$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft File: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft (raw, json) Hash identifier: 30c0mgDuAqaMu2tAXHj4E0VvuvNZBFrV/h5MfNgEQYY= Subject key identifier: FB:A5:64:33:E9:B7:3F:AF:31:14:06:52:F6:00:74:EC:CE:8D:03:44 Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED Certificate issuer: /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Certificate serial: 175F48FDDF705CCD072C6E172C658896C10C9DA9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft Manifest number: 0459 Signing time: Wed 17 Sep 2025 19:06:55 +0000 Manifest this update: Wed 17 Sep 2025 19:01:55 +0000 Manifest next update: Thu 18 Sep 2025 20:34:55 +0000 Files and hashes: 1: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl (hash: hOqgcTFFdyaecw8Imdml7Yu7+GwuqrM43d/IMnmqxf0=) 2: AS970.asa (hash: aCqAqa36+Xna3fhTNM72Gk6jiiHCna4r5yVWhBqXYrs=) 3: 3130342e33372e34302e302f32322d3232203d3e2030.roa (hash: vHzV9yuwB4p+FXvV7pq6ibofX3Oxg5SwuBjEw2YE3Pg=) 4: 3130342e33372e34302e302f32342d3234203d3e20393730.roa (hash: ek8Vg6kOrYHQQyaRN7UOy+nZ8uz9bhWO7ZAUVfTbaRI=) 5: 3130342e33372e34312e302f32342d3234203d3e203231393537.roa (hash: IRTKWsv2EGeDRsQ97JvbtSG0Rc6W53GcEAl3eMmmpqs=) 6: AS21957.asa (hash: JfXRjy3PBHQ21sZWZ6j+8b+Oy1M6wY5jz3ZmlNCr4es=) Validation: OK Signature path: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Sep 2025 20:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5f:48:fd:df:70:5c:cd:07:2c:6e:17:2c:65:88:96:c1:0c:9d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Validity Not Before: Sep 17 19:01:55 2025 GMT Not After : Sep 18 20:34:55 2025 GMT Subject: CN=FBA56433E9B73FAF31140652F60074ECCE8D0344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:aa:c3:92:1c:3b:e7:75:92:a1:5e:17:e5: 13:ec:c5:1c:dd:33:d8:14:fd:b1:e1:d9:c2:4d:1a: 71:c1:5e:5d:60:ec:ad:cb:92:b8:b4:e5:e7:29:54: ee:39:27:11:1b:a1:74:1c:0d:c7:94:21:64:42:8e: 39:65:2b:60:e9:22:f1:69:7b:96:15:7f:f2:13:99: b4:3a:42:0a:9b:ca:7f:1c:4d:ae:4a:45:af:ec:d2: d8:22:3e:c9:a1:72:29:1f:08:f9:3a:d6:87:a5:9f: 5f:83:20:39:0c:78:da:b5:27:27:3e:ef:0f:68:dc: 68:10:d3:a0:8e:e1:c6:40:8c:82:f1:61:6e:22:d3: 58:b5:e0:30:67:62:c8:ca:f1:81:90:f4:98:87:ee: de:d3:b7:41:8f:1b:42:7b:25:49:19:de:c7:92:94: 8f:04:7f:38:ee:52:95:3a:87:42:2f:88:05:62:79: ff:94:36:a4:92:29:d5:5e:8e:05:84:7b:c4:ce:06: 07:55:36:cd:9c:bd:07:13:50:ff:17:f7:00:5f:07: 2f:7c:9c:16:d7:39:d8:8a:57:f5:d0:95:77:46:3e: bd:91:ef:45:49:68:62:72:23:a7:a1:18:65:50:ad: 44:5a:c6:0c:50:91:ff:74:cb:02:99:3e:45:25:a3: 5f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A5:64:33:E9:B7:3F:AF:31:14:06:52:F6:00:74:EC:CE:8D:03:44 X509v3 Authority Key Identifier: keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject