
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File: 5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier: xMCemMre+S7bm2BCzMU6M5Hbb85juuVeLR/HbuXyMB0=
Subject key identifier: 8D:35:EE:87:A9:D6:76:DC:8C:39:3F:6B:35:35:FF:E0:F1:BD:2D:B5
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer: /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial: 5FA583C3D7191CC6940D549D9387CA5DE7AE0401
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number: 109F
Signing time: Fri 27 Mar 2026 19:26:23 +0000
Manifest this update: Fri 27 Mar 2026 19:21:23 +0000
Manifest next update: Sat 28 Mar 2026 20:35:23 +0000
Files and hashes: 1: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: 35dPW4R5//sy1E4TbClIpt2S1GnRuDfcOKAH+CRiBVs=)
2: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: YytRpirPqYvlv61GjwTryxF750xDHjrR2dBNAMmlTNg=)
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 20:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:a5:83:c3:d7:19:1c:c6:94:0d:54:9d:93:87:ca:5d:e7:ae:04:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Validity
Not Before: Mar 27 19:21:23 2026 GMT
Not After : Mar 28 20:35:23 2026 GMT
Subject: CN=8D35EE87A9D676DC8C393F6B3535FFE0F1BD2DB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:1f:e5:c6:c1:78:3e:9a:8c:58:94:57:7b:
d9:53:de:2b:22:fb:c2:0a:87:fe:4d:80:c7:15:de:
5d:06:15:0a:b4:bb:dc:fc:55:c8:2e:67:5b:01:1d:
0d:00:8f:52:c9:fd:95:aa:36:d6:c0:45:07:a5:db:
5a:75:5d:98:66:b6:20:d4:e7:e8:b9:d8:e0:1b:b8:
f9:48:5a:6e:56:a0:b0:e6:37:75:4a:a0:0e:b5:b9:
2f:13:79:ac:dc:6f:d4:64:27:a1:75:3c:1d:03:83:
d7:62:2b:19:d0:d4:89:06:47:4e:60:1c:20:da:e9:
44:fb:dc:2f:3f:d3:fa:39:8c:4c:cf:f1:7d:83:c6:
f3:55:45:06:f2:e4:fa:a2:f0:66:92:d7:77:6c:c9:
95:1f:2b:5b:de:e4:98:97:c3:a0:87:24:d7:fb:a6:
05:ad:52:d4:b2:fd:55:f8:09:af:e6:dc:05:3d:be:
47:75:3f:91:a7:7c:ca:3a:ff:48:b7:ab:31:0e:26:
c6:78:8f:f1:2f:de:41:43:9c:08:4f:aa:28:a7:77:
1c:e2:3d:82:74:d5:a7:57:a9:c8:39:b9:95:24:b0:
b7:a2:be:98:ef:ff:c3:b1:1b:f1:ed:4a:9d:27:c4:
57:2e:36:fb:bf:bf:07:15:6f:b0:d7:4b:5e:35:bf:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:35:EE:87:A9:D6:76:DC:8C:39:3F:6B:35:35:FF:E0:F1:BD:2D:B5
X509v3 Authority Key Identifier:
keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:07:3f:1c:30:73:0c:b1:f8:03:47:76:28:5d:f8:6a:c5:e2:
d6:71:6b:18:eb:25:10:0c:b7:17:21:61:b9:8d:a8:d3:a8:b6:
e7:6a:56:87:4f:c0:53:a3:e4:c7:1a:9d:a7:be:6d:db:42:fe:
88:b5:1b:e3:d3:c3:ba:f8:bb:13:58:2c:81:fa:bc:d5:dc:59:
45:19:62:20:96:d5:ac:25:d7:22:e7:3c:35:59:4a:f9:cc:98:
e8:db:3e:c0:25:4d:85:b8:da:d6:51:28:c3:67:01:75:d4:0d:
9b:33:19:7c:ef:f3:64:2e:ed:6f:89:04:3f:9d:73:1d:e5:e4:
ad:b6:9a:af:50:aa:8e:ac:d2:3c:8f:e0:03:16:1f:3d:8d:b8:
3e:da:5c:27:fb:b0:22:90:f0:cc:ff:8e:bf:13:1c:e9:57:b0:
27:bf:17:23:8d:8e:f6:27:59:86:3c:db:b1:be:8d:bc:af:90:
b0:68:81:7d:89:2d:8e:61:a1:a6:e4:87:6e:ae:6d:1d:fb:f3:
06:c5:1e:47:c1:43:0e:97:96:3a:85:7a:d0:c2:89:81:cf:35:
9b:2e:5b:83:4a:b8:ab:7a:2d:19:67:8c:43:31:39:65:96:1f:
ab:de:70:17:45:ed:72:94:61:72:70:d2:07:0d:0f:8d:8f:68:
08:ff:63:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:13:29 2026 by rpki-client