This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft File: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft (raw, json) Hash identifier: g5HqPKwQjMtHdPIJt93K4tpV8u6n71pWQKiPlBVwCeU= Subject key identifier: D2:C0:8B:1E:E8:7C:67:9D:87:FA:31:76:09:E0:95:00:C7:1D:6F:49 Authority key identifier: 18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 Certificate issuer: /CN=A91E5D610000/serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Certificate serial: 77BDFB16166EBE988B786161B6DF37E07A5E5A93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject info access: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft Manifest number: 66 Signing time: Sun 21 Dec 2025 14:43:17 +0000 Manifest this update: Sun 21 Dec 2025 14:38:17 +0000 Manifest next update: Mon 22 Dec 2025 16:36:17 +0000 Files and hashes: 1: 325627320199C076DC2D552334D2FEB715E4EDD7.cer (hash: 0SB786ljtmHZnOZaU2eDypBNqPdnQIJOGNYScZZ38FY=) 2: 3130332e3136352e3131312e302f32342d3234203d3e2034353338.roa (hash: yG2tSSRlDmIt5b9BWyR/YmGA0RL8jZU64YaW4FBwJOw=) 3: 1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl (hash: vpHWy5mkIP32n6e0yXieUxtF+3d8ah2mq7CNcPxSZF8=) 4: 3130332e3136352e3131302e302f32342d3234203d3e2034353338.roa (hash: 4GNUb7g4foVVWkpdbjjuAmYvjUx/eQ01cUG+CD5JYfU=) Validation: OK Signature path: rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 16:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:bd:fb:16:16:6e:be:98:8b:78:61:61:b6:df:37:e0:7a:5e:5a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610000, serialNumber=1816390155BE0839694B6A7E72CA8DBFA4EBD915 Validity Not Before: Dec 21 14:38:17 2025 GMT Not After : Dec 22 16:36:17 2025 GMT Subject: CN=D2C08B1EE87C679D87FA317609E09500C71D6F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:ca:39:86:20:85:1f:fc:0d:de:e7:35:73: 0a:e1:1e:30:50:05:00:31:2a:5f:2e:e1:d7:69:0c: 07:67:bc:2b:8f:33:d3:b3:5d:c9:d8:b6:04:1a:88: c7:8e:c7:ce:3e:5e:5f:d0:37:b0:50:ba:bb:d2:0a: b3:5f:f8:ce:38:c9:c0:66:b8:36:90:5c:45:6f:01: 71:fb:21:b0:96:c8:3f:a4:56:d0:d4:e2:2c:e1:35: 6a:b9:73:5b:d5:dd:41:af:d4:c9:bd:5c:ef:9b:4a: 71:9b:86:50:7a:eb:ad:b7:86:90:c2:54:1d:97:5b: 1a:1d:95:41:5b:4a:7a:a1:df:14:11:43:e9:89:28: a4:69:35:7f:19:e4:ed:0a:0a:54:8d:27:09:6e:89: 88:42:0f:39:57:31:7f:9b:92:7e:23:fe:37:99:8c: c3:62:61:9a:e1:b2:b9:bc:71:3a:75:1a:f8:ff:53: 16:a4:35:a4:bb:cc:26:52:8c:0b:b4:f7:56:2c:66: af:bf:02:42:fe:c8:42:57:db:f8:94:c2:07:30:8d: 6b:f9:28:28:d5:0f:4e:6b:96:39:2d:50:f5:96:25: c2:5d:85:ed:32:96:05:62:fc:d3:ad:85:a9:8e:f7: e1:ce:cb:e0:3c:bd:50:46:29:89:b9:0d:43:ab:d0: 5f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C0:8B:1E:E8:7C:67:9D:87:FA:31:76:09:E0:95:00:C7:1D:6F:49 X509v3 Authority Key Identifier: