This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft
File: 0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft (raw, json)
Hash identifier: l7VYop3e68rxgSUgBv9KvbgrWtiabX3q/ZK8ArZXBBU=
Subject key identifier: 28:75:A4:22:13:69:E1:E1:8F:54:D6:53:68:D0:27:8B:0E:A6:6F:AF
Authority key identifier: 0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E
Certificate issuer: /CN=A91E5D610001/serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E
Certificate serial: 2DB849AD17FD13B83A8D96A5A4D6F75FF107EA02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer
Subject info access: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft
Manifest number: 52
Signing time: Sat 06 Dec 2025 01:04:07 +0000
Manifest this update: Sat 06 Dec 2025 00:59:07 +0000
Manifest next update: Sun 07 Dec 2025 03:19:07 +0000
Files and hashes: 1: AS23910.roa (hash: hzM8ZziYPZVPcfmiNkcGIgggbg7Udk1ugb23rFI7FOE=)
2: AS144705.roa (hash: lQkIq1HnYDxNmHvtMUXSCf62CXSxnNtueaw7J4NgkgA=)
3: AS142076.roa (hash: lUVjv1CLgZ0IKMDpLBYMygHjuGIu4Z7+zHhDhLh7nTU=)
4: AS142654.roa (hash: VCGIzWzviQz/huEAXYkMJpcaubl+uQnPSs/uvefuNCQ=)
5: AS142103.roa (hash: VurxIuY/IXP4mZGOxqid98RzaRDmr+ENF/RWwXyMpBM=)
6: AS142082.roa (hash: C8E96LETomd/w9PyhGZ5UPR1P0mYf7YPX/5op7ThcRk=)
7: AS142095.roa (hash: B43ZQ5tJt5JlWOmdP+tWCEc228boQy4Ti8Vk1SAv5dk=)
8: AS142077.roa (hash: q2cBBqrT0ypdL9xnehm/0ZOHYgqhq+KlqNAFz428ciA=)
9: AS142087.roa (hash: mAX0uZnCtRNIrYOuaJhJFQ0JROYkFN6NEdqkMYvjo0A=)
10: AS142069.roa (hash: efQ5cSjH3zoY52p6F0u2gK5LOCoLqrQlb0QdDZGUCFo=)
11: AS142105.roa (hash: OxPxe1U92F3OiLnWE66mp9Hz7guQe2xbKU6kygo0jrc=)
12: AS144703.roa (hash: yFOMKFa834IlK+XBRBQ1Lkec4h9R1qklKWkFyO0Ds0w=)
13: AS142072.roa (hash: d1TxYUGg8kBS/Xt5QEJHcZ6v+yT6j95DtrcbQpSQ0Ss=)
14: AS142101.roa (hash: JS6AW3Ao4db2IgLaBbLAMpUMlbEFdjV0OeQ8pLDhwAM=)
15: AS142658.roa (hash: mF67sMq8ghiW9nN0WkCIpznerVG5XCifv4T2q7XRF3M=)
16: AS144698.roa (hash: DqgfrJvbM8SPt7+TLiyRe9e9tMbe85/Zn6IgdrTQHA4=)
17: AS142652.roa (hash: KwMiRJlY0Gy4bPFW6pW1ZKRMO9cegOkbW6UflnkaQ3w=)
18: AS142650.roa (hash: NeCvJkY8fwRnMOMHDDMhcy3IJqDr8gK5jJiBkMMenFE=)
19: AS142079.roa (hash: 9wMXZteNTWSqHXkGWJo81Vq48SIFI857rOmGgCXFtNs=)
20: 0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl (hash: gXLTm5zVUgwkBkeEmTNfj4unYoInZf1hR8HL/eKaqGg=)
21: AS142656.roa (hash: F7+LpQ+8EDIzGC+Ip67XQ4kqDZ1TPtsvfe38bpRU5TE=)
22: AS142094.roa (hash: QAXE8QWY7OO9aPUSO4tiFuZSWqR/5BjceO4BxYO4fYE=)
23: AS144707.roa (hash: uFSZiCjPYIperRiciG4GdG7I7v6TptZChWuNwOf0P/M=)
24: AS142067.roa (hash: OvJhVxaczg3RTgQhEhrrYmJHTypdCN2hQmMh33oRHc8=)
25: AS142653.roa (hash: IA2hcLazVAsUGRzcoRuIR/0BUhNKedfIKh8DZhoRK4Q=)
