Manifest

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
File:                     459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft (raw, json)
Hash identifier:          SRaTzzMTLVDpFTxhAoz2o8pyHV6ny2/zJdsRmeieR+Q=
Subject key identifier:   2D:EF:F0:7C:7D:30:25:0A:E6:60:DA:CB:2C:2B:DA:96:55:72:6B:3E
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Certificate issuer:       /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial:       5788F492BCCBBDCEB76F3A5375A428AF3DDE4A83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
Manifest number:          0265
Signing time:             Sun 01 Mar 2026 17:13:44 +0000
Manifest this update:     Sun 01 Mar 2026 17:08:44 +0000
Manifest next update:     Mon 02 Mar 2026 19:40:44 +0000
Files and hashes:         1: 3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa (hash: UZ3HfpRoFPwrSlLQjUa+JXwDUWjdmwDKW3oepzOiXUA=)
                          2: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl (hash: XNPuiDdxUK6rzc9vfNpI280B7r+QqmAFb8uJ8ierYdc=)
                          3: 3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa (hash: IC14R/7PisX2xUgxvpoOXBZj7EziWG1xk34G0Uwi2U4=)
                          4: 323430313a32303a3a2f33322d3430203d3e2034383432.roa (hash: r7XF1F6usoHLVxdY4PL0ijZQoAdAO6Q7O9MythfN5DU=)
                          5: 323430313a32303a313333303a3a2f34342d3436203d3e2034383432.roa (hash: O1Qc6NM/hedKx5n8P2TcJKymQoYIgoGcEleUexrHAa4=)
Validation:               OK
Signature path:           rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
                          rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 19:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:88:f4:92:bc:cb:bd:ce:b7:6f:3a:53:75:a4:28:af:3d:de:4a:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
        Validity
            Not Before: Mar  1 17:08:44 2026 GMT
            Not After : Mar  2 19:40:44 2026 GMT
        Subject: CN=2DEFF07C7D30250AE660DACB2C2BDA9655726B3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:87:54:e4:1a:e3:84:39:3a:58:44:ff:af:
                    0e:af:ff:dd:c0:14:b3:34:13:fb:c7:c8:51:56:3c:
                    8a:e2:40:11:29:7c:ab:3a:b7:cc:60:2f:52:fe:23:
                    c1:b8:a8:84:1a:60:53:cd:f2:a8:41:54:be:8b:c3:
                    79:8e:0f:1e:b7:90:8b:3b:38:15:14:7d:06:b5:4a:
                    69:e3:5f:19:f4:de:98:4a:63:5f:cb:76:58:82:78:
                    9f:93:9d:dc:82:fe:00:a4:1a:0e:70:6e:8c:73:1a:
                    8e:24:a0:67:97:1b:94:28:53:f6:df:7e:fd:a0:ed:
                    63:b9:d6:4b:86:9b:89:1c:4a:95:1d:29:4f:fa:29:
                    8a:cb:86:66:44:db:fc:2f:a8:2c:58:e8:b1:37:06:
                    55:79:cd:f0:20:4f:74:95:d5:da:71:75:c6:3b:7f:
                    17:a7:ad:35:a4:79:86:8f:7c:6d:d1:bd:0a:99:16:
                    66:fc:dc:92:41:44:e0:45:ac:00:41:60:46:bc:0d:
                    47:2f:9b:1b:8d:b8:e2:11:5d:f8:73:28:3c:36:81:
                    a8:7d:c1:af:cf:3a:d4:21:0e:47:c7:e1:85:79:7f:
