Error: rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft File: F204F7A503A8093CC6560627483C5834D61956E8.mft (raw, json) Hash identifier: nVsfJhYi95SuzmtVP2PkLpippM1fGK25yFD0jLcAYxI= Subject key identifier: BD:2D:21:7A:A3:70:E9:DD:2C:71:B3:AB:6C:DF:A2:F2:E8:4E:FC:EE Authority key identifier: F2:04:F7:A5:03:A8:09:3C:C6:56:06:27:48:3C:58:34:D6:19:56:E8 Certificate issuer: /CN=F204F7A503A8093CC6560627483C5834D61956E8 Certificate serial: 09BED638C7F271C5BDDC9B9C4EA1706EC7AA3B1A Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer Subject info access: rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft Manifest number: 03A4 Signing time: Sat 05 Sep 2026 10:21:21 +0000 Manifest this update: Sat 05 Sep 2026 10:16:21 +0000 Manifest next update: Sun 06 Sep 2026 12:15:21 +0000 Files and hashes: 1: 323830343a376362383a3a2f33322d3332203d3e20323731353134.roa (hash: t02YOdmpbJ/gwvjY0C9XmZek2ku53g07yCKvizaOO9E=) 2: 3139302e3130322e34342e302f32322d3234203d3e20323731353134.roa (hash: yuJh+sAE3Zdb96Kt6GxZu8j13UMFXO+rH2nvXu2Axuc=) 3: F204F7A503A8093CC6560627483C5834D61956E8.crl (hash: DwwkLQeF0B3bcDe2uL3ols40WyB0EyznSp8i4Wp62y8=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 06 Sep 2026 12:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:be:d6:38:c7:f2:71:c5:bd:dc:9b:9c:4e:a1:70:6e:c7:aa:3b:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F204F7A503A8093CC6560627483C5834D61956E8 Validity Not Before: Sep 5 10:16:21 2026 GMT Not After : Sep 6 12:15:21 2026 GMT Subject: CN=BD2D217AA370E9DD2C71B3AB6CDFA2F2E84EFCEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c9:0c:de:c2:1d:f5:cf:00:b4:41:7d:79:67: fc:1a:be:bf:1c:05:2d:76:4c:83:15:5a:18:f8:b8: e6:0b:12:26:99:c5:a1:6e:40:45:3a:89:d3:53:61: 18:c8:59:db:b4:70:04:55:89:1c:91:6e:bb:8a:5e: 74:42:c4:92:60:34:94:06:f6:64:ae:44:80:eb:a2: 33:cb:37:a3:4e:83:dd:84:11:7d:40:47:52:6e:11: 66:b4:51:33:70:a4:27:d0:fe:9f:73:1f:be:e4:72: ae:26:56:66:41:78:1f:3a:e5:70:34:84:49:37:13: 01:92:9f:a3:69:5b:13:05:09:32:94:63:4c:81:97: e1:63:7f:da:89:ca:7a:9d:47:0d:77:72:fa:ed:1d: eb:ee:17:35:44:94:d1:82:a5:55:39:6b:3c:d9:70: 2d:33:35:f9:9a:66:ad:5d:c5:11:ac:5b:02:48:73: 83:8b:4a:09:c0:a9:f7:0b:7a:84:95:06:0d:1a:c6: b9:13:f6:4e:86:e7:2a:52:d9:52:24:aa:47:e9:c5: 1d:55:ff:9b:8d:dd:81:5f:0b:d4:12:26:ec:c8:9e: 02:cb:33:96:75:44:61:2d:46:35:7b:c0:56:a5:2d: 2f:eb:04:a6:64:bc:2f:88:15:39:16:e7:0e:4c:d3: dc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2D:21:7A:A3:70:E9:DD:2C:71:B3:AB:6C:DF:A2:F2:E8:4E:FC:EE X509v3 Authority Key Identifier: