$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer File: 90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.cer (raw, json) Hash identifier: mdH3Hha4lUQdTBrhrS4FO3o7dfT+ICMBNCZBRoS++M4= Subject key identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15 Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 Certificate issuer: /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Certificate serial: 1636E0DC3DA9ACEE18C2891EE9A27B597BF38287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Manifest: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft caRepository: rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/ Notify URL: https://rrdp-rps.cnnic.cn/rrdp/notification.xml Certificate not before: Mon 11 May 2026 01:50:44 +0000 Certificate not after: Mon 10 May 2027 01:55:44 +0000 Subordinate resources: AS: 131489 AS: 139136 IP: 103.2.212.0/22 IP: 103.154.40.0/23 IP: 219.235.160.0/20 IP: 2406:5340::/32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:36:e0:dc:3d:a9:ac:ee:18:c2:89:1e:e9:a2:7b:59:7b:f3:82:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710 Validity Not Before: May 11 01:50:44 2026 GMT Not After : May 10 01:55:44 2027 GMT Subject: CN=90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:b6:00:dd:f9:e5:bc:f4:87:14:00:42:56: 1f:15:bb:93:7a:83:6b:4d:21:49:b2:fd:c2:fa:f8: 1b:6d:8e:da:90:ce:04:14:0f:ee:d3:69:21:1b:55: 48:97:11:a4:b7:25:dc:75:cb:d7:d9:30:a1:5d:89: 02:1e:ef:10:bb:ed:0c:17:e1:05:53:36:08:02:0b: 2b:6e:3d:36:9e:76:d9:a9:93:e2:56:99:1f:bf:86: 8d:00:b1:ea:0b:2f:77:32:2d:6b:89:18:30:6f:4f: dd:89:db:bb:49:9a:36:2d:c8:f0:4e:2f:bc:8d:e3: 13:f1:dc:84:cd:c6:2e:d2:79:d5:78:f6:58:ca:58: 72:c2:0d:79:73:35:15:17:91:d2:f6:1f:21:47:88: d8:c0:02:03:61:89:19:d4:2a:84:e4:1c:b4:45:80: 1b:84:44:ef:40:99:55:21:c3:56:0a:eb:56:f8:aa: 0f:df:0e:a3:ca:5a:32:15:18:56:6f:72:a7:83:d1: c2:4f:5c:1f:4e:f8:88:1b:61:01:8b:4f:fb:ce:25: 00:2d:0b:de:18:a4:a7:d5:d0:60:57:a8:99:37:ab: 42:58:2d:5a:d0:da:62:8a:bd:91:9d:f3:fe:59:4f: 8d:10:0e:f6:88:b0:df:26:9a:59:fb:c8:df:06:d1: 44:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:B9:0B:70:03:C4:49:7A:0D:82:CB:81:A2:BD:4D:A4:EE:9A:B4:15 X509v3 Authority Key Identifier: keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer Subject Information Access: CA Repository - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/ RPKI Manifest - URI:rsync://rpki-rps.cnnic.cn/repo/A1106035279619293197/0/90B90B7003C4497A0D82CB81A2BD4DA4EE9AB415.mft RPKI Notify - URI:https://rrdp-rps.cnnic.cn/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.2.212.0/22 103.154.40.0/23 219.235.160.0/20 IPv6: 2406:5340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 131489 139136 Signature Algorithm: sha256WithRSAEncryption 2c:01:c7:12:c5:9b:a5:97:f6:d6:16:e4:6d:5e:82:b6:b0:63: