$ rpki-client -vvf rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft File: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft (raw, json) Hash identifier: O3EgEWADXg0FPsX6WldRNDcHBOrnok4+wjkc+AlNkF4= Subject key identifier: 7A:3D:3E:9B:76:86:51:CA:F9:E9:03:42:80:2D:F6:43:18:E7:32:A7 Authority key identifier: AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9 Certificate issuer: /CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9 Certificate serial: 02CB4C0472DE0FB888B3BD8B746FE84E9433BD52 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft Manifest number: 69 Signing time: Tue 28 Jul 2026 14:44:11 +0000 Manifest this update: Tue 28 Jul 2026 14:39:11 +0000 Manifest next update: Wed 29 Jul 2026 14:53:11 +0000 Files and hashes: 1: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl (hash: knj0P83ULMYO9AVI8vWogh5Kn3zvwcrOy8+/U/p1lRU=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cb:4c:04:72:de:0f:b8:88:b3:bd:8b:74:6f:e8:4e:94:33:bd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9 Validity Not Before: Jul 28 14:39:11 2026 GMT Not After : Jul 29 14:53:11 2026 GMT Subject: CN=7A3D3E9B768651CAF9E90342802DF64318E732A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:8d:ba:de:77:11:a2:a1:83:84:9e:7e:95: d1:01:b4:df:f2:e5:49:7c:37:2e:84:b5:22:07:a9: 1f:53:62:a1:f5:c7:2e:5c:80:08:d6:2c:0d:a5:a7: d7:7a:6a:49:e0:05:a5:c6:56:f2:14:84:11:91:5f: 7f:4a:5f:42:fe:e0:36:27:09:7e:d7:c3:c3:6f:63: 5a:d4:a3:af:3a:fc:15:d0:c1:65:3f:79:34:ba:74: 49:b7:3e:9a:a4:5b:be:d6:ef:dc:5f:0c:aa:d5:20: d7:b8:f1:22:36:7a:a3:c5:65:75:56:d3:99:0f:3c: 2b:97:dc:ba:7f:88:2e:37:b2:ae:51:ad:c5:86:5e: ff:a1:f3:34:24:80:5a:31:8d:0a:98:3a:e5:a8:bc: 71:c7:83:87:9e:bc:c5:50:2c:7a:75:13:c5:80:6f: 5e:77:e9:3b:42:85:59:a8:d3:3f:f1:43:4d:d0:26: 4f:6c:22:ef:a9:94:c2:a0:60:ea:9c:f8:fb:35:2c: e6:17:82:63:7f:a2:66:a4:3b:2b:6f:8d:76:93:85: 82:09:a0:4f:9f:b8:60:a9:a1:a5:02:84:32:4c:00: 84:c4:56:41:7f:3f:07:b5:4b:e3:38:62:df:ae:d5: fe:6e:5f:ea:f8:e1:f0:b9:3b:46:66:cf:9c:dd:be: ef:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3D:3E:9B:76:86:51:CA:F9:E9:03:42:80:2D:F6:43:18:E7:32:A7 X509v3 Authority Key Identifier: keyid:AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:79:32:cf:ba:09:7e:1b:88:9e:96:c3:e5:94:cd:f2:88:1c: 92:75:53:2d:e5:97:2d:b1:02:6d:40:da:4d:68:33:ce:3a:70: 96:de:b8:c6:4c:0e:37:a8:c4:76:0b:ed:7f:c7:98:16:32:2e: a7:11:f2:72:5e:f8:46:b8:d0:ad:4d:ba:47:04:79:00:30:85: d0:b7:05:09:d6:e5:06:8a:2d:8f:f6:33:05:db:25:0c:f7:68: c7:96:ff:ba:6c:6b:02:be:2e:68:df:da:d4:ea:e3:72:2a:82: 55:1d:ff:98:05:e2:8d:11:88:6f:71:91:18:39:72:10:7d:37: 69:47:71:35:a1:5b:8d:b3:fb:6f:aa:09:4e:88:1d:8f:b5:6b: 02:26:2b:6f:37:c8:bd:5a:66:71:af:af:65:a7:c3:9b:12:bf: 85:09:66:c0:92:45:2d:ac:60:be:6d:9a:2d:52:6f:ae:c5:06: e1:dd:c8:b3:20:09:5f:fc:f9:8e:a1:27:3a:bd:6b:ba:18:0f: 58:f9:32:f3:84:86:8e:26:98:61:f9:98:72:76:2e:a3:3d:6c: 3b:c3:cc:4e:83:d3:b9:97:f3:0e:e8:a7:17:47:43:08:7b:67: 59:cc:54:ac:f0:79:b4:ac:e8:3d:00:41:a5:8b:a2:fe:22:e6: dc:b3:c6:cd -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUAstMBHLeD7iIs72LdG/oTpQzvVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDMTFBODI0RDk5MjNCRTkyMTdCN0REMkVENkNFQzk5 NkRCRkZGOTAeFw0yNjA3MjgxNDM5MTFaFw0yNjA3MjkxNDUzMTFaMDMxMTAvBgNV BAMTKDdBM0QzRTlCNzY4NjUxQ0FGOUU5MDM0MjgwMkRGNjQzMThFNzMyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmno263ncRoqGDhJ5+ldEBtN/y 5Ul8Ny6EtSIHqR9TYqH1xy5cgAjWLA2lp9d6akngBaXGVvIUhBGRX39KX0L+4DYn CX7Xw8NvY1rUo686/BXQwWU/eTS6dEm3PpqkW77W79xfDKrVINe48SI2eqPFZXVW 05kPPCuX3Lp/iC43sq5RrcWGXv+h8zQkgFoxjQqYOuWovHHHg4eevMVQLHp1E8WA b1536TtChVmo0z/xQ03QJk9sIu+plMKgYOqc+Ps1LOYXgmN/omakOytvjXaThYIJ oE+fuGCpoaUChDJMAITEVkF/Pwe1S+M4Yt+u1f5uX+r44fC5O0Zmz5zdvu/HAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUej0+m3aGUcr56QNCgC32QxjnMqcwHwYDVR0j BBgwFoAUr8Eagk2ZI76SF7fdLtbOyZbb//kwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVElO VEVDSC8wL0FGQzExQTgyNEQ5OTIzQkU5MjE3QjdERDJFRDZDRUM5OTZEQkZGRjku Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQUZDMTFBODI0RDk5MjNCRTkyMTdCN0RE MkVENkNFQzk5NkRCRkZGOS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JFU1RJTlRFQ0gvMC9BRkMx MUE4MjREOTkyM0JFOTIxN0I3REQyRUQ2Q0VDOTk2REJGRkY5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA pXkyz7oJfhuInpbD5ZTN8ogcknVTLeWXLbECbUDaTWgzzjpwlt64xkwON6jEdgvt f8eYFjIupxHycl74RrjQrU26RwR5ADCF0LcFCdblBootj/YzBdslDPdox5b/umxr Ar4uaN/a1OrjciqCVR3/mAXijRGIb3GRGDlyEH03aUdxNaFbjbP7b6oJTogdj7Vr AiYrbzfIvVpmca+vZafDmxK/hQlmwJJFLaxgvm2aLVJvrsUG4d3IsyAJX/z5jqEn Or1ruhgPWPky84SGjiaYYfmYcnYuoz1sO8PMToPTuZfzDuinF0dDCHtnWcxUrPB5 tKzoPQBBpYui/iLm3LPGzQ== -----END CERTIFICATE-----Generated at Tue Jul 28 23:59:15 2026 by rpki-client