$ rpki-client -vvvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json) Hash identifier: IeGCf/PHJyIEfXPKwR6t8Ra4PFnjJKiyZwRV3eofN/A= Subject key identifier: FD:F1:3B:5E:84:23:72:F3:34:34:E5:BD:E6:9E:DE:A6:F4:7C:82:08 Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Certificate serial: 0E3422D817910D243B4B8110D508985328BBFE89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft Manifest number: 038D Signing time: Tue 06 Oct 2026 09:25:34 +0000 Manifest this update: Tue 06 Oct 2026 09:20:34 +0000 Manifest next update: Wed 07 Oct 2026 09:55:34 +0000 Files and hashes: 1: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=) 2: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=) 3: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=) 4: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=) 5: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=) 6: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=) 7: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=) 8: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=) 9: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: rYWB0aZGPYpgFtm3W36/jrHGWwCEnXFd7EcgtAYl1JA=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 09:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:34:22:d8:17:91:0d:24:3b:4b:81:10:d5:08:98:53:28:bb:fe:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Validity Not Before: Oct 6 09:20:34 2026 GMT Not After : Oct 7 09:55:34 2026 GMT Subject: CN=FDF13B5E842372F33434E5BDE69EDEA6F47C8208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:de:a0:28:7e:d9:13:52:01:f8:52:02:4f:e9: 28:34:16:e5:7f:c5:08:38:2b:16:b7:c8:b1:1b:e9: 92:53:54:04:2e:58:ac:0f:b1:2c:a7:5b:11:5a:de: 10:26:3d:c8:14:b6:97:46:d0:4a:c6:13:a2:47:7c: 44:07:8a:40:90:25:ef:9e:43:44:8f:c8:22:85:bc: f4:b7:12:21:69:a5:f4:f4:2a:69:a9:02:bd:a3:f2: 50:91:9a:6a:23:a4:ca:9b:4b:26:dd:99:15:b4:39: 0f:1b:dc:b8:58:bd:57:80:b1:68:50:0d:8a:25:ff: d8:94:75:b0:38:f9:79:59:99:25:b2:d0:7f:4d:a9: e6:f0:f7:20:31:66:9b:0b:27:28:c4:8d:b6:b8:b6: 28:76:d0:da:77:62:a6:58:8d:16:61:6e:a1:e9:9d: e0:46:ab:64:f3:15:33:e4:98:21:1f:fb:11:9b:c9: bb:20:37:2b:aa:97:70:b9:21:d6:e0:8e:f4:70:5f: dc:3c:06:61:cd:48:2b:43:15:fc:b0:fd:d4:ae:dd: 75:1b:4f:06:23:02:01:51:5b:9d:b8:70:5b:5e:fc: 3d:1e:ff:03:1f:b8:9d:54:4f:82:b3:65:fe:79:fd: 4e:85:ad:34:4e:56:66:72:cf:59:3b:fc:5d:b5:d2: 29:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F1:3B:5E:84:23:72:F3:34:34:E5:BD:E6:9E:DE:A6:F4:7C:82:08 X509v3 Authority Key Identifier: keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:f1:76:89:f7:b0:e0:d1:f2:dd:12:77:91:b7:a3:da:44:dc: a8:9f:55:1e:b1:a7:bf:1b:5f:3b:f8:15:73:b6:0c:19:61:5b: 86:c8:f7:bf:2e:29:7c:d0:e5:7f:8c:fd:9b:72:40:d8:95:63: be:88:b6:36:d9:57:b5:e3:3e:7d:7d:2d:60:10:1b:d4:72:6f: b0:ee:fa:c6:51:a1:42:e2:63:e7:9e:44:45:20:77:66:8f:37: 0d:e8:06:af:a9:04:cc:30:27:76:8f:58:14:2f:03:25:35:1f: 4c:c4:b6:47:3f:03:2d:32:ff:ae:f5:a3:06:24:03:f5:e5:91: 58:14:55:a4:a0:cd:7a:b3:7c:13:17:e9:ee:d4:72:68:53:f0: c1:cc:1a:25:ec:b6:67:ac:42:f9:49:4c:97:61:3c:d5:7b:ca: 39:03:bf:ce:05:bd:ff:98:a4:4e:98:83:4a:31:7e:49:1a:fc: 00:71:80:ce:eb:1f:cd:8f:96:90:b1:08:73:8f:5b:46:93:d4: 4d:f8:f3:25:01:85:a8:92:8c:cb:ba:fc:b7:0d:33:2a:c7:c2: ca:74:e7:2c:6a:84:a0:32:c7:33:c8:4a:51:97:81:61:2b:3f: 38:28:fc:3b:f3:bc:b9:28:ad:56:3d:92:7b:b9:3c:c4:06:58: 79:62:a1:07 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUDjQi2BeRDSQ7S4EQ1QiYUyi7/okwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex OGJlYjY1OTAeFw0yNjEwMDYwOTIwMzRaFw0yNjEwMDcwOTU1MzRaMDMxMTAvBgNV BAMTKEZERjEzQjVFODQyMzcyRjMzNDM0RTVCREU2OUVERUE2RjQ3QzgyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl3qAoftkTUgH4UgJP6Sg0FuV/ xQg4Kxa3yLEb6ZJTVAQuWKwPsSynWxFa3hAmPcgUtpdG0ErGE6JHfEQHikCQJe+e Q0SPyCKFvPS3EiFppfT0KmmpAr2j8lCRmmojpMqbSybdmRW0OQ8b3LhYvVeAsWhQ DYol/9iUdbA4+XlZmSWy0H9Nqebw9yAxZpsLJyjEjba4tih20Np3YqZYjRZhbqHp neBGq2TzFTPkmCEf+xGbybsgNyuql3C5IdbgjvRwX9w8BmHNSCtDFfyw/dSu3XUb TwYjAgFRW524cFte/D0e/wMfuJ1UT4KzZf55/U6FrTROVmZyz1k7/F210ikTAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQU/fE7XoQjcvM0NOW95p7epvR8gggwHwYDVR0j BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKLxdon3sODR8t0Sd5G3o9pE3KifVR6xp78bXzv4FXO2DBlhW4bI978u KXzQ5X+M/ZtyQNiVY76ItjbZV7XjPn19LWAQG9Ryb7Du+sZRoULiY+eeREUgd2aP Nw3oBq+pBMwwJ3aPWBQvAyU1H0zEtkc/Ay0y/671owYkA/XlkVgUVaSgzXqzfBMX 6e7UcmhT8MHMGiXstmesQvlJTJdhPNV7yjkDv84Fvf+YpE6Yg0oxfkka/ABxgM7r H82PlpCxCHOPW0aT1E348yUBhaiSjMu6/LcNMyrHwsp05yxqhKAyxzPISlGXgWEr Pzgo/DvzvLkorVY9knu5PMQGWHlioQc= -----END CERTIFICATE-----Generated at Tue Oct 6 20:06:06 2026 by rpki-client