$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft File: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft (raw, json) Hash identifier: Vtjzj7yTWGZENExn72TbyC1n6WHglhYBtw7MMVWUU3g= Subject key identifier: 6E:CA:A8:AD:BD:A8:89:9A:9C:75:25:F5:D6:1C:C8:7C:4F:7F:7D:2B Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED Certificate issuer: /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Certificate serial: 77BF653B9AE07E21F1E9BD7C4577E4297CF3DF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft Manifest number: 043A Signing time: Tue 26 Aug 2025 05:42:55 +0000 Manifest this update: Tue 26 Aug 2025 05:37:55 +0000 Manifest next update: Wed 27 Aug 2025 09:02:55 +0000 Files and hashes: 1: AS970.asa (hash: uUtIUuFVFE42+T1fqnnQdo7h/4VRg1akAdGbbCnAbEY=) 2: 3130342e33372e34312e302f32342d3234203d3e203231393537.roa (hash: IRTKWsv2EGeDRsQ97JvbtSG0Rc6W53GcEAl3eMmmpqs=) 3: 3130342e33372e34302e302f32342d3234203d3e20393730.roa (hash: ek8Vg6kOrYHQQyaRN7UOy+nZ8uz9bhWO7ZAUVfTbaRI=) 4: AS21957.asa (hash: v9+444bGaAkQtqJOIXn9P1VMcTrlW/WFkfocSw9xo/c=) 5: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl (hash: dCY48LATLzQv8OEa443YKSzzwSenO0rCIyRJMunt2ZU=) 6: 3130342e33372e34302e302f32322d3232203d3e2030.roa (hash: vHzV9yuwB4p+FXvV7pq6ibofX3Oxg5SwuBjEw2YE3Pg=) Validation: OK Signature path: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 27 Aug 2025 09:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:bf:65:3b:9a:e0:7e:21:f1:e9:bd:7c:45:77:e4:29:7c:f3:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Validity Not Before: Aug 26 05:37:55 2025 GMT Not After : Aug 27 09:02:55 2025 GMT Subject: CN=6ECAA8ADBDA8899A9C7525F5D61CC87C4F7F7D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d2:30:16:3b:c5:cd:6f:3b:3a:36:a3:4b:2c: 50:2c:05:fb:ba:79:a0:4e:27:c0:39:e2:22:ff:2f: ac:a6:f7:ba:f3:64:59:d3:2e:64:21:53:c5:83:ea: 9e:0f:aa:d5:8d:05:5f:56:b6:9e:9c:f1:7a:14:37: 7f:75:79:d7:7b:26:f1:8b:fd:35:2d:9d:97:56:6d: 4e:43:be:35:cd:9d:09:dd:07:df:cc:44:c7:84:a6: 70:e2:d3:ed:0d:81:02:5c:38:cd:5a:39:e1:fb:a6: 87:56:24:33:d4:f6:60:74:22:06:d3:70:22:8c:7a: 07:23:6f:fa:0d:30:8c:2c:38:04:02:b2:94:00:39: 3d:41:73:ef:9e:94:ba:60:89:d9:70:f1:d1:89:82: e8:a1:7e:9b:24:2e:06:14:41:bc:86:64:82:c0:35: f2:7f:63:e5:ad:f0:f3:0f:1f:9a:03:00:26:c9:c0: cd:d1:52:1e:1d:01:10:7b:f1:f4:14:05:26:68:7a: e2:ee:86:7b:c9:68:d0:9e:53:3f:cf:1f:b7:07:fb: 2d:ac:39:97:e0:c0:47:74:9c:a7:91:06:4a:80:ee: cb:fd:bb:1a:b0:e5:fb:12:b2:7f:02:e0:8c:17:2d: a1:cf:e0:1f:20:21:49:01:04:f6:5e:1e:98:e7:76: c0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CA:A8:AD:BD:A8:89:9A:9C:75:25:F5:D6:1C:C8:7C:4F:7F:7D:2B X509v3 Authority Key Identifier: keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject