This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft File: 5D35939557110CC43429AE301F7CEF0E5889942B.mft (raw, json) Hash identifier: dPxH6sVqKFzfICno0f565Ib2KYVPP2WS5GqHXjjdcXk= Subject key identifier: 74:14:7C:44:48:34:3C:AB:D3:3E:84:C5:F4:1D:89:C3:C6:20:93:2F Authority key identifier: 5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B Certificate issuer: /CN=A912C8360000/serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B Certificate serial: 56D51FB55ABFA257D5A4A3EE5949E0E078A4D54F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft Manifest number: 0FE6 Signing time: Fri 19 Dec 2025 03:56:00 +0000 Manifest this update: Fri 19 Dec 2025 03:51:00 +0000 Manifest next update: Sat 20 Dec 2025 05:19:00 +0000 Files and hashes: 1: 3130332e3134342e3137362e302f32332d3234203d3e203533333536.roa (hash: YytRpirPqYvlv61GjwTryxF750xDHjrR2dBNAMmlTNg=) 2: 5D35939557110CC43429AE301F7CEF0E5889942B.crl (hash: Vq69rvJRDo4yYNVqG8ZdH0MVvihXRzw4V/qywJDl3J4=) Validation: OK Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 05:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d5:1f:b5:5a:bf:a2:57:d5:a4:a3:ee:59:49:e0:e0:78:a4:d5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8360000, serialNumber=5D35939557110CC43429AE301F7CEF0E5889942B Validity Not Before: Dec 19 03:51:00 2025 GMT Not After : Dec 20 05:19:00 2025 GMT Subject: CN=74147C4448343CABD33E84C5F41D89C3C620932F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:ea:1b:64:92:8c:ce:1f:03:e0:f9:a2:cc:a0: d4:dc:dd:da:b4:67:39:50:c4:a5:49:d6:04:99:8f: 3e:4c:b2:c5:f9:6b:cd:9f:5e:3e:28:6c:82:3b:55: 8c:0f:fd:92:d6:a9:ad:ac:95:a1:56:7e:15:1d:ae: ea:af:55:4f:58:b9:78:de:7f:ae:46:40:1c:a9:58: a2:9a:3a:bf:77:41:03:d9:ab:e3:37:5e:39:fb:9a: 91:2c:ae:c6:5d:ff:37:59:13:81:7a:4b:d5:9f:7a: d4:33:09:1b:5b:73:c7:d1:23:29:ad:55:3a:a0:44: e7:07:4c:37:df:b0:14:8a:77:63:f0:65:ce:c1:23: bc:70:f8:53:e1:f4:d3:b0:30:e1:9d:97:f7:f9:30: 8b:89:9d:30:0f:c9:e9:0d:da:a1:9d:40:2d:63:d1: 28:5f:be:08:eb:56:ec:40:91:1f:76:8c:07:13:5b: de:82:95:d3:08:3d:29:1b:c6:fc:58:c5:71:84:b5: a6:49:fe:2d:7b:a7:52:24:ae:26:23:80:9e:e0:77: f2:1c:b6:7b:e9:60:d1:74:da:ca:4a:b1:3f:c1:ca: 5e:74:a3:0e:4d:9d:58:e4:d7:b5:4b:00:be:82:8c: ba:2f:99:38:61:86:ea:33:31:99:18:45:8a:4c:c6: f1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:14:7C:44:48:34:3C:AB:D3:3E:84:C5:F4:1D:89:C3:C6:20:93:2F X509v3 Authority Key Identifier: keyid:5D:35:93:95:57:11:0C:C4:34:29:AE:30:1F:7C:EF:0E:58:89:94:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTWTlVcRDMQ0Ka4wH3zvDliJlCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/2/5D35939557110CC43429AE301F7CEF0E5889942B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:a2:5d:ef:8f:0a:63:86:9d:36:51:b7:d4:11:8f:20:b9:b2: 