$ rpki-client -vvvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json) Hash identifier: LrApI7Vx3Ses0jPrliI7rG7IW0uIBBPwVq0XtFxqTZs= Subject key identifier: 67:B5:BF:D4:9E:1B:6A:C2:34:81:00:B8:E2:FB:54:61:E5:A0:88:1C Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Certificate serial: 7898EE11F454DE0DD5F3EDDA14B0140755892E95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft Manifest number: 038F Signing time: Wed 07 Oct 2026 21:45:34 +0000 Manifest this update: Wed 07 Oct 2026 21:40:34 +0000 Manifest next update: Thu 08 Oct 2026 23:43:34 +0000 Files and hashes: 1: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=) 2: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=) 3: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=) 4: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=) 5: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: 6kNcYMmZkk8rZN39pFDHcT5puHIlV7wJKXe5/+o8UI8=) 6: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=) 7: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=) 8: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=) 9: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 23:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:98:ee:11:f4:54:de:0d:d5:f3:ed:da:14:b0:14:07:55:89:2e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Validity Not Before: Oct 7 21:40:34 2026 GMT Not After : Oct 8 23:43:34 2026 GMT Subject: CN=67B5BFD49E1B6AC2348100B8E2FB5461E5A0881C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b0:fe:2a:c2:bf:1d:da:cb:08:ef:e2:07:c4: 47:0c:21:48:8b:c1:64:7c:13:c4:65:20:a3:e5:ec: 7c:78:9f:42:73:b1:af:27:60:5f:69:4a:6c:86:33: 9a:2b:ed:73:34:8e:7b:97:0f:4a:a3:04:f7:16:9d: 0f:7a:a9:bc:52:65:ea:e3:a8:45:8b:d9:f5:19:d1: d3:e7:63:13:40:66:66:9d:20:b9:94:68:5a:6e:47: 39:f9:b4:ff:8d:0a:29:9b:36:db:c5:89:ea:1d:88: 9d:e1:8c:b8:31:7f:0b:63:47:92:0f:24:4c:a2:3d: 2a:20:0d:d4:d9:dd:bc:7d:60:51:b9:3a:c5:2f:36: 3c:85:dd:7e:01:80:ea:5a:b2:c2:db:1f:7c:a6:d9: 47:b2:72:d8:35:0c:0d:a6:c9:0f:fc:c2:ae:2b:be: 1d:82:c1:5c:11:6f:d9:a7:38:23:22:4a:dd:b0:5c: ff:f0:af:86:e6:23:a5:b1:db:81:ff:6f:98:ef:e7: e4:82:4e:a8:fe:6c:c3:04:70:2c:07:28:23:8b:0e: 28:46:1c:9e:1f:e4:a6:ce:ad:34:4a:4e:8d:a6:9b: 78:fa:bc:6e:3c:fa:6c:bb:88:09:2a:e6:6b:79:7f: a6:d6:ca:0f:03:f4:ab:04:94:bb:7b:41:f8:2e:ea: 94:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B5:BF:D4:9E:1B:6A:C2:34:81:00:B8:E2:FB:54:61:E5:A0:88:1C X509v3 Authority Key Identifier: keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3c:f4:0a:ca:0d:51:e4:7c:21:7a:d4:95:27:e8:6f:f0:b4: 41:38:f8:63:3e:36:e2:b1:ee:94:93:28:0a:cb:4e:3f:48:e4: f3:98:26:0f:2b:46:8c:02:b8:a9:0f:9f:c4:fd:80:48:02:cb: b4:44:86:12:f2:68:01:63:f9:58:2a:c7:5e:9a:d6:92:42:78: 0b:e3:47:dc:af:f0:1b:59:3f:7c:a5:12:1d:27:41:03:a7:6c: 19:61:51:5d:bd:21:df:80:20:4e:f0:ad:ef:5d:b1:df:74:29: ad:4f:e5:99:be:a6:60:ea:76:11:e2:85:f4:96:76:99:05:fe: 5a:56:b4:a9:68:9d:2d:93:2a:b8:36:b2:26:e1:33:e9:0c:71: 50:e7:81:d0:04:0f:fc:9a:00:88:4e:27:d8:4f:35:09:6f:62: aa:a9:ad:73:bf:a9:cb:96:a0:72:04:f8:88:1b:b4:67:dc:62: 3d:cf:24:67:76:8c:10:7d:26:e1:85:d6:1d:43:08:8e:7d:11: 32:82:9c:15:bd:0c:aa:f3:5a:09:9a:a1:00:b6:23:c5:85:5f: b7:93:39:3b:d5:57:00:c4:68:40:a9:dd:c0:8c:f4:a4:ac:27: 4c:59:c4:79:95:e6:6b:1b:46:19:95:8d:3b:e7:02:e6:62:d7: 52:db:19:fc -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUeJjuEfRU3g3V8+3aFLAUB1WJLpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex OGJlYjY1OTAeFw0yNjEwMDcyMTQwMzRaFw0yNjEwMDgyMzQzMzRaMDMxMTAvBgNV BAMTKDY3QjVCRkQ0OUUxQjZBQzIzNDgxMDBCOEUyRkI1NDYxRTVBMDg4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQsP4qwr8d2ssI7+IHxEcMIUiL wWR8E8RlIKPl7Hx4n0Jzsa8nYF9pSmyGM5or7XM0jnuXD0qjBPcWnQ96qbxSZerj qEWL2fUZ0dPnYxNAZmadILmUaFpuRzn5tP+NCimbNtvFieodiJ3hjLgxfwtjR5IP JEyiPSogDdTZ3bx9YFG5OsUvNjyF3X4BgOpassLbH3ym2Ueyctg1DA2myQ/8wq4r vh2CwVwRb9mnOCMiSt2wXP/wr4bmI6Wx24H/b5jv5+SCTqj+bMMEcCwHKCOLDihG HJ4f5KbOrTRKTo2mm3j6vG48+my7iAkq5mt5f6bWyg8D9KsElLt7Qfgu6pSZAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQUZ7W/1J4basI0gQC44vtUYeWgiBwwHwYDVR0j BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHs89ArKDVHkfCF61JUn6G/wtEE4+GM+NuKx7pSTKArLTj9I5POYJg8r RowCuKkPn8T9gEgCy7REhhLyaAFj+Vgqx16a1pJCeAvjR9yv8BtZP3ylEh0nQQOn bBlhUV29Id+AIE7wre9dsd90Ka1P5Zm+pmDqdhHihfSWdpkF/lpWtKlonS2TKrg2 sibhM+kMcVDngdAED/yaAIhOJ9hPNQlvYqqprXO/qcuWoHIE+IgbtGfcYj3PJGd2 jBB9JuGF1h1DCI59ETKCnBW9DKrzWgmaoQC2I8WFX7eTOTvVVwDEaECp3cCM9KSs J0xZxHmV5msbRhmVjTvnAuZi11LbGfw= -----END CERTIFICATE-----Generated at Thu Oct 8 10:28:16 2026 by rpki-client