Information Access: Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:bb:cf:29:9e:5f:05:6b:a2:19:92:af:a1:1a:ab:93:5e:d0: e7:fe:04:11:b3:d9:69:45:64:c0:d6:d9:9c:ce:0d:be:2a:c7: 5d:25:4f:a2:fe:68:d8:85:b3:f9:6b:d3:5e:3b:ed:6b:25:b3: e9:77:61:26:be:59:ba:c0:f1:2e:15:ad:b6:99:b0:e0:32:ea: 6f:b4:81:33:0b:bd:03:7e:fe:77:fb:e4:46:b2:d5:c6:2a:a5: de:60:96:6b:99:41:2d:0f:a0:bd:99:95:ab:bc:83:d8:16:e4: e8:df:15:5f:2b:e8:1f:ba:80:a7:cc:0d:80:3b:a0:65:cc:fc: 70:dc:3f:bc:5d:3f:be:11:a4:cc:2b:b4:8d:3a:5e:ed:1b:4d: bf:e6:87:64:a4:64:fc:cc:9f:19:b9:14:95:06:f4:6a:8e:b8: 90:db:c6:68:97:a7:ff:54:57:cc:c2:0e:8a:45:c1:44:15:ec: 08:cd:36:64:c4:6d:af:a1:71:f1:28:1c:75:c7:58:d3:86:4d: eb:2f:c5:4e:f8:4b:a5:5f:e7:23:ca:1c:8c:fe:ce:74:d7:b9: ac:46:a2:85:ff:bb:97:1a:18:7d:ee:d8:ec:65:d5:e6:21:7f: ad:ab:5c:98:50:b6:6f:c6:cb:14:b5:37:52:1f:53:8b:e6:86: e5:52:de:5d -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUF19I/d9wXM0HLG4XLGWIlsEMnakwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5 YzA1ODliOTk1NmM1MWUzNTEwHhcNMjUwOTE3MTkwMTU1WhcNMjUwOTE4MjAzNDU1 WjAzMTEwLwYDVQQDEyhGQkE1NjQzM0U5QjczRkFGMzExNDA2NTJGNjAwNzRFQ0NF OEQwMzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgCqw5IcO+d1 kqFeF+UT7MUc3TPYFP2x4dnCTRpxwV5dYOyty5K4tOXnKVTuOScRG6F0HA3HlCFk Qo45ZStg6SLxaXuWFX/yE5m0OkIKm8p/HE2uSkWv7NLYIj7JoXIpHwj5OtaHpZ9f gyA5DHjatScnPu8PaNxoENOgjuHGQIyC8WFuItNYteAwZ2LIyvGBkPSYh+7e07dB jxtCeyVJGd7HkpSPBH847lKVOodCL4gFYnn/lDakkinVXo4FhHvEzgYHVTbNnL0H E1D/F/cAXwcvfJwW1znYilf10JV3Rj69ke9FSWhiciOnoRhlUK1EWsYMUJH/dMsC mT5FJaNfbQIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFPulZDPptz+vMRQGUvYAdOzO jQNEMB8GA1UdIwQYMBaAFH7JtdIlCMAjHBXava9RNZkLZr/tMA4GA1UdDwEB/wQE AwIHgDBmBgNVHR8EXzBdMFugWaBXhlVyc3luYzovL3JlcG8ua2FnbC5tZS9ycGtp L0tlYXRvbkFHTGFpci8wLzdFQzlCNUQyMjUwOEMwMjMxQzE1REFCREFGNTEzNTk5 MEI2NkJGRUQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEt NDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTA2NWFjYy1iZWVkLTQxMTUtYmM2Yy02 M2RlMjMyZjJhMDQvMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5YzA1 ODliOTk1NmM1MWUzNTEuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZV cnN5bmM6Ly9yZXBvLmthZ2wubWUvcnBraS9LZWF0b25BR0xhaXIvMC83RUM5QjVE MjI1MDhDMDIzMUMxNURBQkRBRjUxMzU5OTBCNjZCRkVELm1mdDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLvP KZ5fBWuiGZKvoRqrk17Q5/4EEbPZaUVkwNbZnM4NvirHXSVPov5o2IWz+WvTXjvt ayWz6XdhJr5ZusDxLhWttpmw4DLqb7SBMwu9A37+d/vkRrLVxiql3mCWa5lBLQ+g vZmVq7yD2Bbk6N8VXyvoH7qAp8wNgDugZcz8cNw/vF0/vhGkzCu0jTpe7RtNv+aH ZKRk/MyfGbkUlQb0ao64kNvGaJen/1RXzMIOikXBRBXsCM02ZMRtr6Fx8SgcdcdY 04ZN6y/FTvhLpV/nI8ocjP7OdNe5rEaihf+7lxoYfe7Y7GXV5iF/ratcmFC2b8bL FLU3Uh9Ti+aG5VLeXQ== -----END CERTIFICATE-----Generated at Thu Sep 18 07:15:52 2025 by rpki-client