This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
File:                     05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft (raw, json)
Hash identifier:          hYjyLzPwx62JPLkNZzSZ1oKvCXphRzFmE/KRjyGyuTM=
Subject key identifier:   A4:D0:CD:D4:98:3F:AF:B7:EC:F3:25:2B:2A:DC:3D:C5:F5:A1:05:4D
Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA
Certificate issuer:       /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
Certificate serial:       6A61C283A562D0CF2B84A4339E9CCA4E35587642
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
Subject info access:      rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
Manifest number:          11
Signing time:             Sat 24 Jan 2026 15:36:38 +0000
Manifest this update:     Sat 24 Jan 2026 15:31:38 +0000
Manifest next update:     Sun 25 Jan 2026 19:21:38 +0000
Files and hashes:         1: AS142657.roa (hash: 8TkxSszUI/bUh6hqR80sK9HMbRekybeF/ZOw4/oZX7Y=)
                          2: AS142067.roa (hash: AKYMm9QKIdnufe6QnlzUeTYRfkaAv7vFVJUBmWP9lww=)
                          3: AS142652.roa (hash: LQIem+W7WQqsYnfA9y4c48E29Zoc6y0i3ZzGbeUpVXo=)
                          4: AS142102.roa (hash: ctdcX5p9g/3M4ZuEdctCD7ScXrVKuplilRCMd3hvCXA=)
                          5: AS144699.roa (hash: ckSCgAmVPi41wgIehUxzw/eeiY5wOQWlQXbn91H1me8=)
                          6: AS142068.roa (hash: uI6udKxviZBPBh5Gve2GoSBThINGoui5K7jpHfcWDt0=)
                          7: AS142083.roa (hash: zy2Gs9LSpauYAdEaJmIJDXb67OjaQOPO/U8Gms4d85E=)
                          8: AS142091.roa (hash: ZQSqATqZGDE1aSr9ZPto4KclRo7Uj9h03Pp/6UfxV28=)
                          9: AS142094.roa (hash: 24tFAEgIrgdp8mXkuGnjINmKJ6Y1I07D25z75IIoqnM=)
                          10: AS142084.roa (hash: uTMVsYsTUJYqsn0mjk+EzVZA3jL2Hg+02U3VlYkjZPc=)
                          11: AS142073.roa (hash: fjhw16Q9OsFgsH2hgPRfen86pfBA1Op5E/ri7wK6sxM=)
                          12: AS142654.roa (hash: TRl/dCcXMD+Rdob0qGN+LsWaEWr2WqeDjsWAbwrYQW8=)
                          13: AS142096.roa (hash: /daCmgLd+A0zb+CtT//9XJpgYaGOuEaW/hKLIJBCIUQ=)
                          14: AS142070.roa (hash: /oXzZC+W98fn94pWVHY6QJzAd8vpnQESTAc8QEmRdmQ=)
                          15: AS144705.roa (hash: 0N5dgwWYj7SesGUpjeT0RRIs2oUHWp2O6goNY5fdQG8=)
                          16: AS23910.roa (hash: dc///mVoIcqohBgC2zSxwV+zelIQzuo/ZtQ7QT3uRNo=)
                          17: AS144698.roa (hash: 4QdfmWdGo71fwbqjrA9ZEfrHQnq7mVWEVUHTh8ldqr8=)
                          18: AS142097.roa (hash: d9NtPlCaPoY7eN3TcQjJp70Nf2KtBcs0NLVu4b1rr3g=)
                          19: AS142081.roa (hash: Dj+OBX56Lqzz8nBs3MwBO2G1EynXjhwisGuCogf4KeA=)
                          20: AS142071.roa (hash: XIwHq3SrZXTPsXK7YIlczfjvQF25hGjZ73vviv0YewM=)
                          21: AS142077.roa (hash: 2nHAXprVQ7ri/SLib3tOSot/5i2iWMg6Gkx7Q+ToriM=)
                          22: AS142069.roa (hash: +gXFvfYlJ8JDXkH9snCYcpaiXI8YLDom8QMvZY7Mr0M=)
                          23: AS142090.roa (hash: Idg+8ZeVTpIMewQrwH8mOd9gjq8/kThsAXhvGffraC0=)
                          24: AS142659.roa (hash: EBe7I0D7q+Fpo9nR6FTbG3d2UwTWkCiKZKhl3EsRTLk=)
                          25: AS142106.roa (hash: AhOwvznZqZ9H1PdX5IqpmWeu+6FpJHxNXHPbcsLqv9I=)
