
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File: 5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier: 3oBJvyPm0Qk0QFrOfNdgnj+r253Un3pE5yWEAj8qTAA=
Subject key identifier: 76:C9:EB:D5:C8:39:BB:20:4B:50:A9:86:81:E0:08:75:46:F1:2B:98
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer: /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial: 42BF6BA9E29987ABB286B12E92F2BBEC6DD24BE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number: 11D3
Signing time: Fri 04 Sep 2026 19:27:47 +0000
Manifest this update: Fri 04 Sep 2026 19:22:47 +0000
Manifest next update: Tue 08 Sep 2026 23:01:47 +0000
Files and hashes: 1: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: D/0wKkDd9DBsY5OF57jLdb/3+vsrXrQSuTtFo6rOf0o=)
2: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: ElcHnFM/UCxOj4yIfbMit+4xP8v3M/ns7VwTsSsiYxA=)
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 08 Sep 2026 23:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:bf:6b:a9:e2:99:87:ab:b2:86:b1:2e:92:f2:bb:ec:6d:d2:4b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Validity
Not Before: Sep 4 19:22:47 2026 GMT
Not After : Sep 8 23:01:47 2026 GMT
Subject: CN=76C9EBD5C839BB204B50A98681E0087546F12B98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:49:64:65:b7:4c:c1:19:51:49:b2:6f:d3:
03:f7:ab:71:d1:1d:aa:91:cf:d0:b7:bb:ae:8b:b1:
bb:87:20:fd:f9:bc:95:b3:3d:bb:c9:36:f2:81:55:
0c:de:4f:f7:f2:f1:61:6c:46:81:42:83:27:b3:51:
a1:b7:71:02:77:80:cf:f7:6e:4f:b9:41:dd:65:17:
6f:a9:84:61:33:bb:4a:8f:09:57:ad:cf:35:9f:f8:
24:f8:35:a9:70:ad:4d:d8:b8:10:2f:ce:8e:62:b4:
d1:46:d4:2c:22:72:ad:ce:5a:ac:68:c1:86:99:bc:
59:30:aa:43:d3:61:12:52:b0:86:d0:91:df:7b:5a:
a7:03:4d:90:6d:13:16:ca:42:2b:99:4c:d9:ed:e3:
98:89:72:8b:cb:e0:f8:7c:fb:0c:7f:78:cb:65:11:
d4:36:9a:6c:5a:6f:5e:a4:82:9c:6e:ea:8b:de:b7:
e0:73:ab:08:47:88:8d:99:f1:1d:1c:49:ef:f4:d0:
6c:12:69:05:9a:0c:ef:6c:e5:06:19:74:7d:71:27:
4a:4d:7e:4b:74:ac:4a:29:3a:14:b2:b5:cd:ee:8d:
5b:48:8b:57:1d:9b:4e:cd:85:89:83:06:21:71:df:
90:47:93:78:7c:ee:85:70:f8:57:b5:4a:2a:a1:3f:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C9:EB:D5:C8:39:BB:20:4B:50:A9:86:81:E0:08:75:46:F1:2B:98
X509v3 Authority Key Identifier:
keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:73:dc:b4:86:44:73:94:36:30:18:d2:7e:be:05:49:ea:d6:
d7:41:4a:b9:3e:97:af:8f:81:b9:9d:61:09:a7:27:11:8a:ee:
2c:91:94:75:2e:27:c7:06:d6:85:64:4a:dd:38:20:91:68:12:
33:f3:e3:c0:2f:b2:fd:51:b2:cc:58:a3:81:97:b4:97:f7:57:
14:cd:30:2b:be:1a:d3:ba:09:a2:52:1a:e9:ff:e2:9d:51:7f:
c0:a9:33:51:60:62:db:04:a9:e5:23:ae:bd:42:7b:95:8c:33:
d4:9e:71:46:2a:14:10:82:80:3a:4b:f6:2d:50:2a:25:95:a6:
f3:ab:07:ba:81:9d:d8:df:e2:68:ff:e8:22:f9:8c:e2:8a:f7:
b3:be:18:dd:17:98:9b:fc:35:95:d3:a1:08:6a:1d:d5:85:17:
26:11:d2:9d:c2:07:56:ff:76:34:ef:9f:d9:d5:e9:98:c6:a8:
e6:2f:69:60:4d:87:aa:b4:bd:12:33:e6:0d:b2:4b:36:66:8f:
61:02:1b:3b:dc:43:fd:28:5d:ca:4c:d1:03:a6:9d:48:4d:2c:
12:31:6a:33:f8:63:37:39:c8:be:94:68:49:01:5a:d9:1a:90:
51:0b:82:83:34:0b:49:fa:d1:c7:24:00:06:62:fd:ae:33:a9:
c7:b3:c6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:20:16 2026 by rpki-client