$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft File: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft (raw, json) Hash identifier: DRBfaA0vFLIIA46wUMeQ7R/jI6GKqLlZgWwn+4OETKM= Subject key identifier: 2C:6E:A7:59:9A:48:C2:13:1C:68:A2:11:ED:D4:91:B6:0D:B5:3D:39 Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED Certificate issuer: /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Certificate serial: 1FD0C8325BDC7EF43CFA56B29E7CE48CDA848710 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft Manifest number: 041C Signing time: Mon 04 Aug 2025 01:26:05 +0000 Manifest this update: Mon 04 Aug 2025 01:21:05 +0000 Manifest next update: Tue 05 Aug 2025 05:02:05 +0000 Files and hashes: 1: 3130342e33372e34312e302f32342d3234203d3e203231393537.roa (hash: IRTKWsv2EGeDRsQ97JvbtSG0Rc6W53GcEAl3eMmmpqs=) 2: 3130342e33372e34302e302f32342d3234203d3e20393730.roa (hash: ek8Vg6kOrYHQQyaRN7UOy+nZ8uz9bhWO7ZAUVfTbaRI=) 3: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl (hash: Ao2HzH0Hd4F8Nxu0a24+UO6ObaZmLzO9fWyY67QNZJ0=) 4: 3130342e33372e34302e302f32322d3232203d3e2030.roa (hash: vHzV9yuwB4p+FXvV7pq6ibofX3Oxg5SwuBjEw2YE3Pg=) 5: AS21957.asa (hash: v9+444bGaAkQtqJOIXn9P1VMcTrlW/WFkfocSw9xo/c=) 6: AS970.asa (hash: uUtIUuFVFE42+T1fqnnQdo7h/4VRg1akAdGbbCnAbEY=) Validation: OK Signature path: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 05:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:d0:c8:32:5b:dc:7e:f4:3c:fa:56:b2:9e:7c:e4:8c:da:84:87:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Validity Not Before: Aug 4 01:21:05 2025 GMT Not After : Aug 5 05:02:05 2025 GMT Subject: CN=2C6EA7599A48C2131C68A211EDD491B60DB53D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:0a:3b:81:53:f1:6e:d0:5c:53:fe:1f:34: b3:52:c7:4b:59:ed:2c:07:78:bc:6b:c5:bd:fe:bb: 44:4d:de:58:60:6e:3e:b2:1d:6e:eb:d5:5a:b5:0f: 66:14:3f:6c:dc:f2:6a:cf:ee:3a:42:d7:7c:b8:12: 4e:42:b4:6c:e9:84:1d:24:9a:ed:3b:74:27:b7:00: 2c:99:a7:97:ba:8a:3b:99:1c:9e:04:c3:bd:d5:f3: 17:73:11:d6:98:02:0f:dc:82:7a:23:30:71:ce:59: 74:b0:f9:a4:f0:6f:75:e4:c9:49:14:30:53:cd:7f: 9b:21:54:49:94:2d:02:b9:7d:21:83:d6:7c:a8:53: 70:12:1a:09:a4:83:6a:c3:1f:d6:58:29:e1:40:99: 1d:20:1b:32:34:28:3e:d6:01:bd:33:61:05:9f:6f: 4b:f9:65:b4:0b:10:4b:5a:4c:96:67:7d:82:61:63: 90:33:ab:ba:9c:1e:64:07:6e:85:97:db:8a:10:42: a9:c7:b5:44:94:83:45:f4:c8:60:72:d2:0b:4d:74: a0:79:f1:cb:79:12:fb:49:e7:79:70:23:bb:b3:2b: 18:91:fe:69:79:24:c6:a2:f3:f2:4e:63:e8:5f:b4: 6d:30:f9:56:ca:68:bb:d8:16:38:a5:70:f2:ee:ec: ee:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6E:A7:59:9A:48:C2:13:1C:68:A2:11:ED:D4:91:B6:0D:B5:3D:39 X509v3 Authority Key Identifier: keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject