
$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File: 5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier: t0EMXsLqBXoG9ci/Wnc0cpGOg0MDBKNu9uZgm1IJW6Y=
Subject key identifier: 24:0E:74:84:1E:62:A5:10:BA:FB:FE:14:88:4F:90:7D:9E:30:90:9F
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer: /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial: 4DD02ACF59E684228A3E5A8F5FADA535CF559E84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number: 1201
Signing time: Wed 23 Sep 2026 04:42:55 +0000
Manifest this update: Wed 23 Sep 2026 04:37:55 +0000
Manifest next update: Sun 27 Sep 2026 07:40:55 +0000
Files and hashes: 1: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: 8iX88M4trmt27t6UbS5lqOq9kGQ1gLeQHUdtnOD/2FI=)
2: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: ElcHnFM/UCxOj4yIfbMit+4xP8v3M/ns7VwTsSsiYxA=)
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 07:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:d0:2a:cf:59:e6:84:22:8a:3e:5a:8f:5f:ad:a5:35:cf:55:9e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Validity
Not Before: Sep 23 04:37:55 2026 GMT
Not After : Sep 27 07:40:55 2026 GMT
Subject: CN=240E74841E62A510BAFBFE14884F907D9E30909F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c5:f3:71:9c:2c:db:fd:d4:19:e9:33:8d:80:
81:93:4e:90:38:c5:a5:8c:d9:57:0f:cd:73:0a:a2:
6c:97:82:99:41:a6:27:f2:a0:61:c4:f9:3c:ea:09:
b2:0b:a6:4b:f4:5d:81:c7:09:04:1d:62:96:74:dd:
e6:41:62:b4:8e:5d:bb:73:a6:fd:21:8d:b4:4f:68:
33:82:71:91:d6:30:5d:95:75:38:0b:b6:27:00:19:
98:3d:3c:30:4b:37:01:c7:11:42:fe:68:04:a4:90:
93:d8:da:88:b7:5c:42:a2:01:d5:47:fc:17:59:41:
b5:7a:0f:73:6f:f6:46:21:90:99:87:c5:44:88:c9:
ba:9b:9e:26:c0:bd:55:fe:f6:15:fe:82:7d:42:3f:
db:06:dc:0f:1f:f8:3a:73:94:18:b4:33:e0:9e:c2:
1c:29:20:fb:c6:20:6c:4e:76:cd:7b:be:8e:59:df:
06:9a:fa:5a:b0:6d:0d:08:04:b0:d5:e7:a0:50:f4:
5a:27:e4:40:f1:18:b4:04:e2:b9:5a:ad:e6:47:38:
cf:1f:0a:02:93:04:35:fc:48:88:05:a9:6f:5c:a0:
67:9e:e8:49:81:6c:ef:82:60:10:86:62:e5:37:9b:
24:f5:25:59:84:d7:f8:3b:de:8d:21:08:64:de:14:
e4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0E:74:84:1E:62:A5:10:BA:FB:FE:14:88:4F:90:7D:9E:30:90:9F
X509v3 Authority Key Identifier:
keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:38:6d:82:9d:1b:dd:cb:bc:23:27:b8:7e:92:f4:4b:da:d1:
63:cc:5b:a6:c3:2d:91:9c:76:fb:73:98:d4:88:35:ed:86:db:
73:17:66:fc:c4:92:d1:cc:4f:ec:7d:c7:2d:95:0b:cc:73:3a:
2f:46:71:b1:0a:1e:7d:cf:eb:b1:49:9a:de:fb:fa:75:68:d4:
7d:61:51:30:2b:a9:7b:a2:f3:8e:7d:9c:c4:a4:ec:e9:67:09:
f4:07:ab:10:46:1b:7b:3f:e5:47:54:2e:ec:79:12:6b:18:d6:
6f:12:e0:10:f1:bc:ff:38:d3:42:2c:86:fa:b0:77:0b:42:e8:
17:58:86:a4:68:fc:b3:5d:3c:ed:3e:f4:03:28:0c:6b:8e:49:
d7:6f:66:4a:9a:2c:1a:e6:ba:b4:02:e1:cf:f1:ee:45:85:8a:
f7:90:ec:e7:5c:91:da:ba:bf:0b:58:f0:7d:80:e2:78:76:25:
6c:aa:1e:5c:1b:59:5c:cd:7b:4a:b3:5e:ed:bf:7a:05:a8:e1:
01:14:50:16:aa:05:48:f6:27:78:75:2b:f3:7d:6e:da:59:97:
08:fa:21:d0:fe:1d:1f:88:ba:6e:c5:df:0d:14:06:72:e9:d5:
0d:be:8f:a4:5a:4f:ad:6c:37:b1:6d:f9:32:86:2f:be:fc:e4:
72:b6:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:28:23 2026 by rpki-client