$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json) Hash identifier: FD6VKWrNRVZlsKgnADTByfiJ7vHFhaxeVj4R0xjuM5k= Subject key identifier: 08:21:B5:4E:4C:00:05:B4:38:F1:13:34:85:0F:0D:72:96:EB:76:78 Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Certificate serial: 43AF4984DB82037ACB03AA72AD6B1B530401CD7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft Manifest number: 0347 Signing time: Sat 15 Aug 2026 00:35:25 +0000 Manifest this update: Sat 15 Aug 2026 00:30:25 +0000 Manifest next update: Sun 16 Aug 2026 04:01:25 +0000 Files and hashes: 1: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=) 2: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=) 3: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=) 4: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=) 5: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=) 6: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=) 7: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: fRl7cuc5xFZAdD9i+QkmABnaW0LLqeoYoaREKNTwz5c=) 8: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=) 9: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Aug 2026 02:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:af:49:84:db:82:03:7a:cb:03:aa:72:ad:6b:1b:53:04:01:cd:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Validity Not Before: Aug 15 00:30:25 2026 GMT Not After : Aug 16 04:01:25 2026 GMT Subject: CN=0821B54E4C0005B438F11334850F0D7296EB7678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:34:67:68:00:9a:14:07:8f:d3:8f:49:54: fd:ed:78:99:14:c3:db:fc:54:1f:9d:f3:bc:0c:7c: a0:0c:c4:f7:9e:7e:3f:50:63:43:3b:a2:f3:e9:a1: 35:1f:e6:be:c7:d3:36:3d:51:ba:0d:aa:6b:c6:12: d2:b0:a4:cc:24:1c:ba:8a:bf:8d:88:40:1c:ef:79: 56:50:00:7f:b3:ff:77:c3:2e:d9:d4:6f:90:4c:b0: 7e:ec:23:38:52:ea:c4:85:33:d1:2e:73:9e:b4:4f: 67:81:48:3b:e7:26:98:99:7f:8e:2f:e8:23:45:f3: 0a:cb:c3:e6:df:7e:2a:cb:9b:8f:f6:3a:31:47:51: 19:b4:ed:87:7a:9b:de:cb:0e:0e:8e:10:a6:e1:83: 8f:a6:cb:f2:24:36:cb:23:60:ff:bb:bf:05:cc:58: 8b:8a:9f:73:49:cb:02:ec:ea:f2:47:61:c4:65:53: e8:26:61:f9:4d:dc:bc:71:fd:9d:a8:f6:50:20:83: 53:0d:70:26:78:75:2a:3b:79:09:70:d5:5c:56:80: 6c:0e:29:4e:04:46:56:e9:7c:ec:37:eb:e3:74:a6: 06:4a:40:e6:a7:17:09:39:f4:5c:09:86:e1:44:ce: 70:d6:1f:cb:97:ba:23:eb:21:7c:ce:e7:c9:3a:fe: 7c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:21:B5:4E:4C:00:05:B4:38:F1:13:34:85:0F:0D:72:96:EB:76:78 X509v3 Authority Key Identifier: keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cf:cb:8d:a9:37:ba:e8:e4:bd:96:3c:a2:39:74:df:9f:26: 6d:f4:a2:22:9a:5f:ca:d2:c7:39:40:35:2e:c3:59:ae:51:55: 38:19:bd:c7:6b:2f:04:6b:99:98:60:fa:3f:30:41:a8:6f:24: 4e:bd:78:9e:b0:df:f7:4e:17:90:76:d6:db:27:11:e4:90:63: 13:a5:32:d3:b8:b6:cd:48:e0:a5:0c:d4:a5:27:e3:3b:70:c5: a9:3f:d4:2d:f3:5d:a7:d0:37:21:4d:e1:e1:a1:01:ca:5f:89: 4d:09:55:cc:9e:20:4a:ed:6c:51:06:14:1a:45:17:fb:49:43: 03:58:ed:f1:09:3d:a9:b6:27:25:50:c0:99:26:00:c1:d3:df: af:26:c5:7d:14:cb:5a:81:bc:a8:ce:ff:7a:c8:56:4c:67:ad: 77:39:8f:79:ed:fd:50:2c:71:f9:51:2b:db:08:cb:67:9c:f7: e7:c6:7e:e5:48:83:0a:89:35:60:21:0d:bd:d6:6b:37:64:0f: 04:f2:fb:c6:eb:f9:89:11:bd:4a:9e:0a:3a:c2:9c:61:42:55: 3f:09:ee:a8:73:0c:26:e7:2c:94:14:87:ad:38:c9:4a:45:7d: 8e:2d:9d:71:87:d4:c5:88:77:5b:fd:20:45:fe:39:8d:44:c4: f8:d9:6f:aa -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUQ69JhNuCA3rLA6pyrWsbUwQBzX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex OGJlYjY1OTAeFw0yNjA4MTUwMDMwMjVaFw0yNjA4MTYwNDAxMjVaMDMxMTAvBgNV BAMTKDA4MjFCNTRFNEMwMDA1QjQzOEYxMTMzNDg1MEYwRDcyOTZFQjc2NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3iTRnaACaFAeP049JVP3teJkU w9v8VB+d87wMfKAMxPeefj9QY0M7ovPpoTUf5r7H0zY9UboNqmvGEtKwpMwkHLqK v42IQBzveVZQAH+z/3fDLtnUb5BMsH7sIzhS6sSFM9Euc560T2eBSDvnJpiZf44v 6CNF8wrLw+bffirLm4/2OjFHURm07Yd6m97LDg6OEKbhg4+my/IkNssjYP+7vwXM WIuKn3NJywLs6vJHYcRlU+gmYflN3Lxx/Z2o9lAgg1MNcCZ4dSo7eQlw1VxWgGwO KU4ERlbpfOw36+N0pgZKQOanFwk59FwJhuFEznDWH8uXuiPrIXzO58k6/nyfAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQUCCG1TkwABbQ48RM0hQ8NcpbrdngwHwYDVR0j BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJvPy42pN7ro5L2WPKI5dN+fJm30oiKaX8rSxzlANS7DWa5RVTgZvcdr LwRrmZhg+j8wQahvJE69eJ6w3/dOF5B21tsnEeSQYxOlMtO4ts1I4KUM1KUn4ztw xak/1C3zXafQNyFN4eGhAcpfiU0JVcyeIErtbFEGFBpFF/tJQwNY7fEJPam2JyVQ wJkmAMHT368mxX0Uy1qBvKjO/3rIVkxnrXc5j3nt/VAscflRK9sIy2ec9+fGfuVI gwqJNWAhDb3WazdkDwTy+8br+YkRvUqeCjrCnGFCVT8J7qhzDCbnLJQUh604yUpF fY4tnXGH1MWId1v9IEX+OY1ExPjZb6o= -----END CERTIFICATE-----Generated at Sat Aug 15 11:13:03 2026 by rpki-client