keyid:F2:04:F7:A5:03:A8:09:3C:C6:56:06:27:48:3C:58:34:D6:19:56:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F204F7A503A8093CC6560627483C5834D61956E8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z11Heg6SyHFa7uPHDokYp6cbCJTnU2BFnpgwmfZJ9dJ/1/F204F7A503A8093CC6560627483C5834D61956E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:5e:b5:6c:68:54:72:10:44:bc:cb:d7:18:ee:09:68:f7:79: 02:05:3f:b7:2b:85:89:4b:52:18:26:e0:a0:c8:d2:1e:32:de: 7c:60:82:08:df:2c:c2:aa:81:a1:14:65:76:19:68:a6:85:d2: 86:2a:66:66:ec:73:53:41:28:01:57:28:03:c2:dc:0d:0f:76: a4:db:b6:3e:e1:b9:91:7d:58:74:bf:3f:78:26:40:0a:0a:71: 0f:6b:41:fa:d3:5a:3f:f3:75:66:57:9d:3a:3e:d4:eb:96:bd: 81:ca:95:69:0d:d9:59:93:c2:e0:c5:3f:e8:d7:34:04:b3:68: ee:ef:e8:46:cb:96:c6:4d:e7:8e:ef:bd:04:60:0f:70:4c:df: 62:73:b3:fd:90:51:2c:ee:63:82:00:86:ed:a6:75:86:ce:22: b6:88:35:82:a1:38:9b:04:bd:78:f7:77:a4:80:2b:49:0a:cf: ab:e3:94:98:56:e4:83:dd:68:aa:c9:65:d8:7f:e0:20:19:af: e1:14:2d:bd:39:ab:3c:7a:f6:a0:91:d4:50:d1:7a:73:ea:1b: 57:81:93:b6:a6:b9:70:71:43:9b:e3:e9:29:db:79:60:c4:3a: dd:af:80:92:84:95:94:4f:18:03:e2:fd:2b:1c:79:0f:17:a1: ec:bc:25:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUCb7WOMfyccW93JucTqFwbseqOxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIwNEY3QTUwM0E4MDkzQ0M2NTYwNjI3NDgzQzU4MzRE NjE5NTZFODAeFw0yNjA5MDUxMDE2MjFaFw0yNjA5MDYxMjE1MjFaMDMxMTAvBgNV BAMTKEJEMkQyMTdBQTM3MEU5REQyQzcxQjNBQjZDREZBMkYyRTg0RUZDRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUyQzewh31zwC0QX15Z/wavr8c BS12TIMVWhj4uOYLEiaZxaFuQEU6idNTYRjIWdu0cARViRyRbruKXnRCxJJgNJQG 9mSuRIDrojPLN6NOg92EEX1AR1JuEWa0UTNwpCfQ/p9zH77kcq4mVmZBeB865XA0 hEk3EwGSn6NpWxMFCTKUY0yBl+Fjf9qJynqdRw13cvrtHevuFzVElNGCpVU5azzZ cC0zNfmaZq1dxRGsWwJIc4OLSgnAqfcLeoSVBg0axrkT9k6G5ypS2VIkqkfpxR1V /5uN3YFfC9QSJuzIngLLM5Z1RGEtRjV7wFalLS/rBKZkvC+IFTkW5w5M09zRAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUvS0heqNw6d0scbOrbN+i8uhO/O4wHwYDVR0j BBgwFoAU8gT3pQOoCTzGVgYnSDxYNNYZVugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMnoxMUhlZzZTeUhGYTd1UEhEb2tZcDZjYkNKVG5VMkJGbnBnd21mWko5 ZEovMS9GMjA0RjdBNTAzQTgwOTNDQzY1NjA2Mjc0ODNDNTgzNEQ2MTk1NkU4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyMDRGN0E1MDNBODA5M0ND NjU2MDYyNzQ4M0M1ODM0RDYxOTU2RTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MnoxMUhlZzZTeUhGYTd1UEhEb2tZcDZjYkNKVG5VMkJGbnBnd21mWko5ZEovMS9G MjA0RjdBNTAzQTgwOTNDQzY1NjA2Mjc0ODNDNTgzNEQ2MTk1NkU4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlF61bGhUchBEvMvXGO4JaPd5AgU/tyuFiUtSGCbgoMjSHjLefGCCCN8swqqB oRRldhlopoXShipmZuxzU0EoAVcoA8LcDQ92pNu2PuG5kX1YdL8/eCZACgpxD2tB +tNaP/N1ZledOj7U65a9gcqVaQ3ZWZPC4MU/6Nc0BLNo7u/oRsuWxk3nju+9BGAP cEzfYnOz/ZBRLO5jggCG7aZ1hs4itog1gqE4mwS9ePd3pIArSQrPq+OUmFbkg91o qsll2H/gIBmv4RQtvTmrPHr2oJHUUNF6c+obV4GTtqa5cHFDm+PpKdt5YMQ63a+A koSVlE8YA+L9Kxx5Dxeh7LwlYw== -----END CERTIFICATE-----Generated at Sat Sep 5 20:34:42 2026 by rpki-client