Information Access: Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:29:3d:f3:4b:c7:00:61:81:18:73:b4:b6:33:25:30:1c:5c: f3:ec:b4:cf:d7:bf:42:cc:5d:70:30:2d:eb:c4:1f:79:fc:6d: f9:f4:1a:85:85:72:b1:e5:5b:29:ac:02:ae:f0:45:5c:31:81: d0:b6:d3:c6:80:03:65:9e:9a:33:ee:49:13:6d:fb:12:b6:0c: bc:0f:c8:8a:0e:59:a6:ca:94:6a:e1:2b:59:92:6a:83:16:ec: 38:63:4e:db:8f:81:fa:40:e4:32:8b:c0:48:35:fc:64:3f:97: 30:ee:ee:4a:83:4f:f3:96:06:b7:fc:7d:2e:86:4d:3f:ad:ec: 14:e3:f7:a9:08:1d:00:9d:75:ef:9b:b4:d9:1f:41:f0:54:d8: c7:0e:f5:0a:98:92:8a:66:3b:c1:9c:3d:32:29:e1:b9:ad:35: f5:b1:cb:c8:36:40:22:27:18:9b:09:c7:66:66:97:ba:1a:c7: e1:5d:5e:f4:45:dc:79:d9:a9:13:40:c0:b7:fc:bd:5b:0e:2c: 8f:51:85:3b:ba:ce:e4:cb:56:11:2f:d5:3a:a4:bd:5e:fd:7e: e8:dd:80:a6:81:ee:71:26:b5:0e:50:cb:f9:be:79:54:ee:31: bb:6c:cd:95:48:61:9e:1c:f3:c3:52:87:89:41:6a:57:04:80: ac:b7:17:4a -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUd79lO5rgfiHx6b18RXfkKXzz3wAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5 YzA1ODliOTk1NmM1MWUzNTEwHhcNMjUwODI2MDUzNzU1WhcNMjUwODI3MDkwMjU1 WjAzMTEwLwYDVQQDEyg2RUNBQThBREJEQTg4OTlBOUM3NTI1RjVENjFDQzg3QzRG N0Y3RDJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9IwFjvFzW87 OjajSyxQLAX7unmgTifAOeIi/y+spve682RZ0y5kIVPFg+qeD6rVjQVfVraenPF6 FDd/dXnXeybxi/01LZ2XVm1OQ741zZ0J3QffzETHhKZw4tPtDYECXDjNWjnh+6aH ViQz1PZgdCIG03AijHoHI2/6DTCMLDgEArKUADk9QXPvnpS6YInZcPHRiYLooX6b JC4GFEG8hmSCwDXyf2PlrfDzDx+aAwAmycDN0VIeHQEQe/H0FAUmaHri7oZ7yWjQ nlM/zx+3B/strDmX4MBHdJynkQZKgO7L/bsasOX7ErJ/AuCMFy2hz+AfICFJAQT2 Xh6Y53bAuwIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFG7KqK29qImanHUl9dYcyHxP f30rMB8GA1UdIwQYMBaAFH7JtdIlCMAjHBXava9RNZkLZr/tMA4GA1UdDwEB/wQE AwIHgDBmBgNVHR8EXzBdMFugWaBXhlVyc3luYzovL3JlcG8ua2FnbC5tZS9ycGtp L0tlYXRvbkFHTGFpci8wLzdFQzlCNUQyMjUwOEMwMjMxQzE1REFCREFGNTEzNTk5 MEI2NkJGRUQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEt NDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTA2NWFjYy1iZWVkLTQxMTUtYmM2Yy02 M2RlMjMyZjJhMDQvMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5YzA1 ODliOTk1NmM1MWUzNTEuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZV cnN5bmM6Ly9yZXBvLmthZ2wubWUvcnBraS9LZWF0b25BR0xhaXIvMC83RUM5QjVE MjI1MDhDMDIzMUMxNURBQkRBRjUxMzU5OTBCNjZCRkVELm1mdDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCk9 80vHAGGBGHO0tjMlMBxc8+y0z9e/QsxdcDAt68Qfefxt+fQahYVyseVbKawCrvBF XDGB0LbTxoADZZ6aM+5JE237ErYMvA/Iig5ZpsqUauErWZJqgxbsOGNO24+B+kDk MovASDX8ZD+XMO7uSoNP85YGt/x9LoZNP63sFOP3qQgdAJ1175u02R9B8FTYxw71 CpiSimY7wZw9Minhua019bHLyDZAIicYmwnHZmaXuhrH4V1e9EXcedmpE0DAt/y9 Ww4sj1GFO7rO5MtWES/VOqS9Xv1+6N2ApoHucSa1DlDL+b55VO4xu2zNlUhhnhzz w1KHiUFqVwSArLcXSg== -----END CERTIFICATE-----Generated at Tue Aug 26 11:06:06 2025 by rpki-client