$ rpki-client -vvf rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft File: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft (raw, json) Hash identifier: 5VBKUBAm+e9zas3uWXjB3vw1jvalYL/vV/+ngzsgyvs= Subject key identifier: E4:2E:60:8B:42:AF:58:41:F3:CD:78:4D:71:88:E8:86:36:A1:A6:4D Authority key identifier: AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9 Certificate issuer: /CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9 Certificate serial: 2A98B0C477BC093E8BF08C8FC4C9142DD2764F33 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer Subject info access: rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft Manifest number: 80 Signing time: Fri 14 Aug 2026 21:38:33 +0000 Manifest this update: Fri 14 Aug 2026 21:33:33 +0000 Manifest next update: Sat 15 Aug 2026 23:25:33 +0000 Files and hashes: 1: AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl (hash: NVu/4PSBWAqZhtJNVdvEVlw6vU1cbXR4S+Y2OXm3L2Q=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Aug 2026 23:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:98:b0:c4:77:bc:09:3e:8b:f0:8c:8f:c4:c9:14:2d:d2:76:4f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9 Validity Not Before: Aug 14 21:33:33 2026 GMT Not After : Aug 15 23:25:33 2026 GMT Subject: CN=E42E608B42AF5841F3CD784D7188E88636A1A64D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:c1:c5:02:11:65:c6:37:77:f0:bd:54:b7: 1d:f5:f0:a4:14:1d:01:6c:26:7b:5d:11:00:35:21: f8:87:93:d8:6d:45:c6:54:2c:b1:1b:da:34:ea:87: c7:54:10:93:0c:35:16:4d:41:b6:de:2e:ab:4b:d8: 5e:6e:0a:5f:39:34:9a:9d:5e:41:89:3e:1c:d9:64: 6e:48:5d:7b:6d:f4:e3:4e:1e:5f:b1:9a:2b:f7:4d: a2:98:b4:52:7b:7a:b8:44:54:e4:53:1d:39:70:37: 09:4f:5b:c1:27:20:5a:90:33:09:46:a7:54:8c:3a: ba:16:d2:a4:3b:c8:34:34:70:31:0d:6d:5f:e0:6f: a3:0e:69:75:eb:e1:61:e6:0b:90:90:b7:4c:46:06: ac:9c:9d:0c:4e:ed:55:76:d4:ad:7b:19:1d:25:30: 12:34:13:48:9d:42:36:24:ad:91:52:ae:df:6c:8e: 12:71:0a:2b:d8:45:f8:a3:74:7f:32:3f:b4:d9:9c: c4:7d:ef:27:ac:de:b9:c1:f6:5a:6a:5d:d2:f3:aa: 4c:6a:cd:4a:fe:b8:4c:2e:db:50:38:e0:e3:0b:b5: d8:1a:ab:09:68:9d:4f:39:f1:88:72:de:4d:f0:0d: 17:fa:58:e5:67:09:14:8a:b7:ac:f0:d4:f9:dd:62: 2a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2E:60:8B:42:AF:58:41:F3:CD:78:4D:71:88:E8:86:36:A1:A6:4D X509v3 Authority Key Identifier: keyid:AF:C1:1A:82:4D:99:23:BE:92:17:B7:DD:2E:D6:CE:C9:96:DB:FF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.cer Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/BESTINTECH/0/AFC11A824D9923BE9217B7DD2ED6CEC996DBFFF9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:71:0b:b8:37:37:25:d6:f7:9e:41:4d:ee:77:b9:ac:c0:a6: 