keyid:18:16:39:01:55:BE:08:39:69:4B:6A:7E:72:CA:8D:BF:A4:EB:D9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GBY5AVW-CDlpS2p-csqNv6Tr2RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/2/1816390155BE0839694B6A7E72CA8DBFA4EBD915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d1:29:1d:27:dc:c0:15:8b:49:0c:af:e3:f0:86:ff:3d:37: b3:78:56:06:46:b0:1e:7a:1c:03:b6:61:9c:be:05:bc:25:32: 09:db:c2:cf:6f:b6:52:66:a7:06:b1:00:39:07:e0:b1:7a:86: 66:4f:6f:53:b5:da:43:06:f8:52:76:00:a3:e9:07:57:a8:a5: f6:31:c8:ba:8f:ec:91:dc:f2:75:80:7b:61:38:c6:18:2a:02: dd:32:57:ac:e1:89:75:94:62:77:d9:37:30:15:1a:a1:fe:0f: a9:e0:b8:2f:e7:3d:3a:9d:d9:30:f4:b0:13:65:66:4c:f4:0e: f1:87:d4:5e:2b:19:61:67:cb:61:99:a9:64:55:30:37:8d:37: f3:70:18:76:fc:67:27:24:14:5f:37:46:c3:67:13:eb:8f:25: 04:9c:ae:ec:55:33:65:6d:8a:e2:c5:ff:61:f3:a9:bd:c8:9d: 84:5b:27:a0:1a:8d:2f:cc:9e:86:bc:f6:55:a6:c1:d9:51:19: b6:62:7c:d6:ef:11:31:51:de:a8:81:ad:e5:af:b7:aa:24:38: 72:1f:1b:50:89:ae:43:36:66:3b:f3:b0:4e:d3:da:71:c1:3f: eb:73:87:ef:9e:49:cd:49:19:a6:ea:52:d6:24:c1:bb:c8:e7: 54:2b:eb:fd -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUd737FhZuvpiLeGFhtt834HpeWpMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRTVENjEwMDAwMTEwLwYDVQQFEygxODE2MzkwMTU1 QkUwODM5Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1MB4XDTI1MTIyMTE0MzgxN1oX DTI1MTIyMjE2MzYxN1owMzExMC8GA1UEAxMoRDJDMDhCMUVFODdDNjc5RDg3RkEz MTc2MDlFMDk1MDBDNzFENkY0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRayjmGIIUf/A3e5zVzCuEeMFAFADEqXy7h12kMB2e8K48z07Ndydi2BBqI x47Hzj5eX9A3sFC6u9IKs1/4zjjJwGa4NpBcRW8BcfshsJbIP6RW0NTiLOE1arlz W9XdQa/Uyb1c75tKcZuGUHrrrbeGkMJUHZdbGh2VQVtKeqHfFBFD6YkopGk1fxnk 7QoKVI0nCW6JiEIPOVcxf5uSfiP+N5mMw2JhmuGyubxxOnUa+P9TFqQ1pLvMJlKM C7T3Vixmr78CQv7IQlfb+JTCBzCNa/koKNUPTmuWOS1Q9ZYlwl2F7TKWBWL8062F qY734c7L4Dy9UEYpibkNQ6vQX9cCAwEAAaOCAgMwggH/MB0GA1UdDgQWBBTSwIse 6HxnnYf6MXYJ4JUAxx1vSTAfBgNVHSMEGDAWgBQYFjkBVb4IOWlLan5yyo2/pOvZ FTAOBgNVHQ8BAf8EBAMCB4AwZgYDVR0fBF8wXTBboFmgV4ZVcnN5bmM6Ly9ycGtp LmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5Njk0 QjZBN0U3MkNBOERCRkE0RUJEOTE1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYB BQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1 ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9HQlk1QVZXLUNEbHBTMnAtY3NxTnY2 VHIyUlUuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZVcnN5bmM6Ly9y cGtpLmNlcm5ldC5lZHUuY24vcmVwby9jZXJuZXQvMi8xODE2MzkwMTU1QkUwODM5 Njk0QjZBN0U3MkNBOERCRkE0RUJEOTE1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtEpHSfcwBWLSQyv 4/CG/z03s3hWBkawHnocA7ZhnL4FvCUyCdvCz2+2UmanBrEAOQfgsXqGZk9vU7Xa Qwb4UnYAo+kHV6il9jHIuo/skdzydYB7YTjGGCoC3TJXrOGJdZRid9k3MBUaof4P qeC4L+c9Op3ZMPSwE2VmTPQO8YfUXisZYWfLYZmpZFUwN40383AYdvxnJyQUXzdG w2cT648lBJyu7FUzZW2K4sX/YfOpvcidhFsnoBqNL8yehrz2VabB2VEZtmJ81u8R MVHeqIGt5a+3qiQ4ch8bUImuQzZmO/OwTtPaccE/63OH755JzUkZpupS1iTBu8jn VCvr/Q== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:24 2025 by rpki-client