$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft File: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft (raw, json) Hash identifier: 9BFI0fyjNbxtk/VHNGodNv1YsBEG6PtosGXmnIroNAI= Subject key identifier: BB:FB:AC:C4:07:10:3D:C8:FE:27:9D:CD:D6:18:08:3F:E1:BE:1B:68 Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 Certificate issuer: /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Certificate serial: 552ED686E172879C47748A57FF298F854A52BC1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft Manifest number: 02CD Signing time: Fri 15 May 2026 20:00:09 +0000 Manifest this update: Fri 15 May 2026 19:55:09 +0000 Manifest next update: Sat 16 May 2026 22:35:09 +0000 Files and hashes: 1: 3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl (hash: U6tAkoMzZEB2v02MzBu7wNr5MtBiGffWNPGdF94IZnM=) 2: 326131333a313830313a3138303a3a2f34332d3438203d3e20313531343634.roa (hash: KcSiMoX0U3Ni7SCBK6yO0cPqVDIaJsQvJrGXhRD/MYw=) 3: 326131333a313830303a3a2f33322d3434203d3e2034383432.roa (hash: bE+qtBuJQ5Ql+ocOGWkNEbG+qXwDKoAat3uVJIxYlBU=) 4: 326131333a313830323a3a2f33362d3434203d3e20323039333036.roa (hash: pXHWovrH6TWojvW8mUu0naJMptTjJymjnwMcPDiiiSQ=) 5: 326131333a313830303a3a2f34342d3438203d3e2034383432.roa (hash: 7Jtvvaz5+svDZJUV4HOtzZo79hJmyHivTOZafczoidE=) 6: 326131333a313830303a31303a3a2f34382d3438203d3e2034383432.roa (hash: SXnkdVPlb6mQaXcMZxos1+JP4t+6MnOlDhQ3ay3jMs8=) 7: 3139342e3132372e3232392e302f32342d3234203d3e20313531343634.roa (hash: p3Dt6n/YM4JC1HzoBI1il5hduNzHZIpvxkXeAutWuXA=) 8: 326131333a313830313a3138303a3a2f34332d3433203d3e2034383432.roa (hash: yfjSjNa+QIzNYkDL6jr+NvH01kgPvrZSTvudT/6HFE4=) 9: 3139342e3132372e3232392e302f32342d3234203d3e2034383432.roa (hash: MdL2dvNSPl0HYZpyDqsjcEXu/yLXJAvwzmQYqXBk/II=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2e:d6:86:e1:72:87:9c:47:74:8a:57:ff:29:8f:85:4a:52:bc:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659 Validity Not Before: May 15 19:55:09 2026 GMT Not After : May 16 22:35:09 2026 GMT Subject: CN=BBFBACC407103DC8FE279DCDD618083FE1BE1B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:5d:3e:a7:a7:6f:57:27:b0:43:cb:bb:ed: d0:41:c2:45:10:50:c9:47:bb:79:fe:b5:d4:34:1b: 78:c4:c7:b5:5d:d2:f0:a8:63:72:62:6d:2c:86:5e: 4a:cf:a0:42:bd:69:36:19:65:7a:8d:dd:38:4f:ef: 61:e8:b1:69:5a:3f:f4:a6:da:7d:b6:33:cc:3b:f6: 8e:36:79:13:67:89:01:f7:14:19:f8:9d:af:e6:d1: 1c:f3:0b:67:cc:90:2e:69:a3:a2:35:cb:d9:91:24: 79:4f:1a:71:8b:81:eb:a8:bc:80:3f:e2:8b:97:76: cd:5b:18:9b:c9:e9:85:cb:7f:85:38:06:58:5f:b5: 44:55:ed:b3:44:3d:0d:49:4b:ca:b5:6a:08:6c:4f: f8:94:5a:47:82:6a:62:68:e3:40:0c:b3:2a:04:08: 7a:ca:fa:05:c3:e8:2e:94:79:dd:35:a5:ea:c4:ab: f3:2e:4f:e6:92:f8:42:32:6c:cf:71:1b:90:ca:bf: 3f:e4:08:bd:3c:d7:1f:fa:ad:2f:81:3d:dc:f1:97: f6:e5:6f:e0:5e:44:2c:3e:7e:ae:7d:17:f8:32:ec: 44:dc:6c:01:56:22:32:33:67:24:9a:5d:b8:4c:71: