$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json) Hash identifier: dLYJ61ODh0omiQultAcELXZh6aboPzagXqU/mOKSN0g= Subject key identifier: E5:6A:DB:BE:38:35:0E:7A:63:42:9E:BC:C9:C6:ED:CC:8F:F1:0E:FA Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Certificate serial: 4C097C789469626524F9EA6624987FD01E579F42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft Manifest number: 02F4 Signing time: Sat 13 Jun 2026 17:10:06 +0000 Manifest this update: Sat 13 Jun 2026 17:05:06 +0000 Manifest next update: Sun 14 Jun 2026 21:07:06 +0000 Files and hashes: 1: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=) 2: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=) 3: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=) 4: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=) 5: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=) 6: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=) 7: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=) 8: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=) 9: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: BTXaw8btuSydbx7Iy3Kht01SB9vmsZgLzBJcdbBTHdo=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:09:7c:78:94:69:62:65:24:f9:ea:66:24:98:7f:d0:1e:57:9f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Validity Not Before: Jun 13 17:05:06 2026 GMT Not After : Jun 14 21:07:06 2026 GMT Subject: CN=E56ADBBE38350E7A63429EBCC9C6EDCC8FF10EFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:0a:ce:35:0b:77:c7:ff:10:69:4b:8f:1f: 58:8a:c7:ce:01:c1:ac:89:1a:83:89:a8:dd:f0:74: f0:a9:fc:25:04:5b:48:89:aa:81:13:07:14:10:f5: ac:65:5e:17:cc:ea:4e:aa:96:89:31:24:32:d0:4d: ba:c7:41:4d:95:04:f3:59:2e:a8:e9:bd:74:03:38: c4:a3:1b:78:67:bc:af:e3:b8:85:5a:71:1f:b5:71: 19:ab:3b:92:ca:66:42:91:14:ce:43:43:22:68:67: 2b:60:61:0b:a6:ad:c2:40:0b:f7:54:94:bd:04:1c: 48:4b:c3:dd:d3:69:db:5b:99:b9:44:b2:2a:d2:42: db:a5:b9:9b:4f:7f:57:37:40:60:62:f7:57:ac:6f: d3:9b:92:72:26:d1:2f:63:cf:64:be:3f:10:7b:b3: a4:99:99:d7:7e:e6:1a:08:9e:df:00:98:fc:3b:07: 87:68:36:52:2d:a8:20:3a:36:4b:76:54:b7:96:6e: 96:43:97:39:93:65:25:17:f2:51:e4:a4:d7:13:b2: 24:db:b6:97:d0:81:8a:8e:81:db:c6:4b:56:a5:ac: 79:84:4d:59:60:b3:31:5a:13:0f:65:31:23:b3:ca: 6d:93:26:35:d5:fc:5a:48:27:3c:a3:10:39:cf:fc: 67:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6A:DB:BE:38:35:0E:7A:63:42:9E:BC:C9:C6:ED:CC:8F:F1:0E:FA X509v3 Authority Key Identifier: keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:0d:6e:a0:18:73:fa:92:2d:ad:a2:05:07:ff:86:e4:10:e3: 55:d2:fa:b2:34:f7:27:bf:3a:91:ab:6f:f8:fb:91:25:25:a7: 85:bf:57:5e:a6:f3:13:e6:bb:4c:09:f9:18:95:c3:dc:41:4c: fd:5b:92:25:f0:70:14:29:a0:f5:7e:dc:63:cc:98:2c:12:1f: 40:4e:77:a8:f4:47:02:c5:fa:dd:3f:03:25:75:98:d5:74:54: 08:f5:f2:11:ff:73:ba:0d:c6:c6:06:38:f4:d2:c4:3a:42:53: dc:ee:0f:fe:31:7c:39:ef:e9:10:ce:ed:c4:a8:c9:18:e6:f1: ba:77:74:a6:cd:1f:ee:a5:37:a6:26:dd:59:1b:f8:08:74:db: 41:b9:f3:c9:c5:1f:67:ee:f5:31:f1:74:d6:5d:7a:f9:3c:e5: df:4e:6e:61:ca:cd:28:2d:99:51:5b:54:3f:24:e6:f5:7d:f5: 65:19:fe:de:b7:f7:fd:ae:a3:47:27:7c:fe:8d:68:88:0d:e6: 6b:60:53:29:5f:ac:39:50:4f:9e:08:fa:8a:3b:8c:c1:ee:95: 36:c8:dc:4c:94:8f:ee:61:3f:c2:6f:c8:a3:69:35:69:c0:ca: eb:b5:6c:b7:af:2f:70:c7:16:89:33:2f:e2:90:d9:5b:26:eb: eb:45:68:f4 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUTAl8eJRpYmUk+epmJJh/0B5Xn0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex OGJlYjY1OTAeFw0yNjA2MTMxNzA1MDZaFw0yNjA2MTQyMTA3MDZaMDMxMTAvBgNV BAMTKEU1NkFEQkJFMzgzNTBFN0E2MzQyOUVCQ0M5QzZFRENDOEZGMTBFRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DwrONQt3x/8QaUuPH1iKx84B wayJGoOJqN3wdPCp/CUEW0iJqoETBxQQ9axlXhfM6k6qlokxJDLQTbrHQU2VBPNZ LqjpvXQDOMSjG3hnvK/juIVacR+1cRmrO5LKZkKRFM5DQyJoZytgYQumrcJAC/dU lL0EHEhLw93TadtbmblEsirSQtuluZtPf1c3QGBi91esb9ObknIm0S9jz2S+PxB7 s6SZmdd+5hoInt8AmPw7B4doNlItqCA6Nkt2VLeWbpZDlzmTZSUX8lHkpNcTsiTb tpfQgYqOgdvGS1alrHmETVlgszFaEw9lMSOzym2TJjXV/FpIJzyjEDnP/GfTAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQU5Wrbvjg1DnpjQp68ycbtzI/xDvowHwYDVR0j BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBALINbqAYc/qSLa2iBQf/huQQ41XS+rI09ye/OpGrb/j7kSUlp4W/V16m 8xPmu0wJ+RiVw9xBTP1bkiXwcBQpoPV+3GPMmCwSH0BOd6j0RwLF+t0/AyV1mNV0 VAj18hH/c7oNxsYGOPTSxDpCU9zuD/4xfDnv6RDO7cSoyRjm8bp3dKbNH+6lN6Ym 3Vkb+Ah020G588nFH2fu9THxdNZdevk85d9ObmHKzSgtmVFbVD8k5vV99WUZ/t63 9/2uo0cnfP6NaIgN5mtgUylfrDlQT54I+oo7jMHulTbI3EyUj+5hP8JvyKNpNWnA yuu1bLevL3DHFokzL+KQ2Vsm6+tFaPQ= -----END CERTIFICATE-----Generated at Sun Jun 14 02:10:29 2026 by rpki-client