$ rpki-client -vvf rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft File: 4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft (raw, json) Hash identifier: VdfnKKGakAAYBwMl3lLDTagb+Ssr2EWuSNg+RHi0YyU= Subject key identifier: B5:BB:E6:9F:63:E6:DE:4C:D5:99:C8:3F:79:12:7A:5B:0D:FC:70:80 Authority key identifier: 4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 Certificate issuer: /CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Certificate serial: 56D5DEF79A507F0C6C9F5D6F9CF2940E4DC73115 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft Manifest number: 81 Signing time: Sat 15 Aug 2026 00:48:57 +0000 Manifest this update: Sat 15 Aug 2026 00:43:57 +0000 Manifest next update: Sun 16 Aug 2026 01:36:57 +0000 Files and hashes: 1: 4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl (hash: ypTojkL6lRhA87jiEhF4uTa3QsAJPJl7dC9UWs8ZMFo=) 2: 3130332e362e3132362e302f32332d3332203d3e20313331313439.roa (hash: lHrkC3JHZwSMosCVLrge69PjEFVk3qgvY9qe4jsf15s=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Aug 2026 01:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d5:de:f7:9a:50:7f:0c:6c:9f:5d:6f:9c:f2:94:0e:4d:c7:31:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FB4595D8697FD1AB7D216DE079EBA59773643D5 Validity Not Before: Aug 15 00:43:57 2026 GMT Not After : Aug 16 01:36:57 2026 GMT Subject: CN=B5BBE69F63E6DE4CD599C83F79127A5B0DFC7080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:7b:0f:66:5b:ea:af:f0:6c:ef:c7:d4:66: d0:ce:30:22:77:78:31:e0:3d:ff:87:d2:2c:d0:2b: 8a:b3:73:ca:76:d7:fc:d2:87:cd:af:39:d0:ec:10: 42:f7:f2:31:3d:1c:42:4c:47:e3:24:ae:74:12:98: 04:01:70:b9:c0:c9:3d:97:5f:3a:f7:41:eb:fc:1e: a0:de:03:58:26:ea:42:00:a9:24:35:7d:29:8d:18: a4:36:60:4b:d0:a4:29:4f:e5:3a:50:e7:98:b4:d4: dd:45:42:43:72:e7:0c:95:69:81:7c:4d:50:7c:5b: ec:f9:b3:e9:8c:33:7c:f3:a8:c5:ce:dd:ff:9a:65: a8:0f:de:d8:45:50:31:53:96:de:6a:3f:cc:1b:5b: 91:2f:9b:4e:e6:e3:de:dd:00:ef:5d:d5:73:64:d1: 13:29:02:4c:7f:e3:d6:a9:8d:55:ad:53:6e:d8:b0: 06:a4:80:14:05:b6:16:58:64:70:2b:db:19:22:a6: 39:0c:54:55:a6:78:c9:20:1e:2b:10:90:ea:70:51: 76:86:28:1a:0d:24:29:c1:e8:d7:a2:b3:44:e5:65: 4e:1c:51:e2:9d:23:b5:23:85:7d:90:c4:b1:26:d6: 3e:3d:91:87:6a:06:4b:d5:0b:c9:1d:6f:e3:36:13: 35:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BB:E6:9F:63:E6:DE:4C:D5:99:C8:3F:79:12:7A:5B:0D:FC:70:80 X509v3 Authority Key Identifier: keyid:4F:B4:59:5D:86:97:FD:1A:B7:D2:16:DE:07:9E:BA:59:77:36:43:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/4FB4595D8697FD1AB7D216DE079EBA59773643D5.