This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
File:                     1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json)
Hash identifier:          xX5LOoTy0FqpLc5twe86cjaVyGa9p8JZSDiOeeTg2ZM=
Subject key identifier:   E7:1F:AD:5B:CF:75:24:46:18:68:52:03:DD:FD:82:88:63:D9:F8:E3
Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15
Certificate issuer:       /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
Certificate serial:       35955B2098E3E916DFCEDF413DBF411DFB63BE72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
Subject info access:      rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
Manifest number:          52
Signing time:             Sat 06 Dec 2025 11:38:42 +0000
Manifest this update:     Sat 06 Dec 2025 11:33:42 +0000
Manifest next update:     Sun 07 Dec 2025 14:08:42 +0000
Files and hashes:         1: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: 0SB786ljtmHZnOZaU2eDypBNqPdnQIJOGNYScZZ38FY=)
                          2: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: yG2tSSRlDmIt5b9BWyR/YmGA0RL8jZU64YaW4FBwJOw=)
                          3: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: 4GNUb7g4foVVWkpdbjjuAmYvjUx/eQ01cUG+CD5JYfU=)
                          4: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: H9am9L5vHncvReYNaQ3wG2KpcMAGh7f/QxuCDZEWUK0=)
Validation:               OK
Signature path:           rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl
                          rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 14:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:95:5b:20:98:e3:e9:16:df:ce:df:41:3d:bf:41:1d:fb:63:be:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915
        Validity
            Not Before: Dec  6 11:33:42 2025 GMT
            Not After : Dec  7 14:08:42 2025 GMT
        Subject: CN=E71FAD5BCF75244618685203DDFD828863D9F8E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:59:b8:93:5b:f4:1c:b7:f7:56:d6:3a:1a:8d:
                    69:5e:9c:93:6a:20:33:a3:82:eb:e5:54:7a:d2:bb:
                    a2:ac:69:8e:42:7b:46:1f:a3:68:97:b7:b9:d2:a0:
                    d9:bf:09:3b:3d:63:37:a9:0f:30:99:09:93:f0:5b:
                    7c:f0:7f:12:5a:4c:f8:98:04:df:4d:be:7f:a3:98:
                    38:95:66:f1:a2:70:8b:18:0b:93:9d:79:dc:8f:69:
                    e2:5e:56:13:64:eb:49:ef:15:8c:db:72:56:c6:c2:
                    27:c2:50:95:83:b4:1f:34:47:92:84:a2:92:77:6d:
                    64:9e:9a:e4:f2:e3:ce:05:86:b7:b5:f8:ba:21:18:
                    0d:75:1d:54:c8:0b:91:87:fc:ea:da:85:79:ad:20:
                    a7:b5:92:47:ec:f0:f2:1f:9f:40:f9:9c:32:f7:f4:
                    74:b4:91:8d:0a:d7:74:36:78:f4:d4:5c:d1:2e:1f:
                    e4:13:76:e6:84:18:39:04:a0:5d:92:05:c5:ad:ab:
                    94:88:9b:6b:d9:4b:d4:a3:39:1a:27:27:c4:47:73:
                    e1:4a:3f:a0:0b:c1:8b:5f:45:9f:7f:cd:2c:99:0e:
                    69:95:21:91:57:81:ed:7b:d3:49:3d:bb:58:34:f2:
                    69:1c:7d:8b:fd:f0:84:5a:6a:24:48:47:44:46:89:
                    77:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1F:AD:5B:CF:75:24:46:18:68:52:03:DD:FD:82:88:63:D9:F8:E3
            X509v3 Authority Key Identifier:
                keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:70:1b:c6:f4:b0:43:67:ab:e1:19:8d:c5:df:96:fd:68:a9:
         ab:f7:54:76:bc:34:52:c6:9c:20:b0:13:e2:d3:e3:8e:31:9d:
         eb:ce:6e:9a:f3:9b:3f:34:85:d2:5f:65:66:a3:52:9a:f8:3f:
         33:6b:22:c6:68:6d:2f:95:74:fd:a6:b5:70:a7:1e:2d:89:3c:
         8c:9e:5f:54:91:3b:4f:4f:24:af:22:66:43:a4:cb:47:df:4e:
         3c:ee:50:35:39:5c:01:5d:40:94:d5:31:5c:1d:ab:5d:e3:9d:
         11:83:81:9e:e2:7e:c4:48:9c:23:bd:d1:96:50:b8:03:e2:7f:
         51:11:42:3d:d4:22:9c:75:90:e0:e4:be:17:cf:5b:63:b5:61:
         22:35:8e:be:dc:35:54:ed:c3:9c:53:55:6e:df:5a:4f:f2:80:
         6f:d7:51:37:e1:e6:4b:50:e6:6d:40:d5:57:2e:d5:65:2e:d7:
         dc:02:5c:7c:2e:52:54:70:16:74:52:72:ef:2c:71:10:be:58:
         dc:0b:56:a2:86:b1:29:98:9b:94:cd:cd:34:ad:b0:fb:ac:41:
         ab:4c:5e:0f:c0:6a:61:ec:c9:b7:eb:0a:23:8c:0d:7a:18:5c:
         bd:52:82:21:02:41:b8:a8:30:58:7c:6b:ff:7b:12:91:c7:96:
         be:af:21:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:14:12 2025 by rpki-client