
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
File: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft (raw, json)
Hash identifier: 2/ZAOPpQbUggi+3mtkQsm8GQaePcml2plCwNUWfFsOY=
Subject key identifier: 75:F4:83:F0:6A:51:4A:BB:22:35:AB:AA:27:85:47:93:F2:59:C1:71
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Certificate issuer: /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial: 135EE61AFADACF2FC974EA819171DBD2D53D7C75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
Manifest number: 02A1
Signing time: Thu 16 Apr 2026 12:44:13 +0000
Manifest this update: Thu 16 Apr 2026 12:39:13 +0000
Manifest next update: Fri 17 Apr 2026 16:23:13 +0000
Files and hashes: 1: 3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa (hash: IC14R/7PisX2xUgxvpoOXBZj7EziWG1xk34G0Uwi2U4=)
2: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl (hash: ielpj6MAuaG6jlePVfQvzEvKpTEA3yXxwlbPpcht9AI=)
3: 323430313a32303a313333303a3a2f34342d3436203d3e2034383432.roa (hash: O1Qc6NM/hedKx5n8P2TcJKymQoYIgoGcEleUexrHAa4=)
4: 323430313a32303a3a2f33322d3430203d3e2034383432.roa (hash: r7XF1F6usoHLVxdY4PL0ijZQoAdAO6Q7O9MythfN5DU=)
5: 3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa (hash: UZ3HfpRoFPwrSlLQjUa+JXwDUWjdmwDKW3oepzOiXUA=)
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 16:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:5e:e6:1a:fa:da:cf:2f:c9:74:ea:81:91:71:db:d2:d5:3d:7c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Validity
Not Before: Apr 16 12:39:13 2026 GMT
Not After : Apr 17 16:23:13 2026 GMT
Subject: CN=75F483F06A514ABB2235ABAA27854793F259C171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:f6:e5:ba:58:0b:58:4d:3b:8a:4b:bc:1e:
c9:f2:74:69:aa:06:8c:dd:ac:9a:16:30:6a:25:14:
49:0f:8d:40:c0:02:be:ac:cf:e8:ca:e5:11:57:7f:
4c:df:89:91:a8:14:98:06:0c:a5:0c:b3:c2:88:ea:
43:21:51:22:a1:5e:30:de:e3:6c:b0:84:01:6b:41:
c4:45:f7:c4:cd:f8:1a:08:e7:59:0e:cc:fe:a2:d8:
35:1e:04:1c:bb:dc:82:df:f9:7d:b9:0a:ee:fe:14:
1f:89:8f:59:9e:a8:26:f9:92:89:40:83:ad:8b:1c:
99:95:77:2e:a9:52:7d:b4:7a:9b:7e:bf:94:56:6a:
37:dc:2e:fe:5e:b2:0e:f8:f7:94:91:5e:e7:e7:d3:
99:7f:1f:f5:a3:64:d9:54:a9:c9:bb:4b:43:44:b1:
85:3e:b6:ca:52:be:ab:a4:2f:95:3e:29:c5:9a:9e:
aa:1b:4a:4a:0f:4d:2f:48:87:87:19:4e:b6:2f:c1:
15:f6:01:c2:40:e5:e5:cd:df:ee:f0:98:9a:81:21:
30:2b:81:df:08:74:1f:1c:e6:ce:55:7a:41:36:a0:
c5:c1:4d:e0:14:fc:fe:62:d8:81:fe:3d:d6:71:ef:
65:fd:57:52:8d:72:9e:99:49:be:7f:8a:c4:5c:fa:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F4:83:F0:6A:51:4A:BB:22:35:AB:AA:27:85:47:93:F2:59:C1:71
X509v3 Authority Key Identifier:
keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:ab:16:71:8e:80:22:ce:a9:d2:8a:35:43:81:06:51:73:06:
5c:2c:2d:57:79:87:f5:21:b2:bb:4c:9e:4c:ed:22:3e:ea:87:
08:4f:9d:29:64:43:f2:b7:a0:ec:c2:78:f8:6c:42:75:b2:66:
ac:90:c4:3d:ca:d5:c8:26:4e:b9:56:33:97:d9:a8:95:c7:b2:
68:94:d8:b7:24:68:4f:32:bf:25:89:c0:87:87:ec:ba:28:9d:
ea:aa:c0:de:73:b8:55:c2:08:87:98:27:78:ba:d5:d8:57:01:
2b:2e:95:4b:a8:1e:6c:cb:3a:42:1f:1d:f0:e4:ab:4d:2c:8c:
77:39:e5:50:23:7a:79:9e:22:64:99:80:66:03:24:f8:b1:74:
f5:5f:73:e5:bd:29:dc:74:06:58:68:82:31:84:6c:35:dd:d7:
ce:fe:12:c8:19:d6:76:7b:96:4f:a8:2f:e6:ef:c9:53:e5:be:
5a:9f:68:4b:d8:6d:ee:fd:00:ba:64:7d:3d:96:2e:3c:18:2a:
6f:96:30:4c:70:97:cb:b3:75:c4:ba:e5:b4:75:51:ea:15:b8:
32:f3:ec:70:2c:bf:83:a8:ed:7e:df:24:68:e7:a5:42:20:11:
ae:e7:d1:81:53:50:54:16:f1:c6:18:ed:8c:e5:04:ac:f1:7e:
bf:40:fe:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:41:04 2026 by rpki-client