Manifest

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File:                     5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier:          0h5xo+M/G+MY2zxnlgfA8V8jl7fBNHSInGU4FnbZD/Q=
Subject key identifier:   43:79:6A:0C:6E:46:C8:92:69:60:65:1C:28:1E:0D:19:CA:7C:F8:10
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer:       /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial:       19CF4A67E4FC6F4313F271F22B9307F2413A9BAA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number:          1069
Signing time:             Thu 05 Mar 2026 13:46:48 +0000
Manifest this update:     Thu 05 Mar 2026 13:41:48 +0000
Manifest next update:     Fri 06 Mar 2026 16:04:48 +0000
Files and hashes:         1: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: YytRpirPqYvlv61GjwTryxF750xDHjrR2dBNAMmlTNg=)
                          2: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: 6Zt8kI4VSTKLFIg98ebl6wTgXxBI5aVr3qSoqrTNUgo=)
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Mar 2026 16:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cf:4a:67:e4:fc:6f:43:13:f2:71:f2:2b:93:07:f2:41:3a:9b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
        Validity
            Not Before: Mar  5 13:41:48 2026 GMT
            Not After : Mar  6 16:04:48 2026 GMT
        Subject: CN=43796A0C6E46C8926960651C281E0D19CA7CF810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:95:96:a0:52:ce:45:bb:b0:d9:c5:89:b9:fb:
                    81:8a:eb:ad:7e:68:16:f3:52:19:74:b7:41:84:c8:
                    e7:88:76:15:cc:c4:d3:ea:74:05:55:6a:1a:c9:4a:
                    e1:79:c5:d4:94:fb:bb:a9:23:b7:51:03:27:cc:ac:
                    d4:09:72:b5:8b:94:e3:e8:eb:2c:b7:a3:af:2f:36:
                    e5:e1:b8:4a:92:4c:44:58:70:78:c6:44:5a:e4:f0:
                    6e:c7:49:59:a5:0d:d1:53:b2:50:dc:31:a1:eb:d6:
                    46:7a:db:8b:6f:c7:06:57:10:e1:e8:8e:bc:4a:de:
                    9d:89:01:d2:09:59:51:b2:62:ae:b8:8a:52:a2:03:
                    0d:fe:25:ae:a7:55:2d:a2:6c:ac:40:8d:7c:94:10:
                    21:63:85:a3:00:3d:7a:88:f5:37:2e:11:12:80:9a:
                    46:7c:f0:37:54:c5:04:8b:4c:2f:68:87:53:db:0f:
                    27:53:b4:99:85:61:08:de:a6:3c:08:0f:65:0a:bc:
                    c4:09:6e:5e:94:2d:34:83:99:09:c0:a9:f3:f9:e4:
                    9e:63:74:79:00:35:07:c9:7b:ae:2a:90:21:34:2c:
                    26:4b:b9:b0:80:d8:56:86:16:b2:04:b5:54:bf:45:
                    47:85:6b:bb:6f:ae:e3:d8:b7:cb:30:b4:f1:d3:e2:
                    ce:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:79:6A:0C:6E:46:C8:92:69:60:65:1C:28:1E:0D:19:CA:7C:F8:10
            X509v3 Authority Key Identifier:
                keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a0:c2:9d:35:e8:8c:a1:63:6f:ef:ab:da:f5:98:3b:f4:46:
         71:2d:04:8c:1a:92:c2:a4:3a:27:21:e6:3d:3a:4f:33:3f:20:
         15:6c:d2:54:c0:ee:79:8c:f6:fa:f9:7b:5f:0c:ce:75:b0:30:
         3e:64:03:12:e0:4d:c5:3d:37:72:0b:22:81:ae:ba:35:ba:89:
         c4:92:19:98:7e:11:5a:63:29:83:20:03:c3:e4:c9:12:c0:8a:
         83:bf:a5:8e:83:58:b9:f8:35:7a:14:21:3c:a2:34:e6:3e:b3:
         7c:94:9a:c6:cf:35:a7:11:f3:bd:9a:d3:04:cd:b0:9a:16:ed:
         0a:32:ee:45:5c:0a:95:1e:b3:30:25:66:b8:c3:1b:e8:4f:d4:
         68:ee:e2:04:db:9e:bb:93:3c:d1:38:6f:bb:da:44:e8:90:89:
         47:d5:da:49:aa:83:24:99:a7:34:9b:7d:98:b6:af:71:14:e9:
         c0:7d:0e:5f:f2:56:75:6d:50:8a:c8:70:4b:eb:71:03:9b:39:
         6d:11:db:3b:c5:e4:af:d5:ae:5e:77:41:8c:10:86:f7:9f:69:
         b9:04:5b:16:cd:f6:48:93:ed:13:3e:8d:92:b6:c2:09:e9:99:
         db:59:cc:c3:e3:20:b6:f1:dc:d9:c2:2f:30:9d:ce:e0:ae:30:
         f8:d2:09:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:45:32 2026 by rpki-client