db:dc:5e:9b:d5:74:db:d1:ac:b7:66:1f:b7:a8:76: 02:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:FB:AC:C4:07:10:3D:C8:FE:27:9D:CD:D6:18:08:3F:E1:BE:1B:68 X509v3 Authority Key Identifier: keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:3e:3d:35:bc:b0:ae:9e:21:b5:02:dc:b1:71:0a:63:67:4b: 21:b8:04:f4:e9:38:63:e3:e0:a1:20:5f:15:4f:05:b5:6c:db: a4:89:e5:87:3c:c2:d7:37:db:d9:2f:d8:ad:22:83:c9:fb:61: 85:42:52:28:18:dd:9c:32:c6:de:8a:f4:b5:00:c4:aa:7f:3f: 1b:86:c5:6a:50:88:a8:d7:c0:19:7b:5a:7e:da:5b:86:fe:6e: 87:e3:0f:2c:f1:cd:bb:87:39:ca:db:cb:46:00:ea:44:29:e4: c9:c3:78:cf:34:fe:0e:21:5c:a6:d4:34:9c:4e:d6:40:73:e8: f0:3c:de:c2:ce:3e:86:bc:44:37:d6:22:d4:a6:3c:22:6e:c1: 43:39:eb:bd:6c:2b:a9:e5:e5:fb:f0:74:7f:da:98:55:b1:6c: 90:da:ba:07:68:fa:c0:fe:39:fd:2e:ff:1d:91:5d:19:87:e9: 93:df:68:86:22:ca:da:94:3b:d5:2d:70:38:ee:b3:44:1a:10: b9:e1:3e:10:e1:fc:bb:95:73:4b:cf:1e:fb:d1:a5:68:1f:17: 28:ca:47:cc:a1:8f:3f:af:42:ff:1a:6a:a7:a1:c5:d4:67:ca: 4c:07:86:2d:59:e3:f6:f3:33:64:92:85:ff:6e:32:3e:4a:1c: 2b:34:73:08 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgIUVS7WhuFyh5xHdIpX/ymPhUpSvBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2NkZWMyNzM4NGFhZGU1Y2EwODA5ZmQ2ZjE2ZDJiY2Ex OGJlYjY1OTAeFw0yNjA1MTUxOTU1MDlaFw0yNjA1MTYyMjM1MDlaMDMxMTAvBgNV BAMTKEJCRkJBQ0M0MDcxMDNEQzhGRTI3OURDREQ2MTgwODNGRTFCRTFCNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFV0+p6dvVyewQ8u77dBBwkUQ UMlHu3n+tdQ0G3jEx7Vd0vCoY3JibSyGXkrPoEK9aTYZZXqN3ThP72HosWlaP/Sm 2n22M8w79o42eRNniQH3FBn4na/m0RzzC2fMkC5po6I1y9mRJHlPGnGLgeuovIA/ 4ouXds1bGJvJ6YXLf4U4BlhftURV7bNEPQ1JS8q1aghsT/iUWkeCamJo40AMsyoE CHrK+gXD6C6Ued01perEq/MuT+aS+EIybM9xG5DKvz/kCL081x/6rS+BPdzxl/bl b+BeRCw+fq59F/gy7ETcbAFWIjIzZySaXbhMcdvcXpvVdNvRrLdmH7eodgKjAgMB AAGjggH9MIIB+TAdBgNVHQ4EFgQUu/usxAcQPcj+J53N1hgIP+G+G2gwHwYDVR0j BBgwFoAUPN7Cc4Sq3lyggJ/W8W0ryhi+tlkwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVw by9UaWFuaGFpUnBraS8wLzNDREVDMjczODRBQURFNUNBMDgwOUZENkYxNkQyQkNB MThCRUI2NTkuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6 Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9QTjdDYzRTcTNseWdn Sl9XOFcwcnloaS10bGsuY2VyMHsGCCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4Zf cnN5bmM6Ly9yc3luYy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtp LzAvM0NERUMyNzM4NEFBREU1Q0EwODA5RkQ2RjE2RDJCQ0ExOEJFQjY1OS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAHM+PTW8sK6eIbUC3LFxCmNnSyG4BPTpOGPj4KEgXxVPBbVs26SJ5Yc8 wtc329kv2K0ig8n7YYVCUigY3Zwyxt6K9LUAxKp/PxuGxWpQiKjXwBl7Wn7aW4b+ bofjDyzxzbuHOcrby0YA6kQp5MnDeM80/g4hXKbUNJxO1kBz6PA83sLOPoa8RDfW ItSmPCJuwUM5671sK6nl5fvwdH/amFWxbJDaugdo+sD+Of0u/x2RXRmH6ZPfaIYi ytqUO9UtcDjus0QaELnhPhDh/LuVc0vPHvvRpWgfFyjKR8yhjz+vQv8aaqehxdRn ykwHhi1Z4/bzM2SShf9uMj5KHCs0cwg= -----END CERTIFICATE-----Generated at Sat May 16 03:37:42 2026 by rpki-client