Manifest

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
File:                     459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft (raw, json)
Hash identifier:          dRt23xuXAgrraHD4EVQAl59Lbef4GBSabx5K7UEwnNo=
Subject key identifier:   E4:0B:DA:7F:47:AD:B2:ED:D1:5B:59:14:C5:D4:67:A1:79:79:D0:55
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Certificate issuer:       /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial:       6F87B41CFC6CFC0AD6DC33F757A8EA5FA162D6CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
Manifest number:          0293
Signing time:             Sun 05 Apr 2026 14:54:10 +0000
Manifest this update:     Sun 05 Apr 2026 14:49:10 +0000
Manifest next update:     Mon 06 Apr 2026 17:04:10 +0000
Files and hashes:         1: 3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa (hash: UZ3HfpRoFPwrSlLQjUa+JXwDUWjdmwDKW3oepzOiXUA=)
                          2: 3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa (hash: IC14R/7PisX2xUgxvpoOXBZj7EziWG1xk34G0Uwi2U4=)
                          3: 323430313a32303a313333303a3a2f34342d3436203d3e2034383432.roa (hash: O1Qc6NM/hedKx5n8P2TcJKymQoYIgoGcEleUexrHAa4=)
                          4: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl (hash: Ib5Z27yeaJecSh0pHWA+4ZT1r/YdcFfoCf3fiVDjS5U=)
                          5: 323430313a32303a3a2f33322d3430203d3e2034383432.roa (hash: r7XF1F6usoHLVxdY4PL0ijZQoAdAO6Q7O9MythfN5DU=)
Validation:               OK
Signature path:           rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
                          rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Apr 2026 17:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:87:b4:1c:fc:6c:fc:0a:d6:dc:33:f7:57:a8:ea:5f:a1:62:d6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
        Validity
            Not Before: Apr  5 14:49:10 2026 GMT
            Not After : Apr  6 17:04:10 2026 GMT
        Subject: CN=E40BDA7F47ADB2EDD15B5914C5D467A17979D055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bd:ba:33:4a:61:50:31:85:1c:92:77:b6:2e:
                    5b:84:8a:c6:8d:a5:01:31:12:13:0f:0e:6a:47:70:
                    8a:e7:8c:48:20:ff:46:9f:0e:db:81:cf:07:90:4e:
                    19:40:59:96:58:21:b7:80:d4:93:95:bc:7d:b1:dd:
                    8f:12:13:15:92:60:aa:46:f1:16:c3:b9:49:82:71:
                    5b:8d:4e:96:17:d8:82:6d:84:3d:0f:a5:1e:bf:89:
                    3d:77:77:b2:89:a3:32:c4:76:f6:eb:5e:21:21:78:
                    eb:c5:a5:f1:24:7d:18:69:a4:eb:ef:e2:3a:67:d7:
                    7a:a1:99:6e:81:37:49:f6:b9:08:b0:ea:e6:6e:ba:
                    42:cc:12:af:72:3e:18:31:ce:26:b5:c3:e8:d5:42:
                    e9:f3:50:d2:d8:2c:0f:f2:a7:f1:f4:a5:d7:f5:db:
                    cc:d0:41:4c:21:5f:0f:4d:f7:71:8e:50:25:d2:03:
                    15:7c:9e:a0:27:20:1c:7e:b0:80:92:a3:62:00:99:
                    5b:c0:f8:86:04:7e:51:ed:42:ff:51:89:5d:57:31:
                    7c:e9:95:87:c5:7d:0c:b5:1c:98:76:30:d4:59:d5:
                    be:99:07:28:2a:00:4d:3d:b2:73:dc:68:f2:8c:c4:
                    b2:fa:c7:6a:d2:e1:82:8a:e5:4a:b7:fa:9f:ed:e7:
                    37:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0B:DA:7F:47:AD:B2:ED:D1:5B:59:14:C5:D4:67:A1:79:79:D0:55
            X509v3 Authority Key Identifier:
                keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2b:d5:2c:f6:fc:8a:b7:6f:da:d3:a7:89:09:96:1b:6b:56:
         b0:0f:e2:e5:d7:2a:49:1c:5e:1e:44:eb:b2:f8:89:25:31:c4:
         2f:b5:0e:af:c7:a1:36:4c:0d:9e:53:1c:62:5f:7d:25:c9:bc:
         ac:a7:31:e9:e9:43:ec:f5:a2:50:36:30:f5:3c:eb:f8:ff:6a:
         8c:a4:e1:8f:40:02:08:03:73:48:9b:f0:b2:35:34:eb:0e:08:
         08:82:5c:4a:a1:36:44:c5:ec:bd:cb:dc:14:d8:a4:5e:48:48:
         39:c2:b5:05:5a:42:6d:d9:a9:a6:a0:67:ff:43:40:cb:bf:cc:
         ac:9f:b5:83:f5:cc:98:e4:d7:d7:fd:9a:89:3e:86:e1:38:98:
         94:1a:81:df:35:d9:7c:af:2d:3f:62:fc:b8:04:c2:ba:0b:75:
         9c:0b:0f:15:91:e3:7c:2f:69:60:f3:a0:28:af:59:5b:f4:99:
         48:46:00:f9:6e:45:55:8a:30:0e:32:e7:72:59:78:c8:de:36:
         53:63:6c:a9:fa:21:85:a8:d6:5e:3f:42:f7:53:2b:ab:47:5b:
         dc:6f:81:91:db:20:e6:08:e4:da:bc:19:c0:5f:7c:65:1a:f9:
         00:67:9f:37:1a:3e:92:09:a8:76:82:8c:d7:e8:10:37:71:e1:
         b6:d7:a1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:53 2026 by rpki-client