lustre-client-2.12.6-1 has a bug the when paired with extended acls. When you extract a tarball to a directory with default extended acls, the modified time on the extracted files change to the time of extraction.

Without the extended acls, the tarball extraction works as intended. We have reverted to 2.12.5-1 which also works as intended.