                    4a:cb:8d:8a:d5:6a:b1:e7:ef:bf:d7:83:7b:9c:91:
                    41:2c:45:c3:b0:8d:19:68:85:7a:75:09:62:fd:59:
                    0a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EF:F0:7C:7D:30:25:0A:E6:60:DA:CB:2C:2B:DA:96:55:72:6B:3E
            X509v3 Authority Key Identifier:
                keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:38:ed:9c:57:fb:64:cd:6d:f6:5b:a0:4d:27:f1:3f:5e:fe:
         0b:27:0c:0e:76:09:24:b2:60:5e:6d:e2:d2:c8:16:4e:ed:ac:
         07:b8:0e:ba:03:9e:aa:66:85:05:9d:6a:47:a0:5d:49:a4:51:
         68:42:85:8f:4a:ce:74:35:7c:12:0a:63:88:6b:97:6c:f4:b8:
         18:1b:65:39:5f:5f:3a:d5:9e:6e:2b:b9:97:f8:b6:c0:0a:a6:
         e2:b6:5f:03:c5:13:32:dd:ba:f9:ca:84:b1:a9:fd:09:b6:e2:
         c5:97:48:3c:57:93:12:fc:3c:35:5e:fc:58:21:cc:3d:c7:43:
         7f:f5:68:74:df:24:03:8e:ef:79:38:93:9a:c9:aa:03:0a:b4:
         3d:4d:1e:ac:08:d3:55:8b:f2:49:53:bf:6f:c6:8d:87:63:07:
         ec:27:b8:34:14:ec:4b:17:dd:b4:6b:05:30:00:16:a0:9a:b7:
         f8:9e:ea:c3:a2:c7:e8:e1:7c:c9:ae:cd:89:21:f5:5d:85:2a:
         7d:c6:a7:af:94:c0:52:38:00:bd:be:6c:05:23:b2:68:bc:cc:
         eb:cd:4b:ee:8f:9a:5e:f8:b5:7e:94:b0:5b:ab:29:b5:e5:f9:
         de:8f:b7:fe:3f:47:91:7d:3c:98:ab:52:c8:25:df:74:a8:6b:
         48:2a:04:cb
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUV4j0krzLvc63bzpTdaQorz3eSoMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjU2NzUwMDAwMTEwLwYDVQQFEyg0NTlEMkI4MzRB
M0JBMDhDMEFBNjdDNkU1NzgxNDZBOEIxRkUyQzJGMB4XDTI2MDMwMTE3MDg0NFoX
DTI2MDMwMjE5NDA0NFowMzExMC8GA1UEAxMoMkRFRkYwN0M3RDMwMjUwQUU2NjBE
QUNCMkMyQkRBOTY1NTcyNkIzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL6Ah1TkGuOEOTpYRP+vDq//3cAUszQT+8fIUVY8iuJAESl8qzq3zGAvUv4j
wbiohBpgU83yqEFUvovDeY4PHreQizs4FRR9BrVKaeNfGfTemEpjX8t2WIJ4n5Od
3IL+AKQaDnBujHMajiSgZ5cblChT9t9+/aDtY7nWS4abiRxKlR0pT/opisuGZkTb
/C+oLFjosTcGVXnN8CBPdJXV2nF1xjt/F6etNaR5ho98bdG9CpkWZvzckkFE4EWs
AEFgRrwNRy+bG4244hFd+HMoPDaBqH3Br8861CEOR8fhhXl/SsuNitVqsefvv9eD
e5yRQSxFw7CNGWiFenUJYv1ZCh0CAwEAAaOCAhcwggITMB0GA1UdDgQWBBQt7/B8
fTAlCuZg2sssK9qWVXJrPjAfBgNVHSMEGDAWgBRFnSuDSjugjAqmfG5XgUaosf4s
LzAOBgNVHQ8BAf8EBAMCB4AwcAYDVR0fBGkwZzBloGOgYYZfcnN5bmM6Ly9yc3lu
Yy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtpLzMvNDU5RDJCODM0
QTNCQTA4QzBBQTY3QzZFNTc4MTQ2QThCMUZFMkMyRi5jcmwwfgYIKwYBBQUHAQEE
cjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUlowcmcwbzdvSXdL
cG54dVY0RkdxTEgtTEM4LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVwby9UaWFuaGFpUnBr
aS8zLzQ1OUQyQjgzNEEzQkEwOEMwQUE2N0M2RTU3ODE0NkE4QjFGRTJDMkYubWZ0
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7OO2cV/tkzW32W6BNJ/E/Xv4LJwwOdgkksmBebeLSyBZO7awHuA66
A56qZoUFnWpHoF1JpFFoQoWPSs50NXwSCmOIa5ds9LgYG2U5X1861Z5uK7mX+LbA
Cqbitl8DxRMy3br5yoSxqf0JtuLFl0g8V5MS/Dw1XvxYIcw9x0N/9Wh03yQDju95
OJOayaoDCrQ9TR6sCNNVi/JJU79vxo2HYwfsJ7g0FOxLF920awUwABagmrf4nurD
osfo4XzJrs2JIfVdhSp9xqevlMBSOAC9vmwFI7JovMzrzUvuj5pe+LV+lLBbqym1
5fnej7f+P0eRfTyYq1LIJd90qGtIKgTL
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:31:07 2026 by rpki-client