$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json) Hash identifier: BXP3H0dZEdeLsXRL/J6ZG/XLoYPuiNyuKgX4qSLfMZM= Subject key identifier: 5A:88:0E:E2:B4:C1:7F:C6:93:3F:38:03:1A:58:04:2A:BA:1D:1C:0F Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Certificate serial: 5637A6758A69201D71D8C7A685A25280DBB78992 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft Manifest number: 02A6 Signing time: Thu 16 Apr 2026 12:14:13 +0000 Manifest this update: Thu 16 Apr 2026 12:09:13 +0000 Manifest next update: Fri 17 Apr 2026 14:13:13 +0000 Files and hashes: 1: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=) 2: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=) 3: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=) 4: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=) 5: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=) 6: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: ZX/KuWI2e2YEL5QUTFx8J6k7KVnrTEhB34gNisMYJ18=) 7: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=) 8: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=) 9: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 Apr 2026 14:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:37:a6:75:8a:69:20:1d:71:d8:c7:a6:85:a2:52:80:db:b7:89:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Validity Not Before: Apr 16 12:09:13 2026 GMT Not After : Apr 17 14:13:13 2026 GMT Subject: CN=5A880EE2B4C17FC6933F38031A58042ABA1D1C0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:ef:52:73:93:27:43:65:63:02:e8:d5:fb: 64:ff:b5:f3:26:5f:8e:2a:40:3a:dc:0c:c3:61:c5: dd:f2:47:da:1e:da:f5:af:14:c3:da:f4:a6:34:1e: 4f:b9:3f:d2:83:f2:24:84:e3:50:99:ae:c4:95:a1: 87:81:5c:53:f1:bd:30:a2:40:f2:58:11:bc:e4:6b: 2d:2e:7f:9f:f5:86:76:80:fd:f7:e3:48:8d:4e:6f: 84:d1:21:91:5e:14:81:55:0b:cc:c4:41:e7:2a:cc: 8e:04:76:4c:78:51:60:fc:e4:7b:07:cf:78:39:40: a8:79:ab:66:40:c9:df:e3:2d:49:ad:84:17:7f:b2: 31:c8:f5:f9:80:0c:52:e0:c8:11:77:91:f1:57:fc: f2:be:ac:cd:12:81:dc:ff:70:35:8b:ab:09:94:d8: dd:1a:ae:9c:e7:02:d7:1a:43:02:04:56:f8:6c:48: a8:b1:84:5c:ec:55:a4:bd:e6:09:e3:db:29:63:62: 0b:8e:80:60:1f:50:f4:91:02:55:aa:e8:cb:f7:96: 23:7a:69:4a:da:f7:d4:35:3f:76:9a:51:51:a8:c6: cd:bc:d3:83:23:d9:3d:8c:6c:2f:5b:e5:ad:b6:a0: 60:cc:27:4c:23:b4:18:3b:e0:8a:f3:39:ff:64:0f: 9a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:88:0E:E2:B4:C1:7F:C6:93:3F:38:03:1A:58:04:2A:BA:1D:1C:0F X509v3 Authority Key Identifier: keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:72:0d:be:e5:72:8c:c8:38:d0:19:51:fc:b6:bd:41:d5:3c: ce:70:e3:bb:a2:b7:c5:58:f5:9f:ac:84:67:e0:7f:80:46:fb: 7c:51:0f:b8:72:b5:0b:bd:e8:d8:74:bd:8c:07:1e:0c:35:c3: d0:99:08:f2:c8:84:08:dc:02:63:b8:f6:cc:03:7d:72:4b:a7: 19:99:6c:08:9e:a4:c1:e0:a7:23:92:15:5e:a9:9a:5f:54:3b: ae:bc:c9:e7:0c:63:aa:28:5d:bb:db:bf:5f:28:6d:b2:df:68: 8b:60:11:bd:f7:5b:1f:de:d9:53:50:ac:02:a0:a3:6f:4f:d7: fc:a7:12:8f:5a:6d:ad:04:b9:d7:87:af:73:a6:b5:54:b7:e9: 54:fb:f3:98:96:fa:04:00:04:fc:ef:55:27:26:ac:18:98:a3: a3:38:74:94:a7:66:fc:b0:0e:8e:f7:a8:16:9b:df:c4:b7:88: 54:53:35:d0:e6:06:59:75:07:0f:c4:68:dd:46:67:4e:38:fb: 66:4a:09:25:20:c6:35:ec:af:aa:c4:4d:46:7f:92:53:a5:a2: 5f:27:33:cf:7f:1d:b7:9b:9d:2c:0f:dd:1c:be:2e:99:bc:ee: 7d:0c:9e:1e:11:ac:a5:a8:7e:cc:55:c7:bc:db:5a:8a:0b:5b: a2:39:7b:29 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUVjemdYppIB1x2MemhaJSgNu3iZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex OGJlYjY1OTAeFw0yNjA0MTYxMjA5MTNaFw0yNjA0MTcxNDEzMTNaMDMxMTAvBgNV BAMTKDVBODgwRUUyQjRDMTdGQzY5MzNGMzgwMzFBNTgwNDJBQkExRDFDMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8u9Sc5MnQ2VjAujV+2T/tfMm X44qQDrcDMNhxd3yR9oe2vWvFMPa9KY0Hk+5P9KD8iSE41CZrsSVoYeBXFPxvTCi QPJYEbzkay0uf5/1hnaA/ffjSI1Ob4TRIZFeFIFVC8zEQecqzI4Edkx4UWD85HsH z3g5QKh5q2ZAyd/jLUmthBd/sjHI9fmADFLgyBF3kfFX/PK+rM0Sgdz/cDWLqwmU 2N0arpznAtcaQwIEVvhsSKixhFzsVaS95gnj2yljYguOgGAfUPSRAlWq6Mv3liN6 aUra99Q1P3aaUVGoxs2804Mj2T2MbC9b5a22oGDMJ0wjtBg74IrzOf9kD5p9AgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQUWogO4rTBf8aTPzgDGlgEKrodHA8wHwYDVR0j BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACRyDb7lcozIONAZUfy2vUHVPM5w47uit8VY9Z+shGfgf4BG+3xRD7hy tQu96Nh0vYwHHgw1w9CZCPLIhAjcAmO49swDfXJLpxmZbAiepMHgpyOSFV6pml9U O668yecMY6ooXbvbv18obbLfaItgEb33Wx/e2VNQrAKgo29P1/ynEo9aba0EudeH r3OmtVS36VT785iW+gQABPzvVScmrBiYo6M4dJSnZvywDo73qBab38S3iFRTNdDm Bll1Bw/EaN1GZ044+2ZKCSUgxjXsr6rETUZ/klOlol8nM89/HbebnSwP3Ry+Lpm8 7n0Mnh4RrKWofsxVx7zbWooLW6I5eyk= -----END CERTIFICATE-----Generated at Fri Apr 17 06:05:41 2026 by rpki-client