26: AS142655.roa (hash: 5HI5HN0Ta4MzP71lzZVfSZiiLfnwf6INMGZZD9bRjMo=)
27: AS142073.roa (hash: 55at9T+6ApS0qm2W7smThKin95JfZDgN6lrk3D3G7Ac=)
28: AS144701.roa (hash: SfVb/8gBuifIwngOqdUdiu6Zx3nLmdxYkNJz1QnUckU=)
29: AS142078.roa (hash: DY7Q7OdTCEAXvuowe01raZwd0xCR+yjuWx3jBD+80Fg=)
30: AS142093.roa (hash: yAbQsBeBxfrAfteTeOYdw4vytYF2rHiUZrXFXHgVLW0=)
31: AS142098.roa (hash: RaUVBIKeOFKNKXoUzYd7W165tMeMJ8jgilVGeQpSCeE=)
32: AS142070.roa (hash: 5a+pCiKpDh8ax9eizUsm20lVe6D4E8Vx1eQDVEphLUU=)
33: AS142084.roa (hash: YRjIUVHL73qhDSnDGUBl+3UvLW1cCvLdPKuWvpxpPxE=)
34: AS142092.roa (hash: Ie1qBeAwqGJlznWgsyo0qF6StSZBjUSxeM+B9zHj66s=)
35: AS142088.roa (hash: nbVTrx39cgLpjisgUcs8F7Pc5xHSECrJwcopWYtOPTY=)
36: AS142097.roa (hash: CttJ1k3N8sR3Dd2LtZJAh2Z5US+Dw4R4+lVIeqfQc90=)
37: AS142068.roa (hash: X0dHbUdVYNHEjcBzVc/p/Zi7V2Hu610QmvSjKNuUKJk=)
38: AS142081.roa (hash: bj/HGJFZjeiYYjXxNWFq2rDp5UDtB9+yOfN8Xu1vwS4=)
39: AS142086.roa (hash: xdc1OMFXaLS+/kOMflfbwaXQWZ4OojOpmKapBHkqZg4=)
40: AS142104.roa (hash: A3TENiPyG0OgbENBidS9ng2JFFpWplDNNfei6kDEMVM=)
41: AS142091.roa (hash: we5yLvx0htdRz3DybB/B5DgkHuaP2HjjEPfafzHzyRQ=)
42: AS142090.roa (hash: QChPgfi/9GlWAgWK5X9o4ImB3yQoVuIW8o424yUpZz8=)
43: AS142071.roa (hash: /PBiK1EKSFaEx9PiPEi7cG9iFdkrG4wWwiIYaTaPe/Q=)
44: AS142074.roa (hash: P+Ie8ADd3M7wffrIgaQUdX/ePqvVxUmA70O4sWa1CRc=)
45: AS142080.roa (hash: v5In7K6SqEuekiibe0iJFlf3fqdvm5d4V3F2qi2KOCI=)
46: AS142659.roa (hash: ajyk6LAB1pJqiyBZGpS86m8nlTfFzcs5mV73Hqs+vRw=)
47: AS142099.roa (hash: dQA3xKwqrEVGDDh5aeQjFekJnGMK0PvmABhUhzM93aY=)
48: AS142100.roa (hash: XjJhqx5ZaQ1zO1Bnz/2VaiS6vnfU4DnHDQghejXq+tc=)
49: AS144702.roa (hash: DqjoTn4Ef+5D+eyQsNAGon1lm/V7fFpK+PphFr3Tli8=)
50: AS142083.roa (hash: OG+1CXEaRZXNPWg98UUf7r8Ljd3sTpi5FzC3k71nKUU=)
51: AS142106.roa (hash: dZuvwVOTduA95d+VOUPJLcnWq9OT6R19M2H06vijCNk=)
52: AS144699.roa (hash: UswFj0T67R9DruvbCQAxqJLGCZ/SeQCi7PUPIpfVbtY=)
53: AS142085.roa (hash: XCnWS2wXAf910VPK/bAn8idLGeWu1E/VROSXpuE6Vv4=)
54: AS4538.roa (hash: QEiD3+vlFtoqrLXnm5GHHDijROuqjim7an3cHXGdUQ0=)
55: AS142102.roa (hash: jHrYZZllywxVkTTQEkA6v5sLoToYLkppiSKJZ67YJo4=)
56: AS144706.roa (hash: 7dWk+Zv/QnRu0ffZvgM8Ra+VJsNRgvVBT5Kh+xkQPd0=)
57: AS142075.roa (hash: A8X2PZobQJaxhvCxSl1998qOJdyyD4bi/ZbR3nx3U9c=)
58: AS142089.roa (hash: dav8AhI0gpftoeHt6AucNLV5gi4NmbP8wSbn0WX2Yho=)
59: AS144704.roa (hash: c0kUBh+XoJLB59lEh5BCj3D45kXeOVOdMrinZSA+wCA=)
60: AS142657.roa (hash: Et8ZsfJKS1XOP2uoRelcMTlviXQuLoLOd1JgdDUtQc8=)
61: AS142096.roa (hash: dO/91vTru25VTaU9/Hk7Q7cbME2r2QW/WvhjnQV7Pao=)
62: AS142651.roa (hash: ghNnsjxO2nbUEhGWDHSAQePTnDk/rfII5uqF86Cl/vU=)
63: AS144700.roa (hash: wY4tww1zI5OxNa3FQ4U3Aa5MLXlFGZuVfWLuc1DWAv8=)
