$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json) Hash identifier: yGCki4aMF8xYXqvxFh/SPoGSln7gXA7eCKIOT7tX5N0= Subject key identifier: BC:E8:01:D3:97:B3:62:D2:02:8A:E9:48:0B:7B:B7:9D:61:18:6D:78 Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Certificate serial: 7F9B9089B2F300817718E13D946C7E2072B033C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft Manifest number: 0289 Signing time: Wed 25 Mar 2026 19:39:10 +0000 Manifest this update: Wed 25 Mar 2026 19:34:10 +0000 Manifest next update: Thu 26 Mar 2026 22:46:10 +0000 Files and hashes: 1: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: S1Hk3AYuSZYOBskKYvXEyyUgwb9BNabOzwnsXUytRkw=) 2: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=) 3: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=) 4: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=) 5: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=) 6: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=) 7: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=) 8: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=) 9: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 22:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9b:90:89:b2:f3:00:81:77:18:e1:3d:94:6c:7e:20:72:b0:33:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Validity Not Before: Mar 25 19:34:10 2026 GMT Not After : Mar 26 22:46:10 2026 GMT Subject: CN=BCE801D397B362D2028AE9480B7BB79D61186D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a2:36:0c:14:e5:69:d3:7a:ea:88:3f:f8:78: 4b:b2:df:3f:f6:e7:ab:f5:c1:99:f2:7f:87:a6:d6: fa:b1:01:8c:57:73:4d:1c:8d:62:8c:f6:1d:78:56: 4d:ff:a5:8d:33:16:34:3a:9d:ea:ce:fb:0a:c8:bb: 82:b2:22:09:e7:38:57:86:8e:6e:5f:9b:1f:65:e8: 3e:9a:3b:38:e2:83:53:63:3d:f5:78:2f:02:83:cc: 0d:c5:56:0e:69:95:ad:0a:52:9a:37:9d:9d:2a:d4: a6:48:70:44:a6:87:21:ed:60:86:1c:3c:bb:21:9e: 9a:37:23:2e:09:a0:75:ba:f5:75:ff:4e:58:b9:da: 67:91:65:e5:2b:2b:8b:71:65:ec:05:f4:a3:9f:13: 6e:68:6c:b9:1c:7f:28:9e:34:04:97:99:ab:4a:31: 2c:8e:05:a2:05:1b:9c:45:6a:62:f6:13:01:f3:fa: df:19:62:50:3e:e8:e5:ee:fb:78:3b:82:19:2f:17: c7:2a:53:1e:94:81:20:d7:52:d4:3b:8b:15:b9:16: 6a:46:c3:c2:b4:90:60:f6:f2:1a:ee:2f:96:d0:ad: dc:e5:81:e8:58:0a:a0:5c:60:36:e5:40:82:ad:75: 71:31:5f:3c:bd:9c:11:b6:0f:f6:1c:6d:75:72:5b: 00:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E8:01:D3:97:B3:62:D2:02:8A:E9:48:0B:7B:B7:9D:61:18:6D:78 X509v3 Authority Key Identifier: keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e9:fc:94:01:34:2e:0a:2a:96:a4:8b:31:ec:ad:e6:2c:a3: f9:74:3c:f7:48:f4:97:7b:0c:1c:17:1b:5a:be:13:e3:4a:57: 11:9b:16:71:ad:51:1b:8e:c9:97:52:a6:fc:57:cd:5f:ac:e6: 45:39:d6:72:0c:bb:44:38:6d:f9:31:ce:f3:f8:34:39:a7:3e: d1:0c:cd:f3:59:23:49:ca:c4:63:54:8a:f5:89:24:44:f9:23: 96:72:6d:66:58:ef:ec:e4:12:18:62:7e:1d:73:3a:8e:d0:50: 13:14:de:0d:f2:65:8e:fd:53:00:6b:a8:8e:f5:21:08:93:4d: 2f:5f:72:9d:56:6f:d2:40:c8:98:db:11:4e:cf:ad:92:6b:68: fe:96:e5:32:b3:38:2b:3b:c9:37:31:a5:dc:20:c1:42:48:a6: 41:13:1f:e0:9c:d7:90:fc:8f:75:cd:36:fc:62:26:74:8a:0c: 11:9e:a8:29:a9:ff:91:70:48:f7:4a:f5:0d:1a:fe:69:b1:1e: f5:0e:d4:2a:06:68:59:ae:52:55:12:bd:fa:1b:c3:34:4c:9b: 4d:c2:a3:f9:14:f0:49:21:86:04:c6:cd:75:9a:29:ff:2e:a7: 71:a7:a9:01:07:db:0f:24:fc:ef:37:67:a3:e7:cd:0a:c0:0a: ba:56:5a:3c -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUf5uQibLzAIF3GOE9lGx+IHKwM8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex OGJlYjY1OTAeFw0yNjAzMjUxOTM0MTBaFw0yNjAzMjYyMjQ2MTBaMDMxMTAvBgNV BAMTKEJDRTgwMUQzOTdCMzYyRDIwMjhBRTk0ODBCN0JCNzlENjExODZENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqojYMFOVp03rqiD/4eEuy3z/2 56v1wZnyf4em1vqxAYxXc00cjWKM9h14Vk3/pY0zFjQ6nerO+wrIu4KyIgnnOFeG jm5fmx9l6D6aOzjig1NjPfV4LwKDzA3FVg5pla0KUpo3nZ0q1KZIcESmhyHtYIYc PLshnpo3Iy4JoHW69XX/Tli52meRZeUrK4txZewF9KOfE25obLkcfyieNASXmatK MSyOBaIFG5xFamL2EwHz+t8ZYlA+6OXu+3g7ghkvF8cqUx6UgSDXUtQ7ixW5FmpG w8K0kGD28hruL5bQrdzlgehYCqBcYDblQIKtdXExXzy9nBG2D/YcbXVyWwARAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQUvOgB05ezYtICiulIC3u3nWEYbXgwHwYDVR0j BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAIbp/JQBNC4KKpakizHsreYso/l0PPdI9Jd7DBwXG1q+E+NKVxGbFnGt URuOyZdSpvxXzV+s5kU51nIMu0Q4bfkxzvP4NDmnPtEMzfNZI0nKxGNUivWJJET5 I5ZybWZY7+zkEhhifh1zOo7QUBMU3g3yZY79UwBrqI71IQiTTS9fcp1Wb9JAyJjb EU7PrZJraP6W5TKzOCs7yTcxpdwgwUJIpkETH+Cc15D8j3XNNvxiJnSKDBGeqCmp /5FwSPdK9Q0a/mmxHvUO1CoGaFmuUlUSvfobwzRMm03Co/kU8EkhhgTGzXWaKf8u p3GnqQEH2w8k/O83Z6PnzQrACrpWWjw= -----END CERTIFICATE-----Generated at Thu Mar 26 09:16:50 2026 by rpki-client