Manifest

$ rpki-client -vvvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
File:                     5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json)
Hash identifier:          ZU4AM7iMDZ/FYo9+zzUNhPQ4fKYK6BJBEGBzQGoCUYE=
Subject key identifier:   A9:0B:E5:BE:32:81:53:5A:0B:3D:FF:EA:F9:5F:CC:8B:DB:25:65:DC
Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B
Certificate issuer:       /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
Certificate serial:       41E646EDD018CBBC4E1CA731A456B239ECDAED81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
Subject info access:      rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
Manifest number:          1249
Signing time:             Thu 05 Nov 2026 05:32:44 +0000
Manifest this update:     Thu 05 Nov 2026 05:27:44 +0000
Manifest next update:     Mon 09 Nov 2026 09:16:44 +0000
Files and hashes:         1: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: ElcHnFM/UCxOj4yIfbMit+4xP8v3M/ns7VwTsSsiYxA=)
                          2: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: 7cM+Uy36A5dMKgHoDuN2/GYLBNxXM4tqOvsKDRK0lXM=)
Validation:               OK
Signature path:           rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl
                          rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 09:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e6:46:ed:d0:18:cb:bc:4e:1c:a7:31:a4:56:b2:39:ec:da:ed:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B
        Validity
            Not Before: Nov  5 05:27:44 2026 GMT
            Not After : Nov  9 09:16:44 2026 GMT
        Subject: CN=A90BE5BE3281535A0B3DFFEAF95FCC8BDB2565DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:28:89:1a:ce:5b:f0:87:8e:c3:73:65:13:a7:
                    ae:79:b0:20:08:0a:9a:83:a9:fa:55:75:f4:08:52:
                    89:f4:b2:3e:53:63:ec:87:17:fd:37:c1:1f:8f:5e:
                    a7:ed:13:30:c7:e6:bc:f7:04:05:62:08:d8:1a:81:
                    a7:14:cd:a3:02:3c:3f:37:ed:f3:7d:97:ea:b1:ce:
                    1d:27:78:de:8f:e2:b1:aa:99:5f:49:41:74:14:73:
                    6f:25:62:c7:90:77:e3:cf:ee:f7:1d:12:3b:d9:4d:
                    cd:46:c9:db:e4:7d:09:82:44:3b:8d:31:29:a2:be:
                    00:04:c9:9b:c7:b3:3b:78:76:00:54:43:16:6c:ea:
                    7e:46:6a:cc:54:2d:5c:de:47:01:29:3d:fc:b2:90:
                    a3:2d:e4:91:62:34:01:45:1a:fa:9b:ca:6d:37:56:
                    9b:0e:9b:e3:c7:6f:65:77:cf:66:da:28:f8:55:72:
                    46:a0:01:af:8a:7b:4a:f2:3e:21:c2:99:8a:94:e7:
                    ef:63:39:2b:3a:90:00:47:2a:fd:6b:55:cf:b9:2b:
                    ca:c5:75:e6:ca:cf:82:9b:ae:4e:9c:bb:00:21:7f:
                    7f:13:fa:23:6f:91:4f:ed:25:2f:ce:2e:f0:53:26:
                    9c:de:f2:b6:1c:8b:08:8f:5e:6c:bc:5a:de:08:27:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0B:E5:BE:32:81:53:5A:0B:3D:FF:EA:F9:5F:CC:8B:DB:25:65:DC