Validation: OK
Signature path: rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl
rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Dec 2025 03:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b8:49:ad:17:fd:13:b8:3a:8d:96:a5:a4:d6:f7:5f:f1:07:ea:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D610001, serialNumber=0B275E5B466B941AB84A742B4E3832BB1FDFEC9E
Validity
Not Before: Dec 6 00:59:07 2025 GMT
Not After : Dec 7 03:19:07 2025 GMT
Subject: CN=2875A4221369E1E18F54D65368D0278B0EA66FAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:e5:ba:46:b0:ba:e1:2e:95:0c:1f:40:70:
0b:fb:3c:8a:0b:f9:b1:e9:9c:d7:ed:3c:81:fe:1d:
91:25:44:68:ae:b7:7f:61:98:f2:3f:ea:6f:ab:c2:
ae:c4:6f:75:3e:04:12:41:ca:4c:d1:e6:3d:73:84:
19:04:32:8a:44:4d:16:07:ef:ed:b1:3e:fc:64:d6:
02:6f:75:6b:46:5f:25:e6:85:fe:30:62:cb:2b:88:
f3:27:f1:3e:00:49:2e:95:ab:90:47:a9:dd:c6:e5:
4d:3e:0f:e0:04:f9:f6:0b:41:47:0c:8f:9c:cb:89:
ff:ee:e4:d7:d1:8c:14:bc:65:89:24:ff:38:26:50:
ea:79:79:93:ae:62:f9:04:7a:94:88:39:69:ab:c6:
84:86:29:24:d5:c9:da:b6:9b:2c:46:17:8f:2e:64:
aa:cd:3c:de:03:8a:99:44:cc:c5:46:59:32:9a:52:
0e:9f:ff:99:89:53:61:b6:e8:9e:74:76:96:89:06:
9d:cc:2e:c3:c5:0b:0d:9a:49:2f:50:b5:1c:ef:4c:
b8:c4:92:4d:57:ea:d8:a0:75:66:7b:a6:09:c6:7f:
b7:af:3f:c9:4d:84:bc:f5:d7:d6:c7:34:d5:8d:80:
8c:2b:23:d6:60:65:d9:3c:aa:87:ce:1f:ce:8d:bf:
96:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:75:A4:22:13:69:E1:E1:8F:54:D6:53:68:D0:27:8B:0E:A6:6F:AF
X509v3 Authority Key Identifier:
keyid:0B:27:5E:5B:46:6B:94:1A:B8:4A:74:2B:4E:38:32:BB:1F:DF:EC:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CydeW0ZrlBq4SnQrTjgyux_f7J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/0B275E5B466B941AB84A742B4E3832BB1FDFEC9E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4e:b8:81:89:9a:cf:49:43:1d:00:fd:5d:e3:5b:f5:30:3c:
24:99:84:6d:e5:f4:58:98:2c:7c:43:0e:62:f9:e6:d6:df:ab:
d0:06:03:ec:fe:e8:01:8a:b5:80:c4:cf:15:47:b2:e2:00:6f:
a6:52:be:1b:c4:2d:35:8b:dc:87:cc:59:4a:5b:ed:35:2e:c8:
5a:0c:04:47:45:57:b1:54:14:b9:58:af:4f:b7:84:66:9f:f4:
ce:f9:9b:42:d8:ca:08:32:33:06:08:ab:50:46:a3:94:5d:9e:
f2:3a:24:ec:7c:68:94:79:39:34:e7:bf:e6:a8:e4:9e:a5:f1:
84:76:1d:9b:7e:3a:6a:d8:57:7b:96:b5:4a:53:82:cb:be:fd:
5e:ab:7e:a9:55:d8:21:9e:9a:8b:3b:c0:fe:a9:27:4e:4b:fb:
04:53:f1:22:a1:f8:e0:46:17:25:52:ac:98:37:35:df:95:90:
2b:a0:5e:be:d4:d7:9d:4c:55:4d:90:a5:62:2a:ad:80:43:f8:
24:15:74:47:d6:35:e1:86:d9:b7:67:a8:f6:18:04:06:8b:ec:
2e:41:97:0d:bc:31:29:ce:ac:2c:c4:21:cd:7c:d4:a8:03:80:
b7:14:fc:eb:ed:55:78:aa:c9:25:8e:90:ed:42:0f:58:c0:40:
5f:c7:92:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:42:32 2025 by rpki-client