Manifest

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File:                     5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier:          CbeskbScoqdFpUjlNw2WzwClM94D0A4hrbbhiQeOF6M=
Subject key identifier:   5C:1D:40:D0:F0:C3:42:E9:65:DA:DF:10:1D:6F:85:CA:5B:B0:D0:4B
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer:       /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial:       77E2235B05C1BDC734613F8F69D5965CD13DBB13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number:          0F48
Signing time:             Sun 19 Oct 2025 18:15:12 +0000
Manifest this update:     Sun 19 Oct 2025 18:10:12 +0000
Manifest next update:     Mon 20 Oct 2025 20:19:12 +0000
Files and hashes:         1: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: Yc3RobXwEUajv9cK/RUPhKMO4XM6UggT8VE95MmGAOo=)
                          2: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: YytRpirPqYvlv61GjwTryxF750xDHjrR2dBNAMmlTNg=)
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Oct 2025 20:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e2:23:5b:05:c1:bd:c7:34:61:3f:8f:69:d5:96:5c:d1:3d:bb:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
        Validity
            Not Before: Oct 19 18:10:12 2025 GMT
            Not After : Oct 20 20:19:12 2025 GMT
        Subject: CN=5C1D40D0F0C342E965DADF101D6F85CA5BB0D04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:af:7b:2a:64:6b:49:2c:7e:30:91:1e:13:
                    2e:f9:8d:18:2c:63:c0:fd:12:e5:b5:3a:34:33:b7:
                    d1:2b:96:44:0f:d1:ab:f9:d9:08:0c:cb:bc:a0:80:
                    3e:27:48:a4:8a:b4:f3:68:1a:19:7f:5b:03:5b:47:
                    34:27:df:34:37:ca:c6:1f:40:94:df:fd:57:d4:4b:
                    1e:c2:f8:f5:e9:82:92:8a:4a:c1:95:04:13:d6:07:
                    91:91:77:f0:6d:48:35:4b:74:26:2f:fb:9d:b0:3a:
                    30:33:12:4a:85:c9:4a:35:e3:41:f1:8c:6e:97:55:
                    44:b9:56:73:e4:6c:09:87:9c:0d:89:2d:99:33:9d:
                    b9:d4:4d:12:c2:dd:9b:73:c5:a0:77:48:e0:3c:12:
                    e0:a9:18:d9:ae:ce:e0:d0:2d:bb:84:3b:c0:2c:91:
                    b3:21:8a:58:dd:11:0e:f9:eb:32:7c:a0:51:e6:3b:
                    12:90:ef:da:4a:95:e1:e6:83:e0:c1:5a:8e:f8:b0:
                    a7:3f:07:63:47:07:3f:7f:15:48:d6:b1:44:f6:4e:
                    35:4e:9a:c6:fb:61:a7:a4:00:ea:a9:da:3e:3c:4b:
                    d5:d0:c8:61:47:26:33:e6:6c:64:d0:c7:3c:e3:19:
                    d2:b7:61:b1:3c:53:50:c3:26:f6:e9:79:a6:c8:b6:
                    46:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1D:40:D0:F0:C3:42:E9:65:DA:DF:10:1D:6F:85:CA:5B:B0:D0:4B
            X509v3 Authority Key Identifier:
                keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:df:4a:67:47:3d:4f:58:6d:26:e1:77:b7:2f:c8:5f:04:d9:
         2b:e4:26:18:bf:8e:2d:da:4a:ef:2b:97:fd:1e:a8:07:d9:2f:
         2c:66:6c:b4:64:ff:3e:2e:17:30:6c:71:6c:f7:1f:33:d9:b0:
         ec:a7:46:4b:7b:a7:0e:22:7c:e4:33:be:07:8e:48:37:83:54:
         92:8c:5b:89:df:74:5e:cd:ad:07:b3:33:22:39:57:ca:b9:77:
         a4:82:4d:69:99:3a:5e:61:23:dd:d6:8e:55:8f:68:5e:85:5f:
         61:72:52:d1:68:c3:7f:ba:d3:d8:26:e5:12:32:9e:17:45:85:
         24:6c:3a:e3:db:dd:bf:0e:2c:6d:98:7c:a6:ca:a5:50:ac:d5:
         d2:25:50:67:32:b3:c9:03:e1:3d:61:bf:1a:61:37:8d:1c:1e:
         0f:5b:10:51:44:ad:66:f7:da:b3:89:aa:13:61:73:a6:9b:c3:
         aa:e4:dd:c6:67:6c:63:d2:e9:53:16:fa:65:fd:63:1b:1b:d5:
         c0:b8:88:85:95:b0:21:7d:3d:16:b3:d2:75:4a:8c:6b:e0:c9:
         16:0e:d7:86:e1:18:fa:d2:3b:6c:28:32:b4:ad:24:57:b6:3d:
         41:13:f2:49:f6:5e:c4:3e:5f:bb:56:c7:f4:64:df:8a:8e:5c:
         10:f4:ed:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:12:25 2025 by rpki-client