                          26: AS142101.roa (hash: 6OFJqqr8gas0A8UVJ8GV6ICHSg5Rr/VAB9jUm8vB4AI=)
                          27: AS142104.roa (hash: JBPDoodhxf3q7pxY+XnZMjQ8SWT9EtwQ6613DxlpGa8=)
                          28: AS142103.roa (hash: AqwSSmOqEIm/KU6KIUfzIO9ZUqsTwohxzqEdMAi1UXs=)
                          29: AS142105.roa (hash: jpc2wbU/ba1vhnZ6iq3dbZY4QP5EvWEJuYxugUpscbk=)
                          30: AS142082.roa (hash: xb77wR9KHQl8u1FxrbrF/wj7u7VivxGsMW9sw3sVLP4=)
                          31: AS142075.roa (hash: jyRRnM6bqciwtUMJV3UYE9VqiOH714q7NUGW8zN0hqI=)
                          32: AS144704.roa (hash: x2+vHPnckdDECuw1a58ykphhy63G/jWiwWdi9k8QToc=)
                          33: AS142650.roa (hash: UzX3n4ZpZ72yjWVJpJER8UPFMnSLe6arwSnN87kKjNQ=)
                          34: AS144703.roa (hash: OybWjS6EIdcc6AbnJuZza4B7uJaT0r+uoAOhUnu/0mE=)
                          35: AS144700.roa (hash: yHPpHDwdVrEE2nHK4ImJmUDmc3ooLtvjaiT5lMtWMdE=)
                          36: AS142655.roa (hash: HUHNHUXSj6w4SuQBKEW3eJ/KXkJlCbWi935SWz6EXmc=)
                          37: AS142086.roa (hash: pabSN29hDUCZqT+sDZoTdGD5lyBkerQ5thU2WMEK6g4=)
                          38: AS142098.roa (hash: mHpJNE2qv8pWa5yEqjoHYirenuWuxus5PfjVVzk+cRM=)
                          39: AS142656.roa (hash: 6FNgfiUn9rO1ZKlzLzRIhZrlb1RSNv8egZe5HRv5Dvw=)
                          40: AS142072.roa (hash: 2fnz4jLd3xWLqgAxy3q0xzW5JSzRpqyfGBe54h+9MTU=)
                          41: AS4538.roa (hash: oaIO+9dBorjVKTlyF+YIgcDi3RZyTHPKQ9jAZcamMS0=)
                          42: AS144707.roa (hash: E3VD4TsVu4oeZ3zi42Q/Jbx+qwgTy8AOxDyYeNJfDgc=)
                          43: 05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl (hash: aOlpzjsCzhF/Gs+AcWyGroeuToptN6TqRcW9yqiGPHg=)
                          44: AS142093.roa (hash: pWtLWL5INM04aIY49fmRSWKo3ZRzQdeGWSsMTnRZkTY=)
                          45: AS142074.roa (hash: +tYX13sWJ5tXpBG1if/RtWwWqISMdyHgrp/FsKNIhJc=)
                          46: AS142080.roa (hash: qUn9GvkzQjuyW4zdV0h79bJo35w1fqFEwZKTOs0mg5Y=)
                          47: AS142658.roa (hash: D7+UCTaZr6nfJe518QeXP1b1wJ9x/qnosT1vvscnyvg=)
                          48: AS144701.roa (hash: efmJwWLf/3kLvoLlvICflsisPkDt5wiLzYfX8Ow5XPI=)
                          49: AS142099.roa (hash: 0HRmG/jKFftsRoVQaTj3mkEE7pZWQHVZSdzKV3BK984=)
                          50: AS142088.roa (hash: 9S+flZKE4YOj4mcvhJ/h+jPcNXuXYsO4MW97ZVMYuJg=)
                          51: AS142651.roa (hash: GEvCRbpL1SmCJ11q7XQSRWx3oSam0ExClyknVX8hFyQ=)
                          52: AS142076.roa (hash: nuSF9l+yuiKp5LwvJg5KUaXaLQGkfKhSnyYI/kVafeE=)
                          53: AS142095.roa (hash: zPzGTvzNWPX9H69cKODPDxOpyhb63yLncjzpuqzgaZk=)
                          54: AS144706.roa (hash: /mrcFmL5JhsWlNsrbJgAkzxgpgwFN2h0xwy10gwE2Qg=)
                          55: AS142089.roa (hash: zeIWPAi8G3Oss+xC06rr/TdfV7g/KCGx/0kcdf7itOk=)
                          56: AS142079.roa (hash: U+Sjs73prDZD6tAt0v3UoLlRQDru7aBkw3CsgX++edE=)
                          57: AS142100.roa (hash: bBVohDiSMV8HQbZAGucesJ3/Wng1mt1747fhC/fALq0=)
                          58: AS142078.roa (hash: v4SwIElpgR9bD7LrRWNNZzqLhXpA0UdVg3/gbXTy0pY=)
                          59: AS144702.roa (hash: yQrg+H4fCKWC+01dC+xtFm5r44KamcVdBk07W6hyrrQ=)
