$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft File: 5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json) Hash identifier: Dh4xh5f9HNg+ZcmNLoOMR2sCviZX1uwBLWj6NY2pd5o= Subject key identifier: CD:F1:35:1F:8B:7A:E2:AD:36:DD:F2:73:C9:FB:2D:6F:7C:C5:24:09 Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B Certificate issuer: /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B Certificate serial: 36E667A9FACE46D2A3BB7D396F4B920C3F7E924A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft Manifest number: 0DBF Signing time: Fri 25 Apr 2025 15:53:10 +0000 Manifest this update: Fri 25 Apr 2025 15:48:10 +0000 Manifest next update: Sat 26 Apr 2025 17:38:10 +0000 Files and hashes: 1: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: lx8QzDR30uz1X98OamrLwI51PJPxM4+7KzquzrFLmrs=) 2: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: c+KB+e7RsSOeyOLcK5teORWkl/l+J6w+GCGcbvls+fQ=) Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 17:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e6:67:a9:fa:ce:46:d2:a3:bb:7d:39:6f:4b:92:0c:3f:7e:92:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B Validity Not Before: Apr 25 15:48:10 2025 GMT Not After : Apr 26 17:38:10 2025 GMT Subject: CN=CDF1351F8B7AE2AD36DDF273C9FB2D6F7CC52409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:04:af:06:6a:7e:8a:1a:df:f0:af:14:bf:f7: 85:48:51:9b:c7:5d:78:64:b9:61:c3:9b:36:94:11: 93:29:9b:68:88:90:a8:bf:8a:ed:aa:57:26:9d:fc: 6b:4f:4f:d8:25:cd:0b:cf:77:c4:78:9c:f8:7a:d4: ba:98:33:45:ed:89:6e:46:ce:f6:50:f9:21:08:0f: 21:d9:e7:a1:8b:2c:75:5e:74:bd:05:3b:28:28:5f: 36:cb:b3:c4:55:cc:56:1e:b2:64:23:62:1b:68:6d: 42:cc:e4:d9:3c:84:5b:e4:6e:2b:6a:0f:09:13:07: db:9c:7c:21:52:74:2d:b6:53:d1:58:e8:49:c1:ac: fc:47:13:20:eb:0c:49:53:de:8c:94:2d:2a:79:d6: e3:3b:f3:65:bd:16:e2:db:ff:73:40:bd:47:cd:b3: cd:70:d7:2e:82:c4:5b:ae:93:13:fb:6f:22:8f:da: 3d:3a:7b:9b:a9:9a:0a:80:91:9b:4b:e6:ca:13:e3: ae:c2:8b:75:1f:46:fc:1f:08:11:ce:8a:2c:50:9b: a8:2a:7e:bd:05:1d:fc:51:9d:f6:78:9e:78:27:f3: 58:8f:53:0b:ee:e8:25:f2:90:57:fd:d8:e5:14:b6: b4:3c:70:35:45:b7:7a:3d:ea:04:22:3c:dc:09:40: 32:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F1:35:1F:8B:7A:E2:AD:36:DD:F2:73:C9:FB:2D:6F:7C:C5:24:09 X509v3 Authority Key Identifier: keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c1:29:57:19:45:e6:fb:a7:36:11:80:1a:38:da:8c:7d:bb: bf:ff:7e:fe:d7:aa:1a:bc:34:66:a2:04:43:03:f0:9d:4e:ce: a9:ce:74:13:9f:f7:e8:14:f1:2b:1e:e9:64:da:03:f3:0d:fc: