
Error: rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed
$ rpki-client -vvvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
File: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft (raw, json)
Hash identifier: 4eJFcHf8sPAe23t1uSILvSP91u55fIxpLv9SCyFCBmw=
Subject key identifier: D5:B2:34:65:78:AD:B4:53:F1:52:38:6A:83:76:93:AA:73:1C:15:F2
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Certificate issuer: /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial: 21022094BD27443CA24514B1AE5A99A174BA9305
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
Manifest number: 04D1
Signing time: Thu 29 Oct 2026 19:44:05 +0000
Manifest this update: Thu 29 Oct 2026 19:39:02 +0000
Manifest next update: Fri 30 Oct 2026 23:12:02 +0000
Files and hashes: 1: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (hash: GEfn4Bl00zdhGTYrW9jbA0jPa3LwMFFlV00DI8uLXIg=)
2: 323830343a363031383a3a2f33332d3333203d3e20323639313435.roa (hash: QNu3N4Q6fO05gIGJMeAaG22Ov/LtiCeuvFBnnuXQaow=)
3: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (hash: 3EpRMfCJQ/oplvoRy8WV3jeX247HTwGAj4R/48Hj6x4=)
4: 34352e3138302e3138362e302f32332d3233203d3e20323639313435.roa (hash: boYO6tOGQgroLgW6ULNmJAn4NcrWCrbNrFuebeCiBpM=)
5: 34352e3138302e3138342e302f32322d3234203d3e20323639313435.roa (hash: oiE0Qu8gWI7bULJP3gSoQxHTCyZGoiRgn0Zt7+FNk6M=)
6: 323830343a363031383a383030303a3a2f33332d3333203d3e20323639313435.roa (hash: KivaW3ZlK69l+y9q+bdg0FUrxGdXfuK1ZNEbBCDZre4=)
7: 323830343a363031383a3a2f33322d3334203d3e20323639313435.roa (hash: M0LcOOmMZo8QOyi2wAEmMI1eLKe5vGXnwQKZCmnT6zo=)
8: 3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl (hash: BHc9oTu3xhJ+A4jjJkdH7yKEEVzxv35M5unAqAH5sxY=)
9: 34352e3138302e3138342e302f32332d3233203d3e20323639313435.roa (hash: a8haySQUKnVEPYwnbcI28rS2mFG3JY2FDkGLXbuMBEw=)
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 30 Oct 2026 23:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:02:20:94:bd:27:44:3c:a2:45:14:b1:ae:5a:99:a1:74:ba:93:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Validity
Not Before: Oct 29 19:39:02 2026 GMT
Not After : Oct 30 23:12:02 2026 GMT
Subject: CN=D5B2346578ADB453F152386A837693AA731C15F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:fe:09:e4:03:e2:55:a5:36:86:52:db:df:
d3:34:05:50:c0:4b:eb:7d:b7:fa:57:af:cb:d8:64:
c0:60:8d:34:38:e7:7b:57:6a:19:5a:4d:67:31:12:
2a:9a:cf:4d:bb:91:89:d9:c6:32:09:9c:2b:ab:ab:
dd:7d:1a:e6:f2:3f:c6:5d:1f:cb:0d:84:fb:4c:9e:
a6:e7:8b:01:f5:a6:61:13:08:f0:6e:d3:1d:ec:db:
ad:e8:4b:ff:92:d2:de:69:d8:b0:91:b1:f2:64:a7:
5a:ab:b9:5c:a9:0f:e3:db:cb:6c:9c:32:cf:4d:4d:
a2:e5:d2:83:65:8a:00:48:c8:99:93:a2:79:91:a7:
b3:91:9c:43:ad:a0:cc:97:fe:8c:ba:f6:a8:ed:61:
4d:f4:b4:8a:71:f3:4d:a8:fb:82:f4:4a:8c:03:6d:
7a:08:40:b2:81:56:02:59:b1:c1:fe:e4:37:31:db:
