
$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
File: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft (raw, json)
Hash identifier: cCaCvLhlppcJ1Fzyo6t5sSyjfSdJx1ElOSbh+zK8RDo=
Subject key identifier: 10:2C:07:10:4B:3B:A5:65:5D:20:31:3E:20:7F:7E:85:EC:1A:08:98
Authority key identifier: 45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
Certificate issuer: /CN=A91F56750000/serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Certificate serial: 51472E87F2A9946DBFA3E5955C1A12B8E93A9133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject info access: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
Manifest number: 032A
Signing time: Sun 26 Jul 2026 15:35:12 +0000
Manifest this update: Sun 26 Jul 2026 15:30:12 +0000
Manifest next update: Mon 27 Jul 2026 16:09:12 +0000
Files and hashes: 1: 323430313a32303a323130303a3a2f34302d3436203d3e2034383432.roa (hash: SEejvwTPwEWmlVU00XxArrAxuxhHMWNjBmmOq6g53WI=)
2: 323430313a32303a3a2f33322d3430203d3e2034383432.roa (hash: r7XF1F6usoHLVxdY4PL0ijZQoAdAO6Q7O9MythfN5DU=)
3: 323430313a32303a313333303a3a2f34342d3436203d3e2034383432.roa (hash: O1Qc6NM/hedKx5n8P2TcJKymQoYIgoGcEleUexrHAa4=)
4: 3130332e3135302e3137322e302f32332d3234203d3e203338303038.roa (hash: IC14R/7PisX2xUgxvpoOXBZj7EziWG1xk34G0Uwi2U4=)
5: 3130332e3135302e3137322e302f32332d3234203d3e2034383432.roa (hash: UZ3HfpRoFPwrSlLQjUa+JXwDUWjdmwDKW3oepzOiXUA=)
6: 459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl (hash: r8Fxf65Bm/Ny9c/i76fvBR36RTXP6bMsWlaJnoTlnXk=)
Validation: OK
Signature path: rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:47:2e:87:f2:a9:94:6d:bf:a3:e5:95:5c:1a:12:b8:e9:3a:91:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F56750000, serialNumber=459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F
Validity
Not Before: Jul 26 15:30:12 2026 GMT
Not After : Jul 27 16:09:12 2026 GMT
Subject: CN=102C07104B3BA5655D20313E207F7E85EC1A0898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:e5:1b:62:a4:a9:f6:69:f0:9e:b0:2e:fa:
28:75:08:6c:90:44:98:1e:9d:e6:b6:ef:7b:ab:c2:
96:3e:69:3a:19:c9:2c:02:5f:bb:54:f0:a4:94:66:
8a:88:c7:54:39:96:79:62:70:81:4e:2c:ad:59:96:
15:28:b5:3b:2e:57:72:3d:1a:89:a4:28:b9:71:ab:
c8:de:c4:18:02:8f:50:5e:73:4e:7d:44:a9:f1:95:
7c:7a:50:0f:d9:12:b7:a6:3c:e3:f9:f5:54:6a:d6:
65:06:06:45:92:8c:b2:82:1d:4f:2f:fc:aa:0f:a3:
cc:ad:a7:50:81:33:74:87:41:08:99:88:ab:95:aa:
2a:16:07:84:33:d8:83:5d:09:14:e6:33:3c:d4:2b:
1a:54:1a:35:2f:30:3f:77:58:71:c0:d6:d6:cb:8c:
54:4b:76:9b:fa:6e:70:f9:a5:92:ec:18:f9:84:c4:
cf:d2:88:cb:df:3f:b1:24:9a:e8:24:a8:b3:5b:c3:
49:cd:c2:4d:0d:54:8a:ca:70:1e:9b:3b:27:e3:19:
3f:fc:7a:2f:ad:94:8d:ee:ba:4f:bb:29:f5:db:ba:
86:11:1d:78:b9:2f:e3:1a:5e:ac:15:a6:c3:d4:e8:
b5:cc:9e:00:b4:98:35:a5:86:fd:1d:83:49:b1:24:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2C:07:10:4B:3B:A5:65:5D:20:31:3E:20:7F:7E:85:EC:1A:08:98
