$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json) Hash identifier: ppV7Vq6CUcvnOax0UF3ue/sUnCePgJZBIL6S73dkOYU= Subject key identifier: C3:36:8A:F7:49:F6:30:1D:B5:9A:0D:99:CA:4D:D4:0A:BF:95:5A:07 Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Certificate serial: 2108C53952D35DC0ADC96A4C4C3901A3F438752C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft Manifest number: 0329 Signing time: Thu 23 Jul 2026 09:15:11 +0000 Manifest this update: Thu 23 Jul 2026 09:10:11 +0000 Manifest next update: Fri 24 Jul 2026 11:02:11 +0000 Files and hashes: 1: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=) 2: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=) 3: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=) 4: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=) 5: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=) 6: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=) 7: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: MrKzu5KPjQxEEMjkIjcFMPZQK2nKuVaInMtlOXQcXj4=) 8: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=) 9: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:08:c5:39:52:d3:5d:c0:ad:c9:6a:4c:4c:39:01:a3:f4:38:75:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Validity Not Before: Jul 23 09:10:11 2026 GMT Not After : Jul 24 11:02:11 2026 GMT Subject: CN=C3368AF749F6301DB59A0D99CA4DD40ABF955A07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:3c:48:7b:3b:2a:da:85:02:5c:29:86:c4: 63:09:dd:d0:64:14:27:7a:d2:97:36:c6:6c:52:72: fa:1b:48:a3:ff:1b:f6:89:e0:09:0f:e9:a0:4c:0a: 18:36:47:99:84:ff:e7:a8:4f:be:3e:1b:a2:2d:8d: 24:0d:29:78:d2:80:d6:b2:a3:1d:34:fe:40:4b:d2: 86:f5:16:c6:3a:6c:8e:6a:a0:f8:f0:5b:43:b9:3d: 6b:2e:25:fa:f1:3b:d7:50:33:19:5e:5d:d5:f2:88: 67:1f:d3:b7:4f:31:17:0e:30:c4:ae:4c:39:f3:5f: e9:74:26:c5:91:e7:0c:fc:66:c7:55:4a:23:40:49: 55:21:b5:ac:da:73:ec:ac:76:72:82:03:59:46:a1: d4:56:6a:8c:a6:b1:06:c6:20:92:67:9b:26:13:1d: 7c:05:c0:f8:fd:ef:c5:b7:3f:23:a8:01:56:07:f4: 89:62:0b:8b:b3:49:79:0e:eb:81:02:1d:68:02:04: 46:30:2e:8b:a1:d4:46:cb:61:1c:d1:72:f1:80:b4: 95:c3:56:eb:29:2b:5b:99:80:fa:f1:5c:b9:bf:3d: 76:b7:67:a4:e2:97:b6:5f:8c:47:31:4b:11:32:80: f1:a8:83:5a:ad:b4:8b:95:3a:27:c3:a8:f2:4f:40: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:36:8A:F7:49:F6:30:1D:B5:9A:0D:99:CA:4D:D4:0A:BF:95:5A:07 X509v3 Authority Key Identifier: keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:2f:7f:79:33:64:f9:07:76:90:03:27:3a:89:6e:3f:14:b9: 3e:45:1c:dc:16:4c:72:56:ec:99:08:f3:ef:13:eb:ce:9a:f9: ed:9d:bc:77:fa:cc:46:57:6b:74:1c:11:ce:60:1d:0d:1f:3a: 8c:69:88:78:d2:62:09:ae:0b:2f:e7:f7:d4:ac:39:a7:df:b9: 1c:ef:40:5c:84:93:e1:4a:df:dd:52:6e:10:29:43:df:65:50: 1b:bc:a7:b6:3a:c6:37:94:05:f8:fa:e3:9a:3b:a4:1f:f3:cf: 0e:d1:aa:c9:2a:41:fe:df:d5:10:3c:5b:57:87:58:3e:ee:bc: ea:73:2e:25:83:d4:90:ff:3c:60:cd:ca:43:01:15:8b:6f:07: fc:29:f8:59:d8:71:a1:b0:5b:1c:3c:9d:00:b1:04:f6:8a:fc: 8b:d5:70:c2:ba:0e:0d:60:e5:06:17:f6:14:83:a2:c0:09:d9: 5c:80:2f:ca:b0:ae:d4:b2:cf:33:9e:2c:12:56:23:5b:eb:5f: 02:b8:db:11:21:89:93:26:57:91:7f:15:5e:4b:18:2c:de:22: 02:e9:60:9d:54:72:1a:ac:72:1d:0b:6b:aa:5c:ce:5f:47:2f: 8d:e7:99:e2:e7:44:11:bd:2e:48:68:2a:59:b8:3d:49:b4:82: d7:b3:3e:25 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUIQjFOVLTXcCtyWpMTDkBo/Q4dSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex OGJlYjY1OTAeFw0yNjA3MjMwOTEwMTFaFw0yNjA3MjQxMTAyMTFaMDMxMTAvBgNV BAMTKEMzMzY4QUY3NDlGNjMwMURCNTlBMEQ5OUNBNERENDBBQkY5NTVBMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhzxIezsq2oUCXCmGxGMJ3dBk FCd60pc2xmxScvobSKP/G/aJ4AkP6aBMChg2R5mE/+eoT74+G6ItjSQNKXjSgNay ox00/kBL0ob1FsY6bI5qoPjwW0O5PWsuJfrxO9dQMxleXdXyiGcf07dPMRcOMMSu TDnzX+l0JsWR5wz8ZsdVSiNASVUhtazac+ysdnKCA1lGodRWaoymsQbGIJJnmyYT HXwFwPj978W3PyOoAVYH9IliC4uzSXkO64ECHWgCBEYwLouh1EbLYRzRcvGAtJXD VuspK1uZgPrxXLm/PXa3Z6Til7ZfjEcxSxEygPGog1qttIuVOifDqPJPQCNfAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQUwzaK90n2MB21mg2Zyk3UCr+VWgcwHwYDVR0j BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBADgvf3kzZPkHdpADJzqJbj8UuT5FHNwWTHJW7JkI8+8T686a+e2dvHf6 zEZXa3QcEc5gHQ0fOoxpiHjSYgmuCy/n99SsOaffuRzvQFyEk+FK391SbhApQ99l UBu8p7Y6xjeUBfj645o7pB/zzw7RqskqQf7f1RA8W1eHWD7uvOpzLiWD1JD/PGDN ykMBFYtvB/wp+FnYcaGwWxw8nQCxBPaK/IvVcMK6Dg1g5QYX9hSDosAJ2VyAL8qw rtSyzzOeLBJWI1vrXwK42xEhiZMmV5F/FV5LGCzeIgLpYJ1Uchqsch0La6pczl9H L43nmeLnRBG9LkhoKlm4PUm0gtezPiU= -----END CERTIFICATE-----Generated at Fri Jul 24 01:37:16 2026 by rpki-client