$ rpki-client -vvf krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.mft File: 3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.mft (raw, json) Hash identifier: N2lSJF9Z/lyIiXrO9UVC1Fc1FU1gxDtnn4oWew5GLj0= Subject key identifier: 30:2A:14:09:9D:85:0E:48:A5:98:20:DB:9C:AC:1C:33:8C:EA:E7:89 Authority key identifier: 3C:63:FB:DA:23:EE:1D:2B:FA:DB:80:65:44:E5:53:DD:BA:29:4A:CF Certificate issuer: /CN=3C63FBDA23EE1D2BFADB806544E553DDBA294ACF Certificate serial: 5C22E7D89629B6A8E1D8A15A2C11A623F1BBB919 Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.cer Subject info access: rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.mft Manifest number: 12 Signing time: Sun 15 Jun 2025 23:13:24 +0000 Manifest this update: Sun 15 Jun 2025 23:08:24 +0000 Manifest next update: Mon 16 Jun 2025 23:27:24 +0000 Files and hashes: 1: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: bE/s0d/dK44+J8HeJV1CEUVxiY5sEnOi3Lfhk+iNubU=) 2: 3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.crl (hash: Hao9nltKSdDpA9Ov22BXfN7ubJd1Zv0LVjhvwFS0HLw=) 3: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: a0dJHkfL1qOi86Rtbo/BgTh1nVGDgN86oA5QV/DsT+E=) Validation: OK Signature path: rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.crl rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 23:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:22:e7:d8:96:29:b6:a8:e1:d8:a1:5a:2c:11:a6:23:f1:bb:b9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C63FBDA23EE1D2BFADB806544E553DDBA294ACF Validity Not Before: Jun 15 23:08:24 2025 GMT Not After : Jun 16 23:27:24 2025 GMT Subject: CN=302A14099D850E48A59820DB9CAC1C338CEAE789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:98:3f:77:77:60:b4:a2:e4:15:f9:6f:6c: a0:55:7e:ca:a2:68:d9:59:0f:d0:11:09:da:c9:54: 24:3f:7b:ce:5e:fc:a1:c0:ac:d2:7d:6c:77:05:c4: 54:82:cc:81:58:f3:b1:9f:d9:88:b4:60:81:62:89: cb:40:07:36:91:76:68:f0:f8:1b:af:ab:eb:9a:5a: be:ec:f9:b2:b9:b7:b3:a0:b1:d3:19:52:5d:32:f2: c2:e6:58:cb:39:b4:cc:f1:c9:84:e9:f7:33:27:15: 21:a9:4c:bc:b3:8a:a7:1f:1c:dc:62:9c:55:11:69: 71:b3:f3:f3:12:b1:76:68:60:5e:60:dd:67:dd:e4: a2:f9:31:72:f5:33:74:48:be:df:48:6a:39:54:10: 0e:fa:84:64:61:6e:3f:5d:17:46:a7:6d:ca:3f:11: f0:85:3e:cd:8f:12:23:bc:0a:3f:05:a9:3c:18:1a: 24:c3:40:ad:80:58:2d:f2:b7:5f:20:b6:72:a6:f5: 97:77:43:f7:b0:44:47:98:82:80:bb:51:2d:57:09: 3e:92:d1:d7:73:80:28:1f:15:87:97:69:30:c0:f0: d5:f1:c5:81:9c:73:a9:62:91:ea:a7:5d:78:c0:3f: da:aa:5c:b3:a2:bb:6a:26:f0:85:f5:36:88:43:7b: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2A:14:09:9D:85:0E:48:A5:98:20:DB:9C:AC:1C:33:8C:EA:E7:89 X509v3 Authority Key Identifier: keyid:3C:63:FB:DA:23:EE:1D:2B:FA:DB:80:65:44:E5:53:DD:BA:29:4A:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.cer