$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft File: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft (raw, json) Hash identifier: z8ob2eM1OK6Pwdo4TFF7+orIzRM3kQATJmZdhEPi2Sk= Subject key identifier: CC:1C:50:90:E8:1D:E8:78:9C:86:9A:73:59:6B:50:F1:40:EA:8C:91 Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED Certificate issuer: /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Certificate serial: 5EFAA1E3212370D4BDF84DE399275EF69F32E2EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft Manifest number: 03E6 Signing time: Mon 16 Jun 2025 06:11:39 +0000 Manifest this update: Mon 16 Jun 2025 06:06:39 +0000 Manifest next update: Tue 17 Jun 2025 08:35:39 +0000 Files and hashes: 1: 3130342e33372e34302e302f32342d3234203d3e20393730.roa (hash: ek8Vg6kOrYHQQyaRN7UOy+nZ8uz9bhWO7ZAUVfTbaRI=) 2: AS21957.asa (hash: v9+444bGaAkQtqJOIXn9P1VMcTrlW/WFkfocSw9xo/c=) 3: 3130342e33372e34312e302f32342d3234203d3e203231393537.roa (hash: IRTKWsv2EGeDRsQ97JvbtSG0Rc6W53GcEAl3eMmmpqs=) 4: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl (hash: eCV2anefNkTV4Ku+bIPLxMWrGXqQDQ3zPRvq86vtTq4=) 5: AS970.asa (hash: uUtIUuFVFE42+T1fqnnQdo7h/4VRg1akAdGbbCnAbEY=) 6: 3130342e33372e34302e302f32322d3232203d3e2030.roa (hash: vHzV9yuwB4p+FXvV7pq6ibofX3Oxg5SwuBjEw2YE3Pg=) Validation: OK Signature path: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 08:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fa:a1:e3:21:23:70:d4:bd:f8:4d:e3:99:27:5e:f6:9f:32:e2:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Validity Not Before: Jun 16 06:06:39 2025 GMT Not After : Jun 17 08:35:39 2025 GMT Subject: CN=CC1C5090E81DE8789C869A73596B50F140EA8C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:88:10:68:ab:dd:c4:29:c7:a5:32:b6:9e: 27:8c:50:36:4d:c7:c4:01:e2:47:2f:7d:b7:eb:c5: 21:57:72:dc:b1:9d:9f:39:59:60:b4:e7:a1:0c:c6: e8:6c:07:b1:97:0b:3d:35:46:54:f5:2f:20:38:ec: 51:82:7c:0c:6e:e9:31:48:1b:f5:b0:90:cd:95:8f: d2:fb:0e:12:db:d4:3e:70:23:ab:f9:06:96:7f:a5: f7:63:1e:b0:94:d8:70:bc:53:1d:0f:b6:ab:c8:cd: ac:38:1b:79:12:3d:33:04:86:7d:27:b4:d5:03:8d: f2:2f:64:82:a7:1b:9e:b9:82:ea:fd:2e:9a:98:8e: 96:a9:c8:88:fd:ff:21:03:f7:7b:1a:93:95:11:6f: 9c:83:24:c0:1f:65:4e:46:84:e5:7c:4f:db:75:16: 86:e8:71:7f:76:ab:08:ae:50:96:06:e8:c5:d2:30: 9d:be:54:50:a6:64:37:06:ed:82:25:7d:61:0a:d8: c5:dc:be:d9:81:4e:c8:2e:e3:b2:5a:0d:ee:ca:35: f7:af:8d:a9:43:3d:16:31:7f:6d:8e:ca:84:6e:c8: c8:a0:1b:1e:4f:bd:c1:9b:0d:3f:45:ee:f4:d4:74: dd:cd:ed:25:d2:e4:39:54:34:41:cf:6e:5c:1d:b0: 48:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1C:50:90:E8:1D:E8:78:9C:86:9A:73:59:6B:50:F1:40:EA:8C:91 X509v3 Authority Key Identifier: keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject