Error: rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft File: 511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft (raw, json) Hash identifier: /+cvBd5FHfZrTVsu7qyI2Elgosc//ptkEukqb743ffc= Subject key identifier: 3D:57:8B:99:FD:DE:12:C0:F6:9F:60:3D:37:9D:DD:78:F4:E9:25:65 Authority key identifier: 51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C Certificate issuer: /CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C Certificate serial: 4C15B40E54FD9C50DFE96B199666CB02C43DD6FE Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer Subject info access: rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft Manifest number: 0487 Signing time: Sun 23 Aug 2026 21:04:53 +0000 Manifest this update: Sun 23 Aug 2026 20:59:53 +0000 Manifest next update: Mon 24 Aug 2026 22:05:53 +0000 Files and hashes: 1: 3230302e3130372e3232302e302f32322d3234203d3e20323730323539.roa (hash: I8k9lNineL+fGEvlxjqpRKtI3gWOzWc8TsBSfBCOrvU=) 2: 323830343a363934343a3a2f33322d3438203d3e20323730323539.roa (hash: jlLzwxWLTfsMst6DSIjvNKvp466a7Vvec48Ngs6mVOI=) 3: 511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl (hash: Rp3HmDYpCOh4UMZEKvZ0LBQU096BN5yJcGz2uUSpFbQ=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 22:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:15:b4:0e:54:fd:9c:50:df:e9:6b:19:96:66:cb:02:c4:3d:d6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=511754C54989305CCE22941E6D3C0BF8AF6D7F6C Validity Not Before: Aug 23 20:59:53 2026 GMT Not After : Aug 24 22:05:53 2026 GMT Subject: CN=3D578B99FDDE12C0F69F603D379DDD78F4E92565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d5:f1:69:36:94:25:58:77:83:ab:63:af:fa: 70:0e:de:8d:5f:ee:69:64:76:2a:e1:f2:fc:d7:61: 5e:52:b5:8b:1b:5f:67:a9:81:0b:a3:ce:29:84:5a: e8:54:5f:f8:ff:e6:47:13:03:9e:bc:90:28:95:2a: af:ac:3c:91:5a:7e:71:f9:eb:fa:1c:a9:5f:c6:b4: 41:3e:a8:06:af:a6:c0:a9:72:a8:0e:51:72:82:5d: 32:c3:f7:1b:89:ee:f7:a6:4c:77:3e:92:3e:48:c0: 50:db:fa:41:03:33:e8:0f:11:d1:97:4d:b8:30:dd: ff:0b:b1:13:ee:a6:9d:a3:d6:49:3a:48:1e:5b:48: 68:2c:50:63:17:9a:9f:75:47:d4:68:3c:70:78:63: 96:f8:cd:4b:10:cf:6b:c0:0f:cd:27:30:9a:d9:a1: f8:cd:d8:c6:a5:1c:82:7b:9b:5c:ba:1f:80:b2:92: ef:90:2c:fe:57:f9:bc:bb:61:76:18:39:01:7e:0b: 9f:8f:fd:6e:fa:6c:d4:1e:cb:0a:1c:27:e9:e5:df: 37:74:f5:e4:bb:b8:16:18:8b:f1:e9:52:c5:34:b9: 6a:7a:e7:07:15:c7:31:0b:8f:3b:20:d6:52:b7:33: 90:10:df:60:4a:9c:4f:d2:83:f4:c4:2e:cb:2b:a1: de:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:57:8B:99:FD:DE:12:C0:F6:9F:60:3D:37:9D:DD:78:F4:E9:25:65 X509v3 Authority Key Identifier: