$ rpki-client -vvf rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft File: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft (raw, json) Hash identifier: zXBB9yI7aLF4oqoGcD73kbOhi25kqHbpIrU9fuBkTKg= Subject key identifier: EF:7E:7B:96:82:17:85:80:DB:55:D3:10:03:98:D2:03:8D:9B:51:0F Authority key identifier: AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9 Certificate issuer: /CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9 Certificate serial: 7519F62A5088B68A26DFE03FC3341AA49A0C3171 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft Manifest number: 44 Signing time: Tue 30 Jun 2026 16:14:15 +0000 Manifest this update: Tue 30 Jun 2026 16:09:15 +0000 Manifest next update: Wed 01 Jul 2026 19:17:15 +0000 Files and hashes: 1: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl (hash: wLaK/fl5StKuZMqQwcrpCSEGq3mX4CvSSsiM9VQAMRw=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Jul 2026 14:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:19:f6:2a:50:88:b6:8a:26:df:e0:3f:c3:34:1a:a4:9a:0c:31:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9 Validity Not Before: Jun 30 16:09:15 2026 GMT Not After : Jul 1 19:17:15 2026 GMT Subject: CN=EF7E7B9682178580DB55D3100398D2038D9B510F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3a:2d:e4:31:b2:d2:48:4a:39:8b:2a:b2:3d: a3:db:97:bc:6a:4e:db:33:ab:ad:09:3f:79:d6:68: 84:4f:fe:d9:95:af:5b:ba:c5:53:16:e0:a2:f8:1b: 4d:a0:5b:b1:31:ac:4c:96:50:f4:dd:9b:1c:a7:79: 7e:b7:f6:60:f6:08:c4:10:97:0a:7a:89:2c:f9:30: e0:6f:0a:c1:22:e3:bb:94:53:ad:71:83:de:b2:88: 78:1d:e1:d7:31:c4:7b:19:7f:d0:2b:04:ad:6d:b7: 6c:b6:ca:57:0a:10:96:c1:67:00:32:40:20:4a:cd: 28:0c:cc:20:a9:66:a5:9a:54:f7:e9:51:10:48:36: ee:7a:36:ac:14:42:8f:88:aa:13:41:ce:dc:3f:d9: 8e:bc:03:f2:f2:54:4b:73:03:45:98:3e:f1:70:b9: f3:91:a6:e5:93:7e:73:7c:f0:00:2b:01:b1:d5:ec: 7c:4a:aa:38:44:43:80:4d:f7:51:e2:79:54:64:13: 0b:cf:e4:68:11:5f:e3:d6:53:4c:f3:ab:0d:2a:95: 8f:1b:df:d9:98:3f:64:00:15:b7:c9:b5:41:17:40: 12:3b:2e:8a:04:88:3d:e6:40:52:9e:a3:3f:51:95: ff:32:ee:3a:2e:a0:23:95:f6:bc:22:bf:2a:47:19: c4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7E:7B:96:82:17:85:80:DB:55:D3:10:03:98:D2:03:8D:9B:51:0F X509v3 Authority Key Identifier: keyid:AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f8:45:ba:cf:ac:97:87:3a:64:de:22:bf:52:e6:ec:7c:1b: 5b:65:84:db:ce:d2:e9:39:8f:e3:a0:d4:97:bd:64:33:77:e6: b2:7b:45:f1:51:01:1b:98:92:be:0a:f9:b4:89:72:73:a9:84: 91:9b:b8:81:5a:2c:b5:d3:7f:1c:cd:fe:f0:54:4d:7d:40:13: bb:35:b0:e4:d6:be:b6:83:cb:98:98:3a:e6:36:b7:3a:c8:eb: eb:8d:30:06:42:b1:81:93:7e:89:1e:ad:c0:e5:d9:1f:e2:b9: cd:b1:97:9d:64:a7:f5:37:a8:80:14:55:16:5e:49:95:29:7a: 54:cd:d7:a4:0e:64:37:f0:0c:9d:cd:c6:1f:5d:70:45:c5:9c: 3c:4c:35:27:36:f6:0f:95:4f:ad:3b:e8:d5:8c:93:d6:26:31: 8d:06:32:e4:09:70:a2:e2:26:4d:1e:0a:95:0a:01:84:76:52: 0d:dc:61:4a:4d:78:0d:a9:58:ca:81:4f:8c:40:14:a1:ff:db: 35:b6:7d:b3:5a:3b:ba:c6:f3:26:be:3d:0b:a8:ae:df:29:7c: cd:f7:31:bb:b3:2f:3c:20:15:61:b4:71:6d:af:f9:ac:4c:09: db:b1:05:f3:f1:b2:be:b6:00:4e:a2:0a:5c:b7:13:f5:63:39: 16:ad:16:31 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUdRn2KlCItoom3+A/wzQapJoMMXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDMTFBODI0RDk5MjNCRTkyMTdCN0REMkVENkNFQzk5 NkRCRkZGOTAeFw0yNjA2MzAxNjA5MTVaFw0yNjA3MDExOTE3MTVaMDMxMTAvBgNV BAMTKEVGN0U3Qjk2ODIxNzg1ODBEQjU1RDMxMDAzOThEMjAzOEQ5QjUxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNOi3kMbLSSEo5iyqyPaPbl7xq Ttszq60JP3nWaIRP/tmVr1u6xVMW4KL4G02gW7ExrEyWUPTdmxyneX639mD2CMQQ lwp6iSz5MOBvCsEi47uUU61xg96yiHgd4dcxxHsZf9ArBK1tt2y2ylcKEJbBZwAy QCBKzSgMzCCpZqWaVPfpURBINu56NqwUQo+IqhNBztw/2Y68A/LyVEtzA0WYPvFw ufORpuWTfnN88AArAbHV7HxKqjhEQ4BN91HieVRkEwvP5GgRX+PWU0zzqw0qlY8b 39mYP2QAFbfJtUEXQBI7LooEiD3mQFKeoz9Rlf8y7jouoCOV9rwivypHGcSLAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU7357loIXhYDbVdMQA5jSA42bUQ8wHwYDVR0j BBgwFoAUr8Eagk2ZI76SF7fdLtbOyZbb//kwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVElO VEVDSC8wL0FGQzExQTgyNEQ5OTIzQkU5MjE3QjdERDJFRDZDRUM5OTZEQkZGRjku Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQUZDMTFBODI0RDk5MjNCRTkyMTdCN0RE MkVENkNFQzk5NkRCRkZGOS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JFU1RJTlRFQ0gvMC9BRkMx MUE4MjREOTkyM0JFOTIxN0I3REQyRUQ2Q0VDOTk2REJGRkY5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA d/hFus+sl4c6ZN4iv1Lm7HwbW2WE287S6TmP46DUl71kM3fmsntF8VEBG5iSvgr5 tIlyc6mEkZu4gVostdN/HM3+8FRNfUATuzWw5Na+toPLmJg65ja3Osjr640wBkKx gZN+iR6twOXZH+K5zbGXnWSn9TeogBRVFl5JlSl6VM3XpA5kN/AMnc3GH11wRcWc PEw1Jzb2D5VPrTvo1YyT1iYxjQYy5AlwouImTR4KlQoBhHZSDdxhSk14DalYyoFP jEAUof/bNbZ9s1o7usbzJr49C6iu3yl8zfcxu7MvPCAVYbRxba/5rEwJ27EF8/Gy vrYATqIKXLcT9WM5Fq0WMQ== -----END CERTIFICATE-----Generated at Tue Jun 30 19:07:18 2026 by rpki-client