:62:c6:3e:
                    2c:9a:11:6d:b7:da:7f:3d:7f:fb:2c:08:43:4e:37:
                    f9:c8:55:c0:2d:5a:09:8a:08:e4:a6:44:e6:cb:73:
                    6b:f9:95:01:88:4b:7b:92:72:8b:22:7b:3a:b9:b4:
                    67:ff:8c:56:f0:4e:21:07:2c:76:02:7b:2e:d1:0b:
                    ed:8a:d4:36:9f:3f:95:21:5c:bd:36:ba:34:fe:36:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2D:66:D0:89:BD:7D:DF:C0:D3:FA:CB:22:09:81:ED:E0:C5:96:8D
            X509v3 Authority Key Identifier:
                keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:72:7c:0d:c0:6c:28:7f:39:ee:c2:41:5f:f6:cb:6b:17:25:
         58:38:64:e0:bb:9e:d2:c7:84:6b:ca:5b:97:b3:fb:82:3e:d3:
         24:4a:b3:d6:15:e1:15:56:71:e4:be:80:f6:1a:ba:25:10:8e:
         be:b8:76:cf:d0:5c:89:12:1f:58:6c:72:25:97:fb:1f:27:a4:
         0f:6d:f1:b0:5b:74:5d:a8:cf:ee:61:f2:78:a8:55:6f:54:6e:
         b6:8f:b0:1b:90:56:fa:40:a0:4c:86:a5:bb:dc:0d:ee:dd:e0:
         49:75:4d:62:57:e5:35:82:9e:9b:4b:c1:71:76:5f:7f:58:34:
         a8:a4:ab:bf:e0:0d:eb:b2:9b:fc:f0:c9:75:bc:3c:35:bd:73:
         50:67:cd:75:26:af:71:b5:e5:b2:0f:f8:f2:3d:ac:ff:2b:b4:
         09:da:71:b0:68:7d:5c:6b:7f:c4:2d:ec:d4:c1:ce:b7:12:47:
         8e:1b:14:df:b4:f8:63:d9:a7:65:25:ae:11:20:5e:74:55:6e:
         69:f1:39:ef:99:4e:dc:6f:fe:59:82:48:8c:8d:80:f9:63:a4:
         4c:2f:d7:8d:04:2b:d9:9b:8f:1b:44:21:c1:db:44:9b:16:6e:
         46:a7:ff:c7:7e:ef:a2:24:eb:0a:3d:ce:fe:7c:b6:fc:9d:c0:
         50:7a:38:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 20:51:50 2026 by rpki-client