
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File: 5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier: 4TzO+yerKUSjQpZ8QrTU1e7IPMOh/XHwvVZLGtOCOX0=
Subject key identifier: C5:80:45:19:66:82:59:BD:5A:33:26:AC:D9:56:99:63:4C:A8:54:A7
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer: /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial: 1732CAC99A5D5808AB4CD8C51DDE631530A37AB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number: 1189
Signing time: Mon 20 Jul 2026 20:39:41 +0000
Manifest this update: Mon 20 Jul 2026 20:34:41 +0000
Manifest next update: Fri 24 Jul 2026 21:10:41 +0000
Files and hashes: 1: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: 0jlmiUMD49mvVdup9tEtBlo5m/Xgl1xINwVKY4FyEIA=)
2: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: ElcHnFM/UCxOj4yIfbMit+4xP8v3M/ns7VwTsSsiYxA=)
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 21:10:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:32:ca:c9:9a:5d:58:08:ab:4c:d8:c5:1d:de:63:15:30:a3:7a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Validity
Not Before: Jul 20 20:34:41 2026 GMT
Not After : Jul 24 21:10:41 2026 GMT
Subject: CN=C5804519668259BD5A3326ACD95699634CA854A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:30:3c:b2:2a:fd:45:48:1c:cb:82:d1:c9:
93:59:93:2a:5f:33:c9:dc:bb:2f:28:d8:06:f5:7e:
2a:51:6e:dd:ff:f4:28:5f:ad:37:76:b6:3d:20:12:
ce:9f:c5:3b:c4:44:fd:68:03:1d:5c:93:e0:05:e1:
b3:58:c3:aa:04:db:03:75:93:fd:17:1b:69:e6:4d:
2d:1e:a6:0c:4c:7c:d2:23:7e:c6:3a:4c:74:96:73:
8a:bc:0a:aa:d6:f8:93:64:b6:d6:f1:13:37:6f:11:
00:ef:8a:73:d4:b1:73:94:6b:21:96:7e:81:2a:a9:
17:00:45:d7:c3:13:d3:d5:01:83:32:25:d9:92:97:
45:0d:39:fe:4d:fd:cf:86:d1:da:a2:64:b8:af:38:
a9:52:cb:14:c2:c2:dc:7d:a0:ce:8b:2f:7d:05:da:
9e:10:3a:82:65:de:c3:e1:9c:18:ab:b1:ff:03:e9:
f9:b7:fb:50:61:32:e6:65:ce:7e:fe:00:71:02:95:
5f:eb:8e:1a:b7:e2:73:82:71:59:20:8b:08:64:b2:
b2:62:b0:5c:7e:5b:17:32:6f:11:ab:89:3d:14:42:
e8:99:45:e3:95:be:43:93:c2:df:17:4d:e6:e3:b4:
cb:a3:2c:bc:dc:1d:a5:16:f8:cc:ef:a6:54:0c:86:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:80:45:19:66:82:59:BD:5A:33:26:AC:D9:56:99:63:4C:A8:54:A7
X509v3 Authority Key Identifier:
keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0a:4d:89:a9:27:fa:09:9c:0f:dc:99:59:93:69:cc:b6:06:
e7:89:61:80:9f:1f:5c:a9:b7:6e:1a:27:b1:90:39:48:b7:0e:
56:37:43:75:59:0e:15:d0:c2:b9:2f:76:18:8b:62:04:9c:b4:
83:7b:1c:4a:5b:cc:2f:83:6c:4b:4c:d0:ee:42:f8:52:ea:d4:
