Error: rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed$ rpki-client -vvvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft File: AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft (raw, json) Hash identifier: cujJ2sPsHpvnysiZ6m3UFHcoQPQexsBk2jrlbkwcQ5Y= Subject key identifier: 73:FF:FC:8C:39:95:72:15:A8:3D:74:8A:89:D9:DA:68:C9:06:33:00 Authority key identifier: AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A Certificate issuer: /CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A Certificate serial: 58A9F3D1BE890A08123AEBADA3509BC689E4B364 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer Subject info access: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft Manifest number: 019E Signing time: Fri 30 Oct 2026 07:26:37 +0000 Manifest this update: Fri 30 Oct 2026 07:21:37 +0000 Manifest next update: Sat 31 Oct 2026 08:02:37 +0000 Files and hashes: 1: 3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (hash: yDNPyXgjX/y0hPLEz5NZxLDCJMYIy8W2A8TGaumChMY=) 2: AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl (hash: cx3Qr+uc8Q0eDYOZ0yszQGGE4a+FP4mtamMyiquAoUw=) 3: 323830343a6331383a3a2f33322d3430203d3e203532363737.roa (hash: UuXrq76U/ZaAK1gD5JTwAREf7VkzhOPiI6J4b9u8Omk=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 31 Oct 2026 08:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a9:f3:d1:be:89:0a:08:12:3a:eb:ad:a3:50:9b:c6:89:e4:b3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A Validity Not Before: Oct 30 07:21:37 2026 GMT Not After : Oct 31 08:02:37 2026 GMT Subject: CN=73FFFC8C39957215A83D748A89D9DA68C9063300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:73:89:d3:0d:be:d1:8b:8a:76:54:ad:3b: fa:37:33:03:7d:16:35:6b:1c:6a:2e:4a:e4:7a:39: 9c:65:c1:6a:10:ed:b8:40:a8:6f:97:f2:20:2b:07: cf:43:ab:fe:9b:12:b2:d8:82:d4:e4:c5:f2:44:a4: b2:87:25:fa:11:a9:4b:e5:f5:4e:ad:99:a4:9f:a1: ce:9e:6a:01:aa:85:98:2d:82:f8:70:25:d0:65:43: b8:c0:2b:f7:8c:af:22:d2:89:13:d8:6b:8b:c4:d0: 46:0a:4f:bf:58:a8:12:3e:16:f9:7b:8a:fc:5c:a3: af:8f:f8:0b:ab:a8:d7:41:ad:11:f2:38:db:86:97: 2c:c4:e1:e1:3d:b9:83:28:cb:fd:b1:55:36:5c:4b: fe:d2:e5:ee:49:fb:32:59:f6:6f:2f:15:03:a9:db: 9b:7d:c9:82:a5:2e:fe:a6:2c:4c:f6:04:08:e9:42: 0f:a0:08:86:d9:59:fc:be:45:94:13:df:f9:6a:e6: d5:af:23:37:0a:e6:16:cf:71:04:91:25:4f:2c:6a: cc:78:e1:ff:40:f2:ae:ba:c6:ca:ce:50:56:26:8a: 4d:62:24:0a:a1:cc:1e:a0:55:11:86:69:9c:e1:17: 93:6f:43:c5:ba:d6:b8:d5:2e:3a:6e:90:92:7f:ce: 82:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FF:FC:8C:39:95:72:15:A8:3D:74:8A:89:D9:DA:68:C9:06:33:00 X509v3 Authority Key Identifier: