
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json)
Hash identifier: /ZFSNKs/1rzfUEwVhYRTZy5YzNq3sXAoYl4bPw0+d24=
Subject key identifier: F4:63:DE:F4:6B:5D:5D:F7:87:75:F6:40:A6:68:B1:5D:D0:02:2E:27
Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Certificate serial: 04A67855FBCDE4BB9298E8A057933DA335EB0418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
Manifest number: 030A
Signing time: Tue 30 Jun 2026 07:05:10 +0000
Manifest this update: Tue 30 Jun 2026 07:00:10 +0000
Manifest next update: Wed 01 Jul 2026 10:55:10 +0000
Files and hashes: 1: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=)
2: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=)
3: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=)
4: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=)
5: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: ULxRJ4A8IIAXmJja6EVtToVcLD0BxIJn3nWaK9EA2/E=)
6: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=)
7: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=)
8: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=)
9: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=)
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:a6:78:55:fb:cd:e4:bb:92:98:e8:a0:57:93:3d:a3:35:eb:04:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Validity
Not Before: Jun 30 07:00:10 2026 GMT
Not After : Jul 1 10:55:10 2026 GMT
Subject: CN=F463DEF46B5D5DF78775F640A668B15DD0022E27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:5e:2c:e0:f3:6a:db:d0:28:25:d4:fa:3e:
31:07:11:ad:45:d8:77:41:b2:5a:d3:e9:2f:66:15:
25:50:1e:af:98:79:b1:ce:96:2d:21:7c:22:22:83:
32:16:5f:cf:43:31:09:12:4b:26:e8:96:38:22:8d:
c2:ee:68:dc:2c:51:6d:08:af:d6:2f:3a:02:99:36:
9c:ed:48:9e:41:d2:08:85:65:f2:34:57:1d:1e:d3:
f2:eb:4b:ba:e4:c5:2b:1d:72:c2:17:93:eb:b7:31:
5b:2c:07:83:af:ac:64:db:cb:a4:3a:6a:e6:02:5c:
b0:55:6e:28:23:1e:4f:09:d6:e5:11:82:64:13:63:
d7:79:82:57:7b:ec:a1:3b:9b:4f:25:e1:7a:fe:05:
63:ed:8d:bf:50:f3:41:0a:10:c7:f1:b5:5d:b0:63:
3c:c5:49:16:f5:0e:b3:67:8d:e5:1a:df:79:08:38:
03:3e:6f:b2:82:cc:77:17:27:21:a3:18:0a:90:65:
37:02:5a:49:dc:8f:23:21:eb:58:24:72:72:33:87:
26:17:4c:43:ba:dc:32:67:ba:4b:8f:6c:6b:eb:1a:
20:0d:97:46:60:30:ec:d7:8a:b7:04:b9:dd:19:f4:
e2:06:08:0d:db:b1:d8:48:8f:53:93:ee:bb:dd:e3:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:63:DE:F4:6B:5D:5D:F7:87:75:F6:40:A6:68:B1:5D:D0:02:2E:27
X509v3 Authority Key Identifier:
keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1a:11:b8:d8:09:8d:9f:cd:21:ad:1c:57:77:b3:dc:77:94:
2d:97:91:a9:7b:6c:50:59:66:7f:a3:68:72:e5:98:a4:5c:8b:
22:22:da:47:76:5c:15:94:91:6e:7a:e1:0f:05:53:48:54:04:
58:29:14:5d:69:73:a2:10:d5:b5:f3:e6:c0:df:ad:9d:8b:45:
e4:ec:ca:41:44:25:4e:82:71:fc:26:cb:91:12:ac:dc:d2:c6:
77:cc:ab:bd:dd:47:78:ff:e5:34:59:62:51:f9:8e:98:01:64:
9b:84:21:46:a3:43:b4:b9:a1:89:f2:92:d3:15:a0:0b:f1:1b:
68:f0:90:16:b9:ae:ee:83:fd:66:c0:21:b1:d2:72:f3:e7:da:
3b:b0:59:7c:09:66:c5:87:43:ec:81:ed:32:59:06:6b:21:73:
f1:8b:83:d4:e4:e0:5c:81:4c:86:a2:48:18:3a:77:fa:4f:71:
70:ee:e2:e4:18:2b:c0:f4:0c:7a:c4:be:7b:91:3a:9a:9a:f9:
68:77:27:71:c8:3a:10:75:b8:2a:e4:06:f9:7f:32:74:2b:c3:
6e:eb:bf:f2:37:17:04:e0:91:c8:d6:b3:b5:a0:72:36:d2:eb:
05:65:3c:0e:2f:bd:cc:b7:aa:86:19:e5:a9:80:4f:5a:c0:1d:
4c:e4:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:17:22 2026 by rpki-client