$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft File: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft (raw, json) Hash identifier: C/JdYRKZTCt78/k4VWOk2EQgO42ku+Yt2SGP4ubx37k= Subject key identifier: E2:B8:73:4E:5B:E0:3B:B7:9B:8C:96:F8:6D:1B:C5:C0:4C:F1:2F:B9 Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED Certificate issuer: /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Certificate serial: 53F65A76A701ECE16130AE9F39863392BECA37DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft Manifest number: 03FF Signing time: Sat 05 Jul 2025 15:26:58 +0000 Manifest this update: Sat 05 Jul 2025 15:21:58 +0000 Manifest next update: Sun 06 Jul 2025 18:20:58 +0000 Files and hashes: 1: 3130342e33372e34302e302f32342d3234203d3e20393730.roa (hash: ek8Vg6kOrYHQQyaRN7UOy+nZ8uz9bhWO7ZAUVfTbaRI=) 2: 3130342e33372e34312e302f32342d3234203d3e203231393537.roa (hash: IRTKWsv2EGeDRsQ97JvbtSG0Rc6W53GcEAl3eMmmpqs=) 3: AS970.asa (hash: uUtIUuFVFE42+T1fqnnQdo7h/4VRg1akAdGbbCnAbEY=) 4: 3130342e33372e34302e302f32322d3232203d3e2030.roa (hash: vHzV9yuwB4p+FXvV7pq6ibofX3Oxg5SwuBjEw2YE3Pg=) 5: AS21957.asa (hash: v9+444bGaAkQtqJOIXn9P1VMcTrlW/WFkfocSw9xo/c=) 6: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl (hash: KG3kbu2lqL79o9Syq0sy/AtNzgXvwlXRwb8q7Fr3smk=) Validation: OK Signature path: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 18:20:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f6:5a:76:a7:01:ec:e1:61:30:ae:9f:39:86:33:92:be:ca:37:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Validity Not Before: Jul 5 15:21:58 2025 GMT Not After : Jul 6 18:20:58 2025 GMT Subject: CN=E2B8734E5BE03BB79B8C96F86D1BC5C04CF12FB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:73:b6:b7:28:52:99:64:21:0e:48:dd:4a:56: 56:32:08:ce:04:e1:2e:3f:e2:3f:ea:38:dd:a9:23: 8c:b4:d9:f9:1f:b4:74:df:40:49:23:a7:7a:4c:78: 0d:f2:6e:2d:15:4c:6c:9b:43:bd:49:11:78:b8:d7: 5a:18:d2:84:4a:30:3c:2f:7b:75:06:30:4d:08:f3: 68:23:d0:cd:dc:bf:71:e9:da:b2:71:c5:16:a9:a7: f1:de:dc:d1:0e:c6:4d:d8:49:eb:58:e0:91:ca:78: 08:22:8c:75:5e:33:bc:dd:de:84:09:bd:1a:e6:c0: 75:9c:e1:b8:bb:5d:b7:18:4d:e2:1f:bd:ff:8e:97: c2:5b:94:8c:a3:a0:af:1c:38:34:9c:d0:09:a2:9b: dc:f2:de:f1:cb:6e:fa:55:99:c6:0a:d2:74:3e:62: 30:fe:10:74:5b:d9:6a:eb:31:2c:67:85:2b:34:3e: 62:4e:95:94:cc:0c:d6:12:f6:d6:64:c5:0f:c6:26: 90:e1:10:2c:a2:4b:ce:4d:53:e2:ff:e9:23:c5:65: ef:f9:b5:8c:f4:0c:b8:b8:16:88:c7:37:4c:d5:6a: 31:75:bd:c0:7f:0f:1e:61:5d:bb:14:52:b4:22:b1: a9:25:5b:ca:cb:da:9a:70:3f:96:1c:c5:e4:59:c1: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B8:73:4E:5B:E0:3B:B7:9B:8C:96:F8:6D:1B:C5:C0:4C:F1:2F:B9 X509v3 Authority Key Identifier: keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject