Fortigate - 100d Firmware Download __exclusive__ Best
Since you cannot patch security holes in routing mode, consider resetting the 100D to (Layer 2). This limits attack surfaces and turns the device into a basic inspection bridge.
When a device is active (non-EOL), the "best" firmware is simply the latest general release. For the 100D, the logic changes. Here is what "BEST" means in the EOL context: Fortigate 100d Firmware Download BEST