Manifest

$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File:                     5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier:          xMCemMre+S7bm2BCzMU6M5Hbb85juuVeLR/HbuXyMB0=
Subject key identifier:   8D:35:EE:87:A9:D6:76:DC:8C:39:3F:6B:35:35:FF:E0:F1:BD:2D:B5
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer:       /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial:       5FA583C3D7191CC6940D549D9387CA5DE7AE0401
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number:          109F
Signing time:             Fri 27 Mar 2026 19:26:23 +0000
Manifest this update:     Fri 27 Mar 2026 19:21:23 +0000
Manifest next update:     Sat 28 Mar 2026 20:35:23 +0000
Files and hashes:         1: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: 35dPW4R5//sy1E4TbClIpt2S1GnRuDfcOKAH+CRiBVs=)
                          2: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: YytRpirPqYvlv61GjwTryxF750xDHjrR2dBNAMmlTNg=)
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Mar 2026 20:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a5:83:c3:d7:19:1c:c6:94:0d:54:9d:93:87:ca:5d:e7:ae:04:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
        Validity
            Not Before: Mar 27 19:21:23 2026 GMT
            Not After : Mar 28 20:35:23 2026 GMT
        Subject: CN=8D35EE87A9D676DC8C393F6B3535FFE0F1BD2DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:1f:e5:c6:c1:78:3e:9a:8c:58:94:57:7b:
                    d9:53:de:2b:22:fb:c2:0a:87:fe:4d:80:c7:15:de:
                    5d:06:15:0a:b4:bb:dc:fc:55:c8:2e:67:5b:01:1d:
                    0d:00:8f:52:c9:fd:95:aa:36:d6:c0:45:07:a5:db:
                    5a:75:5d:98:66:b6:20:d4:e7:e8:b9:d8:e0:1b:b8:
                    f9:48:5a:6e:56:a0:b0:e6:37:75:4a:a0:0e:b5:b9:
                    2f:13:79:ac:dc:6f:d4:64:27:a1:75:3c:1d:03:83:
                    d7:62:2b:19:d0:d4:89:06:47:4e:60:1c:20:da:e9:
                    44:fb:dc:2f:3f:d3:fa:39:8c:4c:cf:f1:7d:83:c6:
                    f3:55:45:06:f2:e4:fa:a2:f0:66:92:d7:77:6c:c9:
                    95:1f:2b:5b:de:e4:98:97:c3:a0:87:24:d7:fb:a6:
                    05:ad:52:d4:b2:fd:55:f8:09:af:e6:dc:05:3d:be:
                    47:75:3f:91:a7:7c:ca:3a:ff:48:b7:ab:31:0e:26:
                    c6:78:8f:f1:2f:de:41:43:9c:08:4f:aa:28:a7:77:
                    1c:e2:3d:82:74:d5:a7:57:a9:c8:39:b9:95:24:b0:
                    b7:a2:be:98:ef:ff:c3:b1:1b:f1:ed:4a:9d:27:c4:
                    57:2e:36:fb:bf:bf:07:15:6f:b0:d7:4b:5e:35:bf:
                    3b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:35:EE:87:A9:D6:76:DC:8C:39:3F:6B:35:35:FF:E0:F1:BD:2D:B5
            X509v3 Authority Key Identifier:
                keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:07:3f:1c:30:73:0c:b1:f8:03:47:76:28:5d:f8:6a:c5:e2:
         d6:71:6b:18:eb:25:10:0c:b7:17:21:61:b9:8d:a8:d3:a8:b6:
         e7:6a:56:87:4f:c0:53:a3:e4:c7:1a:9d:a7:be:6d:db:42:fe:
         88:b5:1b:e3:d3:c3:ba:f8:bb:13:58:2c:81:fa:bc:d5:dc:59:
         45:19:62:20:96:d5:ac:25:d7:22:e7:3c:35:59:4a:f9:cc:98:
         e8:db:3e:c0:25:4d:85:b8:da:d6:51:28:c3:67:01:75:d4:0d:
         9b:33:19:7c:ef:f3:64:2e:ed:6f:89:04:3f:9d:73:1d:e5:e4:
         ad:b6:9a:af:50:aa:8e:ac:d2:3c:8f:e0:03:16:1f:3d:8d:b8:
         3e:da:5c:27:fb:b0:22:90:f0:cc:ff:8e:bf:13:1c:e9:57:b0:
         27:bf:17:23:8d:8e:f6:27:59:86:3c:db:b1:be:8d:bc:af:90:
         b0:68:81:7d:89:2d:8e:61:a1:a6:e4:87:6e:ae:6d:1d:fb:f3:
         06:c5:1e:47:c1:43:0e:97:96:3a:85:7a:d0:c2:89:81:cf:35:
         9b:2e:5b:83:4a:b8:ab:7a:2d:19:67:8c:43:31:39:65:96:1f:
         ab:de:70:17:45:ed:72:94:61:72:70:d2:07:0d:0f:8d:8f:68:
         08:ff:63:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:13:29 2026 by rpki-client