04:59:d0:c7:0e:2e:de:ed:78:7e:85:81:91:21:71:
06:94:ec:e0:5f:9c:a1:bd:1d:91:e8:48:aa:5d:bc:
3b:04:f3:67:ea:aa:b2:95:08:21:2a:9c:b2:6c:c7:
3f:6b:47:39:92:83:48:7d:7e:9b:10:82:c4:da:00:
0a:c1:d9:e8:a8:c1:f0:61:91:cb:98:d6:32:bb:1d:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B2:34:65:78:AD:B4:53:F1:52:38:6A:83:76:93:AA:73:1C:15:F2
X509v3 Authority Key Identifier:
keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:70:69:7e:76:61:3f:fc:41:fc:05:41:61:96:c5:01:0d:40:
09:29:a7:fd:22:c3:a8:78:7d:40:ba:3f:66:01:dd:b8:a8:70:
e1:bc:e4:61:06:aa:ae:be:ec:59:44:b1:29:9d:8f:e6:2b:26:
3d:f5:de:63:dc:1f:7c:53:e6:6d:b4:48:d8:ac:e5:73:ef:13:
8d:c6:f3:0a:54:45:ea:0d:89:af:03:ba:0a:12:e2:c5:6b:bb:
16:de:fc:7d:a0:f3:fa:19:26:34:be:53:78:b9:98:cf:43:cf:
52:b6:df:c1:ef:e2:09:c9:af:b0:b6:7d:b9:8f:68:eb:95:90:
82:36:bb:37:8f:47:1b:d2:fe:e2:84:f8:00:2b:e5:64:c0:b6:
23:bb:1d:8f:46:bd:ff:87:8c:e2:0c:d9:f2:33:fb:d3:41:6b:
c4:1c:ba:da:f5:16:61:50:1b:85:95:17:c5:22:54:94:8e:1f:
2b:94:7a:ba:1c:8a:3e:45:d6:58:f8:1b:d4:a6:f6:a9:07:01:
7c:4b:b2:f6:6d:53:ab:2c:75:da:43:85:40:d3:b6:96:2e:ad:
f2:39:ba:22:61:98:a6:26:e3:06:8d:bf:98:83:91:bc:88:66:
77:8e:59:6d:2e:da:c9:21:31:bf:d3:9f:f7:9a:f1:ac:7b:18:
52:d0:da:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUIQIglL0nRDyiRRSxrlqZoXS6kwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZBNjQ1M0ZGNkVFNDhEQUQ5QzIwQzU1MkY5QTRBRkEx
M0JGNzRGMDAeFw0yNjEwMjkxOTM5MDJaFw0yNjEwMzAyMzEyMDJaMDMxMTAvBgNV
BAMTKEQ1QjIzNDY1NzhBREI0NTNGMTUyMzg2QTgzNzY5M0FBNzMxQzE1RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2l/4J5APiVaU2hlLb39M0BVDA
S+t9t/pXr8vYZMBgjTQ453tXahlaTWcxEiqaz027kYnZxjIJnCurq919GubyP8Zd
H8sNhPtMnqbniwH1pmETCPBu0x3s263oS/+S0t5p2LCRsfJkp1qruVypD+Pby2yc
Ms9NTaLl0oNligBIyJmTonmRp7ORnEOtoMyX/oy69qjtYU30tIpx802o+4L0SowD
bXoIQLKBVgJZscH+5Dcx2wRZ0McOLt7teH6FgZEhcQaU7OBfnKG9HZHoSKpdvDsE
82fqqrKVCCEqnLJsxz9rRzmSg0h9fpsQgsTaAArB2eiowfBhkcuY1jK7HTXhAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU1bI0ZXittFPxUjhqg3aTqnMcFfIwHwYDVR0j
BBgwFoAUP6ZFP/buSNrZwgxVL5pK+hO/dPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRt
TU4vMS8zRkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQTY0NTNGRjZFRTQ4REFE
OUMyMEM1NTJGOUE0QUZBMTNCRjc0RjAuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRtTU4vMS8z
RkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcnBpfnZhP/xB/AVBYZbFAQ1ACSmn/SLDqHh9QLo/ZgHduKhw4bzkYQaqrr7s
WUSxKZ2P5ismPfXeY9wffFPmbbRI2Kzlc+8TjcbzClRF6g2JrwO6ChLixWu7Ft78
faDz+hkmNL5TeLmYz0PPUrbfwe/iCcmvsLZ9uY9o65WQgja7N49HG9L+4oT4ACvl
ZMC2I7sdj0a9/4eM4gzZ8jP700FrxBy62vUWYVAbhZUXxSJUlI4fK5R6uhyKPkXW
WPgb1Kb2qQcBfEuy9m1Tqyx12kOFQNO2li6t8jm6ImGYpibjBo2/mIORvIhmd45Z
bS7aySExv9Of95rxrHsYUtDaTA==
-----END CERTIFICATE-----
Generated at Fri Oct 30 04:18:06 2026 by rpki-client