
$ rpki-client -vvf rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft
File: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft (raw, json)
Hash identifier: PwtT6Dn7awdCMp7Qxx41mA017hjcwjbqitTBH3Q7xNs=
Subject key identifier: AE:A5:35:49:B9:0C:CD:A3:90:AB:65:CB:89:5A:1E:C1:9D:F5:64:02
Authority key identifier: AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9
Certificate issuer: /CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9
Certificate serial: 72E73E8345D0445D2883A316FA51D4653E0021BA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft
Manifest number: 62
Signing time: Thu 23 Jul 2026 07:01:48 +0000
Manifest this update: Thu 23 Jul 2026 06:56:48 +0000
Manifest next update: Fri 24 Jul 2026 08:34:48 +0000
Files and hashes: 1: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl (hash: +9RxfOjD3UqZVKg6Imp+FZck3NS7zxta1o0duY3V6ik=)
Validation: OK
Signature path: rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl
rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e7:3e:83:45:d0:44:5d:28:83:a3:16:fa:51:d4:65:3e:00:21:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9
Validity
Not Before: Jul 23 06:56:48 2026 GMT
Not After : Jul 24 08:34:48 2026 GMT
Subject: CN=AEA53549B90CCDA390AB65CB895A1EC19DF56402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:7f:dc:e0:4a:6f:5a:e7:ab:f7:4a:72:b6:
ea:2c:7c:e0:00:38:96:82:21:a7:b3:5c:22:00:24:
d8:a6:04:e1:c5:f8:ea:14:bd:d6:f3:df:1e:9e:20:
60:7e:7c:5f:a9:2f:d8:e9:60:ac:83:f7:7d:57:4f:
39:4e:c9:a3:ca:33:ef:71:8e:7a:ae:f0:7e:6c:d5:
1a:19:ed:50:51:71:b7:05:cb:26:4c:69:07:19:e8:
db:19:e7:9d:76:5d:01:bd:54:d1:88:c3:c4:ca:9c:
b2:26:c3:23:35:25:b0:55:76:4a:d8:c1:5d:bc:ea:
d4:82:2c:c6:c5:4a:0d:d8:03:a0:76:2b:d2:09:22:
30:26:f6:da:f0:63:47:4b:ec:8c:03:cb:91:3c:9f:
15:c9:fb:37:a0:1e:bc:42:a6:92:53:01:60:27:16:
84:65:9e:c4:3d:51:2d:ba:7d:1f:df:57:42:4b:69:
f0:42:d0:c3:b6:02:c9:d0:48:33:ae:8e:25:74:55:
38:ad:06:ac:be:88:01:6c:45:d2:10:19:f6:df:57:
db:00:d2:03:56:58:65:8a:cf:ee:95:bf:92:78:1f:
1d:46:1f:70:e7:51:e8:34:23:6b:b6:ff:d5:56:0f:
7a:07:e5:fb:cb:8e:97:d1:08:cb:d5:03:63:4c:b6:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A5:35:49:B9:0C:CD:A3:90:AB:65:CB:89:5A:1E:C1:9D:F5:64:02
X509v3 Authority Key Identifier:
keyid:AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:13:27:a1:31:b6:dc:9f:81:47:9e:d0:41:97:eb:3c:11:18:
c4:f9:cc:8c:5a:18:ae:3d:39:99:8d:f0:53:8e:ec:e5:c0:ac:
82:7a:8c:95:7c:3f:36:40:5d:4e:d2:ed:7f:07:36:73:44:0b:
cd:f2:8b:5e:ca:2e:ba:ce:b5:4a:d3:2f:c2:42:ef:23:d7:26:
66:28:59:39:44:51:33:4c:9e:3f:c1:3e:bd:33:89:e1:10:78:
b3:60:e1:e2:a1:60:02:2f:42:a5:35:53:22:e8:72:84:ad:f5:
30:7c:07:9d:df:f1:17:f6:15:b0:b6:74:c2:81:bf:9f:ff:30:
44:d5:f1:3b:0c:53:87:c2:2c:f6:5a:b9:5f:b0:bd:56:c8:6d:
74:ab:de:c0:e5:dc:13:8a:21:ed:8e:a3:08:10:8b:76:00:4a:
93:5c:72:69:db:9a:ce:b9:cd:71:a7:25:ce:17:0b:47:96:e8:
0b:1b:ec:a4:fd:2e:ce:0d:5b:36:47:c0:64:ed:fc:75:bf:74:
46:3e:ee:15:55:49:55:db:bc:1c:0d:8d:20:98:83:67:65:7d:
83:d2:3c:0c:ec:7e:5f:c6:63:2d:4c:e8:23:ee:e3:e6:de:a0:
7a:4d:d9:53:b3:05:fe:9c:3c:d8:a3:0f:15:c4:fe:88:1b:c8:
48:34:1e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:11:03 2026 by rpki-client