
$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
File: DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft (raw, json)
Hash identifier: wbfIYlrI1lxUZU9Z5fNbjtBPdLtdnvQcn9lMDu9JC2o=
Subject key identifier: C8:D7:A8:43:15:00:B6:A9:59:C9:5A:38:A5:82:71:FC:CE:84:21:E0
Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Certificate serial: 3DBDEB698A18E25E9EF0BF77AF430B283BC66992
Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
Manifest number: 84
Signing time: Wed 25 Mar 2026 11:46:47 +0000
Manifest this update: Wed 25 Mar 2026 11:41:47 +0000
Manifest next update: Thu 26 Mar 2026 15:06:47 +0000
Files and hashes: 1: 323430313a323036303a623030333a3a2f34382d3438203d3e203234333831.roa (hash: J0di9kPzuSxqtVKjyk3HKPng7QlOXjQ5p66cPtKaTQg=)
2: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: xLbTWGSR0HvTnUdYp2nr/La6L8Rr5k/ezhkiW+Q3tmM=)
3: AS24381.asa (hash: 1boloodfS0nsEQoFQKonidrDaGC7VyTJt9gACgpRBfs=)
4: DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl (hash: m1d2OZMByKv4RjO5Ex5JX3c2Azqjs7VGf6bqmxBJN/I=)
5: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: VmIkUnZdOEjdRj9sOfiNi5GekVaoRBas6LxAq9Y6qTU=)
6: 323430313a323036303a623030323a3a2f34382d3438203d3e203234333831.roa (hash: lXc0eV4FfLxr7QyLKNsbJLXUNMB04fs7kpQDovC34FM=)
Validation: OK
Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 15:06:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:bd:eb:69:8a:18:e2:5e:9e:f0:bf:77:af:43:0b:28:3b:c6:69:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C
Validity
Not Before: Mar 25 11:41:47 2026 GMT
Not After : Mar 26 15:06:47 2026 GMT
Subject: CN=C8D7A8431500B6A959C95A38A58271FCCE8421E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:30:fc:ff:92:8f:4b:69:a4:34:fc:32:29:21:
d6:13:c3:32:91:84:b2:5a:6c:62:3d:de:47:60:9f:
7f:87:34:e8:cc:db:45:f8:0c:44:6b:62:e4:f8:c8:
c8:61:9a:62:d5:ee:ba:a4:84:ea:c6:c6:9d:20:40:
06:29:da:0a:a2:7e:27:2e:73:97:d4:6a:84:e1:54:
08:8e:98:fd:f3:7c:1d:75:3b:a5:f9:5d:ad:aa:45:
b7:70:73:1e:ea:d7:db:b3:5e:f4:7b:c2:e9:4e:31:
44:ad:d6:83:e2:82:82:e0:49:13:4a:be:8e:da:6e:
81:a9:a5:e4:02:eb:6c:4e:3f:74:2f:d9:98:36:fd:
33:73:97:66:79:d9:15:51:70:87:c8:75:8e:06:f0:
4a:f8:f0:16:fd:0e:cd:37:15:44:97:83:14:99:73:
a9:e1:5c:f8:7b:09:92:e0:04:61:e4:78:6d:9c:62:
41:fb:6b:a9:25:bb:0a:3e:11:4d:32:b0:2b:70:ac:
ba:e8:a2:5b:55:f0:59:33:2e:e9:00:be:f1:1e:16:
b6:fa:d7:86:50:44:ce:99:5a:ae:b8:bc:ad:47:fd:
e0:fd:78:a5:ac:3d:5a:6a:da:3b:59:73:59:86:81:
8e:c9:59:78:14:37:bb:b6:1d:1b:f0:a3:89:fe:92:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D7:A8:43:15:00:B6:A9:59:C9:5A:38:A5:82:71:FC:CE:84:21:E0
X509v3 Authority Key Identifier:
keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer
