Error: rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft File: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft (raw, json) Hash identifier: Qu03urVLOdlEBcir+ZvyAacx1BAz0rIAUDLxVlIjjJU= Subject key identifier: D4:CD:EE:86:F5:98:1D:F0:7F:84:06:AD:8E:AD:DE:8D:75:86:F2:59 Authority key identifier: 3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 Certificate issuer: /CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Certificate serial: 17498B7A7E4761AB12FC11B7AC33C046051DF9CA Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject info access: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft Manifest number: 048A Signing time: Sun 23 Aug 2026 18:21:29 +0000 Manifest this update: Sun 23 Aug 2026 18:16:29 +0000 Manifest next update: Mon 24 Aug 2026 19:10:29 +0000 Files and hashes: 1: 34352e3137352e3232392e302f32342d3234203d3e20323638393133.roa (hash: JMFBfHNLCD10KXYNGspE+0vvATZxPRJS05hw83vbUpw=) 2: 34352e3137352e3232382e302f32342d3234203d3e20323638393133.roa (hash: TkNoZjEoAL/+boDq6uIF15NzTTplqQZFmhlSYsLYMmw=) 3: 34352e3137352e3233302e302f32332d3233203d3e20323638393133.roa (hash: E2IJqLpJqhC2sN0pmwaDrIfmgjIrQSv124eOj2oH/FU=) 4: 34352e3137352e3233312e302f32342d3234203d3e20323638393133.roa (hash: 7HthnmuiFL+QZBUBOm+JQ0vVcX9DwEFThjzaPHstPe8=) 5: 34352e3137352e3232382e302f32332d3233203d3e20323638393133.roa (hash: 8i34fQq4t0JzP8JRIPn/y0bpe/PzMo2bjI4IkVeVfGI=) 6: 34352e3137352e3232382e302f32322d3232203d3e20323638393133.roa (hash: MRmZ3/n2BmAbob40eZUZLgh7jvK3EY54pvvHXanBsB8=) 7: 3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl (hash: ayRs5F4WYZNCaIGSVF45RM9AkOf3BavZxsXdp4etCCg=) 8: 323830343a356338343a3a2f33322d313238203d3e20323638393133.roa (hash: 4psnTXdLSw12WNhcpdrrRdiW1o6SQJjb27/rcdEonew=) 9: 34352e3137352e3233302e302f32342d3234203d3e20323638393133.roa (hash: fjYN5ohW9UrvVn/jIhNTevNUqaEhTqTJbLSiX3l8FZM=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 24 Aug 2026 19:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:49:8b:7a:7e:47:61:ab:12:fc:11:b7:ac:33:c0:46:05:1d:f9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CFEE2C21A17314AD0CFFC520FD817D14B4140D1 Validity Not Before: Aug 23 18:16:29 2026 GMT Not After : Aug 24 19:10:29 2026 GMT Subject: CN=D4CDEE86F5981DF07F8406AD8EADDE8D7586F259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:66:9c:e7:21:e6:52:14:be:de:f2:42:b6: 74:fb:3a:af:f8:f7:80:37:08:00:8c:04:ae:0f:d7: b0:7d:4e:13:ca:74:bd:1a:df:aa:77:34:d6:44:da: c7:61:69:f2:65:76:4a:a9:c6:dc:0c:0f:fb:d3:3d: d8:07:c0:f0:d2:e8:7e:92:0e:bf:2c:de:11:1c:55: 5a:4f:58:5f:1f:4d:96:ff:f7:2a:79:04:17:e4:c9: b0:12:74:23:9a:bd:97:ad:54:4e:df:1b:2b:a6:41: a9:80:ca:d4:1e:2b:19:13:ee:56:16:5d:77:a5:1d: aa:0c:ad:1f:3e:53:f9:91:fe:b3:13:02:e6:8c:d3: 64:7c:f8:30:48:29:62:48:42:7b:7c:32:76:ad:cf: 1f:c8:4d:5b:5c:54:ea:be:c2:5f:f6:65:45:80:2a: 13:22:b4:24:b1:7f:5b:33:78:5f:1d:a0:9d:bc:93: ea:9e:a3:c7:23:43:94:0b:1c:1a:61:b1:4d:7c:15: 2d:48:83:2b:fa:df:ab:54:ea:60:47:9c:5e:cf:ff: d6:91:20:c6:ed:b1:da:a0:74:4b:d6:71:fc:56:98: 