keyid:51:17:54:C5:49:89:30:5C:CE:22:94:1E:6D:3C:0B:F8:AF:6D:7F:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Zf47sx1jTMmuhtbFByhriVBqwMbkBcRgGeMKH8HcxWT/1/511754C54989305CCE22941E6D3C0BF8AF6D7F6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7b:75:e3:d7:86:8e:67:17:d2:3c:d3:28:6a:98:0e:34:b9: f7:72:61:b5:0c:f5:57:3e:bd:5f:64:f7:f2:0a:2f:63:b5:02: b3:25:10:42:cc:26:51:9a:88:d7:64:73:69:f3:e3:3f:d5:32: 67:7d:b5:60:41:c8:e7:db:dc:08:45:0b:76:d9:a5:fc:ca:f4: 41:ca:35:c4:85:f2:18:f0:14:c0:75:3e:55:03:5b:50:b2:b6: 72:45:d5:d0:84:5d:5b:5c:c7:3c:28:41:9c:87:63:7e:de:ae: 91:7f:60:a4:5c:17:9f:a5:a7:e6:f4:2d:56:c9:db:69:62:9f: 3f:b4:d1:74:43:56:ff:c3:33:c4:ed:25:00:8b:5a:dd:05:57: 31:fa:f1:73:59:ec:9c:f5:e8:31:e9:05:a0:d6:56:fa:5d:b0: 7e:5f:2f:d4:85:4e:85:c7:ac:fd:0d:ab:1a:7c:58:4a:c5:b0: ef:85:5e:24:a9:61:5b:5b:47:6d:b8:37:a1:1e:33:eb:98:70: 0b:1f:4e:76:03:dd:e9:1b:e5:bd:50:cf:4c:4f:ad:91:66:94: 97:f3:52:d1:19:e7:1f:7d:d4:f9:cb:3f:0f:92:45:00:64:e5: 41:34:d2:f8:5f:05:57:10:ea:22:f8:71:dc:85:b2:44:b7:79: f7:80:df:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUTBW0DlT9nFDf6WsZlmbLAsQ91v4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExNzU0QzU0OTg5MzA1Q0NFMjI5NDFFNkQzQzBCRjhB RjZEN0Y2QzAeFw0yNjA4MjMyMDU5NTNaFw0yNjA4MjQyMjA1NTNaMDMxMTAvBgNV BAMTKDNENTc4Qjk5RkRERTEyQzBGNjlGNjAzRDM3OURERDc4RjRFOTI1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs1fFpNpQlWHeDq2Ov+nAO3o1f 7mlkdirh8vzXYV5StYsbX2epgQujzimEWuhUX/j/5kcTA568kCiVKq+sPJFafnH5 6/ocqV/GtEE+qAavpsCpcqgOUXKCXTLD9xuJ7vemTHc+kj5IwFDb+kEDM+gPEdGX Tbgw3f8LsRPupp2j1kk6SB5bSGgsUGMXmp91R9RoPHB4Y5b4zUsQz2vAD80nMJrZ ofjN2MalHIJ7m1y6H4Cyku+QLP5X+by7YXYYOQF+C5+P/W76bNQeywocJ+nl3zd0 9eS7uBYYi/HpUsU0uWp65wcVxzELjzsg1lK3M5AQ32BKnE/Sg/TELssrod77AgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUPVeLmf3eEsD2n2A9N53dePTpJWUwHwYDVR0j BBgwFoAUURdUxUmJMFzOIpQebTwL+K9tf2wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMlpmNDdzeDFqVE1tdWh0YkZCeWhyaVZCcXdNYmtCY1JnR2VNS0g4SGN4 V1QvMS81MTE3NTRDNTQ5ODkzMDVDQ0UyMjk0MUU2RDNDMEJGOEFGNkQ3RjZDLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxMTc1NEM1NDk4OTMwNUND RTIyOTQxRTZEM0MwQkY4QUY2RDdGNkMuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MlpmNDdzeDFqVE1tdWh0YkZCeWhyaVZCcXdNYmtCY1JnR2VNS0g4SGN4V1QvMS81 MTE3NTRDNTQ5ODkzMDVDQ0UyMjk0MUU2RDNDMEJGOEFGNkQ3RjZDLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj3t149eGjmcX0jzTKGqYDjS593JhtQz1Vz69X2T38govY7UCsyUQQswmUZqI 12RzafPjP9UyZ321YEHI59vcCEULdtml/Mr0Qco1xIXyGPAUwHU+VQNbULK2ckXV 0IRdW1zHPChBnIdjft6ukX9gpFwXn6Wn5vQtVsnbaWKfP7TRdENW/8MzxO0lAIta 3QVXMfrxc1nsnPXoMekFoNZW+l2wfl8v1IVOhces/Q2rGnxYSsWw74VeJKlhW1tH bbg3oR4z65hwCx9OdgPd6RvlvVDPTE+tkWaUl/NS0RnnH33U+cs/D5JFAGTlQTTS +F8FVxDqIvhx3IWyRLd594Df6w== -----END CERTIFICATE-----Generated at Mon Aug 24 06:45:45 2026 by rpki-client