$ rpki-client -vvvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json) Hash identifier: CArY7yk8gbb/NCRqBwSrDfAjr3xPrQWTYZHWiepuH14= Subject key identifier: 05:B0:D5:21:96:C1:8C:76:55:2A:F6:36:1F:08:FC:50:12:A7:67:85 Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Certificate serial: 7CBB755835F4390E45A9B78B703D520BAAB837E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft Manifest number: 037F Signing time: Fri 25 Sep 2026 20:35:31 +0000 Manifest this update: Fri 25 Sep 2026 20:30:31 +0000 Manifest next update: Sun 27 Sep 2026 00:27:31 +0000 Files and hashes: 1: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=) 2: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=) 3: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: zpj/iz+19I+pvdXE/sE0Hjma6We+vXv4CK/b30Ay1Zo=) 4: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=) 5: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=) 6: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=) 7: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=) 8: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=) 9: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 00:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:bb:75:58:35:f4:39:0e:45:a9:b7:8b:70:3d:52:0b:aa:b8:37:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Validity Not Before: Sep 25 20:30:31 2026 GMT Not After : Sep 27 00:27:31 2026 GMT Subject: CN=05B0D52196C18C76552AF6361F08FC5012A76785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5b:78:40:eb:40:50:16:e8:d2:da:1b:a6:4d: 64:9f:2a:7c:dc:fc:a1:af:f8:75:80:94:12:e8:79: b5:a7:cd:a3:19:dc:7c:70:f2:53:ae:79:f9:9e:9a: 2b:5d:08:2c:f3:27:8e:31:02:b9:e9:41:7b:dc:43: ae:0b:d1:d7:d7:85:52:79:81:ba:78:f8:2d:60:1e: 57:fc:c9:c1:52:eb:ed:49:71:28:2e:87:0c:a9:12: 17:23:6e:74:d3:15:b7:1a:f4:64:51:46:e8:3f:39: 37:c4:f1:13:b4:dd:34:56:59:59:9f:a6:38:83:0a: 7d:28:a4:79:12:d2:6a:6f:85:53:2c:da:34:bb:93: a5:68:8b:d6:e6:ef:71:88:5b:57:bc:f8:62:30:00: b9:d1:24:66:f5:70:df:6c:44:30:dc:1c:a7:ab:ae: a1:98:11:1c:65:0e:0d:ec:d5:89:85:0d:94:88:65: d8:2b:6e:10:92:b9:83:b3:be:36:47:3b:fe:b2:ab: fc:e1:95:61:75:c5:fd:22:2b:de:b6:1f:21:94:d6: 6f:a8:a7:0b:1d:68:47:a1:6a:e2:8e:2a:81:77:f1: 6b:4b:bd:24:88:fc:37:77:63:4c:2f:13:6c:53:71: 6a:54:08:b1:56:00:09:58:01:28:fb:38:27:55:df: 57:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B0:D5:21:96:C1:8C:76:55:2A:F6:36:1F:08:FC:50:12:A7:67:85 X509v3 Authority Key Identifier: keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:2f:1f:c3:e4:73:c7:fc:ec:d6:19:2a:d0:02:b5:90:10:3b: 16:16:1e:b4:63:1a:de:2e:ff:7d:c5:d6:cd:bd:09:ff:91:a3: 05:a6:e0:37:c1:46:e7:3c:8f:43:6e:f2:e0:30:c6:9d:e0:1c: 7e:94:73:b8:b3:55:1c:41:4d:24:99:c2:78:01:1f:26:21:b9: 91:d1:26:06:5c:00:60:0d:30:4a:2d:74:8e:c0:82:f7:30:b5: 53:80:12:48:a0:94:3f:7c:34:e3:42:f8:c0:a2:46:67:95:ea: 73:30:06:fc:7a:c6:dc:72:12:61:ea:12:5c:7c:9f:8c:2e:7b: a4:6f:b6:34:ad:2f:ab:73:0d:57:ed:5b:c1:f2:e2:94:67:1c: da:a8:ce:60:05:2e:f9:0e:17:ca:4c:d2:bd:09:92:ba:34:6d: 5c:e5:1e:06:68:06:13:b7:07:bf:40:c2:c5:18:b9:ab:d3:3b: e4:a7:98:3c:60:ec:87:45:aa:1b:14:3f:17:73:63:29:97:6a: 89:64:94:4a:67:ee:68:2b:c4:2c:d8:ec:45:43:dd:48:6f:20: 3e:8b:98:44:41:60:e9:ed:ab:6f:6e:cb:a7:5d:21:b4:e2:a6: 75:76:82:95:a5:8d:6f:7f:2b:df:f0:0a:47:83:62:2d:7f:84: 52:7a:84:5a -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUfLt1WDX0OQ5FqbeLcD1SC6q4N+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex OGJlYjY1OTAeFw0yNjA5MjUyMDMwMzFaFw0yNjA5MjcwMDI3MzFaMDMxMTAvBgNV BAMTKDA1QjBENTIxOTZDMThDNzY1NTJBRjYzNjFGMDhGQzUwMTJBNzY3ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0W3hA60BQFujS2humTWSfKnzc /KGv+HWAlBLoebWnzaMZ3Hxw8lOuefmemitdCCzzJ44xArnpQXvcQ64L0dfXhVJ5 gbp4+C1gHlf8ycFS6+1JcSguhwypEhcjbnTTFbca9GRRRug/OTfE8RO03TRWWVmf pjiDCn0opHkS0mpvhVMs2jS7k6Voi9bm73GIW1e8+GIwALnRJGb1cN9sRDDcHKer rqGYERxlDg3s1YmFDZSIZdgrbhCSuYOzvjZHO/6yq/zhlWF1xf0iK962HyGU1m+o pwsdaEehauKOKoF38WtLvSSI/Dd3Y0wvE2xTcWpUCLFWAAlYASj7OCdV31ctAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQUBbDVIZbBjHZVKvY2Hwj8UBKnZ4UwHwYDVR0j BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGcvH8Pkc8f87NYZKtACtZAQOxYWHrRjGt4u/33F1s29Cf+RowWm4DfB Ruc8j0Nu8uAwxp3gHH6Uc7izVRxBTSSZwngBHyYhuZHRJgZcAGANMEotdI7Agvcw tVOAEkiglD98NONC+MCiRmeV6nMwBvx6xtxyEmHqElx8n4wue6RvtjStL6tzDVft W8Hy4pRnHNqozmAFLvkOF8pM0r0Jkro0bVzlHgZoBhO3B79AwsUYuavTO+SnmDxg 7IdFqhsUPxdzYymXaolklEpn7mgrxCzY7EVD3UhvID6LmERBYOntq29uy6ddIbTi pnV2gpWljW9/K9/wCkeDYi1/hFJ6hFo= -----END CERTIFICATE-----Generated at Sat Sep 26 06:26:59 2026 by rpki-client