
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
File: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft (raw, json)
Hash identifier: SRaTzzMTLVDpFTxhAoz2o8pyHV6ny2/zJdsRmeieR+Q=
Subject key identifier: 2D:EF:F0:7C:7D:30:25:0A:E6:60:DA:CB:2C:2B:DA:96:55:72:6B:3E
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Certificate issuer: /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial: 5788F492BCCBBDCEB76F3A5375A428AF3DDE4A83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
Manifest number: 0265
Signing time: Sun 01 Mar 2026 17:13:44 +0000
Manifest this update: Sun 01 Mar 2026 17:08:44 +0000
Manifest next update: Mon 02 Mar 2026 19:40:44 +0000
Files and hashes: 1: 3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa (hash: UZ3HfpRoFPwrSlLQjUa+JXwDUWjdmwDKW3oepzOiXUA=)
2: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl (hash: XNPuiDdxUK6rzc9vfNpI280B7r+QqmAFb8uJ8ierYdc=)
3: 3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa (hash: IC14R/7PisX2xUgxvpoOXBZj7EziWG1xk34G0Uwi2U4=)
4: 323430313a32303a3a2f33322d3430203d3e2034383432.roa (hash: r7XF1F6usoHLVxdY4PL0ijZQoAdAO6Q7O9MythfN5DU=)
5: 323430313a32303a313333303a3a2f34342d3436203d3e2034383432.roa (hash: O1Qc6NM/hedKx5n8P2TcJKymQoYIgoGcEleUexrHAa4=)
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 19:40:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:88:f4:92:bc:cb:bd:ce:b7:6f:3a:53:75:a4:28:af:3d:de:4a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Validity
Not Before: Mar 1 17:08:44 2026 GMT
Not After : Mar 2 19:40:44 2026 GMT
Subject: CN=2DEFF07C7D30250AE660DACB2C2BDA9655726B3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:87:54:e4:1a:e3:84:39:3a:58:44:ff:af:
0e:af:ff:dd:c0:14:b3:34:13:fb:c7:c8:51:56:3c:
8a:e2:40:11:29:7c:ab:3a:b7:cc:60:2f:52:fe:23:
c1:b8:a8:84:1a:60:53:cd:f2:a8:41:54:be:8b:c3:
79:8e:0f:1e:b7:90:8b:3b:38:15:14:7d:06:b5:4a:
69:e3:5f:19:f4:de:98:4a:63:5f:cb:76:58:82:78:
9f:93:9d:dc:82:fe:00:a4:1a:0e:70:6e:8c:73:1a:
8e:24:a0:67:97:1b:94:28:53:f6:df:7e:fd:a0:ed:
63:b9:d6:4b:86:9b:89:1c:4a:95:1d:29:4f:fa:29:
8a:cb:86:66:44:db:fc:2f:a8:2c:58:e8:b1:37:06:
55:79:cd:f0:20:4f:74:95:d5:da:71:75:c6:3b:7f:
17:a7:ad:35:a4:79:86:8f:7c:6d:d1:bd:0a:99:16:
66:fc:dc:92:41:44:e0:45:ac:00:41:60:46:bc:0d:
47:2f:9b:1b:8d:b8:e2:11:5d:f8:73:28:3c:36:81:
a8:7d:c1:af:cf:3a:d4:21:0e:47:c7:e1:85:79:7f:
4a:cb:8d:8a:d5:6a:b1:e7:ef:bf:d7:83:7b:9c:91:
41:2c:45:c3:b0:8d:19:68:85:7a:75:09:62:fd:59:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EF:F0:7C:7D:30:25:0A:E6:60:DA:CB:2C:2B:DA:96:55:72:6B:3E
X509v3 Authority Key Identifier:
keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:38:ed:9c:57:fb:64:cd:6d:f6:5b:a0:4d:27:f1:3f:5e:fe:
0b:27:0c:0e:76:09:24:b2:60:5e:6d:e2:d2:c8:16:4e:ed:ac:
07:b8:0e:ba:03:9e:aa:66:85:05:9d:6a:47:a0:5d:49:a4:51:
68:42:85:8f:4a:ce:74:35:7c:12:0a:63:88:6b:97:6c:f4:b8:
18:1b:65:39:5f:5f:3a:d5:9e:6e:2b:b9:97:f8:b6:c0:0a:a6:
e2:b6:5f:03:c5:13:32:dd:ba:f9:ca:84:b1:a9:fd:09:b6:e2:
c5:97:48:3c:57:93:12:fc:3c:35:5e:fc:58:21:cc:3d:c7:43:
7f:f5:68:74:df:24:03:8e:ef:79:38:93:9a:c9:aa:03:0a:b4:
3d:4d:1e:ac:08:d3:55:8b:f2:49:53:bf:6f:c6:8d:87:63:07:
ec:27:b8:34:14:ec:4b:17:dd:b4:6b:05:30:00:16:a0:9a:b7:
f8:9e:ea:c3:a2:c7:e8:e1:7c:c9:ae:cd:89:21:f5:5d:85:2a:
7d:c6:a7:af:94:c0:52:38:00:bd:be:6c:05:23:b2:68:bc:cc:
eb:cd:4b:ee:8f:9a:5e:f8:b5:7e:94:b0:5b:ab:29:b5:e5:f9:
de:8f:b7:fe:3f:47:91:7d:3c:98:ab:52:c8:25:df:74:a8:6b:
48:2a:04:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:31:07 2026 by rpki-client