$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft File: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft (raw, json) Hash identifier: Gu9Yw0LiiCdkdrPVPX/JjtSK6T9R3BwMFtvOfQ60JmE= Subject key identifier: 25:C4:EA:22:09:D7:02:55:17:7B:F3:4F:2A:44:4E:AD:D5:4D:AE:35 Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F Certificate issuer: /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F Certificate serial: 1010A9DAB9C1F5FDE567BE6151626BF7932E4455 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft Manifest number: 0285 Signing time: Wed 25 Mar 2026 18:14:10 +0000 Manifest this update: Wed 25 Mar 2026 18:09:10 +0000 Manifest next update: Thu 26 Mar 2026 20:09:10 +0000 Files and hashes: 1: 323430313a32303a3a2f33322d3430203d3e2034383432.roa (hash: r7XF1F6usoHLVxdY4PL0ijZQoAdAO6Q7O9MythfN5DU=) 2: 3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa (hash: IC14R/7PisX2xUgxvpoOXBZj7EziWG1xk34G0Uwi2U4=) 3: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl (hash: rVLuPJNRDFSNwcujyyf0hD+x5D2BSMLBlJgqgxSK12o=) 4: 3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa (hash: UZ3HfpRoFPwrSlLQjUa+JXwDUWjdmwDKW3oepzOiXUA=) 5: 323430313a32303a313333303a3a2f34342d3436203d3e2034383432.roa (hash: O1Qc6NM/hedKx5n8P2TcJKymQoYIgoGcEleUexrHAa4=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 20:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:10:a9:da:b9:c1:f5:fd:e5:67:be:61:51:62:6b:f7:93:2e:44:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F Validity Not Before: Mar 25 18:09:10 2026 GMT Not After : Mar 26 20:09:10 2026 GMT Subject: CN=25C4EA2209D70255177BF34F2A444EADD54DAE35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:1c:ce:d4:e1:1c:25:85:68:90:ea:52:dc: c9:af:3f:3c:68:dc:5f:aa:cf:36:dd:7a:64:15:70: a3:a7:0a:96:ad:c1:a7:93:f6:a8:b6:7d:90:c0:d1: 42:6c:1f:b8:d1:72:ec:5f:ac:ba:80:a4:5d:ea:e2: 71:c0:d1:b1:49:69:10:45:71:92:9e:a8:4f:40:21: 6b:95:e0:3d:ff:c9:18:75:fb:f3:2c:f1:bf:ff:80: 54:9b:ef:30:23:22:b9:4b:35:66:e3:e7:a3:b5:7e: cc:55:2a:d8:91:4c:c3:4f:3a:f8:79:db:f9:23:83: d7:20:f3:bc:82:50:ce:e3:27:c7:20:0f:e8:8a:4a: 3c:27:9b:61:72:a8:20:92:ac:33:2d:5d:bc:b1:05: 63:85:f3:1f:a6:fe:72:e2:22:9a:b2:df:53:6d:38: 8b:a1:92:5f:eb:b0:95:a3:4f:98:2d:15:21:b7:49: d0:44:3b:a7:96:02:6a:a3:b2:eb:99:43:8a:72:55: bd:2a:56:8c:f4:97:3b:7f:e2:46:ae:07:19:30:6d: a5:5f:bf:bd:0a:5f:d4:72:31:6d:b7:0b:8d:a6:0e: 69:37:4c:c2:f3:af:3c:22:b0:86:e5:67:6b:d2:a9: 9d:28:08:93:fe:0a:25:a3:11:1a:dc:65:7e:31:d6: 1b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C4:EA:22:09:D7:02:55:17:7B:F3:4F:2A:44:4E:AD:D5:4D:AE:35 X509v3 Authority Key Identifier: keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:b7:ec:4f:e6:81:39:a1:84:c5:2f:5a:49:7b:04:db:7e:85: fc:7a:36:5b:cd:88:6c:c4:db:6f:b2:b6:db:c1:b3:11:44:b3: 7c:7d:b1:ba:25:f0:0b:f6:27:bd:05:ce:26:40:54:88:a8:43: f4:15:39:98:b3:47:90:a9:0b:89:83:46:30:87:5b:7b:20:e2: a1:87:4c:1f:86:01:3e:b3:6a:a2:43:7d:1f:bc:01:01:59:31: c4:5c:98:81:98:ed:9a:98:d7:bd:98:be:84:50:5a:59:68:2d: b5:28:34:2c:0b:fb:08:10:a4:e7:b4:a1:51:74:9e:a3:03:6b: 16:ec:a3:34:96:5e:4d:c8:9e:c0:74:66:17:f5:2b:1e:04:07: 9d:76:52:94:d3:4c:2c:2e:92:d6:8c:e0:28:9b:61:af:b2:70: 02:db:ee:a5:d7:fd:1d:6d:37:09:0f:7d:25:7d:55:d0:d1:70: 46:34:98:cf:dc:4f:81:3d:6d:ff:fa:49:8b:be:90:7c:92:bb: 4d:b1:ed:10:6c:57:4f:47:3f:1e:cb:87:4d:30:03:23:78:80: 28:f3:ec:64:d2:23:c6:4c:c4:b1:75:fc:a4:f1:4b:29:39:3e: 0d:4b:d7:ec:f0:82:81:cb:d6:3f:6b:0e:e3:4b:24:bf:79:1b: 5c:9e:ec:5a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUEBCp2rnB9f3lZ75hUWJr95MuRFUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjU2NzUwMDAwMTEwLwYDVQQFEyg0NTlEMkI4MzRB M0JBMDhDMEFBNjdDNkU1NzgxNDZBOEIxRkUyQzJGMB4XDTI2MDMyNTE4MDkxMFoX DTI2MDMyNjIwMDkxMFowMzExMC8GA1UEAxMoMjVDNEVBMjIwOUQ3MDI1NTE3N0JG MzRGMkE0NDRFQURENTREQUUzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMkDHM7U4RwlhWiQ6lLcya8/PGjcX6rPNt16ZBVwo6cKlq3Bp5P2qLZ9kMDR QmwfuNFy7F+suoCkXericcDRsUlpEEVxkp6oT0Aha5XgPf/JGHX78yzxv/+AVJvv MCMiuUs1ZuPno7V+zFUq2JFMw086+Hnb+SOD1yDzvIJQzuMnxyAP6IpKPCebYXKo IJKsMy1dvLEFY4XzH6b+cuIimrLfU204i6GSX+uwlaNPmC0VIbdJ0EQ7p5YCaqOy 65lDinJVvSpWjPSXO3/iRq4HGTBtpV+/vQpf1HIxbbcLjaYOaTdMwvOvPCKwhuVn a9KpnSgIk/4KJaMRGtxlfjHWG6sCAwEAAaOCAhcwggITMB0GA1UdDgQWBBQlxOoi CdcCVRd7808qRE6t1U2uNTAfBgNVHSMEGDAWgBRFnSuDSjugjAqmfG5XgUaosf4s LzAOBgNVHQ8BAf8EBAMCB4AwcAYDVR0fBGkwZzBloGOgYYZfcnN5bmM6Ly9yc3lu Yy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtpLzMvNDU5RDJCODM0 QTNCQTA4QzBBQTY3QzZFNTc4MTQ2QThCMUZFMkMyRi5jcmwwfgYIKwYBBQUHAQEE cjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRv cnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUlowcmcwbzdvSXdL cG54dVY0RkdxTEgtTEM4LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVwby9UaWFuaGFpUnBr aS8zLzQ1OUQyQjgzNEEzQkEwOEMwQUE2N0M2RTU3ODE0NkE4QjFGRTJDMkYubWZ0 MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUt+xP5oE5oYTFL1pJewTbfoX8ejZbzYhsxNtvsrbbwbMRRLN8fbG6 JfAL9ie9Bc4mQFSIqEP0FTmYs0eQqQuJg0Ywh1t7IOKhh0wfhgE+s2qiQ30fvAEB WTHEXJiBmO2amNe9mL6EUFpZaC21KDQsC/sIEKTntKFRdJ6jA2sW7KM0ll5NyJ7A dGYX9SseBAeddlKU00wsLpLWjOAom2GvsnAC2+6l1/0dbTcJD30lfVXQ0XBGNJjP 3E+BPW3/+kmLvpB8krtNse0QbFdPRz8ey4dNMAMjeIAo8+xk0iPGTMSxdfyk8Usp OT4NS9fs8IKBy9Y/aw7jSyS/eRtcnuxa -----END CERTIFICATE-----Generated at Thu Mar 26 02:29:43 2026 by rpki-client