b0:b5:2c:03:53:24:4d:11:ce:dd:3e:0e:20:10:8d:28:33:78: dc:c0:2a:b8:c9:07:cd:cc:27:06:da:99:ef:26:f7:7c:27:57: e5:06:42:eb:e0:5c:ec:df:7b:8b:00:b1:b8:54:13:1d:17:d1: fa:bb:09:07:1b:d2:5c:57:3b:f5:0a:ad:5b:3d:d9:a9:e0:14: a8:d0:0f:d1:9d:f7:8c:e3:21:ee:a2:2e:33:17:80:b2:66:77: 65:c6:07:a6:2f:43:c2:b8:ac:da:d0:4f:c7:9e:cf:2a:36:c4: 4d:51:05:49:84:2d:b8:dc:dd:5a:e9:70:91:bd:de:75:91:fc: 1c:c3:c4:ea:f2:60:00:d0:d1:cc:ed:3b:31:4c:e8:d3:89:47: f5:89:f1:f9:58:b0:5f:e5:df:ec:40:40:b0:bf:97:be:be:bd: 11:91:a1:a7:65:44:5e:2e:f7:68:fd:eb:52:3d:a2:d3:51:64: 13:07:7b:47:4c:f9:7c:1f:07:db:e7:5e:3e:c2:2c:bf:ad:0e: 04:42:bf:05 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUNuZnqfrORtKju305b0uSDD9+kkowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkM4MzYwMDAwMTEwLwYDVQQFEyg1RDM1OTM5NTU3 MTEwQ0M0MzQyOUFFMzAxRjdDRUYwRTU4ODk5NDJCMB4XDTI1MDQyNTE1NDgxMFoX DTI1MDQyNjE3MzgxMFowMzExMC8GA1UEAxMoQ0RGMTM1MUY4QjdBRTJBRDM2RERG MjczQzlGQjJENkY3Q0M1MjQwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPQErwZqfooa3/CvFL/3hUhRm8ddeGS5YcObNpQRkymbaIiQqL+K7apXJp38 a09P2CXNC893xHic+HrUupgzRe2JbkbO9lD5IQgPIdnnoYssdV50vQU7KChfNsuz xFXMVh6yZCNiG2htQszk2TyEW+RuK2oPCRMH25x8IVJ0LbZT0VjoScGs/EcTIOsM SVPejJQtKnnW4zvzZb0W4tv/c0C9R82zzXDXLoLEW66TE/tvIo/aPTp7m6maCoCR m0vmyhPjrsKLdR9G/B8IEc6KLFCbqCp+vQUd/FGd9nieeCfzWI9TC+7oJfKQV/3Y 5RS2tDxwNUW3ej3qBCI83AlAMnUCAwEAAaOCAhkwggIVMB0GA1UdDgQWBBTN8TUf i3rirTbd8nPJ+y1vfMUkCTAfBgNVHSMEGDAWgBRdNZOVVxEMxDQprjAffO8OWImU KzAOBgNVHQ8BAf8EBAMCB4AwcQYDVR0fBGowaDBmoGSgYoZgcnN5bmM6Ly9ycGtp LmFkbWluLmZyZWVyYW5nZWNsb3VkLmNvbS9yZXBvL0ZSQy1DQS8yLzVEMzU5Mzk1 NTcxMTBDQzQzNDI5QUUzMDFGN0NFRjBFNTg4OTk0MkIuY3JsMH4GCCsGAQUFBwEB BHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1hUV1RsVmNSRE1R MEthNHdIM3p2RGxpSmxDcy5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzAL hmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29tL3JlcG8vRlJD LUNBLzIvNUQzNTkzOTU1NzExMENDNDM0MjlBRTMwMUY3Q0VGMEU1ODg5OTQyQi5t ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN AQELBQADggEBAGDBKVcZReb7pzYRgBo42ox9u7//fv7Xqhq8NGaiBEMD8J1OzqnO dBOf9+gU8Sse6WTaA/MN/LC1LANTJE0Rzt0+DiAQjSgzeNzAKrjJB83MJwbame8m 93wnV+UGQuvgXOzfe4sAsbhUEx0X0fq7CQcb0lxXO/UKrVs92angFKjQD9Gd94zj Ie6iLjMXgLJmd2XGB6YvQ8K4rNrQT8eezyo2xE1RBUmELbjc3VrpcJG93nWR/BzD xOryYADQ0cztOzFM6NOJR/WJ8flYsF/l3+xAQLC/l76+vRGRoadlRF4u92j961I9 otNRZBMHe0dM+XwfB9vnXj7CLL+tDgRCvwU= -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:57 2025 by rpki-client