                          60: AS142087.roa (hash: S32wOmHt2d7b3qlkUycNtb8YKgYtfj2eFEbMdesIjrw=)
                          61: AS142653.roa (hash: CGHcowPCqC8lt2n5ZWEUTOx1DfaWlyfmHuibdz0pkyc=)
                          62: AS142085.roa (hash: /OlMhOL9Z4qtBh1+iRuXa6/yFkEnrseGqr/4eAhK/KE=)
                          63: AS142092.roa (hash: sgEyQVaoIpkHbMSeGGOphI3wRNRGBhvRawtiBt/PvRU=)
Validation:               OK
Signature path:           rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl
                          rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:61:c2:83:a5:62:d0:cf:2b:84:a4:33:9e:9c:ca:4e:35:58:76:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA
        Validity
            Not Before: Jan 24 15:31:38 2026 GMT
            Not After : Jan 25 19:21:38 2026 GMT
        Subject: CN=A4D0CDD4983FAFB7ECF3252B2ADC3DC5F5A1054D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:71:9e:78:59:22:38:1d:35:94:81:93:c9:
                    7a:d7:46:ec:31:77:5e:73:c2:ac:88:14:6f:35:93:
                    bf:70:08:c9:8f:4a:81:7b:9a:8f:0c:98:b5:85:71:
                    30:5b:4b:d7:36:ef:0c:31:91:a2:9d:fc:94:f8:a6:
                    d1:9b:47:08:b2:d2:30:93:31:c1:0a:8b:0e:fa:83:
                    1a:ca:7c:1a:f3:d8:49:a2:d8:34:39:b6:2a:da:7d:
                    f7:75:a8:7f:f3:a1:f3:e3:8c:7e:98:ea:b0:91:4d:
                    9e:2d:d1:b3:12:0f:9a:07:66:ed:3c:6c:dc:c9:18:
                    61:97:be:58:67:0f:b1:41:e7:49:cb:29:92:16:ef:
                    83:20:8f:58:be:2f:bc:c2:c1:43:35:c9:5a:69:ab:
                    43:aa:8c:2f:81:6f:32:f9:e3:7b:94:51:b2:63:68:
                    c4:f3:ea:9f:56:a7:6c:a5:a9:41:9a:52:24:72:d7:
                    87:64:c7:5a:34:a9:e6:d9:26:7c:ab:09:3d:bb:20:
                    08:dc:06:cc:2e:15:40:3c:f7:3c:e9:74:2e:20:56:
                    0d:f3:4c:67:f2:bc:a9:f1:8d:12:d2:09:f6:90:3c:
                    aa:e0:6a:85:d0:38:d5:f9:54:03:20:dc:05:64:94:
                    10:69:88:0d:bf:8f:47:16:6a:5a:fd:35:0e:10:5c:
                    e0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D0:CD:D4:98:3F:AF:B7:EC:F3:25:2B:2A:DC:3D:C5:F5:A1:05:4D
            X509v3 Authority Key Identifier:
                keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a8:87:0f:95:38:6a:1a:e7:34:6a:89:bc:0d:3c:04:ca:dd:
         24:2a:81:5e:87:68:23:aa:d0:e3:3f:e8:9d:e4:fc:9a:8b:94:
         fa:81:0a:f5:6a:ec:c9:e8:a6:34:3e:97:bd:7a:31:92:ff:56:
         b7:f9:c9:c8:73:dd:ba:4b:50:b8:b6:24:50:b0:e8:93:f4:1a:
         03:78:c1:ae:65:74:a5:e7:f5:74:13:f9:2d:ac:53:24:b5:e3:
         93:e7:d9:43:8e:a2:bb:f4:d5:d0:f5:46:d2:d5:30:a9:89:0f:
         d4:9e:ba:08:0e:ec:f5:f4:66:5d:ee:10:7d:0f:78:34:7d:34:
         50:4d:99:58:4c:4f:4c:91:a8:b5:06:0c:cf:71:6f:ec:5a:c3:
         93:60:68:aa:60:68:81:47:ef:85:75:fc:72:8f:f0:10:f9:e2:
         cf:90:7c:ea:31:25:f3:63:28:0b:39:ec:5a:ab:43:27:8f:fd:
         0e:86:5a:bd:2b:44:ea:61:50:44:a6:29:a5:b3:55:0a:00:7c:
         34:a8:31:5e:04:5d:da:8d:6f:bf:5e:3b:86:76:f4:19:6b:58:
         23:bf:ae:fa:b6:42:37:c0:6c:b0:fd:17:42:86:0e:4f:b6:f7:
         1b:13:bb:ed:3e:2d:0a:31:05:61:33:d9:22:f7:fb:f9:23:ba:
         00:df:ff:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jan 25 05:54:36 2026 by rpki-client