$ rpki-client -vvf krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.mft File: 3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.mft (raw, json) Hash identifier: 9GHXE/K1S3O7OpV73HtyrPy2L7OXi8a62FTU/H6WYro= Subject key identifier: E0:85:D0:B2:BE:00:FF:EF:40:79:00:F5:02:B7:DE:EB:F4:9A:D2:D2 Authority key identifier: 3C:63:FB:DA:23:EE:1D:2B:FA:DB:80:65:44:E5:53:DD:BA:29:4A:CF Certificate issuer: /CN=3C63FBDA23EE1D2BFADB806544E553DDBA294ACF Certificate serial: 36EEDAEF93D7308F5FBE1AD703265D975A659AB4 Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.cer Subject info access: rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.mft Manifest number: 2D Signing time: Sun 06 Jul 2025 04:09:10 +0000 Manifest this update: Sun 06 Jul 2025 04:04:10 +0000 Manifest next update: Mon 07 Jul 2025 07:09:10 +0000 Files and hashes: 1: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: a0dJHkfL1qOi86Rtbo/BgTh1nVGDgN86oA5QV/DsT+E=) 2: 3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.crl (hash: 0WDLWZk7PqB4Z9NxYeqbxki2HrpKCmb/R/F1JUXqIsY=) 3: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: bE/s0d/dK44+J8HeJV1CEUVxiY5sEnOi3Lfhk+iNubU=) Validation: OK Signature path: rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.crl rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 07:09:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ee:da:ef:93:d7:30:8f:5f:be:1a:d7:03:26:5d:97:5a:65:9a:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C63FBDA23EE1D2BFADB806544E553DDBA294ACF Validity Not Before: Jul 6 04:04:10 2025 GMT Not After : Jul 7 07:09:10 2025 GMT Subject: CN=E085D0B2BE00FFEF407900F502B7DEEBF49AD2D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:db:2d:9a:f4:33:70:4b:ff:0b:a5:26:ca:47: eb:9b:cb:2a:d3:f1:f7:cf:29:9b:3f:e8:ac:cb:c5: f7:8c:0b:92:3f:6a:21:f9:70:4d:f4:51:d8:2f:56: 9c:37:9c:29:4c:a1:4a:0f:c9:8b:54:62:f3:b5:4e: d4:21:9e:45:27:80:13:4e:af:12:de:8b:b9:32:34: c4:5d:70:a8:17:64:bc:3b:ab:c3:64:c7:8c:8b:3d: 31:78:73:cb:99:17:b9:ca:4d:2a:4c:65:74:2e:81: e0:c4:13:90:dd:d5:1e:fa:0e:2b:83:f0:dd:1d:27: 0a:5b:74:fd:1d:ae:d1:16:da:ed:70:6b:6b:98:58: 07:02:b1:f4:2d:5b:30:ea:7b:42:4a:93:66:93:ec: 24:86:39:b6:82:44:92:bb:86:13:77:32:87:73:87: a5:81:ed:da:cc:34:27:1d:aa:5d:14:46:ff:40:09: 58:f3:d7:f3:a3:30:1b:15:40:ab:2b:51:62:cf:3a: 63:dd:38:8f:06:bb:8d:c4:64:0f:34:0e:4b:8b:45: b5:76:18:4c:58:1b:da:cc:c8:d1:34:0c:63:e6:2c: 14:36:71:c3:34:57:6e:b7:47:ec:8b:ac:0b:60:49: 57:68:46:ee:8f:f3:af:e3:49:d0:78:04:9c:f0:33: 0c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:85:D0:B2:BE:00:FF:EF:40:79:00:F5:02:B7:DE:EB:F4:9A:D2:D2 X509v3 Authority Key Identifier: keyid:3C:63:FB:DA:23:EE:1D:2B:FA:DB:80:65:44:E5:53:DD:BA:29:4A:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.cer Subject