$ rpki-client -vvvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json) Hash identifier: keYU0mg3cwb+HQGu60XBRJSdCd9rtgU4KUBkWjZ1KT8= Subject key identifier: 47:58:B1:06:49:4F:3D:27:6D:80:65:8B:A4:B0:54:7C:C6:DF:18:85 Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Certificate serial: 44535117919B5080400A61A50D62E7C1E2045E26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft Manifest number: 038A Signing time: Sun 04 Oct 2026 01:40:34 +0000 Manifest this update: Sun 04 Oct 2026 01:35:34 +0000 Manifest next update: Mon 05 Oct 2026 05:02:34 +0000 Files and hashes: 1: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=) 2: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=) 3: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=) 4: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=) 5: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=) 6: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=) 7: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=) 8: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=) 9: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: wo3ClYb2bucAI+95GhDJAwW1aXAjt4O/rRFyu8iUPEs=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:53:51:17:91:9b:50:80:40:0a:61:a5:0d:62:e7:c1:e2:04:5e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Validity Not Before: Oct 4 01:35:34 2026 GMT Not After : Oct 5 05:02:34 2026 GMT Subject: CN=4758B106494F3D276D80658BA4B0547CC6DF1885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:95:8e:8f:c0:90:2b:44:28:24:26:75:33:aa: f1:f9:0b:2f:2f:47:33:16:1f:25:5c:6c:85:5d:00: 98:d5:ed:e3:71:69:8f:bd:2a:ed:92:eb:d4:b0:2e: f3:ac:ef:8b:2f:64:e9:d2:ee:84:9d:ff:49:3a:ab: 0d:2b:bf:00:dd:3f:66:c8:42:a2:d5:49:f7:04:54: cf:38:3f:9f:79:f5:44:8d:c2:f6:d2:79:c9:fb:7f: b6:03:cc:5f:f7:f1:58:77:7f:e2:12:06:7c:b6:2b: b0:d0:86:4a:0f:e6:41:85:3a:9b:1d:ca:f0:48:cc: 43:48:b7:60:a9:75:2a:33:ad:8f:8f:88:d9:47:ab: ea:9d:b3:9e:fc:93:dc:51:1e:c1:26:04:da:5b:ca: 04:58:8b:f7:bd:a2:b5:86:96:1e:9b:69:32:6c:a4: cc:04:c1:58:50:cc:7c:2c:05:87:8a:9e:33:80:f0: 18:f0:79:63:37:44:06:fc:25:77:c6:88:06:61:d9: e7:ef:19:e0:60:3e:1c:a3:45:a0:2a:38:42:93:a8: 04:d1:b4:ba:0a:4f:f0:c8:0b:da:02:67:22:3a:ee: 0f:30:a5:47:66:90:8b:68:25:da:fe:23:85:86:a7: 1f:c5:a2:2c:46:5f:70:2a:12:3f:24:00:66:fc:fd: ad:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:58:B1:06:49:4F:3D:27:6D:80:65:8B:A4:B0:54:7C:C6:DF:18:85 X509v3 Authority Key Identifier: keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:a9:bc:db:88:9c:44:4c:92:d1:b1:b4:7d:2b:9a:37:f7:1d: 19:32:e5:7d:d5:08:f1:8d:4e:7a:16:a3:4f:bb:eb:6f:38:af: d0:38:cb:3a:13:14:bb:2c:79:42:dd:8e:ef:20:33:05:bc:e0: 31:c5:16:26:79:d1:f1:25:4f:ca:81:93:87:11:b2:e5:07:99: 0f:f0:e2:00:2b:e9:57:50:9c:9e:68:ae:e1:86:b3:fa:c4:f0: 61:03:ed:5c:4c:87:6a:e2:c3:f5:a0:54:ac:3e:28:88:46:3e: 09:c4:c1:88:eb:28:50:fe:ee:32:26:e9:51:34:a2:6a:80:8d: 8e:f1:89:8b:2f:e3:e7:e2:75:ab:c6:15:24:5d:64:46:b6:2e: 6a:4e:2b:dd:13:5c:63:5b:2e:8f:78:5c:45:11:1b:fe:af:b5: ee:74:46:46:9c:41:bb:f0:fb:7d:7b:71:32:8e:00:70:30:97: 71:c1:8b:e9:b5:04:d1:f0:bc:5b:cc:93:d6:f8:86:19:7c:59: b3:c5:08:ef:83:96:a1:ee:44:35:46:b3:df:29:94:7c:f0:5f: fe:21:42:2a:a5:7a:b4:d4:c7:4a:32:f1:7a:9c:64:ce:dd:19: e2:e0:8e:d4:6b:1c:cd:87:cb:ca:37:82:2d:9e:0b:60:17:2e: 26:0e:f8:78 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIURFNRF5GbUIBACmGlDWLnweIEXiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex OGJlYjY1OTAeFw0yNjEwMDQwMTM1MzRaFw0yNjEwMDUwNTAyMzRaMDMxMTAvBgNV BAMTKDQ3NThCMTA2NDk0RjNEMjc2RDgwNjU4QkE0QjA1NDdDQzZERjE4ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUlY6PwJArRCgkJnUzqvH5Cy8v RzMWHyVcbIVdAJjV7eNxaY+9Ku2S69SwLvOs74svZOnS7oSd/0k6qw0rvwDdP2bI QqLVSfcEVM84P5959USNwvbSecn7f7YDzF/38Vh3f+ISBny2K7DQhkoP5kGFOpsd yvBIzENIt2CpdSozrY+PiNlHq+qds578k9xRHsEmBNpbygRYi/e9orWGlh6baTJs pMwEwVhQzHwsBYeKnjOA8BjweWM3RAb8JXfGiAZh2efvGeBgPhyjRaAqOEKTqATR tLoKT/DIC9oCZyI67g8wpUdmkItoJdr+I4WGpx/FoixGX3AqEj8kAGb8/a1zAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQUR1ixBklPPSdtgGWLpLBUfMbfGIUwHwYDVR0j BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHWpvNuInERMktGxtH0rmjf3HRky5X3VCPGNTnoWo0+76284r9A4yzoT FLsseULdju8gMwW84DHFFiZ50fElT8qBk4cRsuUHmQ/w4gAr6VdQnJ5oruGGs/rE 8GED7VxMh2riw/WgVKw+KIhGPgnEwYjrKFD+7jIm6VE0omqAjY7xiYsv4+fidavG FSRdZEa2LmpOK90TXGNbLo94XEURG/6vte50RkacQbvw+317cTKOAHAwl3HBi+m1 BNHwvFvMk9b4hhl8WbPFCO+DlqHuRDVGs98plHzwX/4hQiqlerTUx0oy8XqcZM7d GeLgjtRrHM2Hy8o3gi2eC2AXLiYO+Hg= -----END CERTIFICATE-----Generated at Sun Oct 4 13:31:48 2026 by rpki-client