This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft File: DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft (raw, json) Hash identifier: LrsDVsecOyyuMueO9N2jCA82YSPL1LEaHuKLzWdNIjQ= Subject key identifier: 98:7C:C0:85:B3:A4:19:33:91:8F:AC:7F:6D:32:90:18:F2:BC:EB:3F Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 4DAD0B51F709E2B10713DAE3392C957D896A0BFE Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft Manifest number: 33 Signing time: Sun 25 Jan 2026 07:46:47 +0000 Manifest this update: Sun 25 Jan 2026 07:41:47 +0000 Manifest next update: Mon 26 Jan 2026 09:36:47 +0000 Files and hashes: 1: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: VmIkUnZdOEjdRj9sOfiNi5GekVaoRBas6LxAq9Y6qTU=) 2: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: xLbTWGSR0HvTnUdYp2nr/La6L8Rr5k/ezhkiW+Q3tmM=) 3: DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl (hash: evRJj8NstcvK/yRXoOnGST34/EHhXQz83U63G7jnFiU=) 4: AS24381.asa (hash: 7Bd5Wb1PtwgjYIC9RF45nAAB3jRY689JG+aNM+kzoLM=) 5: 323430313a323036303a623030323a3a2f34382d3438203d3e203234333831.roa (hash: lXc0eV4FfLxr7QyLKNsbJLXUNMB04fs7kpQDovC34FM=) Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Jan 2026 09:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ad:0b:51:f7:09:e2:b1:07:13:da:e3:39:2c:95:7d:89:6a:0b:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Jan 25 07:41:47 2026 GMT Not After : Jan 26 09:36:47 2026 GMT Subject: CN=987CC085B3A41933918FAC7F6D329018F2BCEB3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:5e:b4:d9:2f:79:2b:3d:90:96:a4:e2:d8: 2f:ec:15:a9:fa:bc:9c:e4:c8:24:07:92:bd:0c:e7: ed:15:b5:eb:22:32:b7:8a:8f:62:8c:df:c6:f9:0f: 0b:27:f7:3e:e1:32:aa:c3:8c:58:09:66:12:35:0d: 21:aa:13:d8:5b:3d:8a:86:15:9b:5c:b6:3d:fa:22: db:fc:c4:b7:44:fd:db:1b:1a:fe:97:d7:70:72:84: 3a:d4:fc:d5:94:b3:b7:ee:ee:30:3a:4b:c8:93:6a: 76:18:f8:12:27:3c:a6:56:00:17:8d:11:87:f9:38: 4f:f0:e5:bf:05:6a:cf:62:a1:d1:81:b9:df:8e:ad: eb:4b:71:06:64:af:82:4f:97:0c:83:b6:b2:06:c0: a8:75:19:ac:e6:ac:40:a5:ec:81:91:2a:7c:e6:00: 0b:f5:62:b4:c8:73:4c:05:28:48:12:45:44:71:05: 5b:82:85:de:d8:f6:b3:8d:87:71:d5:62:5e:13:e1: a4:fb:39:5d:eb:c2:e7:a8:52:f0:90:ed:12:04:45: 21:a1:8d:43:4e:97:40:a8:ac:9a:fe:33:60:50:ee: 80:83:46:f1:1a:66:a9:3d:12:ca:88:d3:38:45:4b: ed:b9:2c:bb:c1:51:58:20:ed:06:3a:53:e7:33:ec: 77:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7C:C0:85:B3:A4:19:33:91:8F:AC:7F:6D:32:90:18:F2:BC:EB:3F X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fd:6d:8a:f0:b5:e7:ad:66:4e:d0:31:71:d6:63:cd:6d:18: 04:93:fc:e1:aa:83:6d:5b:ac:8a:53:5d:2a:e6:7e:10:9f:6d: 1b:15:a9:52:c0:ee:ab:9e:58:d0:42:44:d2:88:ae:89:3a:14: 08:56:c4:07:9e:a7:b4:bf:53:2a:97:d4:99:44:6d:fe:e5:9b: a8:ea:0d:85:e7:0e:5c:17:07:83:54:d8:c1:70:e4:66:96:46: bb:32:3b:bd:97:ae:44:73:17:b5:99:02:f4:dd:1e:6b:67:3c: b6:d2:2f:f8:c1:2d:69:4b:5d:17:ec:5b:f1:c4:53:a3:2b:b2: 01:8d:3f:d1:0d:ab:66:ad:e0:a0:c8:2e:02:53:01:c7:4e:7e: 99:fb:70:1d:f1:95:a3:56:49:b6:36:a8:9d:c2:3f:03:d0:c1: 24:91:aa:36:3b:40:98:53:44:e0:27:9f:dc:72:de:a8:68:1b: 64:1a:c8:62:18:d4:6c:9a:40:92:bd:9a:00:e8:a4:fd:f5:8a: da:7f:50:07:44:2d:86:39:0e:a5:15:33:7f:ed:86:bd:44:cd: d6:da:fc:f0:41:ec:12:fe:24:9e:9e:97:3e:d4:ba:14:58:f1: 04:8a:f0:30:b3:13:a3:04:56:0e:99:52:0c:71:71:54:a7:0f: 5e:ce:d2:d4 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUTa0LUfcJ4rEHE9rjOSyVfYlqC/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjAxMjUwNzQxNDdaFw0yNjAxMjYwOTM2NDdaMDMxMTAvBgNV BAMTKDk4N0NDMDg1QjNBNDE5MzM5MThGQUM3RjZEMzI5MDE4RjJCQ0VCM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaEF602S95Kz2QlqTi2C/sFan6 vJzkyCQHkr0M5+0VtesiMreKj2KM38b5Dwsn9z7hMqrDjFgJZhI1DSGqE9hbPYqG FZtctj36Itv8xLdE/dsbGv6X13ByhDrU/NWUs7fu7jA6S8iTanYY+BInPKZWABeN EYf5OE/w5b8Fas9iodGBud+OretLcQZkr4JPlwyDtrIGwKh1GazmrECl7IGRKnzm AAv1YrTIc0wFKEgSRURxBVuChd7Y9rONh3HVYl4T4aT7OV3rwueoUvCQ7RIERSGh jUNOl0CorJr+M2BQ7oCDRvEaZqk9EsqI0zhFS+25LLvBUVgg7QY6U+cz7HfDAgMB AAGjggItMIICKTAdBgNVHQ4EFgQUmHzAhbOkGTORj6x/bTKQGPK86z8wHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8va3Jp bGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQuY29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdl LzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZEQTk4NzIxQy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAGX9bYrwteetZk7QMXHWY81tGAST/OGqg21brIpTXSrmfhCfbRsVqVLA 7queWNBCRNKIrok6FAhWxAeep7S/UyqX1JlEbf7lm6jqDYXnDlwXB4NU2MFw5GaW RrsyO72XrkRzF7WZAvTdHmtnPLbSL/jBLWlLXRfsW/HEU6MrsgGNP9ENq2at4KDI LgJTAcdOfpn7cB3xlaNWSbY2qJ3CPwPQwSSRqjY7QJhTROAnn9xy3qhoG2QayGIY 1GyaQJK9mgDopP31itp/UAdELYY5DqUVM3/thr1Ezdba/PBB7BL+JJ6elz7UuhRY 8QSK8DCzE6MEVg6ZUgxxcVSnD17O0tQ= -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:15 2026 by rpki-client