Subject Information Access:
Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fe:20:09:60:ae:31:48:52:c9:d0:df:b6:64:93:39:57:56:
1d:b9:84:1d:69:3d:ae:42:76:21:3c:f2:fa:fe:4f:62:f9:43:
4b:61:13:ea:26:5c:91:2c:b7:25:75:8b:0a:51:04:87:47:44:
4e:d0:20:72:29:0e:a2:ca:6f:83:b7:63:61:a9:55:eb:4e:38:
32:b1:f4:76:1f:ad:cc:16:95:02:8c:1a:1c:07:8e:12:24:fd:
99:ff:80:e6:38:85:41:46:08:55:0a:85:4b:f8:a4:1c:a9:50:
08:5a:8c:9e:98:77:be:bb:d3:61:91:4f:ed:58:b8:30:55:03:
c9:ca:a4:15:28:fe:b1:86:cc:6a:a8:d4:e8:45:b3:e5:5d:6f:
3a:f4:e3:ca:ec:a8:cc:8d:67:74:ea:bb:84:3d:be:7a:3c:76:
54:72:0b:d1:d0:71:af:53:05:80:15:82:f7:91:41:dc:32:bf:
f8:50:93:52:1a:cf:ca:8b:d0:bb:13:b8:4a:57:91:43:fc:9c:
25:59:4e:4a:42:3e:d7:a0:84:5a:41:b3:4b:f4:94:9f:ba:76:
29:0f:c8:d8:7e:7d:50:36:57:fd:9a:02:c6:0a:2f:35:4d:50:
26:9b:5f:4f:1c:09:78:1f:a7:6b:bf:79:2e:c2:18:fd:75:c1:
52:30:38:1e
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUPb3raYoY4l6e8L93r0MLKDvGaZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE
QTk4NzIxQzAeFw0yNjAzMjUxMTQxNDdaFw0yNjAzMjYxNTA2NDdaMDMxMTAvBgNV
BAMTKEM4RDdBODQzMTUwMEI2QTk1OUM5NUEzOEE1ODI3MUZDQ0U4NDIxRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRMPz/ko9LaaQ0/DIpIdYTwzKR
hLJabGI93kdgn3+HNOjM20X4DERrYuT4yMhhmmLV7rqkhOrGxp0gQAYp2gqificu
c5fUaoThVAiOmP3zfB11O6X5Xa2qRbdwcx7q19uzXvR7wulOMUSt1oPigoLgSRNK
vo7aboGppeQC62xOP3Qv2Zg2/TNzl2Z52RVRcIfIdY4G8Er48Bb9Ds03FUSXgxSZ
c6nhXPh7CZLgBGHkeG2cYkH7a6kluwo+EU0ysCtwrLrooltV8FkzLukAvvEeFrb6
14ZQRM6ZWq64vK1H/eD9eKWsPVpq2jtZc1mGgY7JWXgUN7u2HRvwo4n+khSBAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUyNeoQxUAtqlZyVo4pYJx/M6EIeAwHwYDVR0j
BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud
HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu
Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4
MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF
BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw
RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy
MUMuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8va3Jp
bGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQuY29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdl
LzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZEQTk4NzIxQy5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBADX+IAlgrjFIUsnQ37ZkkzlXVh25hB1pPa5CdiE88vr+T2L5Q0thE+om
XJEstyV1iwpRBIdHRE7QIHIpDqLKb4O3Y2GpVetOODKx9HYfrcwWlQKMGhwHjhIk
/Zn/gOY4hUFGCFUKhUv4pBypUAhajJ6Yd76702GRT+1YuDBVA8nKpBUo/rGGzGqo
1OhFs+Vdbzr048rsqMyNZ3Tqu4Q9vno8dlRyC9HQca9TBYAVgveRQdwyv/hQk1Ia
z8qL0LsTuEpXkUP8nCVZTkpCPteghFpBs0v0lJ+6dikPyNh+fVA2V/2aAsYKLzVN
UCabX08cCXgfp2u/eS7CGP11wVIwOB4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:35 2026 by rpki-client