$ rpki-client -vvvf rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft File: 4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft (raw, json) Hash identifier: HtZdcShvJoDYYZww/YiJ65b+gEv+pz6QCGcdFcbN9to= Subject key identifier: FA:71:37:76:50:1D:DA:3C:FA:63:2E:29:A8:F7:34:80:B0:DB:64:7E Authority key identifier: 4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 Certificate issuer: /CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Certificate serial: 3A2A259CCAD088AD486AD0DFDBF26A586BEA2906 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft Manifest number: B6 Signing time: Thu 24 Sep 2026 00:04:18 +0000 Manifest this update: Wed 23 Sep 2026 23:59:18 +0000 Manifest next update: Fri 25 Sep 2026 03:29:18 +0000 Files and hashes: 1: 4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl (hash: 8EHNZ8hPztspHIOhVPjD8MJPYeGP2DscMna/o1VqfJ4=) 2: 3130332e362e3132362e302f32332d3332203d3e20313331313439.roa (hash: lHrkC3JHZwSMosCVLrge69PjEFVk3qgvY9qe4jsf15s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:2a:25:9c:ca:d0:88:ad:48:6a:d0:df:db:f2:6a:58:6b:ea:29:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Validity Not Before: Sep 23 23:59:18 2026 GMT Not After : Sep 25 03:29:18 2026 GMT Subject: CN=FA713776501DDA3CFA632E29A8F73480B0DB647E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:8a:20:5f:51:7e:97:4b:f5:39:a2:d8:00: 61:7a:1c:e3:ab:17:61:81:8a:e5:2d:4c:66:aa:a8: 78:69:4f:3a:2a:46:4f:b1:b3:c5:af:e6:e4:b7:1f: 65:e0:78:f2:ff:bb:39:ed:a8:15:2a:80:c3:c8:0c: 99:88:80:e9:a7:fa:d7:39:7a:1d:08:7c:b9:19:d9: d5:0b:bb:5f:16:b4:c5:96:8b:c6:14:39:6d:4b:1c: 9e:4c:71:f0:2c:92:55:16:db:e2:fb:e7:96:1a:9f: c4:6a:3e:09:66:e8:50:d0:be:92:99:76:f9:0b:94: 7b:bc:87:9e:b8:fc:9b:fc:46:af:55:d5:70:1b:2f: 70:12:5c:70:95:e4:a9:57:0b:78:3c:95:e8:7a:48: 3a:07:dc:2b:4e:d2:64:f3:83:62:8c:f5:5e:9a:90: 1d:d5:ee:26:81:c8:70:08:87:51:b1:29:ed:40:dd: 78:78:ca:cf:74:87:e5:70:88:b7:ba:50:3e:e4:96: 5b:8b:e6:be:08:63:2f:70:76:06:2b:42:44:b9:87: a9:d7:84:77:f4:3e:9d:d0:12:c7:3e:77:de:ea:84: 01:34:98:94:58:69:aa:9a:36:1b:31:c1:bf:b8:d6: 2f:73:43:16:67:e4:04:4f:52:4e:58:67:e9:6a:b8: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:71:37:76:50:1D:DA:3C:FA:63:2E:29:A8:F7:34:80:B0:DB:64:7E X509v3 Authority Key Identifier: keyid:4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:75:41:fd:44:5a:8a:23:fe:e0:9b:91:08:dc:8a:8e:1d:0e: c6:4e:95:39:f7:3f:36:d0:cb:6c:13:b2:62:07:6a:91:09:88: 12:23:72:c1:2f:61:b2:de:fd:d4:63:e6:af:6e:f5:03:e1:3b: 60:18:c4:9a:54:e1:74:1d:5f:aa:33:8b:82:2e:bc:d1:e7:89: c8:b6:06:81:7b:15:72:31:b4:61:90:33:f3:00:72:a8:b9:da: 29:8d:c8:cb:2b:0d:77:2d:aa:52:7e:76:9b:52:28:cd:80:7f: 1b:f3:8b:2e:7f:82:d4:44:61:1d:e7:32:f4:26:88:4e:0b:45: 37:c9:e8:fb:92:19:d5:e7:8a:6d:c4:13:af:4c:62:02:19:f2: 00:e7:c9:a1:18:a7:37:1f:c5:04:9e:d1:75:7b:54:74:24:ad: 04:1d:5e:37:6a:0a:f8:86:a7:cf:dc:0e:95:dc:d7:d0:68:e7: 4e:75:76:dd:57:3b:97:71:6c:21:48:6a:46:9d:a5:6f:ac:a9: e0:6d:df:8f:b9:5b:54:d8:d5:1c:43:23:63:0c:4f:94:48:86: 42:b9:e7:69:46:49:f8:27:f1:1f:e8:ce:45:49:80:22:9d:91: 14:18:dc:38:e7:15:92:6c:18:c3:3f:8e:aa:cb:fa:8b:3b:c4: 5b:f3:a2:89 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUOiolnMrQiK1IatDf2/JqWGvqKQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3 NzM2NDNENTAeFw0yNjA5MjMyMzU5MThaFw0yNjA5MjUwMzI5MThaMDMxMTAvBgNV BAMTKEZBNzEzNzc2NTAxRERBM0NGQTYzMkUyOUE4RjczNDgwQjBEQjY0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfzYogX1F+l0v1OaLYAGF6HOOr F2GBiuUtTGaqqHhpTzoqRk+xs8Wv5uS3H2XgePL/uzntqBUqgMPIDJmIgOmn+tc5 eh0IfLkZ2dULu18WtMWWi8YUOW1LHJ5McfAsklUW2+L755Yan8RqPglm6FDQvpKZ dvkLlHu8h564/Jv8Rq9V1XAbL3ASXHCV5KlXC3g8leh6SDoH3CtO0mTzg2KM9V6a kB3V7iaByHAIh1GxKe1A3Xh4ys90h+VwiLe6UD7klluL5r4IYy9wdgYrQkS5h6nX hHf0Pp3QEsc+d97qhAE0mJRYaaqaNhsxwb+41i9zQxZn5ARPUk5YZ+lquBHbAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU+nE3dlAd2jz6Yy4pqPc0gLDbZH4wHwYDVR0j BBgwFoAUT7RZXYaX/Rq30hbeB566WXc2Q9UwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJB U0lTLzAvNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNENS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RkI0NTk1RDg2OTdGRDFBQjdEMjE2REUw NzlFQkE1OTc3MzY0M0Q1LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJBU0lTLzAvNEZCNDU5 NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNENS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAH91 Qf1EWooj/uCbkQjcio4dDsZOlTn3PzbQy2wTsmIHapEJiBIjcsEvYbLe/dRj5q9u 9QPhO2AYxJpU4XQdX6ozi4IuvNHnici2BoF7FXIxtGGQM/MAcqi52imNyMsrDXct qlJ+dptSKM2Afxvziy5/gtREYR3nMvQmiE4LRTfJ6PuSGdXnim3EE69MYgIZ8gDn yaEYpzcfxQSe0XV7VHQkrQQdXjdqCviGp8/cDpXc19Bo5051dt1XO5dxbCFIakad pW+sqeBt34+5W1TY1RxDI2MMT5RIhkK552lGSfgn8R/ozkVJgCKdkRQY3DjnFZJs GMM/jqrL+os7xFvzook= -----END CERTIFICATE-----Generated at Thu Sep 24 17:02:27 2026 by rpki-client