$ rpki-client -vvvf rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft File: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft (raw, json) Hash identifier: 7jklor49ImpPwgZw1165Rk6Gvwdp4mVJVKQYWVv7fWo= Subject key identifier: 6F:36:C2:72:5C:2E:7C:3D:1F:B2:D9:EB:FA:2B:40:06:29:98:6E:87 Authority key identifier: AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9 Certificate issuer: /CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9 Certificate serial: 0DDAF97AB5227DF5EEC6491148D85F14D0C00CE9 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft Manifest number: B2 Signing time: Mon 21 Sep 2026 19:42:02 +0000 Manifest this update: Mon 21 Sep 2026 19:37:02 +0000 Manifest next update: Tue 22 Sep 2026 22:59:02 +0000 Files and hashes: 1: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl (hash: uCe7e+dClB4cInHRVIssPi2pkqpbYhC6R6uG2ocyCHc=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:da:f9:7a:b5:22:7d:f5:ee:c6:49:11:48:d8:5f:14:d0:c0:0c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9 Validity Not Before: Sep 21 19:37:02 2026 GMT Not After : Sep 22 22:59:02 2026 GMT Subject: CN=6F36C2725C2E7C3D1FB2D9EBFA2B400629986E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:98:c1:ee:76:3d:c2:aa:53:ec:93:92:20:fc: d3:ea:36:94:d4:65:e9:08:2d:b5:82:27:53:11:5e: f8:4a:72:62:63:4b:19:b1:e8:b0:5b:0a:3e:f8:e9: 4a:32:22:c8:cb:9a:47:06:9c:a6:4f:86:f3:5b:d2: 0f:26:1a:5f:dd:f2:82:65:6d:e7:13:12:01:95:97: 9d:5d:e3:d7:d2:91:fe:0d:f3:6f:d2:46:fe:39:94: 35:fe:01:55:ae:db:a3:67:1a:20:9c:34:fb:f0:f9: 6c:38:75:2d:7f:a1:df:cf:e4:50:37:ae:e5:06:a2: 35:f6:45:8d:79:19:df:d1:7d:1d:84:a5:fd:fb:e9: 30:e3:12:7b:f6:81:b1:7f:bb:e3:f7:52:28:e6:32: 14:36:91:8f:7b:d3:14:5c:1e:59:ea:ef:2e:99:11: 76:7b:0f:1c:e3:4c:16:e7:9f:92:e1:8a:80:b3:f5: 63:b3:83:c8:05:e1:c0:7e:f6:12:41:bb:e6:bc:03: 0e:2a:b8:f3:db:2f:a5:66:43:31:a5:24:e6:03:61: 45:c1:80:6e:e5:cd:89:2a:70:38:85:6e:b1:ab:79: fb:6f:22:28:7a:42:81:93:17:3a:ca:fd:d2:6d:29: 06:61:b4:70:3f:b2:0e:00:b5:62:55:b9:75:3c:33: 64:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:36:C2:72:5C:2E:7C:3D:1F:B2:D9:EB:FA:2B:40:06:29:98:6E:87 X509v3 Authority Key Identifier: keyid:AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:6d:ab:8d:cf:46:e9:08:50:7d:d5:3c:1f:15:5b:81:9e:06: 20:9c:4c:9d:f3:bb:c1:d7:b6:3e:a9:cd:99:5a:15:cf:a0:ca: 29:ef:02:8a:56:94:d6:fd:30:15:56:e8:c4:48:22:77:4e:d3: 56:ae:d5:3b:69:e9:11:45:5e:a5:b8:97:02:e1:3a:17:61:c4: fd:3c:31:2f:69:18:b4:5a:5a:9f:09:1b:24:5e:e1:34:82:c3: 40:3b:5c:3c:99:71:45:40:fa:4b:f2:e5:ca:06:b7:16:44:30: eb:0c:a7:0f:dc:33:59:0e:b0:23:cb:1a:cd:6b:89:a4:35:61: be:50:7c:9d:52:8f:8d:78:b2:a8:38:d4:6e:47:30:49:cb:c1: d2:73:7b:76:00:b9:25:af:3b:5c:6a:c1:0d:c5:50:f9:c8:68: da:d4:b8:de:12:30:90:57:20:89:f4:ac:bc:cf:c9:b3:2e:81: f1:69:a6:5e:e0:9d:8b:bc:e3:2f:fe:15:3e:c4:7a:be:92:7c: d7:6a:50:02:f7:11:8f:3f:7c:26:74:3e:c7:c3:8f:68:a8:b6: af:f8:50:37:19:cb:fa:22:11:89:54:3e:66:46:bd:54:98:3f: 30:ea:dc:11:39:f6:76:5a:15:8d:69:49:75:7a:02:82:1a:7d: a1:0e:b1:8e -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUDdr5erUiffXuxkkRSNhfFNDADOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDMTFBODI0RDk5MjNCRTkyMTdCN0REMkVENkNFQzk5 NkRCRkZGOTAeFw0yNjA5MjExOTM3MDJaFw0yNjA5MjIyMjU5MDJaMDMxMTAvBgNV BAMTKDZGMzZDMjcyNUMyRTdDM0QxRkIyRDlFQkZBMkI0MDA2Mjk5ODZFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEmMHudj3CqlPsk5Ig/NPqNpTU ZekILbWCJ1MRXvhKcmJjSxmx6LBbCj746UoyIsjLmkcGnKZPhvNb0g8mGl/d8oJl becTEgGVl51d49fSkf4N82/SRv45lDX+AVWu26NnGiCcNPvw+Ww4dS1/od/P5FA3 ruUGojX2RY15Gd/RfR2Epf376TDjEnv2gbF/u+P3UijmMhQ2kY970xRcHlnq7y6Z EXZ7DxzjTBbnn5LhioCz9WOzg8gF4cB+9hJBu+a8Aw4quPPbL6VmQzGlJOYDYUXB gG7lzYkqcDiFbrGreftvIih6QoGTFzrK/dJtKQZhtHA/sg4AtWJVuXU8M2TdAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUbzbCclwufD0fstnr+itABimYbocwHwYDVR0j BBgwFoAUr8Eagk2ZI76SF7fdLtbOyZbb//kwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVElO VEVDSC8wL0FGQzExQTgyNEQ5OTIzQkU5MjE3QjdERDJFRDZDRUM5OTZEQkZGRjku Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQUZDMTFBODI0RDk5MjNCRTkyMTdCN0RE MkVENkNFQzk5NkRCRkZGOS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JFU1RJTlRFQ0gvMC9BRkMx MUE4MjREOTkyM0JFOTIxN0I3REQyRUQ2Q0VDOTk2REJGRkY5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA r22rjc9G6QhQfdU8HxVbgZ4GIJxMnfO7wde2PqnNmVoVz6DKKe8CilaU1v0wFVbo xEgid07TVq7VO2npEUVepbiXAuE6F2HE/TwxL2kYtFpanwkbJF7hNILDQDtcPJlx RUD6S/Llyga3FkQw6wynD9wzWQ6wI8sazWuJpDVhvlB8nVKPjXiyqDjUbkcwScvB 0nN7dgC5Ja87XGrBDcVQ+cho2tS43hIwkFcgifSsvM/Jsy6B8WmmXuCdi7zjL/4V PsR6vpJ812pQAvcRjz98JnQ+x8OPaKi2r/hQNxnL+iIRiVQ+Zka9VJg/MOrcETn2 dloVjWlJdXoCghp9oQ6xjg== -----END CERTIFICATE-----Generated at Tue Sep 22 12:45:58 2026 by rpki-client