45:14:27:60:0a:e2:45:87:e0:09:78:74:33:4c:be:d7:cd:b0: b0:d3:85:cd:30:36:dd:26:df:4a:59:e9:03:86:24:2b:02:7b: fa:d1:b4:e2:77:dd:00:0d:22:16:b2:4f:81:88:3a:c4:71:5d: 47:9e:cd:6c:7d:b9:93:0e:71:4e:1a:1c:0d:54:d3:76:32:89: 26:46:2b:c5:2e:64:e8:3b:97:5e:24:e0:60:c2:28:16:b9:86: d0:24:a9:a7:f1:0a:e8:5f:2d:16:fb:60:57:71:8b:9e:e3:56: 94:0a:ea:fb:34:32:38:78:a3:c4:ad:cd:bd:1c:7f:e7:46:63: 0f:fa:60:ac:8f:83:2c:86:1e:7d:03:83:19:04:50:78:be:32: 3b:61:07:17:7e:12:b2:61:4d:98:e1:e8:1f:55:f8:32:d9:f9: 85:c8:18:df:1b:c3:38:f7:51:93:ba:bd:49:56:99:2b:86:0b: b2:48:fc:28:80:d0:23:67:63:a9:a3:5d:7f:c5:20:21:6f:17: 69:01:54:aa:51:f5:1d:d8:18:62:db:da:10:4b:00:8a:b4:a1: fb:fe:43:85:a1:d8:ed:ee:55:cb:65:04:09:d6:a3:fc:a3:d9: be:9a:65:5b -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUKpiwxHe8CT6L8IyPxMkULdJ2TzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZDMTFBODI0RDk5MjNCRTkyMTdCN0REMkVENkNFQzk5 NkRCRkZGOTAeFw0yNjA4MTQyMTMzMzNaFw0yNjA4MTUyMzI1MzNaMDMxMTAvBgNV BAMTKEU0MkU2MDhCNDJBRjU4NDFGM0NENzg0RDcxODhFODg2MzZBMUE2NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BcHFAhFlxjd38L1Utx318KQU HQFsJntdEQA1IfiHk9htRcZULLEb2jTqh8dUEJMMNRZNQbbeLqtL2F5uCl85NJqd XkGJPhzZZG5IXXtt9ONOHl+xmiv3TaKYtFJ7erhEVORTHTlwNwlPW8EnIFqQMwlG p1SMOroW0qQ7yDQ0cDENbV/gb6MOaXXr4WHmC5CQt0xGBqycnQxO7VV21K17GR0l MBI0E0idQjYkrZFSrt9sjhJxCivYRfijdH8yP7TZnMR97yes3rnB9lpqXdLzqkxq zUr+uEwu21A44OMLtdgaqwlonU858Yhy3k3wDRf6WOVnCRSKt6zw1PndYiqnAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQU5C5gi0KvWEHzzXhNcYjohjahpk0wHwYDVR0j BBgwFoAUr8Eagk2ZI76SF7fdLtbOyZbb//kwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvQkVTVElO VEVDSC8wL0FGQzExQTgyNEQ5OTIzQkU5MjE3QjdERDJFRDZDRUM5OTZEQkZGRjku Y3JsMG8GCCsGAQUFBwEBBGMwYTBfBggrBgEFBQcwAoZTcnN5bmM6Ly9ycGtpY2Eu dHduaWMudHcvcnBraS9UV05JQ0NBLzEvQUZDMTFBODI0RDk5MjNCRTkyMTdCN0RE MkVENkNFQzk5NkRCRkZGOS5jZXIwcgYIKwYBBQUHAQsEZjBkMGIGCCsGAQUFBzAL hlZyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL0JFU1RJTlRFQ0gvMC9BRkMx MUE4MjREOTkyM0JFOTIxN0I3REQyRUQ2Q0VDOTk2REJGRkY5Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA sHELuDc3Jdb3nkFN7ne5rMCmRRQnYAriRYfgCXh0M0y+182wsNOFzTA23SbfSlnp A4YkKwJ7+tG04nfdAA0iFrJPgYg6xHFdR57NbH25kw5xThocDVTTdjKJJkYrxS5k 6DuXXiTgYMIoFrmG0CSpp/EK6F8tFvtgV3GLnuNWlArq+zQyOHijxK3NvRx/50Zj D/pgrI+DLIYefQODGQRQeL4yO2EHF34SsmFNmOHoH1X4Mtn5hcgY3xvDOPdRk7q9 SVaZK4YLskj8KIDQI2djqaNdf8UgIW8XaQFUqlH1HdgYYtvaEEsAirSh+/5DhaHY 7e5Vy2UECdaj/KPZvpplWw== -----END CERTIFICATE-----Generated at Sat Aug 15 05:20:54 2026 by rpki-client