$ rpki-client -vvvf rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft File: 4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft (raw, json) Hash identifier: Ta0ZuxCj7UBILqJYZXQvZPjr5bdDyEf3MgpN3JU2kYM= Subject key identifier: ED:1A:D5:DB:47:47:13:CE:A7:6B:76:31:C1:54:23:D6:90:36:5C:91 Authority key identifier: 4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 Certificate issuer: /CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Certificate serial: 46CFE1D8C4C1CFAF482F5213C8C0BB37DC8D5184 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft Manifest number: C2 Signing time: Sat 03 Oct 2026 04:12:52 +0000 Manifest this update: Sat 03 Oct 2026 04:07:52 +0000 Manifest next update: Sun 04 Oct 2026 06:29:52 +0000 Files and hashes: 1: 3130332e362e3132362e302f32332d3332203d3e20313331313439.roa (hash: lHrkC3JHZwSMosCVLrge69PjEFVk3qgvY9qe4jsf15s=) 2: 4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl (hash: OC5KrVzvNpBFtUhckTOzKB2EcpPUB+DsIdq9lzajzAE=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 04:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:cf:e1:d8:c4:c1:cf:af:48:2f:52:13:c8:c0:bb:37:dc:8d:51:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Validity Not Before: Oct 3 04:07:52 2026 GMT Not After : Oct 4 06:29:52 2026 GMT Subject: CN=ED1AD5DB474713CEA76B7631C15423D690365C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:1c:b1:49:47:67:c8:2b:d8:b2:f5:98:6b: 7f:83:2b:82:6c:9e:ae:e2:98:bf:ec:65:59:cf:90: 77:76:e9:10:04:1f:03:61:9b:3d:3e:4c:c1:fa:8c: 9d:05:cf:8f:07:6c:27:5a:a1:38:bb:80:eb:e9:89: f1:52:9a:41:e4:91:55:27:fd:23:fd:cc:2e:66:a4: de:5a:1b:31:fe:89:8a:3d:ee:9d:9e:66:b4:c1:c2: 04:95:ae:b1:e2:90:bc:71:63:d2:5b:fb:ff:d4:2d: 28:ca:0b:c7:57:1a:68:86:a8:63:16:ea:e6:fc:c2: d8:8c:a1:7a:c5:61:e3:a5:f4:c2:e7:67:f9:ba:36: 88:ca:3e:8c:6f:3b:17:bf:a2:9e:60:fc:2d:bf:8e: 5c:7f:c6:7c:ed:d3:ec:55:2f:4e:f9:a9:5a:a1:7c: 18:9c:01:fb:ad:44:32:5c:98:a7:b3:e6:6c:a7:fc: fb:f9:16:28:1c:4d:c8:c1:45:7a:fb:d9:43:7a:17: f4:7a:d5:b3:f7:0e:8f:ee:31:8a:87:7b:e7:e4:0c: d7:74:40:0e:81:36:bb:a7:e1:2b:e4:bb:d9:be:9c: 98:2b:a3:4e:4e:76:87:10:a1:0c:42:b3:46:40:bf: 50:5f:e4:1b:fd:5c:93:9c:d9:47:d6:e5:35:cd:c2: 71:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1A:D5:DB:47:47:13:CE:A7:6B:76:31:C1:54:23:D6:90:36:5C:91 X509v3 Authority Key Identifier: keyid:4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b8:b0:46:66:2e:05:f1:76:8f:1e:8b:fa:4c:fb:59:70:b5: 2b:78:93:cb:3b:ab:f8:20:e2:7a:36:df:c2:e2:f4:00:ff:07: 92:13:2f:18:26:b4:23:6e:fa:4d:0c:71:d1:4e:30:92:e1:bd: 18:c0:bd:c7:39:dc:15:fd:09:e9:6a:37:8c:3f:c9:5e:93:0c: 37:b5:65:a5:32:10:2d:2b:12:03:b1:63:d6:09:91:48:6f:57: 96:33:9f:78:2b:2c:3d:d1:22:84:b5:96:f6:4a:a5:46:5f:16: 20:21:17:a7:ec:e4:7e:8d:fa:4c:c1:af:04:1d:f5:ed:45:17: 12:76:ae:d8:6d:37:cd:87:63:79:13:de:b1:72:45:8d:46:ff: d3:43:17:e2:75:19:a1:c4:b3:9f:78:24:b3:16:c5:bb:72:ba: ef:ec:ba:90:58:0a:77:73:df:2e:da:d2:3e:93:07:8e:6e:55: 37:89:6c:3b:59:84:e8:39:91:b4:77:5c:df:af:21:48:43:dd: 43:d6:01:92:4e:dc:48:2d:48:81:9d:3d:32:e0:ab:2e:c3:91: dc:c1:1d:23:c7:02:a6:02:29:96:dc:a1:c4:3f:90:82:49:a5: d1:e8:10:d5:ff:6b:eb:da:d8:4a:21:d2:c9:4a:e8:e5:1c:cb: c7:8f:20:b2 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIURs/h2MTBz69IL1ITyMC7N9yNUYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3 NzM2NDNENTAeFw0yNjEwMDMwNDA3NTJaFw0yNjEwMDQwNjI5NTJaMDMxMTAvBgNV BAMTKEVEMUFENURCNDc0NzEzQ0VBNzZCNzYzMUMxNTQyM0Q2OTAzNjVDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoKRyxSUdnyCvYsvWYa3+DK4Js nq7imL/sZVnPkHd26RAEHwNhmz0+TMH6jJ0Fz48HbCdaoTi7gOvpifFSmkHkkVUn /SP9zC5mpN5aGzH+iYo97p2eZrTBwgSVrrHikLxxY9Jb+//ULSjKC8dXGmiGqGMW 6ub8wtiMoXrFYeOl9MLnZ/m6NojKPoxvOxe/op5g/C2/jlx/xnzt0+xVL075qVqh fBicAfutRDJcmKez5myn/Pv5FigcTcjBRXr72UN6F/R61bP3Do/uMYqHe+fkDNd0 QA6BNrun4Svku9m+nJgro05OdocQoQxCs0ZAv1Bf5Bv9XJOc2UfW5TXNwnGfAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU7RrV20dHE86na3YxwVQj1pA2XJEwHwYDVR0j BBgwFoAUT7RZXYaX/Rq30hbeB566WXc2Q9UwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJB U0lTLzAvNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNENS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RkI0NTk1RDg2OTdGRDFBQjdEMjE2REUw NzlFQkE1OTc3MzY0M0Q1LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJBU0lTLzAvNEZCNDU5 NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNENS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI24 sEZmLgXxdo8ei/pM+1lwtSt4k8s7q/gg4no238Li9AD/B5ITLxgmtCNu+k0McdFO MJLhvRjAvcc53BX9CelqN4w/yV6TDDe1ZaUyEC0rEgOxY9YJkUhvV5Yzn3grLD3R IoS1lvZKpUZfFiAhF6fs5H6N+kzBrwQd9e1FFxJ2rthtN82HY3kT3rFyRY1G/9ND F+J1GaHEs594JLMWxbtyuu/supBYCndz3y7a0j6TB45uVTeJbDtZhOg5kbR3XN+v IUhD3UPWAZJO3EgtSIGdPTLgqy7DkdzBHSPHAqYCKZbcocQ/kIJJpdHoENX/a+va 2Eoh0slK6OUcy8ePILI= -----END CERTIFICATE-----Generated at Sat Oct 3 20:10:59 2026 by rpki-client