
$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
File: DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft (raw, json)
Hash identifier: Cy6xSsc2nFbXuXhmIRoQJh9vxCY1X1kS55hs2wdbm2w=
Subject key identifier: D5:FC:A5:09:67:46:78:75:62:29:18:FD:8E:79:AE:98:85:7A:A7:4E
Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Certificate serial: 5EE0838EA17526B5D8A69986726EF9D33BD1BC56
Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
Manifest number: D0
Signing time: Thu 21 May 2026 08:21:47 +0000
Manifest this update: Thu 21 May 2026 08:16:47 +0000
Manifest next update: Fri 22 May 2026 08:22:47 +0000
Files and hashes: 1: DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl (hash: z3V1oLkYHUy6aPKxgTM2FZsLhUiL9z6rnSjv9W08Uqw=)
2: AS24381.asa (hash: 1boloodfS0nsEQoFQKonidrDaGC7VyTJt9gACgpRBfs=)
3: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: VmIkUnZdOEjdRj9sOfiNi5GekVaoRBas6LxAq9Y6qTU=)
4: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: xLbTWGSR0HvTnUdYp2nr/La6L8Rr5k/ezhkiW+Q3tmM=)
5: 323430313a323036303a623030323a3a2f34382d3438203d3e203234333831.roa (hash: lXc0eV4FfLxr7QyLKNsbJLXUNMB04fs7kpQDovC34FM=)
6: 323430313a323036303a623030333a3a2f34382d3438203d3e203234333831.roa (hash: J0di9kPzuSxqtVKjyk3HKPng7QlOXjQ5p66cPtKaTQg=)
Validation: OK
Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 01:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e0:83:8e:a1:75:26:b5:d8:a6:99:86:72:6e:f9:d3:3b:d1:bc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Validity
Not Before: May 21 08:16:47 2026 GMT
Not After : May 22 08:22:47 2026 GMT
Subject: CN=D5FCA50967467875622918FD8E79AE98857AA74E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:54:5f:13:40:6c:41:70:6e:d3:92:88:7b:87:
92:45:ee:f6:a6:a1:34:3c:95:1a:d1:73:65:07:69:
6a:c5:63:d6:e2:ed:65:ee:76:14:01:86:30:cc:85:
ba:c0:10:89:3d:11:eb:f4:41:e8:70:14:6f:7a:d2:
13:f3:e7:21:4b:21:ae:37:f4:10:d1:a8:72:c3:22:
65:c6:d5:ba:58:e8:67:8c:be:ca:e1:fa:82:6e:e1:
c7:64:83:00:a9:ca:c4:a7:c0:b0:a2:13:2d:dd:e1:
f8:d2:e3:4b:6d:09:2f:46:32:b5:b5:aa:8c:d1:9e:
35:27:17:24:65:47:05:60:0f:3a:0c:12:eb:10:e5:
0b:7e:9c:0e:51:73:8f:53:84:0e:fb:0b:c5:85:fd:
17:57:af:63:0e:c6:bd:62:79:06:ad:36:49:e6:9a:
57:8a:dc:22:54:87:e8:81:de:34:bc:f0:9b:23:36:
db:32:a9:54:3f:18:d0:f7:d6:69:2c:39:d6:28:8b:
a7:81:d7:a2:8c:75:81:05:fb:14:1f:48:4f:a2:c7:
69:e9:e7:59:46:bc:3c:e9:87:c8:6d:89:91:43:34:
bf:41:4d:9b:71:f6:ac:a5:23:33:04:2f:ee:33:f6:
65:7c:6a:b4:69:4c:fb:c0:71:8e:44:ed:e1:22:c8:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FC:A5:09:67:46:78:75:62:29:18:FD:8E:79:AE:98:85:7A:A7:4E
X509v3 Authority Key Identifier:
keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject Information Access:
Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:cc:52:9e:dd:39:80:6f:f4:15:3b:10:3c:b6:de:79:7e:12:
53:95:ea:63:1b:b2:c9:41:b0:bd:cf:1c:4c:ac:8e:05:96:d3:
9c:19:b9:36:c8:6f:06:0e:a3:d1:47:3a:4a:d1:76:a7:32:be:
b9:f0:74:e0:59:cb:b2:91:49:24:89:cb:7e:e7:6a:e2:79:64:
da:1b:4f:da:94:7b:2e:5a:7a:1c:e2:c3:60:43:4a:6b:12:df:
cb:7d:8e:8c:97:c3:73:e3:94:fd:f2:6b:d0:13:2c:7a:2f:21:
ab:f9:d3:8a:2a:e8:2e:e0:20:a8:39:f4:7f:d8:2b:a6:9d:05:
16:64:93:1a:15:7f:97:2d:90:69:9e:a3:18:f2:90:54:16:fe:
d1:68:cb:da:67:cd:56:e3:65:08:ae:96:9c:8b:8b:36:d1:f5:
70:38:12:a2:ac:7e:49:43:06:e7:d0:d1:5c:13:b3:d2:82:ce:
46:9e:a5:08:1e:d1:1e:bd:5f:f0:2a:43:aa:d5:00:3e:3e:94:
01:ff:f1:77:e1:e1:1f:41:fc:b1:62:cf:75:66:97:e5:58:c1:
3b:17:1d:5e:ed:8a:1e:5a:bc:ff:9a:89:b5:ab:f8:bb:c3:e2:
3c:e5:c9:26:da:81:59:4a:e0:8b:ba:5c:14:8a:b5:a2:61:76:
d4:f4:62:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:38:28 2026 by rpki-client