Information Access: Signed Object - URI:rsync://krill.syd-au.infininet.com.au/repo/BGP-Exchange/0/3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:4b:01:89:5a:20:9d:7d:95:dd:52:07:36:9a:37:89:73:05: 46:67:19:b1:98:4f:d8:d6:fe:9d:ec:ac:f1:70:a3:0c:a1:c4: ae:63:23:df:6d:a1:9d:66:42:64:6a:62:e2:49:46:f8:59:e5: 48:43:ef:58:24:57:d4:3f:79:79:4f:91:a7:21:35:d6:70:8d: fc:f9:f6:f0:ce:11:07:ce:6e:ac:e2:de:85:5b:33:f8:d5:d6: 35:aa:e7:ce:60:d7:45:75:c0:81:96:86:1c:fa:d1:04:88:7a: 74:cc:80:7e:33:0c:4f:4e:38:46:a0:55:4a:7b:62:07:1f:5a: 86:3d:b9:84:79:b3:33:67:b9:32:cf:52:7d:97:b5:81:69:d5: da:27:1a:ea:51:18:68:af:4c:fd:34:b6:e0:c5:53:89:34:5e: c1:28:de:fd:3d:e6:06:16:3d:04:d6:38:04:91:f8:17:1a:8f: b2:04:25:10:7d:9e:35:a2:80:e0:89:05:a0:74:6b:0a:e2:1f: 3e:6d:48:1f:b1:a7:03:93:06:09:8d:13:b2:b0:3c:5f:98:f7: 56:5e:ee:5f:67:94:ab:aa:35:9f:5b:85:d8:45:c7:70:91:ee: 9a:fb:9a:43:77:d3:07:5a:cf:46:88:d2:ee:ca:5d:14:53:bb: e7:43:59:7f -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgIUNu7a75PXMI9fvhrXAyZdl1plmrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M2M0ZCREEyM0VFMUQyQkZBREI4MDY1NDRFNTUzRERC QTI5NEFDRjAeFw0yNTA3MDYwNDA0MTBaFw0yNTA3MDcwNzA5MTBaMDMxMTAvBgNV BAMTKEUwODVEMEIyQkUwMEZGRUY0MDc5MDBGNTAyQjdERUVCRjQ5QUQyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC02y2a9DNwS/8LpSbKR+ubyyrT 8ffPKZs/6KzLxfeMC5I/aiH5cE30UdgvVpw3nClMoUoPyYtUYvO1TtQhnkUngBNO rxLei7kyNMRdcKgXZLw7q8Nkx4yLPTF4c8uZF7nKTSpMZXQugeDEE5Dd1R76DiuD 8N0dJwpbdP0drtEW2u1wa2uYWAcCsfQtWzDqe0JKk2aT7CSGObaCRJK7hhN3Modz h6WB7drMNCcdql0URv9ACVjz1/OjMBsVQKsrUWLPOmPdOI8Gu43EZA80DkuLRbV2 GExYG9rMyNE0DGPmLBQ2ccM0V263R+yLrAtgSVdoRu6P86/jSdB4BJzwMwyZAgMB AAGjggIlMIICITAdBgNVHQ4EFgQU4IXQsr4A/+9AeQD1Arfe6/Sa0tIwHwYDVR0j BBgwFoAUPGP72iPuHSv624BlROVT3bopSs8wDgYDVR0PAQH/BAQDAgeAMHcGA1Ud HwRwMG4wbKBqoGiGZnJzeW5jOi8va3JpbGwuc3lkLWF1LmluZmluaW5ldC5jb20u YXUvcmVwby9CR1AtRXhjaGFuZ2UvMC8zQzYzRkJEQTIzRUUxRDJCRkFEQjgwNjU0 NEU1NTNEREJBMjk0QUNGLmNybDB9BggrBgEFBQcBAQRxMG8wbQYIKwYBBQUHMAKG YXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxNTBFNEQw MDAwLzAvM0M2M0ZCREEyM0VFMUQyQkZBREI4MDY1NDRFNTUzRERCQTI5NEFDRi5j ZXIwgYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9rcmlsbC5z eWQtYXUuaW5maW5pbmV0LmNvbS5hdS9yZXBvL0JHUC1FeGNoYW5nZS8wLzNDNjNG QkRBMjNFRTFEMkJGQURCODA2NTQ0RTU1M0REQkEyOTRBQ0YubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBT SwGJWiCdfZXdUgc2mjeJcwVGZxmxmE/Y1v6d7KzxcKMMocSuYyPfbaGdZkJkamLi SUb4WeVIQ+9YJFfUP3l5T5GnITXWcI38+fbwzhEHzm6s4t6FWzP41dY1qufOYNdF dcCBloYc+tEEiHp0zIB+MwxPTjhGoFVKe2IHH1qGPbmEebMzZ7kyz1J9l7WBadXa JxrqURhor0z9NLbgxVOJNF7BKN79PeYGFj0E1jgEkfgXGo+yBCUQfZ41ooDgiQWg dGsK4h8+bUgfsacDkwYJjROysDxfmPdWXu5fZ5SrqjWfW4XYRcdwke6a+5pDd9MH Ws9GiNLuyl0UU7vnQ1l/ -----END CERTIFICATE-----Generated at Sun Jul 6 15:40:11 2025 by rpki-client