
$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
File: DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft (raw, json)
Hash identifier: 0JGbWM2pMw6GDMN4YSTutzbv8qLAhTcjzWAlLRkmUcU=
Subject key identifier: FF:AF:3A:3F:C8:84:5A:14:5A:33:D5:79:5C:23:17:9B:10:8C:EB:72
Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Certificate serial: 3486E990544451B08E143BC7F063007B24E2EC7A
Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
Manifest number: EE
Signing time: Sat 13 Jun 2026 03:39:08 +0000
Manifest this update: Sat 13 Jun 2026 03:34:08 +0000
Manifest next update: Sun 14 Jun 2026 04:49:08 +0000
Files and hashes: 1: DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl (hash: E84f0GOyhjPay9ROz0wDXohWXpVWJAbiFLI1MPJjvEM=)
2: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: VmIkUnZdOEjdRj9sOfiNi5GekVaoRBas6LxAq9Y6qTU=)
3: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: xLbTWGSR0HvTnUdYp2nr/La6L8Rr5k/ezhkiW+Q3tmM=)
4: 323430313a323036303a623030333a3a2f34382d3438203d3e203234333831.roa (hash: J0di9kPzuSxqtVKjyk3HKPng7QlOXjQ5p66cPtKaTQg=)
5: AS24381.asa (hash: 1boloodfS0nsEQoFQKonidrDaGC7VyTJt9gACgpRBfs=)
6: 323430313a323036303a623030323a3a2f34382d3438203d3e203234333831.roa (hash: lXc0eV4FfLxr7QyLKNsbJLXUNMB04fs7kpQDovC34FM=)
Validation: OK
Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 22:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:86:e9:90:54:44:51:b0:8e:14:3b:c7:f0:63:00:7b:24:e2:ec:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Validity
Not Before: Jun 13 03:34:08 2026 GMT
Not After : Jun 14 04:49:08 2026 GMT
Subject: CN=FFAF3A3FC8845A145A33D5795C23179B108CEB72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:bd:a3:6e:68:a8:8a:4f:ef:c2:cb:b2:08:
67:1c:a0:b2:66:b6:13:23:4c:55:4d:bf:6d:54:be:
58:92:cd:99:58:ed:f5:27:00:dc:ea:60:1f:62:e0:
3d:d0:57:f1:f1:9a:0d:41:c4:ec:87:60:64:0c:52:
94:c7:15:d6:67:e5:ca:78:cd:14:d9:59:2d:e5:2b:
23:e5:42:dc:d5:56:c7:b3:26:54:1f:f0:5a:75:12:
9a:bc:2b:1b:b1:6c:9a:10:92:0e:ad:32:0b:ed:13:
7b:76:f7:25:92:e5:52:b5:59:76:65:82:bd:b3:3d:
af:ef:2a:39:c1:7f:f1:47:03:cd:d9:a3:62:7a:c4:
c7:df:d6:07:60:aa:42:fa:f6:e8:b7:fc:16:48:42:
91:39:a2:cf:30:c4:50:a6:9a:c5:2e:05:06:4c:bf:
0e:29:07:0d:8e:67:7b:39:ee:f8:54:9c:60:fb:c2:
5d:40:14:1f:bb:b4:bf:cd:45:e6:e7:bb:91:69:7f:
2b:ec:93:d2:b2:b4:34:1f:7e:f1:bb:cc:3d:42:3b:
10:18:a1:d4:65:c3:14:e4:52:cc:e3:6c:61:21:da:
49:fc:c8:39:15:8b:4d:af:d4:6d:53:fa:37:49:83:
71:03:35:4a:23:fa:06:57:5e:a3:f6:29:3d:af:3e:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:AF:3A:3F:C8:84:5A:14:5A:33:D5:79:5C:23:17:9B:10:8C:EB:72
X509v3 Authority Key Identifier:
keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject Information Access:
Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:a0:f0:6f:f3:44:e5:03:d4:55:d8:56:39:cf:97:38:d5:df:
89:b0:fa:21:49:f2:55:6f:89:3e:66:8f:0e:4e:f4:14:c6:94:
d3:16:67:56:18:a7:b2:0c:04:37:c2:1f:9f:ee:7a:5c:b9:f1:
91:fd:2c:c1:ba:82:5c:65:4f:0b:bd:8a:13:10:9b:a0:0b:ca:
01:c4:59:23:f7:ce:01:2c:e2:56:9e:1e:88:90:c0:5f:a9:29:
48:07:64:a7:af:e5:52:05:d1:4d:03:8d:77:27:58:7c:c4:8f:
58:e6:72:a3:27:01:52:6b:15:c2:d6:48:bc:8c:e3:c4:bb:b8:
fc:89:d0:65:e0:23:47:d0:27:31:34:66:f0:c5:1f:83:4d:72:
c7:d0:ac:69:87:22:ae:ca:8d:f1:3a:6b:1b:40:25:b4:f9:c1:
86:e1:bf:98:77:1a:e3:3e:b9:93:29:f8:34:e2:a6:a5:8f:11:
66:ee:b4:92:0a:12:9b:6d:27:55:95:fe:48:e7:9d:72:b7:a7:
57:bb:c8:13:1f:2e:5b:a1:a2:57:83:87:b8:48:e3:ef:68:e7:
85:54:61:45:33:0d:35:39:94:d8:fb:29:8a:89:0e:71:47:9b:
56:66:ce:da:0b:a5:93:eb:86:33:e9:bb:4a:23:76:54:f6:13:
a4:45:76:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:49:35 2026 by rpki-client