$ rpki-client -vvvf rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft File: 4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft (raw, json) Hash identifier: st4zft5gI/LPBwjaQMHnXUYTTDWeQcroAfgKXyOGwDE= Subject key identifier: 49:DD:93:EA:09:B0:7D:0F:40:2A:B9:A0:AF:E0:A8:5C:6B:E5:BA:7C Authority key identifier: 4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 Certificate issuer: /CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Certificate serial: 2E284FAFD6B592FBC750DC535A82737F03F1D15A Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft Manifest number: B4 Signing time: Tue 22 Sep 2026 11:16:28 +0000 Manifest this update: Tue 22 Sep 2026 11:11:28 +0000 Manifest next update: Wed 23 Sep 2026 13:45:28 +0000 Files and hashes: 1: 3130332e362e3132362e302f32332d3332203d3e20313331313439.roa (hash: lHrkC3JHZwSMosCVLrge69PjEFVk3qgvY9qe4jsf15s=) 2: 4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl (hash: 97WxjMQpcjSGqEKliBd++PxkSAMekReZjE/ldWYOqlk=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:28:4f:af:d6:b5:92:fb:c7:50:dc:53:5a:82:73:7f:03:f1:d1:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Validity Not Before: Sep 22 11:11:28 2026 GMT Not After : Sep 23 13:45:28 2026 GMT Subject: CN=49DD93EA09B07D0F402AB9A0AFE0A85C6BE5BA7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cd:2c:bd:91:9b:7d:7f:ea:ae:1c:b0:da:26: 03:2a:36:9d:50:ca:32:21:f1:0e:f3:f5:83:57:00: 82:50:eb:c6:3b:5f:26:8a:d4:06:71:14:fc:7e:b4: f6:0a:a8:b2:9e:b6:eb:96:47:b4:d9:bf:9b:52:b5: f4:63:83:40:b7:29:58:69:d7:2a:ac:c1:73:fb:43: e0:63:c2:9f:52:44:37:7b:d8:b5:77:b0:e6:ff:3e: f7:72:f7:25:51:eb:e1:e3:13:dd:f6:f2:96:03:e2: 35:a4:5e:43:be:67:31:53:df:3f:4e:1f:50:1b:ca: 80:b4:c8:49:5b:7c:a6:d6:3a:c1:47:dc:d3:12:3b: 5f:98:2d:3b:e9:f2:48:8b:72:03:11:04:62:8e:50: 53:d8:f6:35:95:a6:08:5a:29:9b:c9:d0:32:35:c9: 9b:e0:92:9f:c9:d3:75:3e:b1:39:c8:09:9b:ee:95: 08:0c:fa:28:97:13:2a:94:c9:09:97:8b:7e:53:67: 5f:f4:ad:35:f1:26:72:84:cc:86:d7:ad:fa:5c:82: 54:1b:73:b4:fe:68:e7:55:ed:b1:ee:bd:6d:24:2a: 4c:3d:1b:49:9a:cc:31:19:bb:04:c3:ed:1c:30:e8: e9:a0:a8:23:0d:7f:f1:fe:09:56:61:1f:44:74:73: 21:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DD:93:EA:09:B0:7D:0F:40:2A:B9:A0:AF:E0:A8:5C:6B:E5:BA:7C X509v3 Authority Key Identifier: keyid:4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:59:83:7a:11:99:d9:82:1a:c7:1f:61:1a:5d:f2:49:c1:a8: 7f:78:4c:3a:d6:1b:9c:38:8c:c6:03:a7:ef:87:01:2e:a3:98: 2c:d3:00:d1:b3:f8:9a:24:31:a1:ac:6e:41:32:d3:cd:a0:a9: 28:63:55:41:8d:36:54:ce:77:ee:ee:18:a9:51:49:1c:05:4f: dd:7f:18:e5:d6:d7:8e:c1:01:89:a4:aa:be:e9:f2:92:3b:33: ce:fd:8c:c0:f7:52:cc:8b:86:7b:bf:90:5e:94:9f:ef:a7:b8: f0:69:34:94:60:32:f8:7a:50:88:b4:09:a5:9c:a1:35:b2:18: 1b:95:30:64:0f:c7:5b:40:01:49:82:aa:f2:bb:f0:26:38:0f: a8:ae:e9:44:65:11:7b:80:7a:e9:c9:a6:d3:93:96:07:79:f8: 0b:e4:ab:56:59:53:9a:a0:63:54:f2:ff:d0:70:b0:d6:aa:fc: bd:11:b9:e6:dc:85:75:4e:90:00:d6:47:30:cd:5c:db:78:ab: d5:86:f6:37:f5:49:5a:b0:c5:74:96:1a:23:56:a2:7d:97:f1: 6c:97:fc:5b:74:ce:b9:24:18:90:92:fd:33:80:0a:69:6f:d9: 9e:3c:6f:f9:1b:b9:88:bc:b1:fb:f0:ae:49:cf:40:e5:f0:53: 78:b5:ea:bf -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIULihPr9a1kvvHUNxTWoJzfwPx0VowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3 NzM2NDNENTAeFw0yNjA5MjIxMTExMjhaFw0yNjA5MjMxMzQ1MjhaMDMxMTAvBgNV BAMTKDQ5REQ5M0VBMDlCMDdEMEY0MDJBQjlBMEFGRTBBODVDNkJFNUJBN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbzSy9kZt9f+quHLDaJgMqNp1Q yjIh8Q7z9YNXAIJQ68Y7XyaK1AZxFPx+tPYKqLKetuuWR7TZv5tStfRjg0C3KVhp 1yqswXP7Q+Bjwp9SRDd72LV3sOb/Pvdy9yVR6+HjE9328pYD4jWkXkO+ZzFT3z9O H1AbyoC0yElbfKbWOsFH3NMSO1+YLTvp8kiLcgMRBGKOUFPY9jWVpghaKZvJ0DI1 yZvgkp/J03U+sTnICZvulQgM+iiXEyqUyQmXi35TZ1/0rTXxJnKEzIbXrfpcglQb c7T+aOdV7bHuvW0kKkw9G0mazDEZuwTD7Rww6OmgqCMNf/H+CVZhH0R0cyG1AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUSd2T6gmwfQ9AKrmgr+CoXGvlunwwHwYDVR0j BBgwFoAUT7RZXYaX/Rq30hbeB566WXc2Q9UwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJB U0lTLzAvNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNENS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RkI0NTk1RDg2OTdGRDFBQjdEMjE2REUw NzlFQkE1OTc3MzY0M0Q1LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJBU0lTLzAvNEZCNDU5 NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNENS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABRZ g3oRmdmCGscfYRpd8knBqH94TDrWG5w4jMYDp++HAS6jmCzTANGz+JokMaGsbkEy 082gqShjVUGNNlTOd+7uGKlRSRwFT91/GOXW147BAYmkqr7p8pI7M879jMD3UsyL hnu/kF6Un++nuPBpNJRgMvh6UIi0CaWcoTWyGBuVMGQPx1tAAUmCqvK78CY4D6iu 6URlEXuAeunJptOTlgd5+Avkq1ZZU5qgY1Ty/9BwsNaq/L0RuebchXVOkADWRzDN XNt4q9WG9jf1SVqwxXSWGiNWon2X8WyX/Ft0zrkkGJCS/TOACmlv2Z48b/kbuYi8 sfvwrknPQOXwU3i16r8= -----END CERTIFICATE-----Generated at Wed Sep 23 02:46:07 2026 by rpki-client