$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json) Hash identifier: TKGb8eFlKpE8iEYKT10oBfs6Z2+UsmKLJclA2MWu6BA= Subject key identifier: 25:34:FA:C1:40:76:39:5E:C3:25:6A:71:39:C7:73:8B:D9:96:2F:C4 Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Certificate serial: 57D2D3B41928052EBFD096ED9E3BC93CC08790C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft Manifest number: 02F1 Signing time: Thu 11 Jun 2026 19:30:10 +0000 Manifest this update: Thu 11 Jun 2026 19:25:10 +0000 Manifest next update: Fri 12 Jun 2026 21:22:10 +0000 Files and hashes: 1: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: cZhmxHI3wUtHGaSeZKhYOFHjMFPljVl8ZuYytDkIkzU=) 2: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=) 3: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=) 4: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=) 5: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=) 6: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=) 7: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=) 8: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=) 9: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 20:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d2:d3:b4:19:28:05:2e:bf:d0:96:ed:9e:3b:c9:3c:c0:87:90:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Validity Not Before: Jun 11 19:25:10 2026 GMT Not After : Jun 12 21:22:10 2026 GMT Subject: CN=2534FAC14076395EC3256A7139C7738BD9962FC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bf:15:bf:6c:b5:e8:11:bf:5c:d3:3e:fb:df: f2:d1:d5:82:f6:57:78:89:a8:36:c4:d0:ac:03:a9: 3c:ff:28:0a:2b:e9:cd:c8:85:97:1e:05:ce:79:49: 1b:88:c9:57:0d:18:11:0a:b8:47:4e:e4:67:86:48: d8:fe:ed:ae:0b:e6:47:63:25:ca:38:3a:7c:bc:1e: bd:79:c3:b4:49:35:3b:e3:e4:5b:85:7f:19:00:1a: 89:03:b1:ab:7a:ea:8f:dc:80:1e:16:16:8c:85:f4: fd:c1:d8:98:18:b3:25:da:56:73:bd:90:6a:2c:1f: d5:fa:73:c5:30:39:10:ab:4f:8c:ce:e3:d2:ff:6d: a6:3d:4a:cd:34:a6:d5:aa:1c:6c:0b:11:4a:2e:45: ad:f4:80:b1:54:32:e9:29:35:f1:40:67:71:6a:4a: bc:af:d3:31:0c:f2:5c:55:56:df:5f:4e:60:d2:d2: 18:84:45:da:5a:7d:2d:10:bf:e0:68:82:1c:bd:e2: 2f:f5:a7:17:9b:d3:7d:da:e5:3e:8e:05:ff:6f:91: 5b:7f:3d:1f:39:7e:ec:b8:48:cc:c9:84:8d:97:8a: 0b:8c:63:f9:ac:28:f4:c4:ce:ff:2a:76:ec:d2:8e: 68:4e:77:0b:ae:a1:66:23:b9:7e:79:12:12:8b:0f: 5e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:34:FA:C1:40:76:39:5E:C3:25:6A:71:39:C7:73:8B:D9:96:2F:C4 X509v3 Authority Key Identifier: keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:71:5a:c1:d5:42:e1:7e:53:14:54:39:c3:be:a6:c8:df:42: 42:10:38:d1:73:ca:38:31:c1:0e:db:ab:f4:50:c5:cb:96:e7: 17:87:d1:ee:8e:50:a4:b3:e6:9b:9a:9c:b1:a3:cd:51:f6:75: 8d:3e:7b:3a:c7:c1:84:bd:93:31:80:6d:36:a7:d0:09:05:4a: a3:51:1c:56:ce:ad:e9:a7:8f:dd:05:66:6b:12:f8:8a:1d:8e: 6b:72:a7:06:e7:cb:da:3b:a0:a9:94:d7:80:ec:46:81:8e:9d: 38:74:3f:16:44:9c:99:d7:06:80:d3:c7:0b:ea:c6:65:00:55: 2b:9f:b2:e3:b3:40:6b:74:cb:5e:1f:de:63:fe:be:30:6b:3e: d9:d4:7b:bd:75:d8:0f:63:f3:1b:91:e0:66:e6:09:e4:33:ff: 71:98:bb:8d:11:03:a8:c1:02:05:80:6c:e2:e1:c2:a4:f9:66: 7c:c4:07:3f:35:d2:e2:c3:96:f4:c8:de:4e:17:76:62:1d:1e: 3b:11:bf:35:d5:1c:96:00:ec:37:64:63:6a:7c:87:98:2c:39: b1:78:a3:fd:22:ad:18:40:4a:76:65:52:94:79:af:a3:9c:d0: f5:bc:02:ca:59:c5:b8:b1:62:c3:32:eb:31:46:96:84:ae:08: d1:5f:51:1e -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUV9LTtBkoBS6/0JbtnjvJPMCHkMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex OGJlYjY1OTAeFw0yNjA2MTExOTI1MTBaFw0yNjA2MTIyMTIyMTBaMDMxMTAvBgNV BAMTKDI1MzRGQUMxNDA3NjM5NUVDMzI1NkE3MTM5Qzc3MzhCRDk5NjJGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGvxW/bLXoEb9c0z773/LR1YL2 V3iJqDbE0KwDqTz/KAor6c3IhZceBc55SRuIyVcNGBEKuEdO5GeGSNj+7a4L5kdj Jco4Ony8Hr15w7RJNTvj5FuFfxkAGokDsat66o/cgB4WFoyF9P3B2JgYsyXaVnO9 kGosH9X6c8UwORCrT4zO49L/baY9Ss00ptWqHGwLEUouRa30gLFUMukpNfFAZ3Fq Sryv0zEM8lxVVt9fTmDS0hiERdpafS0Qv+Boghy94i/1pxeb033a5T6OBf9vkVt/ PR85fuy4SMzJhI2XiguMY/msKPTEzv8qduzSjmhOdwuuoWYjuX55EhKLD17bAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQUJTT6wUB2OV7DJWpxOcdzi9mWL8QwHwYDVR0j BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAANxWsHVQuF+UxRUOcO+psjfQkIQONFzyjgxwQ7bq/RQxcuW5xeH0e6O UKSz5puanLGjzVH2dY0+ezrHwYS9kzGAbTan0AkFSqNRHFbOremnj90FZmsS+Iod jmtypwbny9o7oKmU14DsRoGOnTh0PxZEnJnXBoDTxwvqxmUAVSufsuOzQGt0y14f 3mP+vjBrPtnUe7112A9j8xuR4GbmCeQz/3GYu40RA6jBAgWAbOLhwqT5ZnzEBz81 0uLDlvTI3k4XdmIdHjsRvzXVHJYA7DdkY2p8h5gsObF4o/0irRhASnZlUpR5r6Oc 0PW8AspZxbixYsMy6zFGloSuCNFfUR4= -----END CERTIFICATE-----Generated at Fri Jun 12 05:22:43 2026 by rpki-client