$ rpki-client -vvvf rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft File: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft (raw, json) Hash identifier: zmCCSra2L0bJHGZYAwXmqhOLwQOWczJnbDVG/KnHUqw= Subject key identifier: F4:8A:84:C0:71:98:7E:EF:A3:FF:74:52:2A:05:A4:F3:ED:EC:51:1A Authority key identifier: AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9 Certificate issuer: /CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9 Certificate serial: 1E4A9DABC1F2B21D2361A9EE0F183B4C70ECCF52 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft Manifest number: C2 Signing time: Sat 03 Oct 2026 21:38:08 +0000 Manifest this update: Sat 03 Oct 2026 21:33:08 +0000 Manifest next update: Mon 05 Oct 2026 01:26:08 +0000 Files and hashes: 1: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl (hash: uwNg2VNRpOXO6stiOj4QJbjvFMymx8ufXxj1AXdxnoM=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 22:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:4a:9d:ab:c1:f2:b2:1d:23:61:a9:ee:0f:18:3b:4c:70:ec:cf:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9 Validity Not Before: Oct 3 21:33:08 2026 GMT Not After : Oct 5 01:26:08 2026 GMT Subject: CN=F48A84C071987EEFA3FF74522A05A4F3EDEC511A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:2a:4d:31:7e:22:a7:f2:73:fe:59:84:a0: 27:f6:cd:07:8e:86:f7:80:cc:b1:e9:54:7f:58:74: ce:48:22:bf:c8:53:5e:5d:98:1e:24:3e:36:6c:42: 39:c2:2a:a5:e4:de:c7:c6:5f:23:da:b5:18:18:bf: 1a:a5:f6:6b:b7:36:d7:1e:3d:9d:c4:5d:eb:ec:31: 63:04:ce:08:0c:04:05:ca:b7:a9:51:99:37:bd:de: 83:24:74:7c:07:a3:41:33:1f:e6:47:fa:49:49:e5: 2b:be:a1:6a:12:94:c8:08:2e:58:2c:dd:bd:35:7c: 1a:41:f6:34:85:8d:18:c0:7e:d0:86:63:1a:6f:59: 9d:08:45:0f:74:ae:3d:d5:c8:75:6c:40:56:5e:c8: 46:b6:03:3b:1b:d0:8a:80:40:ab:79:7b:fd:1d:64: 55:28:9b:03:bb:b0:df:8a:ac:8b:8f:8c:e4:de:2b: a9:6c:cc:09:ca:b4:7b:bf:d0:30:ac:af:c1:72:04: a6:8e:51:aa:ba:87:cd:00:8b:31:d8:ad:a7:1b:e2: c8:62:5a:5a:f2:16:be:a1:27:50:b9:da:03:9f:b4: ae:6a:e4:32:c9:bc:b8:bc:90:d9:59:e2:de:cf:f6: ec:a2:73:2f:94:81:07:b3:6d:36:88:c1:70:2a:d9: f2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8A:84:C0:71:98:7E:EF:A3:FF:74:52:2A:05:A4:F3:ED:EC:51:1A X509v3 Authority Key Identifier: keyid:AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:51:4b:02:25:8a:be:73:d7:68:8a:18:95:af:88:9e:ab:92: 36:fa:60:a6:89:e0:da:03:37:a8:f4:f2:1b:43:12:f3:ce:5a: c5:94:1a:1c:95:07:21:c9:ae:d7:39:d5:c5:5e:95:53:a0:93: 7e:16:f9:21:63:45:c9:cc:ac:d9:ec:cd:94:6f:0d:56:1c:21: 16:59:24:bf:44:44:ea:6f:6f:4b:a1:c0:dc:38:f6:92:e4:05: 2d:bb:bf:ab:9e:c2:12:62:9b:4b:4f:45:93:75:28:c6:f6:4a: 24:51:86:52:ce:32:cd:fd:db:b0:e4:1e:51:70:46:7e:fb:7f: 66:ce:dd:ad:1c:dc:8a:b2:dd:55:d4:80:b6:aa:fe:df:fa:2d: 1c:b3:d2:90:a3:94:8f:94:8c:14:3d:60:49:e0:04:a5:d7:a9: f8:14:5c:3f:1f:d1:4a:21:cb:30:c0:d1:12:6e:28:9d:38:0e: 20:68:11:54:91:c5:15:1a:47:72:35:6f:df:6d:6b:44:08:86: e9:70:86:23:b4:1f:49:b6:20:21:67:3b:e7:89:dd:48:c5:e6: f6:bc:64:21:ed:68:cd:fe:6a:b5:8d:f3:64:3b:2c:ef:e8:79: d6:4a:5d:4b:2a:04:27:ac:ed:53:7c:1e:c1:6a:b8:0c:af:49: fe:9c:29:ab -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUHkqdq8Hysh0jYanuDxg7THDsz1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDMTFBODI0RDk5MjNCRTkyMTdCN0REMkVENkNFQzk5 NkRCRkZGOTAeFw0yNjEwMDMyMTMzMDhaFw0yNjEwMDUwMTI2MDhaMDMxMTAvBgNV BAMTKEY0OEE4NEMwNzE5ODdFRUZBM0ZGNzQ1MjJBMDVBNEYzRURFQzUxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHCpNMX4ip/Jz/lmEoCf2zQeO hveAzLHpVH9YdM5IIr/IU15dmB4kPjZsQjnCKqXk3sfGXyPatRgYvxql9mu3Ntce PZ3EXevsMWMEzggMBAXKt6lRmTe93oMkdHwHo0EzH+ZH+klJ5Su+oWoSlMgILlgs 3b01fBpB9jSFjRjAftCGYxpvWZ0IRQ90rj3VyHVsQFZeyEa2Azsb0IqAQKt5e/0d ZFUomwO7sN+KrIuPjOTeK6lszAnKtHu/0DCsr8FyBKaOUaq6h80AizHYracb4shi WlryFr6hJ1C52gOftK5q5DLJvLi8kNlZ4t7P9uyicy+UgQezbTaIwXAq2fKnAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU9IqEwHGYfu+j/3RSKgWk8+3sURowHwYDVR0j BBgwFoAUr8Eagk2ZI76SF7fdLtbOyZbb//kwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVElO VEVDSC8wL0FGQzExQTgyNEQ5OTIzQkU5MjE3QjdERDJFRDZDRUM5OTZEQkZGRjku Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQUZDMTFBODI0RDk5MjNCRTkyMTdCN0RE MkVENkNFQzk5NkRCRkZGOS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JFU1RJTlRFQ0gvMC9BRkMx MUE4MjREOTkyM0JFOTIxN0I3REQyRUQ2Q0VDOTk2REJGRkY5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA EVFLAiWKvnPXaIoYla+InquSNvpgpong2gM3qPTyG0MS885axZQaHJUHIcmu1znV xV6VU6CTfhb5IWNFycys2ezNlG8NVhwhFlkkv0RE6m9vS6HA3Dj2kuQFLbu/q57C EmKbS09Fk3UoxvZKJFGGUs4yzf3bsOQeUXBGfvt/Zs7drRzcirLdVdSAtqr+3/ot HLPSkKOUj5SMFD1gSeAEpdep+BRcPx/RSiHLMMDREm4onTgOIGgRVJHFFRpHcjVv 321rRAiG6XCGI7QfSbYgIWc754ndSMXm9rxkIe1ozf5qtY3zZDss7+h51kpdSyoE J6ztU3wewWq4DK9J/pwpqw== -----END CERTIFICATE-----Generated at Sun Oct 4 07:01:52 2026 by rpki-client