Manifest

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
File:                     459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft (raw, json)
Hash identifier:          Xl/GrydrnQW8sLkDNBmT+qBGBn2wopyBfi89MG3EIcM=
Subject key identifier:   83:94:A7:5A:1C:F5:14:32:5F:34:5F:8A:14:79:68:D0:8E:99:EF:E5
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Certificate issuer:       /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial:       5918D4FB3504A9CB9A033EB38FDF92B092003827
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
Manifest number:          032D
Signing time:             Tue 28 Jul 2026 20:05:12 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:12 +0000
Manifest next update:     Wed 29 Jul 2026 22:46:12 +0000
Files and hashes:         1: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl (hash: Jfy5yMZFzQxxfwdHq8jt9+yEoxGAbxWM8modsYCesoU=)
                          2: 3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa (hash: IC14R/7PisX2xUgxvpoOXBZj7EziWG1xk34G0Uwi2U4=)
                          3: 3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa (hash: UZ3HfpRoFPwrSlLQjUa+JXwDUWjdmwDKW3oepzOiXUA=)
                          4: 323430313a32303a313333303a3a2f34342d3436203d3e2034383432.roa (hash: O1Qc6NM/hedKx5n8P2TcJKymQoYIgoGcEleUexrHAa4=)
                          5: 323430313a32303a3a2f33322d3430203d3e2034383432.roa (hash: r7XF1F6usoHLVxdY4PL0ijZQoAdAO6Q7O9MythfN5DU=)
                          6: 323430313a32303a323130303a3a2f34302d3436203d3e2034383432.roa (hash: SEejvwTPwEWmlVU00XxArrAxuxhHMWNjBmmOq6g53WI=)
Validation:               OK
Signature path:           rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
                          rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:18:d4:fb:35:04:a9:cb:9a:03:3e:b3:8f:df:92:b0:92:00:38:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
        Validity
            Not Before: Jul 28 20:00:12 2026 GMT
            Not After : Jul 29 22:46:12 2026 GMT
        Subject: CN=8394A75A1CF514325F345F8A147968D08E99EFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:15:b3:ba:d8:7d:13:67:71:e6:2a:d0:7d:
                    9f:b5:65:d8:bd:65:23:fa:26:10:63:a1:a2:c3:89:
                    68:05:07:8b:9c:2d:61:af:d6:30:49:3d:a2:d2:74:
                    bf:2b:a4:31:5b:f1:1b:80:e6:b1:c6:c9:3e:a3:e3:
                    e4:8d:46:60:78:78:d6:d5:06:6d:17:97:0d:e4:a3:
                    26:bf:7e:39:d8:7a:4d:13:49:7a:ee:05:1e:9d:0e:
                    a6:ab:63:5e:6f:77:d4:56:47:48:b7:21:f1:41:95:
                    d8:b5:e6:f9:49:50:21:8d:a7:31:b0:01:e5:9f:9d:
                    1b:c8:3d:40:1a:1a:35:e9:0b:26:96:24:68:e1:cc:
                    c9:3c:de:7c:c2:df:45:a0:3f:a3:78:80:5c:ff:17:
                    11:da:0b:1c:e1:d0:f8:be:93:33:a5:c2:3f:3a:85:
                    16:08:4d:0a:fa:f1:55:02:21:88:22:58:9a:f2:5f:
                    72:d8:28:de:44:16:b5:91:28:45:dd:8b:b2:93:c9:
                    72:fb:b2:aa:c9:f6:15:5d:cc:ef:40:48:c8:0c:86:
                    cc:9a:55:7c:30:cf:39:eb:be:da:2d:22:19:3a:bc:
                    43:56:f9:cd:0f:3f:db:fb:cb:08:9f:d5:97:a9:13:
                    f7:9b:d9:af:67:04:f1:2f:f5:a0:ba:d7:96:6b:07:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:94:A7:5A:1C:F5:14:32:5F:34:5F:8A:14:79:68:D0:8E:99:EF:E5
            X509v3 Authority Key Identifier:
                keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:21:1e:47:65:0b:7a:dc:15:85:bb:2e:7f:4d:82:b3:c7:ef:
         ad:1c:5b:34:6c:86:f5:97:2f:c9:e0:eb:75:a2:8e:dc:3b:73:
         da:7a:dd:ec:b0:87:9d:18:db:f6:43:ed:29:91:c6:8e:f4:61:
         33:80:df:1d:53:36:16:b0:78:26:8a:e6:e2:00:a0:37:33:f9:
         66:74:ed:d4:35:f2:41:08:ea:95:16:fb:ec:0a:1e:85:d8:20:
         48:43:f5:8b:9b:b8:3c:69:ed:dc:22:d2:d4:67:f9:44:01:5e:
         d1:a4:27:8a:36:85:d3:93:dd:a5:40:21:6c:4d:e6:24:24:43:
         60:24:84:ea:55:6e:fc:3f:05:31:ae:00:85:8b:50:39:c4:01:
         ea:c0:d7:ed:d8:4f:19:01:20:13:8b:47:35:7a:eb:64:95:5e:
         7c:45:11:d9:b9:01:70:80:6f:d2:1a:31:bb:e0:1b:a1:67:d6:
         d8:90:99:03:c7:c9:3e:0e:14:db:df:d8:55:c0:34:c7:ce:1e:
         79:64:ef:7c:5e:bd:5a:26:5f:93:ac:92:57:28:f8:1f:d4:8a:
         a0:03:2d:45:2c:30:11:56:70:e8:9b:7c:2a:03:99:c2:51:83:
         64:bb:fd:49:4a:aa:d4:16:db:b9:63:aa:36:a3:84:dc:07:8e:
         79:1b:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:07 2026 by rpki-client