            X509v3 Authority Key Identifier:
                keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c2:1e:7e:06:40:a2:31:a6:e8:82:80:06:98:5f:3f:73:f8:
         dd:7d:39:04:09:69:50:36:34:0e:6c:d7:f4:3d:5a:21:fa:da:
         6a:f7:d0:89:19:18:07:02:f2:a8:62:88:5f:f8:b2:36:d0:92:
         5e:88:b2:e9:3c:30:59:93:6f:a2:57:f9:73:23:7e:46:46:60:
         a6:ce:bb:ad:3d:de:a6:d1:ba:ea:b9:65:75:50:e7:06:67:4f:
         e2:a5:7d:f5:71:e5:7a:1a:52:aa:5a:eb:15:6f:2d:db:9b:7a:
         02:87:03:0f:f9:a6:cc:03:c3:e0:5c:a6:ba:0e:2b:bc:69:b0:
         74:66:83:6c:fb:b6:a9:66:93:e7:df:ff:13:2f:01:ce:a0:1b:
         60:10:22:fd:4c:ad:68:33:a7:a2:ce:7a:e4:a0:7b:08:8f:ff:
         cc:b0:c0:0d:7a:58:b5:f2:e3:3d:07:10:e9:71:44:f9:ee:75:
         90:49:27:63:90:0d:df:01:61:0f:9c:f0:68:b8:70:73:6c:27:
         30:ba:10:84:36:69:3c:54:21:fa:da:13:53:1f:7e:34:7d:31:
         3d:86:92:b7:b9:d2:a5:14:c2:88:3c:04:49:5d:16:98:7b:1f:
         c7:ac:7f:24:d9:39:f0:29:6f:8d:be:3d:84:94:af:95:0f:6b:
         17:86:89:44
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUQeZG7dAYy7xOHKcxpFayOeza7YEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMkM4MzYwMDAwMTEwLwYDVQQFEyg1RDM1OTM5NTU3
MTEwQ0M0MzQyOUFFMzAxRjdDRUYwRTU4ODk5NDJCMB4XDTI2MTEwNTA1Mjc0NFoX
DTI2MTEwOTA5MTY0NFowMzExMC8GA1UEAxMoQTkwQkU1QkUzMjgxNTM1QTBCM0RG
RkVBRjk1RkNDOEJEQjI1NjVEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPMoiRrOW/CHjsNzZROnrnmwIAgKmoOp+lV19AhSifSyPlNj7IcX/TfBH49e
p+0TMMfmvPcEBWII2BqBpxTNowI8Pzft832X6rHOHSd43o/isaqZX0lBdBRzbyVi
x5B348/u9x0SO9lNzUbJ2+R9CYJEO40xKaK+AATJm8ezO3h2AFRDFmzqfkZqzFQt
XN5HASk9/LKQoy3kkWI0AUUa+pvKbTdWmw6b48dvZXfPZtoo+FVyRqABr4p7SvI+
IcKZipTn72M5KzqQAEcq/WtVz7krysV15srPgpuuTpy7ACF/fxP6I2+RT+0lL84u
8FMmnN7ythyLCI9ebLxa3ggnnmkCAwEAAaOCAhkwggIVMB0GA1UdDgQWBBSpC+W+
MoFTWgs9/+r5X8yL2yVl3DAfBgNVHSMEGDAWgBRdNZOVVxEMxDQprjAffO8OWImU
KzAOBgNVHQ8BAf8EBAMCB4AwcQYDVR0fBGowaDBmoGSgYoZgcnN5bmM6Ly9ycGtp
LmFkbWluLmZyZWVyYW5nZWNsb3VkLmNvbS9yZXBvL0ZSQy1DQS8yLzVEMzU5Mzk1
NTcxMTBDQzQzNDI5QUUzMDFGN0NFRjBFNTg4OTk0MkIuY3JsMH4GCCsGAQUFBwEB
BHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0
b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1hUV1RsVmNSRE1R
MEthNHdIM3p2RGxpSmxDcy5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzAL
hmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29tL3JlcG8vRlJD
LUNBLzIvNUQzNTkzOTU1NzExMENDNDM0MjlBRTMwMUY3Q0VGMEU1ODg5OTQyQi5t
ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw
BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN
AQELBQADggEBAHPCHn4GQKIxpuiCgAaYXz9z+N19OQQJaVA2NA5s1/Q9WiH62mr3
0IkZGAcC8qhiiF/4sjbQkl6Isuk8MFmTb6JX+XMjfkZGYKbOu6093qbRuuq5ZXVQ
5wZnT+KlffVx5XoaUqpa6xVvLdubegKHAw/5pswDw+BcproOK7xpsHRmg2z7tqlm
k+ff/xMvAc6gG2AQIv1MrWgzp6LOeuSgewiP/8ywwA16WLXy4z0HEOlxRPnudZBJ
J2OQDd8BYQ+c8Gi4cHNsJzC6EIQ2aTxUIfraE1MffjR9MT2Gkre50qUUwog8BEld
Fph7H8esfyTZOfApb42+PYSUr5UPaxeGiUQ=
-----END CERTIFICATE-----
Generated at Thu Nov 5 14:53:18 2026 by rpki-client