$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft File: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft (raw, json) Hash identifier: Pc5PBQDGz91lrwwhREqWDzPGOk3TD3DeNOnrC7j7IgI= Subject key identifier: 94:67:8D:1A:39:13:56:FC:A7:C2:3D:EA:25:9F:47:5D:11:55:9E:3D Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F Certificate issuer: /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F Certificate serial: 026511FDF5C4E8D4ABA869F24DA05F03D84111D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft Manifest number: 02CF Signing time: Thu 21 May 2026 00:00:09 +0000 Manifest this update: Wed 20 May 2026 23:55:09 +0000 Manifest next update: Fri 22 May 2026 01:10:09 +0000 Files and hashes: 1: 323430313a32303a3a2f33322d3430203d3e2034383432.roa (hash: r7XF1F6usoHLVxdY4PL0ijZQoAdAO6Q7O9MythfN5DU=) 2: 3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa (hash: IC14R/7PisX2xUgxvpoOXBZj7EziWG1xk34G0Uwi2U4=) 3: 323430313a32303a313333303a3a2f34342d3436203d3e2034383432.roa (hash: O1Qc6NM/hedKx5n8P2TcJKymQoYIgoGcEleUexrHAa4=) 4: 3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa (hash: UZ3HfpRoFPwrSlLQjUa+JXwDUWjdmwDKW3oepzOiXUA=) 5: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl (hash: 982YG82M6t6cLf3jYvnn68xTPMYm80NKaoft4JEBxro=) Validation: OK Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 May 2026 01:10:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:65:11:fd:f5:c4:e8:d4:ab:a8:69:f2:4d:a0:5f:03:d8:41:11:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F Validity Not Before: May 20 23:55:09 2026 GMT Not After : May 22 01:10:09 2026 GMT Subject: CN=94678D1A391356FCA7C23DEA259F475D11559E3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:dc:a9:9f:4c:95:44:37:5c:1a:78:60:22:ac: 29:bc:99:84:5b:bb:2c:20:59:0d:96:5a:40:8c:d7: 8d:a0:5d:44:4e:61:97:11:97:f9:7b:ac:46:0e:b6: 6c:56:30:33:c2:1b:6e:4a:5c:5c:10:83:42:8d:8e: 94:46:50:f9:51:46:d6:69:f4:5b:1c:7c:ec:ca:86: d4:18:8c:13:11:53:62:17:a4:17:11:d3:07:32:9b: f6:a1:e1:fe:c5:20:35:5b:7a:09:02:1f:52:99:d3: 0a:52:8b:5a:ef:5c:7e:f0:f2:f9:d6:61:b0:ca:8d: 21:0d:ba:a7:83:fd:3d:19:2c:ac:1d:fe:23:62:69: e0:89:ed:fb:af:db:af:5d:79:a3:25:1b:05:ba:45: 3b:6f:ff:b8:cc:37:50:7a:33:27:71:92:b0:1b:c7: af:3c:63:3b:82:39:89:73:e5:a5:8a:44:90:c2:28: 1f:6d:c3:ac:71:49:d4:1a:dd:36:20:ee:3f:94:f0: 6f:4c:0d:b3:e7:ed:31:9b:e0:ed:03:a2:f4:d1:80: 2e:46:cf:1c:23:7a:c0:01:7d:1c:7d:dc:e0:0f:25: 43:e5:2f:61:36:c7:19:0a:a6:cd:93:cf:04:23:ed: f8:fd:5b:cf:84:20:d9:55:d4:6c:e1:8e:49:f3:e3: e4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:67:8D:1A:39:13:56:FC:A7:C2:3D:EA:25:9F:47:5D:11:55:9E:3D X509v3 Authority Key Identifier: keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer Subject Information