6f:33:58:fc:ea:eb:fe:fa:2f:ac:2c:5b:47:f6:47: f8:ec:31:48:7e:4a:1f:f3:12:7a:4b:64:5e:cf:68: 48:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CD:EE:86:F5:98:1D:F0:7F:84:06:AD:8E:AD:DE:8D:75:86:F2:59 X509v3 Authority Key Identifier: keyid:3C:FE:E2:C2:1A:17:31:4A:D0:CF:FC:52:0F:D8:17:D1:4B:41:40:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cPDnvdXkhhdwkaQxveRGVEVKPYJn8WSkmF7HFtPNJge/1/3CFEE2C21A17314AD0CFFC520FD817D14B4140D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ad:ce:2e:1f:e1:96:16:9b:0e:e9:95:bf:c8:6d:e7:90:b4: a2:5c:fd:d2:18:65:2f:be:f5:55:3a:f6:16:02:f4:25:f5:b5: 8a:2f:49:ef:22:58:c2:44:cc:a9:e0:e9:d0:40:ed:2b:34:2d: 5a:bc:4b:50:2a:4b:f6:2b:32:9a:cb:31:77:7a:8e:f6:a0:8f: ae:37:eb:ee:74:78:6c:ba:c3:44:bd:78:b5:66:6a:ad:1c:80: ec:df:e9:d5:a7:eb:7e:5e:3e:f0:ca:31:30:01:80:31:cd:47: ec:b5:3c:8c:88:ec:e7:12:fa:63:ba:ff:cf:b1:06:41:57:a9: 14:57:67:08:f2:0d:eb:62:c9:a5:5a:c8:33:30:26:84:20:36: 4a:c4:aa:ed:af:26:45:e4:c8:e0:0e:d3:40:a0:78:45:fd:e9: c8:b7:d8:72:09:ae:a3:e1:42:61:8a:a2:7e:79:8d:9f:a4:85: 60:cd:12:e3:44:24:cd:b6:96:fe:b4:ba:93:3d:fb:0f:54:2d: 73:c4:54:26:99:c5:a9:1e:ed:70:95:e9:c8:24:98:3b:26:fe: 07:d1:9a:b6:df:76:d7:e1:22:c9:0e:93:01:7c:89:b2:0b:71: 6e:da:03:4b:5b:18:d5:96:c6:e3:f5:c6:b3:28:0f:74:86:c0: 0e:0b:7e:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUF0mLen5HYasS/BG3rDPARgUd+cowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0NGRUUyQzIxQTE3MzE0QUQwQ0ZGQzUyMEZEODE3RDE0 QjQxNDBEMTAeFw0yNjA4MjMxODE2MjlaFw0yNjA4MjQxOTEwMjlaMDMxMTAvBgNV BAMTKEQ0Q0RFRTg2RjU5ODFERjA3Rjg0MDZBRDhFQURERThENzU4NkYyNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6Gac5yHmUhS+3vJCtnT7Oq/4 94A3CACMBK4P17B9ThPKdL0a36p3NNZE2sdhafJldkqpxtwMD/vTPdgHwPDS6H6S Dr8s3hEcVVpPWF8fTZb/9yp5BBfkybASdCOavZetVE7fGyumQamAytQeKxkT7lYW XXelHaoMrR8+U/mR/rMTAuaM02R8+DBIKWJIQnt8Mnatzx/ITVtcVOq+wl/2ZUWA KhMitCSxf1szeF8doJ28k+qeo8cjQ5QLHBphsU18FS1Igyv636tU6mBHnF7P/9aR IMbtsdqgdEvWcfxWmG8zWPzq6/76L6wsW0f2R/jsMUh+Sh/zEnpLZF7PaEghAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU1M3uhvWYHfB/hAatjq3ejXWG8lkwHwYDVR0j BBgwFoAUPP7iwhoXMUrQz/xSD9gX0UtBQNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vMmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5K Z2UvMS8zQ0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDRkVFMkMyMUExNzMxNEFE MENGRkM1MjBGRDgxN0QxNEI0MTQwRDEuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v MmNQRG52ZFhraGhkd2thUXh2ZVJHVkVWS1BZSm44V1NrbUY3SEZ0UE5KZ2UvMS8z Q0ZFRTJDMjFBMTczMTRBRDBDRkZDNTIwRkQ4MTdEMTRCNDE0MEQxLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAla3OLh/hlhabDumVv8ht55C0olz90hhlL771VTr2FgL0JfW1ii9J7yJYwkTM qeDp0EDtKzQtWrxLUCpL9isymssxd3qO9qCPrjfr7nR4bLrDRL14tWZqrRyA7N/p 1afrfl4+8MoxMAGAMc1H7LU8jIjs5xL6Y7r/z7EGQVepFFdnCPIN62LJpVrIMzAm hCA2SsSq7a8mReTI4A7TQKB4Rf3pyLfYcgmuo+FCYYqifnmNn6SFYM0S40QkzbaW /rS6kz37D1Qtc8RUJpnFqR7tcJXpyCSYOyb+B9Gatt921+EiyQ6TAXyJsgtxbtoD S1sY1ZbG4/XGsygPdIbADgt+MQ== -----END CERTIFICATE-----Generated at Mon Aug 24 04:31:05 2026 by rpki-client