c0:8d:75:8e:ad:0a:f0:29:6c:09:f4:ff:34:7b:20:d3:8c:bc: 78:55:2c:9e:59:2f:c7:42:ec:80:7a:0b:d6:20:0a:21:ab:bb: 77:41:71:4d:94:9e:d6:37:3c:20:fc:e6:d5:6a:c0:62:77:9c: 58:24:10:71:e6:85:cd:e1:df:dd:43:be:cd:fc:ff:6f:a1:8b: 0d:ec:ed:37:b4:04:e5:da:2f:eb:a1:8d:9a:19:30:cf:e5:c6: 3d:25:10:38:e7:1b:fa:e1:da:38:ae:ba:aa:44:0b:ee:73:d1: 32:3e:93:70:5c:ff:7a:8b:b3:f5:fe:34:f8:8d:b6:fc:2c:01: 40:73:c7:9c:6d:ff:be:ab:c0:51:52:24:74:93:d7:ee:c9:1b: bc:4a:1d:b5:e4:a2:a3:00:67:4d:3f:84:f2:08:f7:ec:91:f7: 7c:b4:71:1f:c4:6c:21:ec:94:86:8e:57:d6:cc:33:d8:de:4d: bf:d0:a4:e2:ff:ba:03:90:c0:e4:c2:f2:0c:f4:0a:6f:3b:d3: 40:c0:a3:f3:4b:ec:ee:07:29:98:b7:83:b1:21:45:ee:a9:b1: 55:4a:9e:7e:8f:9c:01:0d:b2:8e:0a:16:6f:98:cd:33:de:3d: 0c:36:95:42 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIUFjbg3D2prO4Ywoke6aJ7WXvzgocwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDUxMTAxNTA0NFoX DTI3MDUxMDAxNTU0NFowMzExMC8GA1UEAxMoOTBCOTBCNzAwM0M0NDk3QTBEODJD QjgxQTJCRDREQTRFRTlBQjQxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkDtgDd+eW89IcUAEJWHxW7k3qDa00hSbL9wvr4G22O2pDOBBQP7tNpIRtV SJcRpLcl3HXL19kwoV2JAh7vELvtDBfhBVM2CAILK249Np522amT4laZH7+GjQCx 6gsvdzIta4kYMG9P3Ynbu0maNi3I8E4vvI3jE/HchM3GLtJ51Xj2WMpYcsINeXM1 FReR0vYfIUeI2MACA2GJGdQqhOQctEWAG4RE70CZVSHDVgrrVviqD98Oo8paMhUY Vm9yp4PRwk9cH074iBthAYtP+84lAC0L3hikp9XQYFeomTerQlgtWtDaYoq9kZ3z /llPjRAO9oiw3yaaWfvI3wbRROkCAwEAAaOCAtYwggLSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJC5C3ADxEl6DYLLgaK9TaTumrQVMB8GA1UdIwQYMBaAFKVu hypAPnuc65QxoI9UBAHS+9cQMA4GA1UdDwEB/wQEAwIBBjBzBgNVHR8EbDBqMGig ZqBkhmJyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUw OTA2NzU3MTUvMS9BNTZFODcyQTQwM0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJE NzEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9wVzZIS2tBLWU1enJsREdnajFRRUFkTDcxeEEuY2VyMIIBAQYIKwYB BQUHAQsEgfQwgfEwQgYIKwYBBQUHMAWGNnJzeW5jOi8vcnBraS1ycHMuY25uaWMu Y24vcmVwby9BMTEwNjAzNTI3OTYxOTI5MzE5Ny8wLzBuBggrBgEFBQcwCoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA2MDM1Mjc5NjE5MjkzMTk3 LzAvOTBCOTBCNzAwM0M0NDk3QTBEODJDQjgxQTJCRDREQTRFRTlBQjQxNS5tZnQw OwYIKwYBBQUHMA2GL2h0dHBzOi8vcnJkcC1ycHMuY25uaWMuY24vcnJkcC9ub3Rp ZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAJnAtQDBAFnmigDBATb66AwDQQCAAIwBwMFACQG U0AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAgGhAgMCH4AwDQYJKoZIhvcNAQEL BQADggEBACwBxxLFm6WX9tYW5G1egrawY8CNdY6tCvApbAn0/zR7INOMvHhVLJ5Z L8dC7IB6C9YgCiGru3dBcU2UntY3PCD85tVqwGJ3nFgkEHHmhc3h391Dvs38/2+h iw3s7Te0BOXaL+uhjZoZMM/lxj0lEDjnG/rh2jiuuqpEC+5z0TI+k3Bc/3qLs/X+ NPiNtvwsAUBzx5xt/76rwFFSJHST1+7JG7xKHbXkoqMAZ00/hPII9+yR93y0cR/E bCHslIaOV9bMM9jeTb/QpOL/ugOQwOTC8gz0Cm8700DAo/NL7O4HKZi3g7EhRe6p sVVKnn6PnAENso4KFm+YzTPePQw2lUI= -----END CERTIFICATE-----Generated at Wed May 13 20:17:12 2026 by rpki-client