Information Access: Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c2:7a:b0:a3:51:c9:4b:3a:cc:6a:a4:b2:38:65:1d:ba:49: 85:31:f2:fa:8f:60:85:57:88:66:9b:06:71:78:38:13:2c:be: 54:e3:73:99:d4:58:45:e7:77:b9:16:71:82:15:f6:c2:d7:ac: ce:c6:87:6e:c0:86:3e:27:36:8a:8f:07:bb:60:e0:64:7c:89: d3:4e:30:d5:32:1a:b5:f6:f2:ba:6d:76:fe:f6:c3:03:6f:74: 54:29:d6:e2:61:22:ce:e6:4c:ee:81:6e:70:9f:fb:9f:08:07: 5c:0d:7f:28:77:4a:06:45:76:9c:7d:bb:f1:3d:0d:ea:45:b3: a0:f6:5f:0e:58:8c:16:02:f5:62:e7:0a:9a:0e:e3:16:af:3e: d2:46:b3:58:94:c0:91:20:9e:fc:e6:a0:f3:a8:ee:b0:09:6b: f0:28:09:c2:4f:bb:7d:17:54:1f:d0:e5:5e:d0:63:e8:a4:2c: 48:8b:d9:1d:93:86:e3:f1:3a:01:d5:f0:2e:6c:d9:8c:49:7e: ed:e8:45:59:8d:d0:ba:7c:6b:aa:aa:cf:24:10:ff:ff:9a:fe: e1:50:f5:a7:79:75:b0:60:7a:7f:da:1d:7e:44:03:ac:32:d1: e6:e4:3b:8e:25:bf:41:13:15:90:2e:f4:6a:b1:5d:6f:ab:81: 29:14:c4:45 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUXvqh4yEjcNS9+E3jmSde9p8y4uowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5 YzA1ODliOTk1NmM1MWUzNTEwHhcNMjUwNjE2MDYwNjM5WhcNMjUwNjE3MDgzNTM5 WjAzMTEwLwYDVQQDEyhDQzFDNTA5MEU4MURFODc4OUM4NjlBNzM1OTZCNTBGMTQw RUE4QzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJyIEGir3cQp x6Uytp4njFA2TcfEAeJHL32368UhV3LcsZ2fOVlgtOehDMbobAexlws9NUZU9S8g OOxRgnwMbukxSBv1sJDNlY/S+w4S29Q+cCOr+QaWf6X3Yx6wlNhwvFMdD7aryM2s OBt5Ej0zBIZ9J7TVA43yL2SCpxueuYLq/S6amI6WqciI/f8hA/d7GpOVEW+cgyTA H2VORoTlfE/bdRaG6HF/dqsIrlCWBujF0jCdvlRQpmQ3Bu2CJX1hCtjF3L7ZgU7I LuOyWg3uyjX3r42pQz0WMX9tjsqEbsjIoBseT73Bmw0/Re701HTdze0l0uQ5VDRB z25cHbBINQIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFMwcUJDoHeh4nIaac1lrUPFA 6oyRMB8GA1UdIwQYMBaAFH7JtdIlCMAjHBXava9RNZkLZr/tMA4GA1UdDwEB/wQE AwIHgDBmBgNVHR8EXzBdMFugWaBXhlVyc3luYzovL3JlcG8ua2FnbC5tZS9ycGtp L0tlYXRvbkFHTGFpci8wLzdFQzlCNUQyMjUwOEMwMjMxQzE1REFCREFGNTEzNTk5 MEI2NkJGRUQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEt NDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTA2NWFjYy1iZWVkLTQxMTUtYmM2Yy02 M2RlMjMyZjJhMDQvMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5YzA1 ODliOTk1NmM1MWUzNTEuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZV cnN5bmM6Ly9yZXBvLmthZ2wubWUvcnBraS9LZWF0b25BR0xhaXIvMC83RUM5QjVE MjI1MDhDMDIzMUMxNURBQkRBRjUxMzU5OTBCNjZCRkVELm1mdDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMJ6 sKNRyUs6zGqksjhlHbpJhTHy+o9ghVeIZpsGcXg4Eyy+VONzmdRYRed3uRZxghX2 wteszsaHbsCGPic2io8Hu2DgZHyJ004w1TIatfbyum12/vbDA290VCnW4mEizuZM 7oFucJ/7nwgHXA1/KHdKBkV2nH278T0N6kWzoPZfDliMFgL1YucKmg7jFq8+0kaz WJTAkSCe/Oag86jusAlr8CgJwk+7fRdUH9DlXtBj6KQsSIvZHZOG4/E6AdXwLmzZ jEl+7ehFWY3QunxrqqrPJBD//5r+4VD1p3l1sGB6f9odfkQDrDLR5uQ7jiW/QRMV kC70arFdb6uBKRTERQ== -----END CERTIFICATE-----Generated at Mon Jun 16 15:53:20 2025 by rpki-client