45:6c:c6:96:4b:c1:f7:72:51:44:22:b4:4f:a6:67:41:94:7a: a4:e8:58:34:f5:59:27:52:b0:8b:ca:4a:1c:e3:78:87:76:80: 6a:37:5e:9d:53:8e:e8:1e:ec:a3:d2:42:5e:da:81:df:f9:5f: d8:dc:32:66:06:b2:ff:e8:28:46:42:64:9c:c3:82:79:bb:cf: e9:22:1c:fe:a2:97:f9:7a:aa:00:7d:cc:86:82:e7:4e:48:11: 0e:e8:79:e7:2d:a5:5b:9d:e6:14:75:d1:e2:9e:1c:18:cf:d4: 47:ab:8a:9c:b1:3c:45:ce:b1:d9:8b:de:c4:00:ce:c2:0c:ea: a1:a8:c1:75:1c:98:f1:f1:35:22:10:92:82:29:cf:f4:fc:4f: 05:27:4b:81:eb:cd:d2:09:87:68:08:a0:b9:4b:12:a4:6d:6f: 14:93:7e:44:3e:06:24:2b:e3:4d:16:45:c8:ac:72:c7:43:06: 6d:e6:25:79:e5:eb:56:f3:d9:1b:31:0a:c1:36:ec:df:66:b4: 70:8e:bd:18:ce:f9:c1:65:02:cc:d2:8c:00:ae:51:59:58:2b: 30:cd:8a:8b:55:d2:2e:48:ce:00:a9:db:cf:95:11:07:3b:ca: f9:48:e5:18 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgIUVtUftVq/olfVpKPuWUng4Hik1U8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMkM4MzYwMDAwMTEwLwYDVQQFEyg1RDM1OTM5NTU3 MTEwQ0M0MzQyOUFFMzAxRjdDRUYwRTU4ODk5NDJCMB4XDTI1MTIxOTAzNTEwMFoX DTI1MTIyMDA1MTkwMFowMzExMC8GA1UEAxMoNzQxNDdDNDQ0ODM0M0NBQkQzM0U4 NEM1RjQxRDg5QzNDNjIwOTMyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPzqG2SSjM4fA+D5osyg1Nzd2rRnOVDEpUnWBJmPPkyyxflrzZ9ePihsgjtV jA/9ktaprayVoVZ+FR2u6q9VT1i5eN5/rkZAHKlYopo6v3dBA9mr4zdeOfuakSyu xl3/N1kTgXpL1Z961DMJG1tzx9EjKa1VOqBE5wdMN9+wFIp3Y/BlzsEjvHD4U+H0 07Aw4Z2X9/kwi4mdMA/J6Q3aoZ1ALWPRKF++COtW7ECRH3aMBxNb3oKV0wg9KRvG /FjFcYS1pkn+LXunUiSuJiOAnuB38hy2e+lg0XTaykqxP8HKXnSjDk2dWOTXtUsA voKMui+ZOGGG6jMxmRhFikzG8esCAwEAAaOCAhkwggIVMB0GA1UdDgQWBBR0FHxE SDQ8q9M+hMX0HYnDxiCTLzAfBgNVHSMEGDAWgBRdNZOVVxEMxDQprjAffO8OWImU KzAOBgNVHQ8BAf8EBAMCB4AwcQYDVR0fBGowaDBmoGSgYoZgcnN5bmM6Ly9ycGtp LmFkbWluLmZyZWVyYW5nZWNsb3VkLmNvbS9yZXBvL0ZSQy1DQS8yLzVEMzU5Mzk1 NTcxMTBDQzQzNDI5QUUzMDFGN0NFRjBFNTg4OTk0MkIuY3JsMH4GCCsGAQUFBwEB BHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0 b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL1hUV1RsVmNSRE1R MEthNHdIM3p2RGxpSmxDcy5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzAL hmByc3luYzovL3Jwa2kuYWRtaW4uZnJlZXJhbmdlY2xvdWQuY29tL3JlcG8vRlJD LUNBLzIvNUQzNTkzOTU1NzExMENDNDM0MjlBRTMwMUY3Q0VGMEU1ODg5OTQyQi5t ZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAw BgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcN AQELBQADggEBAIeiXe+PCmOGnTZRt9QRjyC5skVsxpZLwfdyUUQitE+mZ0GUeqTo WDT1WSdSsIvKShzjeId2gGo3Xp1Tjuge7KPSQl7agd/5X9jcMmYGsv/oKEZCZJzD gnm7z+kiHP6il/l6qgB9zIaC505IEQ7oeectpVud5hR10eKeHBjP1EeripyxPEXO sdmL3sQAzsIM6qGowXUcmPHxNSIQkoIpz/T8TwUnS4HrzdIJh2gIoLlLEqRtbxST fkQ+BiQr400WRciscsdDBm3mJXnl61bz2RsxCsE27N9mtHCOvRjO+cFlAszSjACu UVlYKzDNiotV0i5IzgCp28+VEQc7yvlI5Rg= -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:30 2025 by rpki-client