da:b1:31:64:1e:4c:35:eb:66:5a:af:54:33:27:d4:2b:82:b1:
7f:03:55:90:9a:e7:54:e2:f9:6c:93:06:42:37:43:cc:aa:02:
87:d1:3d:9d:1b:54:07:43:8f:48:83:75:67:e9:c2:6e:4e:9b:
f8:8a:88:04:d0:de:46:59:c0:bd:2d:31:cc:28:cb:ad:ae:3d:
59:c3:b2:35:a5:b9:07:66:2c:25:13:6d:b2:c7:75:97:8b:8d:
52:78:d9:c6:f1:71:cf:88:a2:2e:50:80:d2:a8:46:99:70:d0:
a0:4d:7c:84:b1:81:53:88:5a:a4:a2:30:08:25:37:34:5a:d3:
0b:44:f0:e4:59:ef:0a:57:2d:52:29:19:d7:6c:4f:0d:91:51:
19:1d:6e:4c:bb:5b:ea:fc:04:48:9f:c1:5e:30:9b:53:ac:a9:
37:f8:c5:29:78:96:bb:64:15:8a:02:dc:8f:be:99:75:af:26:
51:96:7f:e5
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUFzLKyZpdWAirTNjFHd5jFTCjergwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMkM4MzYwMDAwMTEwLwYDVQQFEyg1RDM1OTM5NTU3
MTEwQ0M0MzQyOUFFMzAxRjdDRUYwRTU4ODk5NDJCMB4XDTI2MDcyMDIwMzQ0MVoX
DTI2MDcyNDIxMTA0MVowMzExMC8GA1UEAxMoQzU4MDQ1MTk2NjgyNTlCRDVBMzMy
NkFDRDk1Njk5NjM0Q0E4NTRBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMgpMDyyKv1FSBzLgtHJk1mTKl8zydy7LyjYBvV+KlFu3f/0KF+tN3a2PSAS
zp/FO8RE/WgDHVyT4AXhs1jDqgTbA3WT/RcbaeZNLR6mDEx80iN+xjpMdJZzirwK
qtb4k2S21vETN28RAO+Kc9Sxc5RrIZZ+gSqpFwBF18MT09UBgzIl2ZKXRQ05/k39
z4bR2qJkuK84qVLLFMLC3H2gzosvfQXanhA6gmXew+GcGKux/wPp+bf7UGEy5mXO
fv4AcQKVX+uOGrfic4JxWSCLCGSysmKwXH5bFzJvEauJPRRC6JlF45W+Q5PC3xdN
5uO0y6MsvNwdpRb4zO+mVAyGLS8CAwEAAaOCAhkwggIVMB0GA1UdDgQWBBTFgEUZ
ZoJZvVozJqzZVpljTKhUpzAfBgNVHSMEGDAWgBRdNZOVVxEMxDQprjAffO8OWImU
KzAOBgNVHQ8BAf8EBAMCB4AwcQYDVR0fBGowaDBmoGSgYoZgcnN5bmM6Ly9ycGtp
LmFkbWluLmZyZWVyYW5nZWNsb3VkLmNvbS9yZXBvL0ZSQy1DQS8yLzVEMzU5Mzk1
NTcxMTBDQzQzNDI5QUUzMDFGN0NFRjBFNTg4OTk0MkIuY3JsMH4GCCsGAQUFBwEB
BHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0
b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1hUV1RsVmNSRE1R
MEthNHdIM3p2RGxpSmxDcy5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzAL
hmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29tL3JlcG8vRlJD
LUNBLzIvNUQzNTkzOTU1NzExMENDNDM0MjlBRTMwMUY3Q0VGMEU1ODg5OTQyQi5t
ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN
AQELBQADggEBAJkKTYmpJ/oJnA/cmVmTacy2BueJYYCfH1ypt24aJ7GQOUi3DlY3
Q3VZDhXQwrkvdhiLYgSctIN7HEpbzC+DbEtM0O5C+FLq1NqxMWQeTDXrZlqvVDMn
1CuCsX8DVZCa51Ti+WyTBkI3Q8yqAofRPZ0bVAdDj0iDdWfpwm5Om/iKiATQ3kZZ
wL0tMcwoy62uPVnDsjWluQdmLCUTbbLHdZeLjVJ42cbxcc+Ioi5QgNKoRplw0KBN
fISxgVOIWqSiMAglNzRa0wtE8ORZ7wpXLVIpGddsTw2RURkdbky7W+r8BEifwV4w
m1OsqTf4xSl4lrtkFYoC3I++mXWvJlGWf+U=
-----END CERTIFICATE-----
Generated at Tue Jul 21 09:57:23 2026 by rpki-client