Information Access: Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ca:8f:b3:fe:16:a9:3f:b5:b7:33:fe:05:1a:86:6b:a5:a7: df:db:42:45:c2:19:4c:65:d7:af:36:96:8a:63:5c:fe:1a:43: 10:b4:d3:19:6c:1e:f3:dd:01:e2:42:bc:a9:01:10:ed:b2:37: dd:23:13:41:67:99:40:28:ae:70:b8:01:78:7f:76:6f:57:f0: 40:58:b4:c6:36:4e:91:45:37:79:f2:ff:d0:9f:c0:28:8d:1c: 3f:3a:48:c3:b1:06:da:ed:d1:09:47:ac:01:50:c8:ab:10:b9: 60:07:a8:69:f3:f4:cf:28:a9:3c:e4:0c:fb:65:1b:12:4b:50: 62:3a:00:18:f6:ca:77:9d:08:28:e5:8c:7b:02:b5:5f:79:13: 0c:0f:8c:86:8a:cf:9c:91:94:c3:f8:de:4f:9b:93:82:7e:a7: 69:5e:3e:29:9d:98:cc:d2:46:70:c9:51:10:fd:ce:e5:42:9d: c0:f0:c8:68:44:23:1b:fc:38:ec:9f:93:a1:a0:42:ea:f0:5c: b0:0c:e0:ff:09:50:71:07:92:47:b1:63:b9:cf:d0:3b:09:9e: d5:74:5c:50:bd:c7:b8:ea:d0:0e:c6:6a:03:51:e9:20:1b:56: 7a:19:a2:f2:2a:ad:a3:cb:e5:f9:ba:5d:d0:9d:f1:8a:38:67: ea:6b:c8:26 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUU/ZadqcB7OFhMK6fOYYzkr7KN9owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5 YzA1ODliOTk1NmM1MWUzNTEwHhcNMjUwNzA1MTUyMTU4WhcNMjUwNzA2MTgyMDU4 WjAzMTEwLwYDVQQDEyhFMkI4NzM0RTVCRTAzQkI3OUI4Qzk2Rjg2RDFCQzVDMDRD RjEyRkI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53O2tyhSmWQh DkjdSlZWMgjOBOEuP+I/6jjdqSOMtNn5H7R030BJI6d6THgN8m4tFUxsm0O9SRF4 uNdaGNKESjA8L3t1BjBNCPNoI9DN3L9x6dqyccUWqafx3tzRDsZN2EnrWOCRyngI Iox1XjO83d6ECb0a5sB1nOG4u123GE3iH73/jpfCW5SMo6CvHDg0nNAJopvc8t7x y276VZnGCtJ0PmIw/hB0W9lq6zEsZ4UrND5iTpWUzAzWEvbWZMUPxiaQ4RAsokvO TVPi/+kjxWXv+bWM9Ay4uBaIxzdM1Woxdb3Afw8eYV27FFK0IrGpJVvKy9qacD+W HMXkWcGepQIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFOK4c05b4Du3m4yW+G0bxcBM 8S+5MB8GA1UdIwQYMBaAFH7JtdIlCMAjHBXava9RNZkLZr/tMA4GA1UdDwEB/wQE AwIHgDBmBgNVHR8EXzBdMFugWaBXhlVyc3luYzovL3JlcG8ua2FnbC5tZS9ycGtp L0tlYXRvbkFHTGFpci8wLzdFQzlCNUQyMjUwOEMwMjMxQzE1REFCREFGNTEzNTk5 MEI2NkJGRUQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEt NDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTA2NWFjYy1iZWVkLTQxMTUtYmM2Yy02 M2RlMjMyZjJhMDQvMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5YzA1 ODliOTk1NmM1MWUzNTEuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZV cnN5bmM6Ly9yZXBvLmthZ2wubWUvcnBraS9LZWF0b25BR0xhaXIvMC83RUM5QjVE MjI1MDhDMDIzMUMxNURBQkRBRjUxMzU5OTBCNjZCRkVELm1mdDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMqP s/4WqT+1tzP+BRqGa6Wn39tCRcIZTGXXrzaWimNc/hpDELTTGWwe890B4kK8qQEQ 7bI33SMTQWeZQCiucLgBeH92b1fwQFi0xjZOkUU3efL/0J/AKI0cPzpIw7EG2u3R CUesAVDIqxC5YAeoafP0zyipPOQM+2UbEktQYjoAGPbKd50IKOWMewK1X3kTDA+M horPnJGUw/jeT5uTgn6naV4+KZ2YzNJGcMlREP3O5UKdwPDIaEQjG/w47J+ToaBC 6vBcsAzg/wlQcQeSR7Fjuc/QOwme1XRcUL3HuOrQDsZqA1HpIBtWehmi8iqto8vl +bpd0J3xijhn6mvIJg== -----END CERTIFICATE-----Generated at Sat Jul 5 23:06:38 2025 by rpki-client