Subject Information Access: Signed Object - URI:rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a9:c4:80:f9:26:b6:ab:c2:db:b1:c9:51:c1:60:f4:21:06: 22:f9:da:e8:6c:6e:29:41:98:35:e4:35:c7:c5:5f:c2:40:86: 25:c9:fa:7b:25:59:0c:49:1d:46:8f:bf:07:c6:98:0a:b3:31: 16:bf:4b:f4:eb:26:34:36:d0:71:4c:05:64:43:bf:98:48:27: aa:9c:47:3b:6a:98:74:de:43:1a:72:83:10:78:26:02:b0:35: b4:41:b5:74:ec:46:fb:44:96:f9:5a:17:0e:2c:61:b5:58:31: a1:c5:36:22:b6:97:d6:3a:8d:c5:80:95:32:87:5a:bc:8e:83: ed:d4:e2:7f:38:c0:92:8e:1a:b1:e0:45:62:5c:f1:e0:ac:1a: 4a:e0:32:8a:9e:77:bf:0d:d5:d6:4b:18:74:3a:50:3e:06:99: f6:6a:91:62:da:5f:58:3b:81:4f:cc:b3:bf:dc:f0:0a:f1:eb: 5d:d0:d6:6d:9b:60:9d:45:df:2a:66:b8:7e:1e:5e:4c:5f:fe: b1:27:8e:c4:52:c0:98:de:05:b5:6f:81:04:3a:d9:9f:8b:a2: 0e:9d:81:dc:7c:e2:05:e0:c2:3a:54:31:92:dd:75:73:38:fd: 0d:a5:0d:da:6b:56:8f:23:4b:c8:d3:b0:d3:63:7f:ba:b6:90: 00:ad:f5:3d -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUXCLn2JYptqjh2KFaLBGmI/G7uRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2M0ZCREEyM0VFMUQyQkZBREI4MDY1NDRFNTUzRERC QTI5NEFDRjAeFw0yNTA2MTUyMzA4MjRaFw0yNTA2MTYyMzI3MjRaMDMxMTAvBgNV BAMTKDMwMkExNDA5OUQ4NTBFNDhBNTk4MjBEQjlDQUMxQzMzOENFQUU3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Q5g/d3dgtKLkFflvbKBVfsqi aNlZD9ARCdrJVCQ/e85e/KHArNJ9bHcFxFSCzIFY87Gf2Yi0YIFiictABzaRdmjw +Buvq+uaWr7s+bK5t7OgsdMZUl0y8sLmWMs5tMzxyYTp9zMnFSGpTLyziqcfHNxi nFURaXGz8/MSsXZoYF5g3Wfd5KL5MXL1M3RIvt9IajlUEA76hGRhbj9dF0anbco/ EfCFPs2PEiO8Cj8FqTwYGiTDQK2AWC3yt18gtnKm9Zd3Q/ewREeYgoC7US1XCT6S 0ddzgCgfFYeXaTDA8NXxxYGcc6likeqnXXjAP9qqXLOiu2om8IX1NohDe+BRAgMB AAGjggIlMIICITAdBgNVHQ4EFgQUMCoUCZ2FDkilmCDbnKwcM4zq54kwHwYDVR0j BBgwFoAUPGP72iPuHSv624BlROVT3bopSs8wDgYDVR0PAQH/BAQDAgeAMHcGA1Ud HwRwMG4wbKBqoGiGZnJzeW5jOi8va3JpbGwuc3lkLWF1LmluZmluaW5ldC5jb20u YXUvcmVwby9CR1AtRXhjaGFuZ2UvMC8zQzYzRkJEQTIzRUUxRDJCRkFEQjgwNjU0 NEU1NTNEREJBMjk0QUNGLmNybDB9BggrBgEFBQcBAQRxMG8wbQYIKwYBBQUHMAKG YXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxNTBFNEQw MDAwLzAvM0M2M0ZCREEyM0VFMUQyQkZBREI4MDY1NDRFNTUzRERCQTI5NEFDRi5j ZXIwgYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9rcmlsbC5z eWQtYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNoYW5nZS8wLzNDNjNG QkRBMjNFRTFEMkJGQURCODA2NTQ0RTU1M0REQkEyOTRBQ0YubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCH qcSA+Sa2q8LbsclRwWD0IQYi+drobG4pQZg15DXHxV/CQIYlyfp7JVkMSR1Gj78H xpgKszEWv0v06yY0NtBxTAVkQ7+YSCeqnEc7aph03kMacoMQeCYCsDW0QbV07Eb7 RJb5WhcOLGG1WDGhxTYitpfWOo3FgJUyh1q8joPt1OJ/OMCSjhqx4EViXPHgrBpK 4DKKnne/DdXWSxh0OlA+Bpn2apFi2l9YO4FPzLO/3PAK8etd0NZtm2CdRd8qZrh+ Hl5MX/6xJ47EUsCY3gW1b4EEOtmfi6IOnYHcfOIF4MI6VDGS3XVzOP0NpQ3aa1aP I0vI07DTY3+6tpAArfU9 -----END CERTIFICATE-----Generated at Mon Jun 16 15:40:09 2025 by rpki-client