This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft
File:                     D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft (raw, json)
Hash identifier:          nr03TEe0tUldxFG5FAWYlb6RnNsUtiqIJ201AehfpB4=
Subject key identifier:   8A:FD:5B:BD:B6:59:DC:61:C3:D3:92:35:1C:F2:A5:D2:2D:20:3E:0C
Authority key identifier: D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39
Certificate issuer:       /CN=A91E5D610000/serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
Certificate serial:       7987C83775B578F606B01126552EDBEF8FB215F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer
Subject info access:      rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft
Manifest number:          1106
Signing time:             Mon 29 Sep 2025 15:09:29 +0000
Manifest this update:     Mon 29 Sep 2025 15:04:29 +0000
Manifest next update:     Tue 30 Sep 2025 16:02:29 +0000
Files and hashes:         1: D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl (hash: RDa3SUl+VPh8jXthk15WYKwEGRVuIUb/juk2HlAoC+k=)
                          2: 3130332e3136352e3131302e302f32332d3237203d3e2034353338.roa (hash: NEfA8mWwvqkmJr+jQ/m3MrcToDHVue40BU6t91UJn8A=)
                          3: 49776F25BA047DAE0837698DFC0C1C9689EE4FAA.cer (hash: SfgNng1eQqESKDp6G91JZBmwAJymbp2wYyyQ9zQ4hBA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:87:c8:37:75:b5:78:f6:06:b0:11:26:55:2e:db:ef:8f:b2:15:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D610000, serialNumber=D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139
        Validity
            Not Before: Sep 29 15:04:29 2025 GMT
            Not After : Sep 30 16:02:29 2025 GMT
        Subject: CN=8AFD5BBDB659DC61C3D392351CF2A5D22D203E0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:e3:15:3f:c0:f9:f7:32:d7:78:62:c3:65:
                    46:5f:7c:eb:60:84:08:24:ee:ce:df:a7:e1:91:98:
                    10:8d:e2:a9:f9:0d:1a:db:41:6e:b1:e0:e6:0a:73:
                    c2:ee:e1:15:4f:88:d5:8c:9e:c5:e2:b5:a3:a5:ef:
                    65:aa:9e:be:46:1c:0f:39:74:cd:23:95:14:13:f3:
                    97:14:43:c9:7c:4f:b8:53:5c:d4:a7:59:bd:bf:62:
                    ac:b4:03:69:f2:34:40:ac:a0:fd:33:44:d6:b6:a2:
                    ec:2b:6a:55:b7:70:8f:07:55:31:38:38:0d:65:13:
                    35:55:4d:ee:99:2c:cb:6d:b7:43:76:ef:6e:76:49:
                    a4:b4:7a:bf:8e:87:fc:bb:37:af:5f:52:6e:57:1f:
                    53:2f:83:1e:22:2e:95:6c:06:58:8a:7b:f9:3d:e1:
                    70:db:19:e7:04:f1:f7:e7:83:76:59:7b:0f:ea:f6:
                    ef:88:7a:13:0b:3a:9d:4d:df:fe:15:0a:e6:7f:6b:
                    8a:c7:52:fb:38:e5:fc:21:42:31:e0:82:3c:f9:f5:
                    3b:19:ce:dc:dd:07:02:31:ae:44:5e:45:1b:c3:02:
                    44:70:60:56:e0:9a:2c:3b:58:17:6c:ed:2e:47:76:
                    bc:70:f9:6f:f8:1a:a3:8e:24:c7:51:ae:e1:5f:a9:
                    e2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FD:5B:BD:B6:59:DC:61:C3:D3:92:35:1C:F2:A5:D2:2D:20:3E:0C
            X509v3 Authority Key Identifier:
                keyid:D1:24:86:07:B0:DD:D0:A2:16:E8:D7:FA:C5:E2:C2:E7:77:0A:11:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0SSGB7Dd0KIW6Nf6xeLC53cKETk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cernet.edu.cn/repo/cernet/1/D1248607B0DDD0A216E8D7FAC5E2C2E7770A1139.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:15:ec:db:8c:43:e7:e4:a4:39:81:1b:27:16:8e:8f:a5:5d:
         39:1e:58:fb:eb:89:59:6c:39:b0:30:3e:18:bd:17:d0:e0:49:
         b1:4e:aa:a0:84:65:e7:9c:22:b3:7c:83:18:7a:f4:83:34:02:
         e7:9a:bc:5e:ce:6e:50:d4:db:97:fe:ed:c6:b4:ec:8c:2f:3e:
         c0:18:67:e0:1e:f7:cf:a4:34:a5:8b:24:69:8f:27:6f:7e:3c:
         0b:25:eb:f0:0b:19:60:3a:93:23:bd:17:4c:2e:00:fc:bd:2c:
         c3:00:77:56:aa:e0:4f:26:a8:d0:fa:d3:d2:fc:4b:d2:03:39:
         3d:b5:9a:77:c7:9d:68:9d:ea:d8:1f:96:37:8c:8c:1d:e5:a9:
         58:80:77:26:c3:6a:26:6f:11:a6:6a:d0:cf:bc:ea:b3:16:bf:
         53:d7:ea:e6:2d:0f:c8:10:2c:e9:d2:67:c0:48:2e:60:e4:6a:
         d5:f0:2b:36:db:57:6f:b2:f5:92:75:84:4e:c7:b6:58:05:13:
         fc:53:cb:66:fe:cb:ec:e4:f1:45:02:74:b0:1e:1c:61:7d:f6:
         ec:e4:67:29:51:42:5c:a6:f9:52:52:64:41:55:0c:b8:24:46:
         f4:eb:56:f3:c2:b2:e2:42:1a:23:ea:04:c8:a9:b5:6a:85:9f:
         82:7d:ef:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----