X509v3 Authority Key Identifier:
keyid:45:9D:2B:83:4A:3B:A0:8C:0A:A6:7C:6E:57:81:46:A8:B1:FE:2C:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RZ0rg0o7oIwKpnxuV4FGqLH-LC8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/3/459D2B834A3BA08C0AA67C6E578146A8B1FE2C2F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:7b:45:53:fd:ed:cd:21:ac:ff:85:96:6a:73:e3:88:ce:d9:
9e:83:f7:b7:56:8d:90:33:0a:6e:19:45:4f:dc:09:76:dc:ac:
7c:47:27:0a:a8:b1:b2:3e:b2:73:8a:5a:63:f1:c7:2c:f2:47:
9e:ff:8b:17:6f:a3:fd:5c:d3:0d:01:d5:40:43:df:a1:f0:5b:
1a:f8:b9:dd:c6:d6:2e:43:04:ab:53:8f:08:3e:f0:f7:e4:ab:
cd:f9:be:80:7d:ba:8c:80:e9:ab:f2:aa:84:51:2f:fb:6e:cc:
07:ac:a3:cc:90:1d:94:61:13:20:16:0e:6f:a0:04:cc:f9:50:
a9:a5:aa:15:4e:11:66:5f:46:34:d1:3e:a9:6e:50:15:8a:e2:
9c:eb:2d:70:50:58:fd:61:54:59:cd:3f:34:e1:ef:8b:09:f8:
e3:66:dc:5a:74:98:1e:72:97:85:9a:19:03:61:aa:ea:1d:f4:
5a:3a:6a:a1:e7:1e:44:fb:a2:f5:11:65:0b:28:69:8d:ae:c7:
43:8b:e1:b1:a6:f9:3f:5e:44:f7:be:a0:62:ae:b4:02:c8:c9:
31:05:f1:0a:71:99:21:1c:50:e4:94:f3:58:96:50:ed:e1:f9:
19:81:ab:93:14:77:f3:45:1b:f1:f7:e9:9c:46:45:f8:0e:03:
6e:60:b2:c5
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUUUcuh/KplG2/o+WVXBoSuOk6kTMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjU2NzUwMDAwMTEwLwYDVQQFEyg0NTlEMkI4MzRB
M0JBMDhDMEFBNjdDNkU1NzgxNDZBOEIxRkUyQzJGMB4XDTI2MDcyNjE1MzAxMloX
DTI2MDcyNzE2MDkxMlowMzExMC8GA1UEAxMoMTAyQzA3MTA0QjNCQTU2NTVEMjAz
MTNFMjA3RjdFODVFQzFBMDg5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALHd5RtipKn2afCesC76KHUIbJBEmB6d5rbve6vClj5pOhnJLAJfu1TwpJRm
iojHVDmWeWJwgU4srVmWFSi1Oy5Xcj0aiaQouXGryN7EGAKPUF5zTn1EqfGVfHpQ
D9kSt6Y84/n1VGrWZQYGRZKMsoIdTy/8qg+jzK2nUIEzdIdBCJmIq5WqKhYHhDPY
g10JFOYzPNQrGlQaNS8wP3dYccDW1suMVEt2m/pucPmlkuwY+YTEz9KIy98/sSSa
6CSos1vDSc3CTQ1UispwHps7J+MZP/x6L62Uje66T7sp9du6hhEdeLkv4xperBWm
w9TotcyeALSYNaWG/R2DSbEk61UCAwEAAaOCAhcwggITMB0GA1UdDgQWBBQQLAcQ
SzulZV0gMT4gf36F7BoImDAfBgNVHSMEGDAWgBRFnSuDSjugjAqmfG5XgUaosf4s
LzAOBgNVHQ8BAf8EBAMCB4AwcAYDVR0fBGkwZzBloGOgYYZfcnN5bmM6Ly9yc3lu
Yy5ycGtpLnRpYW5oYWkubGluay9yZXBvL1RpYW5oYWlScGtpLzMvNDU5RDJCODM0
QTNCQTA4QzBBQTY3QzZFNTc4MTQ2QThCMUZFMkMyRi5jcmwwfgYIKwYBBQUHAQEE
cjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvUlowcmcwbzdvSXdL
cG54dVY0RkdxTEgtTEM4LmNlcjB7BggrBgEFBQcBCwRvMG0wawYIKwYBBQUHMAuG
X3JzeW5jOi8vcnN5bmMucnBraS50aWFuaGFpLmxpbmsvcmVwby9UaWFuaGFpUnBr
aS8zLzQ1OUQyQjgzNEEzQkEwOEMwQUE2N0M2RTU3ODE0NkE4QjFGRTJDMkYubWZ0
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDBe0VT/e3NIaz/hZZqc+OIztmeg/e3Vo2QMwpuGUVP3Al23Kx8RycK
qLGyPrJzilpj8ccs8kee/4sXb6P9XNMNAdVAQ9+h8Fsa+LndxtYuQwSrU48IPvD3
5KvN+b6AfbqMgOmr8qqEUS/7bswHrKPMkB2UYRMgFg5voATM+VCppaoVThFmX0Y0
0T6pblAViuKc6y1wUFj9YVRZzT804e+LCfjjZtxadJgecpeFmhkDYarqHfRaOmqh
5x5E+6L1EWULKGmNrsdDi+Gxpvk/XkT3vqBirrQCyMkxBfEKcZkhHFDklPNYllDt
4fkZgauTFHfzRRvx9+mcRkX4DgNuYLLF
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:16:51 2026 by rpki-client