Information Access: Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:cd:c9:ee:0c:cb:e2:ca:85:df:cf:d8:09:a1:0a:fb:bf:22: 01:c5:b6:fd:06:33:7e:55:b4:8e:77:07:6a:96:11:6f:dc:04: 1d:6f:85:d7:4d:02:80:d9:6c:06:1a:76:84:7a:9b:36:bd:76: 50:db:ad:d3:fb:f6:7f:8c:f1:fc:e5:9f:b5:67:89:e4:af:3c: 99:0e:4c:ad:00:84:f4:39:0d:11:8d:66:45:bb:3f:65:80:46: d8:06:79:a4:18:36:d5:94:6f:01:da:77:2a:41:4b:7d:fc:b7: a2:34:bf:11:ae:72:04:98:12:d6:1e:a1:b8:ee:28:eb:da:1b: c3:7e:01:ac:12:4d:13:b9:88:1b:81:36:a1:75:03:59:81:48: c1:6a:74:42:12:6e:75:f2:db:40:53:b2:b5:86:be:fa:3d:85: 21:24:ad:1a:4e:19:e6:ac:0c:66:cc:b5:6d:1e:86:be:93:27: 65:d0:70:29:9c:22:88:98:e9:02:2c:97:16:60:6f:e4:08:97: 61:53:1a:2e:4a:d6:d9:bb:00:ed:11:1a:a2:b5:44:13:3c:a2: 9f:6b:89:e0:21:93:54:40:de:33:52:9b:cd:f0:a9:06:10:1c: dc:c7:fa:7a:9e:83:65:0e:9d:38:9c:f6:f9:e5:0c:f0:14:f7: 59:34:d4:4f -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUH9DIMlvcfvQ8+laynnzkjNqEhxAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5 YzA1ODliOTk1NmM1MWUzNTEwHhcNMjUwODA0MDEyMTA1WhcNMjUwODA1MDUwMjA1 WjAzMTEwLwYDVQQDEygyQzZFQTc1OTlBNDhDMjEzMUM2OEEyMTFFREQ0OTFCNjBE QjUzRDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNcKO4FT8W7Q XFP+HzSzUsdLWe0sB3i8a8W9/rtETd5YYG4+sh1u69VatQ9mFD9s3PJqz+46Qtd8 uBJOQrRs6YQdJJrtO3QntwAsmaeXuoo7mRyeBMO91fMXcxHWmAIP3IJ6IzBxzll0 sPmk8G915MlJFDBTzX+bIVRJlC0CuX0hg9Z8qFNwEhoJpINqwx/WWCnhQJkdIBsy NCg+1gG9M2EFn29L+WW0CxBLWkyWZ32CYWOQM6u6nB5kB26Fl9uKEEKpx7VElINF 9MhgctILTXSgefHLeRL7Sed5cCO7sysYkf5peSTGovPyTmPoX7RtMPlWymi72BY4 pXDy7uzuwwIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFCxup1maSMITHGiiEe3UkbYN tT05MB8GA1UdIwQYMBaAFH7JtdIlCMAjHBXava9RNZkLZr/tMA4GA1UdDwEB/wQE AwIHgDBmBgNVHR8EXzBdMFugWaBXhlVyc3luYzovL3JlcG8ua2FnbC5tZS9ycGtp L0tlYXRvbkFHTGFpci8wLzdFQzlCNUQyMjUwOEMwMjMxQzE1REFCREFGNTEzNTk5 MEI2NkJGRUQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEt NDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTA2NWFjYy1iZWVkLTQxMTUtYmM2Yy02 M2RlMjMyZjJhMDQvMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5YzA1 ODliOTk1NmM1MWUzNTEuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZV cnN5bmM6Ly9yZXBvLmthZ2wubWUvcnBraS9LZWF0b25BR0xhaXIvMC83RUM5QjVE MjI1MDhDMDIzMUMxNURBQkRBRjUxMzU5OTBCNjZCRkVELm1mdDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUs3J 7gzL4sqF38/YCaEK+78iAcW2/QYzflW0jncHapYRb9wEHW+F100CgNlsBhp2hHqb Nr12UNut0/v2f4zx/OWftWeJ5K88mQ5MrQCE9DkNEY1mRbs/ZYBG2AZ5pBg21ZRv Adp3KkFLffy3ojS/Ea5yBJgS1h6huO4o69obw34BrBJNE7mIG4E2oXUDWYFIwWp0 QhJudfLbQFOytYa++j2FISStGk4Z5qwMZsy1bR6GvpMnZdBwKZwiiJjpAiyXFmBv 5AiXYVMaLkrW2bsA7REaorVEEzyin2uJ4CGTVEDeM1KbzfCpBhAc3Mf6ep6DZQ6d OJz2+eUM8BT3WTTUTw== -----END CERTIFICATE-----Generated at Mon Aug 4 11:21:27 2025 by rpki-client