keyid:AF:FF:48:D4:DF:8A:F6:72:E3:3B:AD:D4:E2:50:9F:DC:EB:91:A0:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/0/AFFF48D4DF8AF672E33BADD4E2509FDCEB91A07A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:75:99:c4:68:fd:50:1a:33:16:bd:26:b6:10:14:80:e0:92: cf:a4:cb:25:85:ad:c0:67:b4:79:19:da:67:a7:84:c3:d6:7a: fb:03:c0:03:6e:63:41:56:70:10:7d:b0:32:88:42:6f:dd:f1: 19:a7:89:0c:f7:6c:6c:b8:47:dc:54:5c:6b:ca:d7:14:d8:f8: 46:ba:df:ef:30:77:e4:91:33:d6:d0:8a:8e:73:ee:e0:17:d8: e6:16:66:9f:4a:1b:6a:3f:d3:43:ad:47:4b:ea:d2:cb:fd:3f: e6:63:b7:8a:de:cb:7e:ba:0d:49:44:ed:51:51:c5:32:5b:07: f3:d9:dd:07:26:18:40:5d:c8:dd:ad:e8:84:aa:fa:f8:54:a8: a7:0e:fb:7d:a4:e9:5b:85:7e:68:f1:8f:62:ce:83:35:7f:02: 55:49:b8:74:39:35:03:a2:15:0b:39:2a:39:de:37:a6:84:4a: 0f:f0:3f:fd:ce:0d:db:85:de:71:13:5a:91:ab:fc:45:85:56: 7d:bb:76:cb:27:41:a1:6d:0b:9b:06:6f:49:48:aa:ee:5d:67: 57:24:5b:ab:f6:2c:b0:36:6b:a6:a2:59:a3:e3:03:7b:b5:6c: 83:69:4b:85:67:56:d5:73:e2:61:31:af:21:34:59:db:1f:30: c0:21:95:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUWKnz0b6JCggSOuuto1Cbxonks2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGRjQ4RDRERjhBRjY3MkUzM0JBREQ0RTI1MDlGRENF QjkxQTA3QTAeFw0yNjEwMzAwNzIxMzdaFw0yNjEwMzEwODAyMzdaMDMxMTAvBgNV BAMTKDczRkZGQzhDMzk5NTcyMTVBODNENzQ4QTg5RDlEQTY4QzkwNjMzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeZXOJ0w2+0YuKdlStO/o3MwN9 FjVrHGouSuR6OZxlwWoQ7bhAqG+X8iArB89Dq/6bErLYgtTkxfJEpLKHJfoRqUvl 9U6tmaSfoc6eagGqhZgtgvhwJdBlQ7jAK/eMryLSiRPYa4vE0EYKT79YqBI+Fvl7 ivxco6+P+AurqNdBrRHyONuGlyzE4eE9uYMoy/2xVTZcS/7S5e5J+zJZ9m8vFQOp 25t9yYKlLv6mLEz2BAjpQg+gCIbZWfy+RZQT3/lq5tWvIzcK5hbPcQSRJU8sasx4 4f9A8q66xsrOUFYmik1iJAqhzB6gVRGGaZzhF5NvQ8W61rjVLjpukJJ/zoIFAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQUc//8jDmVchWoPXSKidnaaMkGMwAwHwYDVR0j BBgwFoAUr/9I1N+K9nLjO63U4lCf3OuRoHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vM3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkz Q2kvMC9BRkZGNDhENERGOEFGNjcyRTMzQkFERDRFMjUwOUZEQ0VCOTFBMDdBLmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRkY0OEQ0REY4QUY2NzJF MzNCQURENEUyNTA5RkRDRUI5MUEwN0EuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v M3JSVzRBOEZrb29mcFJFY2syQWM1VFRmWGQ1djVBNkNGUXNLQnF5VTkzQ2kvMC9B RkZGNDhENERGOEFGNjcyRTMzQkFERDRFMjUwOUZEQ0VCOTFBMDdBLm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN3WZxGj9UBozFr0mthAUgOCSz6TLJYWtwGe0eRnaZ6eEw9Z6+wPAA25jQVZw EH2wMohCb93xGaeJDPdsbLhH3FRca8rXFNj4Rrrf7zB35JEz1tCKjnPu4BfY5hZm n0obaj/TQ61HS+rSy/0/5mO3it7LfroNSUTtUVHFMlsH89ndByYYQF3I3a3ohKr6 +FSopw77faTpW4V+aPGPYs6DNX8CVUm4dDk1A6IVCzkqOd43poRKD/A//c4N24Xe cRNakav8RYVWfbt2yydBoW0LmwZvSUiq7l1nVyRbq/YssDZrpqJZo+MDe7Vsg2lL hWdW1XPiYTGvITRZ2x8wwCGV2w== -----END CERTIFICATE-----Generated at Fri Oct 30 13:52:10 2026 by rpki-client