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTBASIS/0/4FB4595D8697FD1AB7D216DE079EBA59773643D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:bc:8d:57:06:10:c3:d3:af:c7:1e:01:b5:29:f9:19:34:bb: 4c:01:55:03:bb:91:47:23:58:e5:e3:a4:33:42:28:9d:b1:c2: 9b:80:8e:8f:d6:9d:c6:a8:62:6b:8c:b0:a0:05:d1:ec:3f:5d: df:46:fa:55:37:0e:c7:33:d2:e7:43:fc:0b:93:25:60:bf:92: 2e:1b:20:d0:63:92:de:f4:8a:71:56:ec:dd:f5:63:0d:46:5d: b8:29:b3:82:b2:c5:f7:b6:c0:4b:53:cc:a9:1b:e5:11:1e:5d: ad:b3:3b:0c:74:d9:9a:ec:cd:80:27:23:04:e1:08:67:29:6c: 46:30:ec:b7:01:40:d2:de:f2:8d:0f:42:fc:67:66:09:05:84: d4:30:ec:65:07:b1:01:b6:6d:7f:3a:2e:00:70:ac:43:b4:14: b4:57:e7:4c:57:35:bf:c2:82:87:39:4d:17:60:f8:50:e7:0a: 21:d1:e3:e1:a4:76:34:30:36:9d:a9:f1:82:fe:38:c6:29:cb: b0:03:e5:68:64:4c:1d:d6:45:b5:45:0f:04:be:2c:ef:36:94: 11:46:ac:44:e7:71:17:aa:84:b2:6a:6e:9c:b4:6b:2d:74:eb: 2b:f3:9b:60:f9:8e:62:a0:79:25:78:2c:94:4b:f9:2d:8c:95: a1:02:74:92 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUVtXe95pQfwxsn11vnPKUDk3HMRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3 NzM2NDNENTAeFw0yNjA4MTUwMDQzNTdaFw0yNjA4MTYwMTM2NTdaMDMxMTAvBgNV BAMTKEI1QkJFNjlGNjNFNkRFNENENTk5QzgzRjc5MTI3QTVCMERGQzcwODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5j3sPZlvqr/Bs78fUZtDOMCJ3 eDHgPf+H0izQK4qzc8p21/zSh82vOdDsEEL38jE9HEJMR+MkrnQSmAQBcLnAyT2X Xzr3Qev8HqDeA1gm6kIAqSQ1fSmNGKQ2YEvQpClP5TpQ55i01N1FQkNy5wyVaYF8 TVB8W+z5s+mMM3zzqMXO3f+aZagP3thFUDFTlt5qP8wbW5Evm07m497dAO9d1XNk 0RMpAkx/49apjVWtU27YsAakgBQFthZYZHAr2xkipjkMVFWmeMkgHisQkOpwUXaG KBoNJCnB6Neis0TlZU4cUeKdI7UjhX2QxLEm1j49kYdqBkvVC8kdb+M2EzVRAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUtbvmn2Pm3kzVmcg/eRJ6Ww38cIAwHwYDVR0j BBgwFoAUT7RZXYaX/Rq30hbeB566WXc2Q9UwDgYDVR0PAQH/BAQDAgeAMGYGA1Ud HwRfMF0wW6BZoFeGVXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJB U0lTLzAvNEZCNDU5NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNENS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL3Jwa2ljYS50 d25pYy50dy9ycGtpL1RXTklDQ0EvMS80RkI0NTk1RDg2OTdGRDFBQjdEMjE2REUw NzlFQkE1OTc3MzY0M0Q1LmNlcjBxBggrBgEFBQcBCwRlMGMwYQYIKwYBBQUHMAuG VXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVEJBU0lTLzAvNEZCNDU5 NUQ4Njk3RkQxQUI3RDIxNkRFMDc5RUJBNTk3NzM2NDNENS5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHW8 jVcGEMPTr8ceAbUp+Rk0u0wBVQO7kUcjWOXjpDNCKJ2xwpuAjo/WncaoYmuMsKAF 0ew/Xd9G+lU3Dscz0udD/AuTJWC/ki4bINBjkt70inFW7N31Yw1GXbgps4Kyxfe2 wEtTzKkb5REeXa2zOwx02ZrszYAnIwThCGcpbEYw7LcBQNLe8o0PQvxnZgkFhNQw 7GUHsQG2bX86LgBwrEO0FLRX50xXNb/Cgoc5TRdg+FDnCiHR4+GkdjQwNp2p8YL+ OMYpy7AD5WhkTB3WRbVFDwS+LO82lBFGrETncReqhLJqbpy0ay106yvzm2D5jmKg eSV4LJRL+S2MlaECdJI= -----END CERTIFICATE-----Generated at Sat Aug 15 05:26:45 2026 by rpki-client