$ rpki-client -vvf rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft File: 4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft (raw, json) Hash identifier: BqwdpJYIj/JYQlFpB55HQ9MbKtXtCHycGdDRkq6TuTw= Subject key identifier: CD:35:0D:4C:FF:84:AF:A4:C2:17:16:3A:46:51:F6:EB:52:53:A3:A3 Authority key identifier: 4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 Certificate issuer: /CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Certificate serial: 500E10FBC7DA0D5496DB601DBC2F0043E7926732 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft Manifest number: 6A Signing time: Tue 28 Jul 2026 22:30:02 +0000 Manifest this update: Tue 28 Jul 2026 22:25:02 +0000 Manifest next update: Thu 30 Jul 2026 01:53:02 +0000 Files and hashes: 1: 4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl (hash: dkyQv2PtyECLeh5a/ntbn8WSbOw+bUx0LK/OfhBhNdc=) 2: 3130332e362e3132362e302f32332d3332203d3e20313331313439.roa (hash: lHrkC3JHZwSMosCVLrge69PjEFVk3qgvY9qe4jsf15s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:24:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0e:10:fb:c7:da:0d:54:96:db:60:1d:bc:2f:00:43:e7:92:67:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Validity Not Before: Jul 28 22:25:02 2026 GMT Not After : Jul 30 01:53:02 2026 GMT Subject: CN=CD350D4CFF84AFA4C217163A4651F6EB5253A3A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bc:4c:a8:3a:b1:86:35:e9:98:83:84:eb:25: b1:1a:36:2f:9b:88:eb:69:9d:87:07:4c:3f:62:18: 5a:6d:43:c1:e7:42:7c:bc:eb:7d:d4:24:85:6d:54: e4:77:d6:2e:fa:47:57:50:9e:c6:8c:ff:d3:b2:d4: d4:95:72:f1:0f:50:57:58:84:b5:3c:86:7e:64:cb: 56:70:33:c6:96:bf:ec:cb:ca:ac:b5:33:81:c9:44: f5:0b:2a:41:51:74:a8:b9:aa:e5:9a:e5:65:5a:3b: fa:c0:e7:da:ca:55:c8:37:84:23:e9:1e:6a:ef:fd: 6d:93:b9:5e:81:f4:75:7a:a3:aa:35:5b:4a:d3:6e: ef:7b:d3:5d:74:93:33:b7:98:5e:63:a7:cd:7e:30: e6:ca:a6:ee:6b:32:1e:7b:b3:2b:96:90:24:82:6d: d2:59:23:ab:c0:c8:bd:45:be:d7:e4:77:b8:87:1b: d3:5d:26:c2:c6:02:4b:19:a7:bc:c9:04:ba:84:08: fa:8d:ae:05:27:e3:4e:42:9a:fc:47:58:a9:12:84: 22:31:9d:ec:9b:11:d5:73:91:2a:53:46:ef:a5:ff: e7:f8:2d:15:96:d4:97:da:d6:4f:7f:fd:eb:b8:2b: 32:53:7d:ec:8d:59:b1:6b:b4:24:ef:17:c1:70:23: 2e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:35:0D:4C:FF:84:AF:A4:C2:17:16:3A:46:51:F6:EB:52:53:A3:A3 X509v3 Authority Key Identifier: keyid:4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:25:f5:d1:9a:de:f7:9a:b6:25:d5:79:09:9e:f9:82:cd:a6: d1:46:08:38:a3:1f:e0:9e:85:69:f0:84:ef:00:fa:cc:56:2a: 83:93:9f:b8:c0:cc:0c:3b:ec:57:9d:29:7e:0b:47:05:8d:9c: 66:17:7a:e7:ea:88:1e:1e:87:40:ef:d6:4d:63:26:e2:24:6e: a8:be:34:29:90:48:85:10:e0:f0:b8:83:b4:40:b3:31:31:e6: 94:c9:78:7d:88:2f:bc:2f:1f:55:61:56:98:5c:ef:aa:8a:ed: d0:57:99:b9:c9:6e:65:17:b3:0b:8c:f4:84:93:0c:88:39:ca: 58:00:03:d4:72:9f:d8:ad:3c:51:d6:7e:48:1f:43:9b:db:9c: 52:09:30:96:9e:56:04:ca:b7:fc:13:37:d6:03:8e:3c:c0:ad: 98:bd:2c:eb:22:39:c4:ec:00:b3:18:7c:2b:1e:93:03:64:b4: e6:70:3e:d0:dd:86:56:8e:e8:6b:70:a5:94:65:8e:8f:07:65: 97:69:4c:fe:24:40:99:ae:29:c6:07:9a:99:b3:a5:a8:f8:e5: 72:b9:b7:b5:0a:cf:aa:5f:9c:2f:29:5f:cd:f4:4a:bc:63:cd: 6e:4d:37:1b:02:83:c3:56:95:25:16:46:46:eb:20:2e:1e:a7: 0a:43:b9:50 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUUA4Q+8faDVSW22AdvC8AQ+eSZzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3 NzM2NDNENTAeFw0yNjA3MjgyMjI1MDJaFw0yNjA3MzAwMTUzMDJaMDMxMTAvBgNV BAMTKENEMzUwRDRDRkY4NEFGQTRDMjE3MTYzQTQ2NTFGNkVCNTI1M0EzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJvEyoOrGGNemYg4TrJbEaNi+b iOtpnYcHTD9iGFptQ8HnQny8633UJIVtVOR31i76R1dQnsaM/9Oy1NSVcvEPUFdY hLU8hn5ky1ZwM8aWv+zLyqy1M4HJRPULKkFRdKi5quWa5WVaO/rA59rKVcg3hCPp Hmrv/W2TuV6B9HV6o6o1W0rTbu970110kzO3mF5jp81+MObKpu5rMh57syuWkCSC bdJZI6vAyL1Fvtfkd7iHG9NdJsLGAksZp7zJBLqECPqNrgUn405CmvxHWKkShCIx neybEdVzkSpTRu+l/+f4LRWW1Jfa1k9//eu4KzJTfeyNWbFrtCTvF8FwIy7lAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUzTUNTP+Er6TCFxY6RlH261JTo6MwHwYDVR0j BBgwFoAUT7RZXYaX/Rq30hbeB566WXc2Q9UwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJB U0lTLzAvNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNENS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RkI0NTk1RDg2OTdGRDFBQjdEMjE2REUw NzlFQkE1OTc3MzY0M0Q1LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJBU0lTLzAvNEZCNDU5 NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNENS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADAl 9dGa3veatiXVeQme+YLNptFGCDijH+CehWnwhO8A+sxWKoOTn7jAzAw77FedKX4L RwWNnGYXeufqiB4eh0Dv1k1jJuIkbqi+NCmQSIUQ4PC4g7RAszEx5pTJeH2IL7wv H1VhVphc76qK7dBXmbnJbmUXswuM9ISTDIg5ylgAA9Ryn9itPFHWfkgfQ5vbnFIJ MJaeVgTKt/wTN9YDjjzArZi9LOsiOcTsALMYfCsekwNktOZwPtDdhlaO6GtwpZRl jo8HZZdpTP4kQJmuKcYHmpmzpaj45XK5t7UKz6pfnC8pX830SrxjzW5NNxsCg8NW lSUWRkbrIC4epwpDuVA= -----END CERTIFICATE-----Generated at Wed Jul 29 12:02:37 2026 by rpki-client