$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json) Hash identifier: BwCBox8cKY72dx8nscQwcnk1UCYRCUg5DcAo6AxH12E= Subject key identifier: E4:52:D5:0E:71:E8:E1:DE:AF:47:D8:EB:12:1E:75:3F:1A:52:6D:E1 Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Certificate serial: 3E9235ACF942540DFC33D217DF4908F9CFDB9726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft Manifest number: 028C Signing time: Sat 28 Mar 2026 06:04:10 +0000 Manifest this update: Sat 28 Mar 2026 05:59:10 +0000 Manifest next update: Sun 29 Mar 2026 07:43:10 +0000 Files and hashes: 1: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=) 2: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=) 3: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=) 4: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=) 5: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=) 6: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: lNRq7kpU63E55dwIbxhT1DZnH23YpxzYiBU9VURXyZQ=) 7: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=) 8: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=) 9: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Mar 2026 07:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:92:35:ac:f9:42:54:0d:fc:33:d2:17:df:49:08:f9:cf:db:97:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Validity Not Before: Mar 28 05:59:10 2026 GMT Not After : Mar 29 07:43:10 2026 GMT Subject: CN=E452D50E71E8E1DEAF47D8EB121E753F1A526DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1c:46:c6:d2:d6:ff:70:e9:1c:02:41:8e:d3: 57:d9:87:f1:d4:75:a1:80:f3:86:58:c3:bd:a4:bf: 93:e8:aa:c8:be:ba:58:c3:d0:a3:8a:bf:c9:ac:b4: f4:25:28:a5:2e:b3:60:0b:13:9c:cc:c7:32:dd:b6: e9:6f:2b:6a:a6:35:8b:a4:a7:ba:80:21:96:a9:1f: be:87:4b:b1:80:7c:a7:8f:f2:37:bf:ea:6a:08:a9: d0:03:2e:b8:75:d9:ff:cb:b8:84:4d:59:32:dd:97: 10:c3:f4:1a:86:5e:45:d2:93:54:27:d5:ba:6e:2d: 69:06:ce:bb:fd:d3:58:2e:58:56:f3:ef:31:1d:47: ce:61:88:c0:28:44:c2:c2:75:fa:3b:da:c8:e3:71: 99:25:b3:d7:8e:ca:fb:5e:65:ab:b3:1f:78:e2:5c: 46:4b:dc:5b:70:cb:8b:f6:da:50:4d:9f:b1:49:54: 2d:53:59:21:d0:07:88:cc:0f:56:e8:03:e5:52:20: a6:28:51:6e:fd:e5:86:f6:b0:94:b9:6b:42:09:75: 92:70:57:88:dd:bd:0f:29:d4:11:39:d1:99:c1:4b: 54:af:e5:f6:89:19:4d:7e:8f:c4:fd:6d:d5:5f:80: 8d:2e:f4:9b:44:d9:78:1f:57:c8:da:32:00:19:e9: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:52:D5:0E:71:E8:E1:DE:AF:47:D8:EB:12:1E:75:3F:1A:52:6D:E1 X509v3 Authority Key Identifier: keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f2:88:40:c1:a2:80:45:13:29:90:e9:8f:ab:84:8c:c7:39: 5a:c6:fc:3a:92:8a:6e:4a:19:61:8c:7e:c2:77:b0:85:f5:cd: e8:bb:90:b7:a3:64:09:4d:5b:ab:ad:e3:25:87:fb:9f:62:d5: d5:90:3d:b4:98:83:a1:c0:30:a8:aa:5d:d4:3e:69:49:f8:f6: 9c:25:58:6e:99:93:ca:33:0a:46:29:9c:a2:29:23:03:2a:de: 46:98:5f:d9:25:62:75:bb:a1:a1:ae:07:a9:7a:8e:7a:a1:24: 95:4b:ba:62:47:80:de:bd:32:c4:a1:33:60:d1:1c:ea:c6:8d: 44:ce:ab:f6:c4:7b:aa:3a:88:3a:0a:4e:9d:5c:5e:b6:49:c8: d1:6a:bb:f1:6d:72:15:54:ed:09:fc:2a:9b:b8:aa:9c:97:03: 72:3f:01:57:30:c0:00:cc:3d:49:c8:f1:6a:d5:89:7a:94:b2: f6:af:e3:49:b8:17:56:e0:bb:db:10:87:78:fd:dd:31:2e:6e: 6f:c9:f5:b3:30:20:bc:e8:83:9f:e0:a5:94:6f:66:a9:65:5c: bd:ff:cf:94:f9:0e:d3:17:e3:04:65:11:d3:24:f0:a2:df:8b: b0:fb:a6:12:af:cb:24:c2:93:ff:2f:39:98:7d:30:e8:97:58: 56:65:b1:16 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUPpI1rPlCVA38M9IX30kI+c/blyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex OGJlYjY1OTAeFw0yNjAzMjgwNTU5MTBaFw0yNjAzMjkwNzQzMTBaMDMxMTAvBgNV BAMTKEU0NTJENTBFNzFFOEUxREVBRjQ3RDhFQjEyMUU3NTNGMUE1MjZERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHEbG0tb/cOkcAkGO01fZh/HU daGA84ZYw72kv5Poqsi+uljD0KOKv8mstPQlKKUus2ALE5zMxzLdtulvK2qmNYuk p7qAIZapH76HS7GAfKeP8je/6moIqdADLrh12f/LuIRNWTLdlxDD9BqGXkXSk1Qn 1bpuLWkGzrv901guWFbz7zEdR85hiMAoRMLCdfo72sjjcZkls9eOyvteZauzH3ji XEZL3Ftwy4v22lBNn7FJVC1TWSHQB4jMD1boA+VSIKYoUW795Yb2sJS5a0IJdZJw V4jdvQ8p1BE50ZnBS1Sv5faJGU1+j8T9bdVfgI0u9JtE2XgfV8jaMgAZ6XuHAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQU5FLVDnHo4d6vR9jrEh51PxpSbeEwHwYDVR0j BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHXyiEDBooBFEymQ6Y+rhIzHOVrG/DqSim5KGWGMfsJ3sIX1zei7kLej ZAlNW6ut4yWH+59i1dWQPbSYg6HAMKiqXdQ+aUn49pwlWG6Zk8ozCkYpnKIpIwMq 3kaYX9klYnW7oaGuB6l6jnqhJJVLumJHgN69MsShM2DRHOrGjUTOq/bEe6o6iDoK Tp1cXrZJyNFqu/FtchVU7Qn8Kpu4qpyXA3I/AVcwwADMPUnI8WrViXqUsvav40m4 F1bgu9sQh3j93TEubm/J9bMwILzog5/gpZRvZqllXL3/z5T5DtMX4wRlEdMk8KLf i7D7phKvyyTCk/8vOZh9MOiXWFZlsRY= -----END CERTIFICATE-----Generated at Sat Mar 28 20:08:04 2026 by rpki-client