Access: Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:69:74:d4:b8:b6:18:5d:90:b7:3b:16:d1:91:95:2e:78:bc: 0e:39:25:0b:a6:ec:a3:b5:22:67:2a:b1:74:03:52:92:b1:da: 78:90:c1:b7:93:1f:ce:f1:32:22:f1:3b:35:89:67:fc:91:65: af:39:92:81:ae:86:d0:1c:fe:87:85:8d:cc:99:dd:e8:bf:37: e5:e3:bd:2b:6b:d8:7f:2e:4d:ab:9f:a2:a6:b0:e4:10:09:e3: 80:c4:21:66:e7:a7:4e:b7:90:58:8d:4e:d7:33:e9:05:65:fe: 09:c5:2a:a9:f8:86:25:2b:bf:b0:f0:a0:40:e5:90:47:cd:be: 0f:fb:9c:8b:ed:de:01:75:fd:a2:68:85:95:3c:fa:04:19:66: 6a:c3:ca:10:3c:63:74:20:6f:c4:87:84:0e:2e:b1:97:5d:8c: 48:e2:ea:09:e2:ca:a2:87:f5:54:a5:e5:be:54:b5:9c:d3:9a: 60:f1:72:3e:d2:8d:f4:72:03:d2:f5:8b:20:73:b1:d6:90:54: 90:33:67:2c:64:9a:1a:39:ae:54:d6:49:92:9b:06:de:91:ef: d7:55:c0:da:d8:07:c3:4c:f9:14:5d:1a:16:db:42:79:b5:67: 85:f6:0d:c7:89:0f:ed:2e:48:7e:22:d9:c8:0e:3a:07:6a:c3: c1:16:ae:a8 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIUAmUR/fXE6NSrqGnyTaBfA9hBEdEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjU2NzUwMDAwMTEwLwYDVQQFEyg0NTlEMkI4MzRB M0JBMDhDMEFBNjdDNkU1NzgxNDZBOEIxRkUyQzJGMB4XDTI2MDUyMDIzNTUwOVoX DTI2MDUyMjAxMTAwOVowMzExMC8GA1UEAxMoOTQ2NzhEMUEzOTEzNTZGQ0E3QzIz REVBMjU5RjQ3NUQxMTU1OUUzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMncqZ9MlUQ3XBp4YCKsKbyZhFu7LCBZDZZaQIzXjaBdRE5hlxGX+XusRg62 bFYwM8IbbkpcXBCDQo2OlEZQ+VFG1mn0Wxx87MqG1BiMExFTYhekFxHTBzKb9qHh /sUgNVt6CQIfUpnTClKLWu9cfvDy+dZhsMqNIQ26p4P9PRksrB3+I2Jp4Int+6/b r115oyUbBbpFO2//uMw3UHozJ3GSsBvHrzxjO4I5iXPlpYpEkMIoH23DrHFJ1Brd NiDuP5Twb0wNs+ftMZvg7QOi9NGALkbPHCN6wAF9HH3c4A8lQ+UvYTbHGQqmzZPP BCPt+P1bz4Qg2VXUbOGOSfPj5L0CAwEAAaOCAhcwggITMB0GA1UdDgQWBBSUZ40a ORNW/KfCPeoln0ddEVWePTAfBgNVHSMEGDAWgBRFnSuDSjugjAqmfG5XgUaosf4s LzAOBgNVHQ8BAf8EBAMCB4AwcAYDVR0fBGkwZzBloGOgYYZfcnN5bmM6Ly9yc3lu Yy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtpLzMvNDU5RDJCODM0 QTNCQTA4QzBBQTY3QzZFNTc4MTQ2QThCMUZFMkMyRi5jcmwwfgYIKwYBBQUHAQEE cjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRv cnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUlowcmcwbzdvSXdL cG54dVY0RkdxTEgtTEM4LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG X3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVwby9UaWFuaGFpUnBr aS8zLzQ1OUQyQjgzNEEzQkEwOEMwQUE2N0M2RTU3ODE0NkE4QjFGRTJDMkYubWZ0 MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5aXTUuLYYXZC3OxbRkZUueLwOOSULpuyjtSJnKrF0A1KSsdp4kMG3 kx/O8TIi8Ts1iWf8kWWvOZKBrobQHP6HhY3Mmd3ovzfl470ra9h/Lk2rn6KmsOQQ CeOAxCFm56dOt5BYjU7XM+kFZf4JxSqp+IYlK7+w8KBA5ZBHzb4P+5yL7d4Bdf2i aIWVPPoEGWZqw8oQPGN0IG/Eh4QOLrGXXYxI4uoJ4sqih/VUpeW+VLWc05pg8XI+ 0o30cgPS9Ysgc7HWkFSQM2csZJoaOa5U1kmSmwbeke/XVcDa2AfDTPkUXRoW20J5 tWeF9g3HiQ/tLkh+ItnIDjoHasPBFq6o -----END CERTIFICATE-----Generated at Thu May 21 09:30:21 2026 by rpki-client