$ rpki-client -vvf rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft File: 4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft (raw, json) Hash identifier: feI1scE0acyTaFgDDNIiCw3rB3hDM3vgW50u12JJCp4= Subject key identifier: 75:CD:03:BC:AC:EE:79:BE:90:92:1D:22:75:75:11:FB:CA:84:39:7F Authority key identifier: 4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 Certificate issuer: /CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Certificate serial: 6E9660540A3955B02C57DB0948A597F6AF5998E2 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft Manifest number: 63 Signing time: Thu 23 Jul 2026 18:06:25 +0000 Manifest this update: Thu 23 Jul 2026 18:01:25 +0000 Manifest next update: Fri 24 Jul 2026 20:02:25 +0000 Files and hashes: 1: 3130332e362e3132362e302f32332d3332203d3e20313331313439.roa (hash: lHrkC3JHZwSMosCVLrge69PjEFVk3qgvY9qe4jsf15s=) 2: 4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl (hash: DSBF7pBmDLvprLgFSCQBXzfh+P68wrQH2dM/7TbmQFI=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:96:60:54:0a:39:55:b0:2c:57:db:09:48:a5:97:f6:af:59:98:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Validity Not Before: Jul 23 18:01:25 2026 GMT Not After : Jul 24 20:02:25 2026 GMT Subject: CN=75CD03BCACEE79BE90921D22757511FBCA84397F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:09:d3:6f:25:21:da:75:89:7e:43:f0:b5:c9: f9:82:f6:a8:31:4c:52:97:2c:de:d7:4d:ab:9c:b8: 73:29:42:3a:e1:75:95:a4:de:a2:4a:e0:7d:5f:a0: 06:ef:d9:bc:6c:1a:da:20:0c:ac:0b:59:ca:74:10: b3:ff:ea:fe:fc:41:1e:7c:73:5a:4f:71:6d:dc:fc: 7f:27:80:c2:d3:75:36:9a:b6:a0:5d:a4:2c:1f:a3: f1:d1:f9:ad:b8:29:9b:1e:b8:da:31:b6:99:b0:79: ad:e1:1a:18:ca:bf:9f:19:31:08:dd:17:51:b0:c8: 72:0d:02:ac:1c:0f:67:b3:31:2d:54:e9:92:61:a1: d9:1c:fc:3a:12:fe:09:f0:dc:4d:0f:8a:eb:24:d6: 9a:f3:29:ee:f4:a2:55:ce:85:22:4c:14:9b:ca:2e: 69:f8:01:a4:42:a4:d6:c3:77:1f:67:ae:4f:9b:d5: ec:10:ad:fe:f9:b0:a9:e3:a4:c8:01:01:9c:6e:01: 3c:ea:9e:8e:41:16:3f:d4:2b:2b:1f:f4:d8:6d:e4: eb:31:64:24:d3:6c:69:73:54:64:7e:a9:7d:d5:18: d1:5d:fd:35:2d:e5:59:5d:90:3c:f6:d2:47:dc:30: 04:8a:89:c9:15:d0:a5:18:e2:18:0b:fc:85:24:3a: be:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CD:03:BC:AC:EE:79:BE:90:92:1D:22:75:75:11:FB:CA:84:39:7F X509v3 Authority Key Identifier: keyid:4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0d:e6:4d:1c:49:51:12:05:a7:ef:15:ba:63:2e:a3:1d:51: 58:bd:6b:be:a3:fa:b0:87:1c:9c:5f:59:6d:50:5c:4f:51:81: f3:5d:36:f1:c1:2b:16:81:d3:97:99:e5:7d:91:32:d0:80:62: 68:b1:56:f2:e6:24:f8:74:cc:c8:90:84:b0:ad:b8:bb:31:0a: 3a:f5:e5:35:e5:1c:eb:0d:84:93:30:b1:1c:73:48:46:9b:72: cb:99:55:47:21:c0:a1:44:a1:28:46:73:74:ca:34:08:88:02: 8a:5a:c2:01:71:d1:04:96:52:a7:f8:ea:e2:d7:e2:3a:ea:9c: 1e:6a:45:69:e4:12:7a:31:5c:71:a3:33:eb:72:3b:1f:fa:cc: 68:8a:e1:87:15:e6:1c:85:78:c0:32:7a:bd:3d:dc:21:e3:f1: 9a:b0:c0:1c:c8:2d:aa:8c:cd:cd:a8:d3:eb:2a:8e:ed:5c:39: ca:aa:87:84:57:e0:57:5a:67:b4:02:de:df:08:91:c7:20:b1: 58:0d:2c:22:3f:73:2d:0c:90:45:26:1e:25:fe:a9:c6:94:48: 03:9f:c0:f0:e0:21:c2:72:43:b6:d9:98:60:2a:56:cb:8d:ac: 97:7b:d4:2b:b5:29:d4:95:78:e3:95:b1:b0:a7:c8:40:17:e9: 48:c2:a1:9b -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUbpZgVAo5VbAsV9sJSKWX9q9ZmOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3 NzM2NDNENTAeFw0yNjA3MjMxODAxMjVaFw0yNjA3MjQyMDAyMjVaMDMxMTAvBgNV BAMTKDc1Q0QwM0JDQUNFRTc5QkU5MDkyMUQyMjc1NzUxMUZCQ0E4NDM5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfCdNvJSHadYl+Q/C1yfmC9qgx TFKXLN7XTaucuHMpQjrhdZWk3qJK4H1foAbv2bxsGtogDKwLWcp0ELP/6v78QR58 c1pPcW3c/H8ngMLTdTaatqBdpCwfo/HR+a24KZseuNoxtpmwea3hGhjKv58ZMQjd F1GwyHINAqwcD2ezMS1U6ZJhodkc/DoS/gnw3E0Piusk1przKe70olXOhSJMFJvK Lmn4AaRCpNbDdx9nrk+b1ewQrf75sKnjpMgBAZxuATzqno5BFj/UKysf9Nht5Osx ZCTTbGlzVGR+qX3VGNFd/TUt5VldkDz20kfcMASKickV0KUY4hgL/IUkOr6VAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUdc0DvKzueb6Qkh0idXUR+8qEOX8wHwYDVR0j BBgwFoAUT7RZXYaX/Rq30hbeB566WXc2Q9UwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJB U0lTLzAvNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNENS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RkI0NTk1RDg2OTdGRDFBQjdEMjE2REUw NzlFQkE1OTc3MzY0M0Q1LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJBU0lTLzAvNEZCNDU5 NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNENS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI0N 5k0cSVESBafvFbpjLqMdUVi9a76j+rCHHJxfWW1QXE9RgfNdNvHBKxaB05eZ5X2R MtCAYmixVvLmJPh0zMiQhLCtuLsxCjr15TXlHOsNhJMwsRxzSEabcsuZVUchwKFE oShGc3TKNAiIAopawgFx0QSWUqf46uLX4jrqnB5qRWnkEnoxXHGjM+tyOx/6zGiK 4YcV5hyFeMAyer093CHj8ZqwwBzILaqMzc2o0+sqju1cOcqqh4RX4FdaZ7QC3t8I kccgsVgNLCI/cy0MkEUmHiX+qcaUSAOfwPDgIcJyQ7bZmGAqVsuNrJd71Cu1KdSV eOOVsbCnyEAX6UjCoZs= -----END CERTIFICATE-----Generated at Fri Jul 24 12:04:57 2026 by rpki-client