$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json) Hash identifier: wssqUWcW9pgqafJVxfv1CL6pLdooOOr5h48lorj+EJI= Subject key identifier: 1E:A8:08:91:A9:9E:C8:2C:A6:80:D4:C0:28:FF:F3:36:4C:F6:64:3C Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Certificate serial: 0BFFB35969646E278141A9D6170DAF514D720A59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft Manifest number: 0269 Signing time: Sun 01 Mar 2026 17:13:43 +0000 Manifest this update: Sun 01 Mar 2026 17:08:43 +0000 Manifest next update: Mon 02 Mar 2026 19:10:43 +0000 Files and hashes: 1: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: O09ECgXEIzpwMYnldgYPSaIHS3hJwIPIXRcqarfqioQ=) 2: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=) 3: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=) 4: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=) 5: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=) 6: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=) 7: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=) 8: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=) 9: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ff:b3:59:69:64:6e:27:81:41:a9:d6:17:0d:af:51:4d:72:0a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Validity Not Before: Mar 1 17:08:43 2026 GMT Not After : Mar 2 19:10:43 2026 GMT Subject: CN=1EA80891A99EC82CA680D4C028FFF3364CF6643C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:e4:d6:16:2d:27:3c:b2:b6:07:f7:0c:ad: 78:2f:d9:73:80:55:7d:7d:c8:c7:80:d4:d2:42:e5: 54:e1:07:df:9a:44:42:0a:79:e1:9d:9c:c9:f0:98: d4:51:e0:a6:c0:de:78:e2:2f:8b:21:9d:d0:dd:70: 9e:b2:47:76:91:ce:86:6d:2f:a2:b5:45:28:a3:63: 0d:36:67:c4:58:67:7d:ce:72:6c:91:17:12:40:37: 70:89:cc:0f:95:2c:11:8b:65:e4:e8:b4:1c:41:54: 45:ae:3c:3a:f4:f7:95:ab:1a:db:af:69:0c:39:80: b4:32:3b:9c:e1:33:d5:16:df:50:36:a8:b1:e4:21: 0b:64:3c:9a:2a:72:35:d9:e5:d3:14:78:43:f9:d1: 51:cf:c5:4b:d5:c0:1a:45:60:d1:8c:18:2b:dc:03: 79:7d:7a:f8:8d:ad:50:14:0a:0a:57:10:5a:0f:ab: b6:94:da:ba:09:fe:a5:6b:0c:ce:89:9b:50:c7:66: b9:b1:25:ea:70:b2:6c:96:02:16:94:1e:df:0b:01: 67:46:54:22:b1:2e:66:63:e0:2b:62:72:6c:87:ca: 99:fb:69:99:18:03:24:ce:06:27:5f:17:ae:b0:42: b6:18:2f:e5:51:32:d7:f9:4c:b0:69:4b:44:05:46: 76:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A8:08:91:A9:9E:C8:2C:A6:80:D4:C0:28:FF:F3:36:4C:F6:64:3C X509v3 Authority Key Identifier: keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:03:a1:47:e4:2a:c5:4f:c6:43:5c:dd:35:9f:c3:c0:9f:f9: ac:3d:91:cd:c8:79:e0:e2:9f:bd:c3:cc:28:19:05:74:cd:bf: 23:cf:57:2d:5a:98:fa:3f:c6:cd:1a:65:0c:0c:1d:16:3e:fc: 69:e3:60:2c:f3:85:8f:ec:9f:62:2c:a1:69:a2:e1:4b:66:fc: 67:ad:af:de:ba:27:6f:75:88:d5:2e:d6:73:6a:7c:1a:39:77: 61:70:3c:aa:0a:4a:61:3e:9c:83:d5:74:88:ec:de:aa:f2:06: 3a:9b:b9:a0:bd:7d:b1:bc:cf:22:08:a4:b8:fb:89:4c:60:7f: 04:c2:1d:14:ad:5a:e1:6e:be:b4:3e:cb:81:34:34:97:84:a9: 24:0e:8d:67:7b:e3:91:82:af:a6:84:54:62:8f:86:1a:2f:cd: 0d:f5:9f:82:2a:94:91:72:d0:ce:04:d6:bb:98:d4:2c:23:9a: 95:ae:7a:84:1d:54:7b:94:cb:a3:8f:02:27:28:c0:11:ce:15: 3d:f7:f5:df:eb:80:b9:3e:74:52:cc:ab:37:ee:8f:8b:3a:22: ba:f0:f8:26:d1:7e:ef:f1:47:f0:76:43:fe:97:98:af:49:f4: 0f:79:8c:00:63:ff:a2:03:2c:01:29:52:cc:83:71:f5:7b:87: 98:90:26:d1 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUC/+zWWlkbieBQanWFw2vUU1yClkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex OGJlYjY1OTAeFw0yNjAzMDExNzA4NDNaFw0yNjAzMDIxOTEwNDNaMDMxMTAvBgNV BAMTKDFFQTgwODkxQTk5RUM4MkNBNjgwRDRDMDI4RkZGMzM2NENGNjY0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SOTWFi0nPLK2B/cMrXgv2XOA VX19yMeA1NJC5VThB9+aREIKeeGdnMnwmNRR4KbA3njiL4shndDdcJ6yR3aRzoZt L6K1RSijYw02Z8RYZ33OcmyRFxJAN3CJzA+VLBGLZeTotBxBVEWuPDr095WrGtuv aQw5gLQyO5zhM9UW31A2qLHkIQtkPJoqcjXZ5dMUeEP50VHPxUvVwBpFYNGMGCvc A3l9eviNrVAUCgpXEFoPq7aU2roJ/qVrDM6Jm1DHZrmxJepwsmyWAhaUHt8LAWdG VCKxLmZj4CticmyHypn7aZkYAyTOBidfF66wQrYYL+VRMtf5TLBpS0QFRnZPAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQUHqgIkameyCymgNTAKP/zNkz2ZDwwHwYDVR0j BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAFMDoUfkKsVPxkNc3TWfw8Cf+aw9kc3IeeDin73DzCgZBXTNvyPPVy1a mPo/xs0aZQwMHRY+/GnjYCzzhY/sn2IsoWmi4Utm/Getr966J291iNUu1nNqfBo5 d2FwPKoKSmE+nIPVdIjs3qryBjqbuaC9fbG8zyIIpLj7iUxgfwTCHRStWuFuvrQ+ y4E0NJeEqSQOjWd745GCr6aEVGKPhhovzQ31n4IqlJFy0M4E1ruY1CwjmpWueoQd VHuUy6OPAicowBHOFT339d/rgLk+dFLMqzfuj4s6Irrw+CbRfu/xR/B2Q/6XmK9J 9A95jABj/6IDLAEpUsyDcfV7h5iQJtE= -----END CERTIFICATE-----Generated at Sun Mar 1 21:46:31 2026 by rpki-client